[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 108.631430][ T30] audit: type=1800 audit(1565116102.681:25): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 108.671987][ T30] audit: type=1800 audit(1565116102.711:26): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 108.692323][ T30] audit: type=1800 audit(1565116102.721:27): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. 2019/08/06 18:28:35 fuzzer started 2019/08/06 18:28:41 dialing manager at 10.128.0.26:44947 2019/08/06 18:28:42 syscalls: 2367 2019/08/06 18:28:42 code coverage: enabled 2019/08/06 18:28:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/06 18:28:42 extra coverage: enabled 2019/08/06 18:28:42 setuid sandbox: enabled 2019/08/06 18:28:42 namespace sandbox: enabled 2019/08/06 18:28:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/06 18:28:42 fault injection: enabled 2019/08/06 18:28:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/06 18:28:42 net packet injection: enabled 2019/08/06 18:28:42 net device setup: enabled syzkaller login: [ 197.542621][ C1] ================================================================== [ 197.550716][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 197.558331][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0-rc3+ #16 [ 197.565764][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.575803][ C1] Call Trace: [ 197.579087][ C1] dump_stack+0x191/0x1f0 [ 197.583417][ C1] kmsan_report+0x162/0x2d0 [ 197.587972][ C1] __msan_warning+0x75/0xe0 [ 197.592753][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 197.598029][ C1] ? __alloc_skb+0x215/0xa10 [ 197.602621][ C1] __alloc_skb+0x215/0xa10 [ 197.607060][ C1] aoecmd_cfg+0x205/0xa80 [ 197.611394][ C1] discover_timer+0x86/0xa0 [ 197.615887][ C1] call_timer_fn+0x232/0x530 [ 197.620467][ C1] ? skbfree+0x4a0/0x4a0 [ 197.624701][ C1] __run_timers+0xcdc/0x11a0 [ 197.629285][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.635342][ C1] ? skbfree+0x4a0/0x4a0 [ 197.639589][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.645557][ C1] run_timer_softirq+0x2d/0x50 [ 197.650308][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 197.655242][ C1] __do_softirq+0x4a1/0x83a [ 197.659743][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 197.664923][ C1] ? takeover_tasklets+0x900/0x900 [ 197.670028][ C1] run_ksoftirqd+0x25/0x40 [ 197.674438][ C1] smpboot_thread_fn+0x4a3/0x990 [ 197.679379][ C1] kthread+0x4b5/0x4f0 [ 197.683431][ C1] ? cpu_report_death+0x190/0x190 [ 197.688446][ C1] ? kthread_blkcg+0xf0/0xf0 [ 197.693028][ C1] ret_from_fork+0x35/0x40 [ 197.697440][ C1] [ 197.699751][ C1] Uninit was stored to memory at: [ 197.704756][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 197.710457][ C1] __msan_chain_origin+0x6b/0xe0 [ 197.715398][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 197.720165][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 197.725435][ C1] __alloc_skb+0x215/0xa10 [ 197.729833][ C1] aoecmd_cfg+0x205/0xa80 [ 197.734144][ C1] discover_timer+0x86/0xa0 [ 197.738630][ C1] call_timer_fn+0x232/0x530 [ 197.743200][ C1] __run_timers+0xcdc/0x11a0 [ 197.747768][ C1] run_timer_softirq+0x2d/0x50 [ 197.752517][ C1] __do_softirq+0x4a1/0x83a [ 197.757021][ C1] run_ksoftirqd+0x25/0x40 [ 197.761422][ C1] smpboot_thread_fn+0x4a3/0x990 [ 197.766354][ C1] kthread+0x4b5/0x4f0 [ 197.770407][ C1] ret_from_fork+0x35/0x40 [ 197.774802][ C1] [ 197.777110][ C1] Uninit was created at: [ 197.781337][ C1] kmsan_internal_poison_shadow+0x53/0xa0 [ 197.787037][ C1] kmsan_slab_free+0x8d/0x100 [ 197.791697][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 197.797056][ C1] __kfree_skb_flush+0xb0/0x100 [ 197.801899][ C1] net_rx_action+0x1908/0x1950 [ 197.806648][ C1] __do_softirq+0x4a1/0x83a [ 197.811132][ C1] irq_exit+0x230/0x280 [ 197.815293][ C1] do_IRQ+0x20d/0x3a0 [ 197.819259][ C1] ret_from_intr+0x0/0x33 [ 197.823578][ C1] default_idle+0x53/0x90 [ 197.827888][ C1] arch_cpu_idle+0x25/0x30 [ 197.832287][ C1] do_idle+0x1d7/0x790 [ 197.836361][ C1] cpu_startup_entry+0x45/0x50 [ 197.841118][ C1] rest_init+0x1be/0x1f0 [ 197.845366][ C1] arch_call_rest_init+0x13/0x15 [ 197.850286][ C1] start_kernel+0x991/0xb61 [ 197.854771][ C1] x86_64_start_reservations+0x18/0x2e [ 197.860209][ C1] x86_64_start_kernel+0x81/0x84 [ 197.865130][ C1] secondary_startup_64+0xa4/0xb0 [ 197.870130][ C1] ================================================================== [ 197.878169][ C1] Disabling lock debugging due to kernel taint [ 197.884302][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 197.890874][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.3.0-rc3+ #16 [ 197.899697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.909730][ C1] Call Trace: [ 197.913013][ C1] dump_stack+0x191/0x1f0 [ 197.917353][ C1] panic+0x3c9/0xc1e [ 197.921267][ C1] kmsan_report+0x2ca/0x2d0 [ 197.925759][ C1] __msan_warning+0x75/0xe0 [ 197.930255][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 197.935529][ C1] ? __alloc_skb+0x215/0xa10 [ 197.940125][ C1] __alloc_skb+0x215/0xa10 [ 197.944551][ C1] aoecmd_cfg+0x205/0xa80 [ 197.948891][ C1] discover_timer+0x86/0xa0 [ 197.953391][ C1] call_timer_fn+0x232/0x530 [ 197.957977][ C1] ? skbfree+0x4a0/0x4a0 [ 197.962231][ C1] __run_timers+0xcdc/0x11a0 [ 197.966808][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.972862][ C1] ? skbfree+0x4a0/0x4a0 [ 197.977124][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.983111][ C1] run_timer_softirq+0x2d/0x50 [ 197.987879][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 197.992809][ C1] __do_softirq+0x4a1/0x83a [ 197.997316][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 198.002518][ C1] ? takeover_tasklets+0x900/0x900 [ 198.007639][ C1] run_ksoftirqd+0x25/0x40 [ 198.012057][ C1] smpboot_thread_fn+0x4a3/0x990 [ 198.017016][ C1] kthread+0x4b5/0x4f0 [ 198.021071][ C1] ? cpu_report_death+0x190/0x190 [ 198.026086][ C1] ? kthread_blkcg+0xf0/0xf0 [ 198.030659][ C1] ret_from_fork+0x35/0x40 [ 198.036096][ C1] Kernel Offset: disabled [ 198.040427][ C1] Rebooting in 86400 seconds..