[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 87.105279][ T30] audit: type=1800 audit(1568410122.164:25): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 87.142202][ T30] audit: type=1800 audit(1568410122.184:26): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 87.162856][ T30] audit: type=1800 audit(1568410122.194:27): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts.
2019/09/13 21:28:53 fuzzer started
2019/09/13 21:28:57 dialing manager at 10.128.0.26:39015
2019/09/13 21:28:58 syscalls: 2376
2019/09/13 21:28:58 code coverage: enabled
2019/09/13 21:28:58 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/09/13 21:28:58 extra coverage: enabled
2019/09/13 21:28:58 setuid sandbox: enabled
2019/09/13 21:28:58 namespace sandbox: enabled
2019/09/13 21:28:58 Android sandbox: /sys/fs/selinux/policy does not exist
2019/09/13 21:28:58 fault injection: enabled
2019/09/13 21:28:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/09/13 21:28:58 net packet injection: enabled
2019/09/13 21:28:58 net device setup: enabled
syzkaller login: [ 197.533090][ C1] ==================================================================
[ 197.541237][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70
[ 197.548878][ C1] CPU: 1 PID: 13055 Comm: syz-fuzzer Not tainted 5.3.0-rc7+ #0
[ 197.556415][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 197.566530][ C1] Call Trace:
[ 197.569800][ C1]
[ 197.572643][ C1] dump_stack+0x191/0x1f0
[ 197.576969][ C1] kmsan_report+0x162/0x2d0
[ 197.581450][ C1] __msan_warning+0x75/0xe0
[ 197.585941][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 197.591212][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 197.597092][ C1] ? __alloc_skb+0x215/0xa10
[ 197.601668][ C1] __alloc_skb+0x215/0xa10
[ 197.606071][ C1] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0
[ 197.611858][ C1] aoecmd_cfg+0x205/0xa80
[ 197.616174][ C1] discover_timer+0x86/0xa0
[ 197.620654][ C1] call_timer_fn+0x232/0x530
[ 197.625220][ C1] ? skbfree+0x4a0/0x4a0
[ 197.629452][ C1] __run_timers+0xcdc/0x11a0
[ 197.634014][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 197.640053][ C1] ? skbfree+0x4a0/0x4a0
[ 197.644284][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 197.649195][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 197.655068][ C1] run_timer_softirq+0x2d/0x50
[ 197.659807][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 197.664719][ C1] __do_softirq+0x4a1/0x83a
[ 197.669210][ C1] do_softirq_own_stack+0x49/0x80
[ 197.674203][ C1]
[ 197.677131][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 197.682309][ C1] _raw_spin_unlock_bh+0x4b/0x60
[ 197.687223][ C1] __release_sock+0xdc/0x640
[ 197.691800][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 197.697670][ C1] release_sock+0x99/0x2a0
[ 197.702067][ C1] tcp_recvmsg+0x335f/0x4ff0
[ 197.706656][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 197.712522][ C1] ? inet_recvmsg+0xc3/0x7d0
[ 197.717087][ C1] ? tcp_mmap+0x150/0x150
[ 197.721388][ C1] ? tcp_mmap+0x150/0x150
[ 197.725690][ C1] inet_recvmsg+0x237/0x7d0
[ 197.730172][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 197.734911][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 197.740781][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 197.745518][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 197.750254][ C1] sock_read_iter+0x5be/0x660
[ 197.754913][ C1] ? kernel_sock_ip_overhead+0x340/0x340
[ 197.760521][ C1] __vfs_read+0xa67/0xc90
[ 197.764838][ C1] vfs_read+0x359/0x6f0
[ 197.768975][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 197.774852][ C1] ksys_read+0x265/0x430
[ 197.779083][ C1] __se_sys_read+0x92/0xb0
[ 197.783478][ C1] __x64_sys_read+0x4a/0x70
[ 197.787964][ C1] do_syscall_64+0xbc/0xf0
[ 197.792358][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 197.798223][ C1] RIP: 0033:0x47fd44
[ 197.802098][ C1] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 197.821685][ C1] RSP: 002b:000000c42033b710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 197.830076][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 197.838021][ C1] RDX: 0000000000001000 RSI: 000000c420390000 RDI: 0000000000000003
[ 197.845970][ C1] RBP: 000000c42033b760 R08: 0000000000000000 R09: 0000000000000000
[ 197.853918][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 197.862209][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff
[ 197.870171][ C1]
[ 197.872476][ C1] Uninit was stored to memory at:
[ 197.877481][ C1] kmsan_internal_chain_origin+0xcc/0x150
[ 197.883175][ C1] __msan_chain_origin+0x6b/0xe0
[ 197.888096][ C1] ___slab_alloc+0x1dbc/0x1fb0
[ 197.892835][ C1] kmem_cache_alloc_node+0x769/0xe70
[ 197.898102][ C1] __alloc_skb+0x215/0xa10
[ 197.902500][ C1] aoecmd_cfg+0x205/0xa80
[ 197.906836][ C1] discover_timer+0x86/0xa0
[ 197.911317][ C1] call_timer_fn+0x232/0x530
[ 197.915888][ C1] __run_timers+0xcdc/0x11a0
[ 197.920455][ C1] run_timer_softirq+0x2d/0x50
[ 197.925195][ C1] __do_softirq+0x4a1/0x83a
[ 197.929682][ C1] do_softirq_own_stack+0x49/0x80
[ 197.934684][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 197.939874][ C1] _raw_spin_unlock_bh+0x4b/0x60
[ 197.944786][ C1] __release_sock+0xdc/0x640
[ 197.949352][ C1] release_sock+0x99/0x2a0
[ 197.953754][ C1] tcp_recvmsg+0x335f/0x4ff0
[ 197.958323][ C1] inet_recvmsg+0x237/0x7d0
[ 197.962973][ C1] sock_read_iter+0x5be/0x660
[ 197.967625][ C1] __vfs_read+0xa67/0xc90
[ 197.971928][ C1] vfs_read+0x359/0x6f0
[ 197.976056][ C1] ksys_read+0x265/0x430
[ 197.980275][ C1] __se_sys_read+0x92/0xb0
[ 197.984664][ C1] __x64_sys_read+0x4a/0x70
[ 197.989139][ C1] do_syscall_64+0xbc/0xf0
[ 197.993540][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 197.999399][ C1]
[ 198.001698][ C1] Uninit was created at:
[ 198.005917][ C1] kmsan_internal_poison_shadow+0x58/0xb0
[ 198.011610][ C1] kmsan_slab_free+0x8d/0x100
[ 198.016271][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50
[ 198.021615][ C1] __kfree_skb_flush+0xb0/0x100
[ 198.026449][ C1] net_rx_action+0x1908/0x1950
[ 198.031189][ C1] __do_softirq+0x4a1/0x83a
[ 198.035684][ C1] irq_exit+0x230/0x280
[ 198.039823][ C1] do_IRQ+0x20d/0x3a0
[ 198.043781][ C1] ret_from_intr+0x0/0x33
[ 198.048083][ C1] __msan_metadata_ptr_for_load_4+0x4/0x20
[ 198.053870][ C1] stack_trace_consume_entry+0x247/0x320
[ 198.059486][ C1] arch_stack_walk+0x30f/0x3e0
[ 198.064233][ C1] stack_trace_save+0x11c/0x1b0
[ 198.069062][ C1] kmsan_internal_chain_origin+0xcc/0x150
[ 198.074773][ C1] kmsan_memcpy_memmove_metadata+0x25b/0x2d0
[ 198.080728][ C1] kmsan_memcpy_metadata+0xb/0x10
[ 198.085728][ C1] __msan_memcpy+0x56/0x70
[ 198.090125][ C1] sock_read_iter+0x116/0x660
[ 198.094776][ C1] __vfs_read+0xa67/0xc90
[ 198.099079][ C1] vfs_read+0x359/0x6f0
[ 198.103214][ C1] ksys_read+0x265/0x430
[ 198.107429][ C1] __se_sys_read+0x92/0xb0
[ 198.111817][ C1] __x64_sys_read+0x4a/0x70
[ 198.116295][ C1] do_syscall_64+0xbc/0xf0
[ 198.120688][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 198.126548][ C1] ==================================================================
[ 198.134577][ C1] Disabling lock debugging due to kernel taint
[ 198.140700][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 198.147286][ C1] CPU: 1 PID: 13055 Comm: syz-fuzzer Tainted: G B 5.3.0-rc7+ #0
[ 198.156185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 198.166226][ C1] Call Trace:
[ 198.169490][ C1]
[ 198.172326][ C1] dump_stack+0x191/0x1f0
[ 198.176636][ C1] panic+0x3c9/0xc1e
[ 198.180519][ C1] kmsan_report+0x2ca/0x2d0
[ 198.184997][ C1] __msan_warning+0x75/0xe0
[ 198.189481][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 198.194740][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 198.200608][ C1] ? __alloc_skb+0x215/0xa10
[ 198.205181][ C1] __alloc_skb+0x215/0xa10
[ 198.209576][ C1] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0
[ 198.215362][ C1] aoecmd_cfg+0x205/0xa80
[ 198.219682][ C1] discover_timer+0x86/0xa0
[ 198.224352][ C1] call_timer_fn+0x232/0x530
[ 198.228928][ C1] ? skbfree+0x4a0/0x4a0
[ 198.233148][ C1] __run_timers+0xcdc/0x11a0
[ 198.237722][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 198.243762][ C1] ? skbfree+0x4a0/0x4a0
[ 198.247981][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 198.252894][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 198.258763][ C1] run_timer_softirq+0x2d/0x50
[ 198.263498][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 198.268422][ C1] __do_softirq+0x4a1/0x83a
[ 198.272907][ C1] do_softirq_own_stack+0x49/0x80
[ 198.278682][ C1]
[ 198.281609][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 198.286786][ C1] _raw_spin_unlock_bh+0x4b/0x60
[ 198.291697][ C1] __release_sock+0xdc/0x640
[ 198.296262][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 198.302141][ C1] release_sock+0x99/0x2a0
[ 198.306537][ C1] tcp_recvmsg+0x335f/0x4ff0
[ 198.311127][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 198.317006][ C1] ? inet_recvmsg+0xc3/0x7d0
[ 198.321570][ C1] ? tcp_mmap+0x150/0x150
[ 198.325869][ C1] ? tcp_mmap+0x150/0x150
[ 198.330178][ C1] inet_recvmsg+0x237/0x7d0
[ 198.334672][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 198.339412][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 198.345281][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 198.350029][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 198.354770][ C1] sock_read_iter+0x5be/0x660
[ 198.359442][ C1] ? kernel_sock_ip_overhead+0x340/0x340
[ 198.365048][ C1] __vfs_read+0xa67/0xc90
[ 198.369363][ C1] vfs_read+0x359/0x6f0
[ 198.373498][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0
[ 198.379369][ C1] ksys_read+0x265/0x430
[ 198.383594][ C1] __se_sys_read+0x92/0xb0
[ 198.387991][ C1] __x64_sys_read+0x4a/0x70
[ 198.392477][ C1] do_syscall_64+0xbc/0xf0
[ 198.396873][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 198.402742][ C1] RIP: 0033:0x47fd44
[ 198.406616][ C1] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 198.426194][ C1] RSP: 002b:000000c42033b710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 198.434578][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 198.442521][ C1] RDX: 0000000000001000 RSI: 000000c420390000 RDI: 0000000000000003
[ 198.450467][ C1] RBP: 000000c42033b760 R08: 0000000000000000 R09: 0000000000000000
[ 198.458409][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 198.466355][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff
[ 198.475850][ C1] Kernel Offset: disabled
[ 198.480182][ C1] Rebooting in 86400 seconds..