[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 106.455093][ T30] audit: type=1800 audit(1565218825.507:25): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 106.479056][ T30] audit: type=1800 audit(1565218825.527:26): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 106.519751][ T30] audit: type=1800 audit(1565218825.557:27): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. 2019/08/07 23:00:42 fuzzer started 2019/08/07 23:00:48 dialing manager at 10.128.0.26:37753 2019/08/07 23:00:48 syscalls: 2369 2019/08/07 23:00:48 code coverage: enabled 2019/08/07 23:00:48 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/07 23:00:48 extra coverage: enabled 2019/08/07 23:00:48 setuid sandbox: enabled 2019/08/07 23:00:48 namespace sandbox: enabled 2019/08/07 23:00:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/07 23:00:48 fault injection: enabled 2019/08/07 23:00:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/07 23:00:48 net packet injection: enabled 2019/08/07 23:00:48 net device setup: enabled syzkaller login: [ 258.993508][ C1] ================================================================== [ 259.002958][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 259.011312][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0-rc3+ #17 [ 259.019606][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.033300][ C1] Call Trace: [ 259.037288][ C1] dump_stack+0x191/0x1f0 [ 259.043227][ C1] kmsan_report+0x162/0x2d0 [ 259.047965][ C1] __msan_warning+0x75/0xe0 [ 259.052670][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.058261][ C1] ? __alloc_skb+0x215/0xa10 [ 259.063503][ C1] __alloc_skb+0x215/0xa10 [ 259.068025][ C1] aoecmd_cfg+0x205/0xa80 [ 259.072389][ C1] discover_timer+0x86/0xa0 [ 259.077242][ C1] call_timer_fn+0x232/0x530 [ 259.082097][ C1] ? skbfree+0x4a0/0x4a0 [ 259.086533][ C1] __run_timers+0xcdc/0x11a0 [ 259.092459][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.098774][ C1] ? skbfree+0x4a0/0x4a0 [ 259.103380][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.109902][ C1] run_timer_softirq+0x2d/0x50 [ 259.115065][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.120812][ C1] __do_softirq+0x4a1/0x83a [ 259.125929][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 259.131158][ C1] ? takeover_tasklets+0x900/0x900 [ 259.137204][ C1] run_ksoftirqd+0x25/0x40 [ 259.142163][ C1] smpboot_thread_fn+0x4a3/0x990 [ 259.148047][ C1] kthread+0x4b5/0x4f0 [ 259.152453][ C1] ? cpu_report_death+0x190/0x190 [ 259.158291][ C1] ? kthread_blkcg+0xf0/0xf0 [ 259.163222][ C1] ret_from_fork+0x35/0x40 [ 259.167874][ C1] [ 259.170607][ C1] Uninit was stored to memory at: [ 259.176988][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 259.184052][ C1] __msan_chain_origin+0x6b/0xe0 [ 259.189699][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 259.195303][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 259.201983][ C1] __alloc_skb+0x215/0xa10 [ 259.206634][ C1] aoecmd_cfg+0x205/0xa80 [ 259.213289][ C1] discover_timer+0x86/0xa0 [ 259.219859][ C1] call_timer_fn+0x232/0x530 [ 259.225966][ C1] __run_timers+0xcdc/0x11a0 [ 259.230862][ C1] run_timer_softirq+0x2d/0x50 [ 259.236428][ C1] __do_softirq+0x4a1/0x83a [ 259.241470][ C1] run_ksoftirqd+0x25/0x40 [ 259.246225][ C1] smpboot_thread_fn+0x4a3/0x990 [ 259.252004][ C1] kthread+0x4b5/0x4f0 [ 259.256529][ C1] ret_from_fork+0x35/0x40 [ 259.262015][ C1] [ 259.264882][ C1] Uninit was created at: [ 259.269293][ C1] kmsan_internal_poison_shadow+0x53/0xa0 [ 259.275880][ C1] kmsan_slab_free+0x8d/0x100 [ 259.280968][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 259.287162][ C1] __kfree_skb_flush+0xb0/0x100 [ 259.292272][ C1] net_rx_action+0x1908/0x1950 [ 259.297630][ C1] __do_softirq+0x4a1/0x83a [ 259.302697][ C1] irq_exit+0x230/0x280 [ 259.307503][ C1] do_IRQ+0x20d/0x3a0 [ 259.312498][ C1] ret_from_intr+0x0/0x33 [ 259.317446][ C1] finish_lock_switch+0x2b/0x40 [ 259.322792][ C1] finish_task_switch+0xfa/0x2d0 [ 259.328753][ C1] __schedule+0x646/0x780 [ 259.333528][ C1] schedule_idle+0x4b/0xa0 [ 259.338876][ C1] do_idle+0x75a/0x790 [ 259.343627][ C1] cpu_startup_entry+0x45/0x50 [ 259.350100][ C1] rest_init+0x1be/0x1f0 [ 259.354575][ C1] arch_call_rest_init+0x13/0x15 [ 259.360755][ C1] start_kernel+0x991/0xb61 [ 259.365951][ C1] x86_64_start_reservations+0x18/0x2e [ 259.371586][ C1] x86_64_start_kernel+0x81/0x84 [ 259.377301][ C1] secondary_startup_64+0xa4/0xb0 [ 259.383578][ C1] ================================================================== [ 259.392376][ C1] Disabling lock debugging due to kernel taint [ 259.399634][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 259.407266][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.3.0-rc3+ #17 [ 259.416612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.427985][ C1] Call Trace: [ 259.431594][ C1] dump_stack+0x191/0x1f0 [ 259.436425][ C1] panic+0x3c9/0xc1e [ 259.440613][ C1] kmsan_report+0x2ca/0x2d0 [ 259.445274][ C1] __msan_warning+0x75/0xe0 [ 259.450453][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.455942][ C1] ? __alloc_skb+0x215/0xa10 [ 259.461321][ C1] __alloc_skb+0x215/0xa10 [ 259.466137][ C1] aoecmd_cfg+0x205/0xa80 [ 259.471486][ C1] discover_timer+0x86/0xa0 [ 259.476591][ C1] call_timer_fn+0x232/0x530 [ 259.481441][ C1] ? skbfree+0x4a0/0x4a0 [ 259.486115][ C1] __run_timers+0xcdc/0x11a0 [ 259.491429][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.498724][ C1] ? skbfree+0x4a0/0x4a0 [ 259.503141][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.509821][ C1] run_timer_softirq+0x2d/0x50 [ 259.514607][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.520382][ C1] __do_softirq+0x4a1/0x83a [ 259.525030][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 259.530826][ C1] ? takeover_tasklets+0x900/0x900 [ 259.536322][ C1] run_ksoftirqd+0x25/0x40 [ 259.541603][ C1] smpboot_thread_fn+0x4a3/0x990 [ 259.546879][ C1] kthread+0x4b5/0x4f0 [ 259.551187][ C1] ? cpu_report_death+0x190/0x190 [ 259.556612][ C1] ? kthread_blkcg+0xf0/0xf0 [ 259.561927][ C1] ret_from_fork+0x35/0x40 [ 259.569141][ C1] Kernel Offset: disabled [ 259.573872][ C1] Rebooting in 86400 seconds..