[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 107.361434][ T31] audit: type=1800 audit(1565696192.417:25): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 107.393807][ T31] audit: type=1800 audit(1565696192.447:26): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 107.415166][ T31] audit: type=1800 audit(1565696192.457:27): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts.
2019/08/13 11:36:48 fuzzer started
2019/08/13 11:36:54 dialing manager at 10.128.0.26:34583
2019/08/13 11:36:55 syscalls: 2374
2019/08/13 11:36:55 code coverage: enabled
2019/08/13 11:36:55 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/08/13 11:36:55 extra coverage: enabled
2019/08/13 11:36:55 setuid sandbox: enabled
2019/08/13 11:36:55 namespace sandbox: enabled
2019/08/13 11:36:55 Android sandbox: /sys/fs/selinux/policy does not exist
2019/08/13 11:36:55 fault injection: enabled
2019/08/13 11:36:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/08/13 11:36:55 net packet injection: enabled
2019/08/13 11:36:55 net device setup: enabled
syzkaller login: [ 320.416715][ C0] ==================================================================
[ 320.425188][ C0] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70
[ 320.432889][ C0] CPU: 0 PID: 11507 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #17
[ 320.440535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 320.450680][ C0] Call Trace:
[ 320.453990][ C0]
[ 320.456915][ C0] dump_stack+0x191/0x1f0
[ 320.461308][ C0] kmsan_report+0x162/0x2d0
[ 320.465846][ C0] __msan_warning+0x75/0xe0
[ 320.470475][ C0] kmem_cache_alloc_node+0x5d0/0xe70
[ 320.475815][ C0] ? __alloc_skb+0x215/0xa10
[ 320.480458][ C0] __alloc_skb+0x215/0xa10
[ 320.484950][ C0] aoecmd_cfg+0x205/0xa80
[ 320.489339][ C0] discover_timer+0x86/0xa0
[ 320.493972][ C0] call_timer_fn+0x232/0x530
[ 320.498608][ C0] ? skbfree+0x4a0/0x4a0
[ 320.502918][ C0] __run_timers+0xcdc/0x11a0
[ 320.507530][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 320.513635][ C0] ? skbfree+0x4a0/0x4a0
[ 320.517933][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 320.524038][ C0] run_timer_softirq+0x2d/0x50
[ 320.528826][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 320.533781][ C0] __do_softirq+0x4a1/0x83a
[ 320.538402][ C0] irq_exit+0x230/0x280
[ 320.542588][ C0] exiting_irq+0xe/0x10
[ 320.546825][ C0] smp_apic_timer_interrupt+0x48/0x70
[ 320.552224][ C0] apic_timer_interrupt+0x2e/0x40
[ 320.557252][ C0]
[ 320.560250][ C0] RIP: 0010:finish_lock_switch+0x2b/0x40
[ 320.566002][ C0] Code: 48 89 e5 53 48 89 fb e8 93 a4 9c 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 0d 9a 9c 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 8e a3 9c 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55
[ 320.585795][ C0] RSP: 0018:ffff8880ad69fd20 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13
[ 320.594364][ C0] RAX: ffff88821fef2300 RBX: ffff8881121a1e40 RCX: ccccccccccccd000
[ 320.602332][ C0] RDX: ffff88821fe11300 RSI: ffffea000a9faba0 RDI: ffff88812fcd6300
[ 320.610321][ C0] RBP: ffff8880ad69fd20 R08: ffffea000000000f R09: ffff88812fffb000
[ 320.618286][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000001
[ 320.626252][ C0] R13: ffff888112cd27e0 R14: ffff888112cd1e40 R15: ffff88812fcd6300
[ 320.634266][ C0] finish_task_switch+0xfa/0x2d0
[ 320.639327][ C0] __schedule+0x646/0x780
[ 320.643675][ C0] schedule+0x19b/0x2d0
[ 320.647853][ C0] prepare_exit_to_usermode+0x222/0x4d0
[ 320.653429][ C0] syscall_return_slowpath+0x90/0x610
[ 320.658818][ C0] do_syscall_64+0xe2/0xf0
[ 320.663233][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 320.669255][ C0] RIP: 0033:0x45ddf3
[ 320.673166][ C0] Code: cc cc cc cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10
[ 320.693073][ C0] RSP: 002b:000000c420065f20 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca
[ 320.701629][ C0] RAX: 0000000000000001 RBX: 000000c420065fb8 RCX: 000000000045ddf3
[ 320.709612][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000017e4930
[ 320.717580][ C0] RBP: 000000c420065f70 R08: 0000000000000000 R09: 0000000000000000
[ 320.725649][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[ 320.734002][ C0] R13: 0000000000000008 R14: 0000000000000040 R15: ffffffffffffffff
[ 320.742096][ C0]
[ 320.744417][ C0] Uninit was stored to memory at:
[ 320.749437][ C0] kmsan_internal_chain_origin+0xcc/0x150
[ 320.755148][ C0] __msan_chain_origin+0x6b/0xe0
[ 320.760077][ C0] ___slab_alloc+0x1dbc/0x1fb0
[ 320.764921][ C0] kmem_cache_alloc_node+0x769/0xe70
[ 320.770204][ C0] __alloc_skb+0x215/0xa10
[ 320.774621][ C0] aoecmd_cfg+0x205/0xa80
[ 320.778947][ C0] discover_timer+0x86/0xa0
[ 320.790873][ C0] call_timer_fn+0x232/0x530
[ 320.795482][ C0] __run_timers+0xcdc/0x11a0
[ 320.800066][ C0] run_timer_softirq+0x2d/0x50
[ 320.804842][ C0] __do_softirq+0x4a1/0x83a
[ 320.809337][ C0] irq_exit+0x230/0x280
[ 320.813518][ C0] exiting_irq+0xe/0x10
[ 320.817688][ C0] smp_apic_timer_interrupt+0x48/0x70
[ 320.823080][ C0] apic_timer_interrupt+0x2e/0x40
[ 320.828183][ C0] finish_lock_switch+0x2b/0x40
[ 320.833021][ C0] finish_task_switch+0xfa/0x2d0
[ 320.837942][ C0] __schedule+0x646/0x780
[ 320.842284][ C0] schedule+0x19b/0x2d0
[ 320.846455][ C0] prepare_exit_to_usermode+0x222/0x4d0
[ 320.852095][ C0] syscall_return_slowpath+0x90/0x610
[ 320.857452][ C0] do_syscall_64+0xe2/0xf0
[ 320.861872][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 320.867754][ C0]
[ 320.870084][ C0] Uninit was created at:
[ 320.874317][ C0] kmsan_internal_poison_shadow+0x53/0xa0
[ 320.880195][ C0] kmsan_slab_free+0x8d/0x100
[ 320.884899][ C0] kmem_cache_free_bulk+0x3ad9/0x3f50
[ 320.890259][ C0] __kfree_skb_flush+0xb0/0x100
[ 320.895133][ C0] net_rx_action+0x1908/0x1950
[ 320.899916][ C0] __do_softirq+0x4a1/0x83a
[ 320.904419][ C0] irq_exit+0x230/0x280
[ 320.908563][ C0] do_IRQ+0x20d/0x3a0
[ 320.912632][ C0] ret_from_intr+0x0/0x33
[ 320.916947][ C0] default_idle+0x53/0x90
[ 320.921299][ C0] arch_cpu_idle+0x25/0x30
[ 320.925724][ C0] do_idle+0x1d7/0x790
[ 320.929781][ C0] cpu_startup_entry+0x45/0x50
[ 320.934530][ C0] rest_init+0x1be/0x1f0
[ 320.938761][ C0] arch_call_rest_init+0x13/0x15
[ 320.943772][ C0] start_kernel+0x991/0xb61
[ 320.948354][ C0] x86_64_start_reservations+0x18/0x2e
[ 320.953798][ C0] x86_64_start_kernel+0x81/0x84
[ 320.958807][ C0] secondary_startup_64+0xa4/0xb0
[ 320.963806][ C0] ==================================================================
[ 320.971850][ C0] Disabling lock debugging due to kernel taint
[ 320.978026][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 320.984608][ C0] CPU: 0 PID: 11507 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #17
[ 320.993631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 321.003679][ C0] Call Trace:
[ 321.006977][ C0]
[ 321.009832][ C0] dump_stack+0x191/0x1f0
[ 321.014165][ C0] panic+0x3c9/0xc1e
[ 321.018085][ C0] kmsan_report+0x2ca/0x2d0
[ 321.022593][ C0] __msan_warning+0x75/0xe0
[ 321.027100][ C0] kmem_cache_alloc_node+0x5d0/0xe70
[ 321.032406][ C0] ? __alloc_skb+0x215/0xa10
[ 321.037014][ C0] __alloc_skb+0x215/0xa10
[ 321.041460][ C0] aoecmd_cfg+0x205/0xa80
[ 321.045890][ C0] discover_timer+0x86/0xa0
[ 321.050403][ C0] call_timer_fn+0x232/0x530
[ 321.054993][ C0] ? skbfree+0x4a0/0x4a0
[ 321.059258][ C0] __run_timers+0xcdc/0x11a0
[ 321.063850][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 321.069925][ C0] ? skbfree+0x4a0/0x4a0
[ 321.074187][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 321.080441][ C0] run_timer_softirq+0x2d/0x50
[ 321.085208][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 321.090146][ C0] __do_softirq+0x4a1/0x83a
[ 321.094777][ C0] irq_exit+0x230/0x280
[ 321.098930][ C0] exiting_irq+0xe/0x10
[ 321.103078][ C0] smp_apic_timer_interrupt+0x48/0x70
[ 321.108450][ C0] apic_timer_interrupt+0x2e/0x40
[ 321.113816][ C0]
[ 321.116766][ C0] RIP: 0010:finish_lock_switch+0x2b/0x40
[ 321.122399][ C0] Code: 48 89 e5 53 48 89 fb e8 93 a4 9c 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 0d 9a 9c 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 8e a3 9c 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55
[ 321.141998][ C0] RSP: 0018:ffff8880ad69fd20 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13
[ 321.150404][ C0] RAX: ffff88821fef2300 RBX: ffff8881121a1e40 RCX: ccccccccccccd000
[ 321.158372][ C0] RDX: ffff88821fe11300 RSI: ffffea000a9faba0 RDI: ffff88812fcd6300
[ 321.166344][ C0] RBP: ffff8880ad69fd20 R08: ffffea000000000f R09: ffff88812fffb000
[ 321.174345][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000001
[ 321.182308][ C0] R13: ffff888112cd27e0 R14: ffff888112cd1e40 R15: ffff88812fcd6300
[ 321.190333][ C0] finish_task_switch+0xfa/0x2d0
[ 321.195279][ C0] __schedule+0x646/0x780
[ 321.199605][ C0] schedule+0x19b/0x2d0
[ 321.203764][ C0] prepare_exit_to_usermode+0x222/0x4d0
[ 321.209314][ C0] syscall_return_slowpath+0x90/0x610
[ 321.214723][ C0] do_syscall_64+0xe2/0xf0
[ 321.219505][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 321.225395][ C0] RIP: 0033:0x45ddf3
[ 321.229373][ C0] Code: cc cc cc cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10
[ 321.249057][ C0] RSP: 002b:000000c420065f20 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca
[ 321.257469][ C0] RAX: 0000000000000001 RBX: 000000c420065fb8 RCX: 000000000045ddf3
[ 321.265451][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000017e4930
[ 321.273454][ C0] RBP: 000000c420065f70 R08: 0000000000000000 R09: 0000000000000000
[ 321.281658][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[ 321.290319][ C0] R13: 0000000000000008 R14: 0000000000000040 R15: ffffffffffffffff
[ 321.300302][ C0] Kernel Offset: disabled
[ 321.314295][ C0] Rebooting in 86400 seconds..