[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 107.644401][ T31] audit: type=1800 audit(1565694846.702:25): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 107.668656][ T31] audit: type=1800 audit(1565694846.722:26): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 107.708007][ T31] audit: type=1800 audit(1565694846.752:27): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.215' (ECDSA) to the list of known hosts. 2019/08/13 11:14:24 fuzzer started 2019/08/13 11:14:30 dialing manager at 10.128.0.26:34583 2019/08/13 11:14:31 syscalls: 2374 2019/08/13 11:14:31 code coverage: enabled 2019/08/13 11:14:31 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/13 11:14:31 extra coverage: enabled 2019/08/13 11:14:31 setuid sandbox: enabled 2019/08/13 11:14:31 namespace sandbox: enabled 2019/08/13 11:14:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/13 11:14:31 fault injection: enabled 2019/08/13 11:14:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/13 11:14:31 net packet injection: enabled 2019/08/13 11:14:31 net device setup: enabled syzkaller login: [ 258.978139][ C1] ================================================================== [ 258.987067][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 258.995598][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0-rc3+ #17 [ 259.003649][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.014247][ C1] Call Trace: [ 259.017930][ C1] dump_stack+0x191/0x1f0 [ 259.022748][ C1] kmsan_report+0x162/0x2d0 [ 259.027710][ C1] __msan_warning+0x75/0xe0 [ 259.032271][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.037629][ C1] ? __alloc_skb+0x215/0xa10 [ 259.042458][ C1] __alloc_skb+0x215/0xa10 [ 259.047427][ C1] aoecmd_cfg+0x205/0xa80 [ 259.051906][ C1] discover_timer+0x86/0xa0 [ 259.056849][ C1] call_timer_fn+0x232/0x530 [ 259.061752][ C1] ? skbfree+0x4a0/0x4a0 [ 259.067469][ C1] __run_timers+0xcdc/0x11a0 [ 259.072442][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.078621][ C1] ? skbfree+0x4a0/0x4a0 [ 259.083014][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.089476][ C1] run_timer_softirq+0x2d/0x50 [ 259.094641][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.099885][ C1] __do_softirq+0x4a1/0x83a [ 259.104596][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 259.110378][ C1] ? takeover_tasklets+0x900/0x900 [ 259.115939][ C1] run_ksoftirqd+0x25/0x40 [ 259.120722][ C1] smpboot_thread_fn+0x4a3/0x990 [ 259.125860][ C1] kthread+0x4b5/0x4f0 [ 259.130189][ C1] ? cpu_report_death+0x190/0x190 [ 259.135381][ C1] ? kthread_blkcg+0xf0/0xf0 [ 259.140345][ C1] ret_from_fork+0x35/0x40 [ 259.144907][ C1] [ 259.147556][ C1] Uninit was stored to memory at: [ 259.153090][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 259.159257][ C1] __msan_chain_origin+0x6b/0xe0 [ 259.164615][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 259.169646][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 259.175263][ C1] __alloc_skb+0x215/0xa10 [ 259.180142][ C1] aoecmd_cfg+0x205/0xa80 [ 259.184486][ C1] discover_timer+0x86/0xa0 [ 259.189180][ C1] call_timer_fn+0x232/0x530 [ 259.194430][ C1] __run_timers+0xcdc/0x11a0 [ 259.199292][ C1] run_timer_softirq+0x2d/0x50 [ 259.204310][ C1] __do_softirq+0x4a1/0x83a [ 259.208991][ C1] run_ksoftirqd+0x25/0x40 [ 259.213937][ C1] smpboot_thread_fn+0x4a3/0x990 [ 259.218888][ C1] kthread+0x4b5/0x4f0 [ 259.223153][ C1] ret_from_fork+0x35/0x40 [ 259.227931][ C1] [ 259.230266][ C1] Uninit was created at: [ 259.234641][ C1] kmsan_internal_poison_shadow+0x53/0xa0 [ 259.240439][ C1] kmsan_slab_free+0x8d/0x100 [ 259.245421][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 259.250951][ C1] __kfree_skb_flush+0xb0/0x100 [ 259.256313][ C1] net_rx_action+0x1908/0x1950 [ 259.261638][ C1] __do_softirq+0x4a1/0x83a [ 259.266615][ C1] irq_exit+0x230/0x280 [ 259.271185][ C1] do_IRQ+0x20d/0x3a0 [ 259.275391][ C1] ret_from_intr+0x0/0x33 [ 259.279821][ C1] default_idle+0x53/0x90 [ 259.284185][ C1] arch_cpu_idle+0x25/0x30 [ 259.288928][ C1] do_idle+0x1d7/0x790 [ 259.293542][ C1] cpu_startup_entry+0x45/0x50 [ 259.298653][ C1] rest_init+0x1be/0x1f0 [ 259.303216][ C1] arch_call_rest_init+0x13/0x15 [ 259.308368][ C1] start_kernel+0x991/0xb61 [ 259.313166][ C1] x86_64_start_reservations+0x18/0x2e [ 259.318843][ C1] x86_64_start_kernel+0x81/0x84 [ 259.323915][ C1] secondary_startup_64+0xa4/0xb0 [ 259.329299][ C1] ================================================================== [ 259.337621][ C1] Disabling lock debugging due to kernel taint [ 259.344824][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 259.351724][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.3.0-rc3+ #17 [ 259.360813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.371218][ C1] Call Trace: [ 259.374850][ C1] dump_stack+0x191/0x1f0 [ 259.379397][ C1] panic+0x3c9/0xc1e [ 259.383610][ C1] kmsan_report+0x2ca/0x2d0 [ 259.388261][ C1] __msan_warning+0x75/0xe0 [ 259.392966][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.398657][ C1] ? __alloc_skb+0x215/0xa10 [ 259.403665][ C1] __alloc_skb+0x215/0xa10 [ 259.408143][ C1] aoecmd_cfg+0x205/0xa80 [ 259.412808][ C1] discover_timer+0x86/0xa0 [ 259.417544][ C1] call_timer_fn+0x232/0x530 [ 259.422175][ C1] ? skbfree+0x4a0/0x4a0 [ 259.426611][ C1] __run_timers+0xcdc/0x11a0 [ 259.431351][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.437667][ C1] ? skbfree+0x4a0/0x4a0 [ 259.442343][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.448594][ C1] run_timer_softirq+0x2d/0x50 [ 259.453901][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.458919][ C1] __do_softirq+0x4a1/0x83a [ 259.463674][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 259.469158][ C1] ? takeover_tasklets+0x900/0x900 [ 259.474632][ C1] run_ksoftirqd+0x25/0x40 [ 259.479229][ C1] smpboot_thread_fn+0x4a3/0x990 [ 259.484204][ C1] kthread+0x4b5/0x4f0 [ 259.488877][ C1] ? cpu_report_death+0x190/0x190 [ 259.494205][ C1] ? kthread_blkcg+0xf0/0xf0 [ 259.498987][ C1] ret_from_fork+0x35/0x40 [ 259.505600][ C1] Kernel Offset: disabled [ 259.510399][ C1] Rebooting in 86400 seconds..