[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 78.590616][ T30] audit: type=1800 audit(1568580424.643:25): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 78.614259][ T30] audit: type=1800 audit(1568580424.673:26): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 78.650707][ T30] audit: type=1800 audit(1568580424.693:27): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. 2019/09/15 20:47:16 fuzzer started 2019/09/15 20:47:20 dialing manager at 10.128.0.26:39015 2019/09/15 20:47:20 syscalls: 2376 2019/09/15 20:47:20 code coverage: enabled 2019/09/15 20:47:20 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/15 20:47:20 extra coverage: enabled 2019/09/15 20:47:20 setuid sandbox: enabled 2019/09/15 20:47:20 namespace sandbox: enabled 2019/09/15 20:47:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/15 20:47:20 fault injection: enabled 2019/09/15 20:47:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/15 20:47:20 net packet injection: enabled 2019/09/15 20:47:20 net device setup: enabled syzkaller login: [ 197.523737][ C1] ================================================================== [ 197.531909][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 197.539582][ C1] CPU: 1 PID: 11692 Comm: syz-fuzzer Not tainted 5.3.0-rc7+ #0 [ 197.547143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.557215][ C1] Call Trace: [ 197.560516][ C1] [ 197.563418][ C1] dump_stack+0x191/0x1f0 [ 197.567762][ C1] kmsan_report+0x162/0x2d0 [ 197.572891][ C1] __msan_warning+0x75/0xe0 [ 197.577419][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 197.582825][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 197.589004][ C1] ? __alloc_skb+0x215/0xa10 [ 197.593649][ C1] __alloc_skb+0x215/0xa10 [ 197.598276][ C1] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 197.604107][ C1] aoecmd_cfg+0x205/0xa80 [ 197.608490][ C1] discover_timer+0x86/0xa0 [ 197.613034][ C1] call_timer_fn+0x232/0x530 [ 197.617642][ C1] ? skbfree+0x4a0/0x4a0 [ 197.621931][ C1] __run_timers+0xcdc/0x11a0 [ 197.626542][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.632632][ C1] ? skbfree+0x4a0/0x4a0 [ 197.636910][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 197.641863][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 197.647891][ C1] run_timer_softirq+0x2d/0x50 [ 197.652680][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 197.657631][ C1] __do_softirq+0x4a1/0x83a [ 197.662162][ C1] irq_exit+0x230/0x280 [ 197.666315][ C1] exiting_irq+0xe/0x10 [ 197.670485][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 197.675856][ C1] apic_timer_interrupt+0x2e/0x40 [ 197.680863][ C1] [ 197.683792][ C1] RIP: 0033:0x41d80d [ 197.687692][ C1] Code: 8b 48 18 48 8b 54 24 30 48 29 d1 48 89 0c 24 e8 39 f0 ff ff 48 8b 44 24 50 48 8b 4c 24 58 31 d2 e9 64 ff ff ff 48 8b 4c 24 58 <0f> ba e1 00 48 8b 74 24 18 48 8b 54 24 30 e9 94 fe ff ff 48 89 d0 [ 197.707303][ C1] RSP: 002b:000000c420039f28 EFLAGS: 00000283 ORIG_RAX: ffffffffffffff13 [ 197.715706][ C1] RAX: 000000c42001c560 RBX: 000000c41ff54584 RCX: 000000000000000d [ 197.723763][ C1] RDX: 000000c42b3b0000 RSI: 000000c421574f60 RDI: 0000000000000010 [ 197.731721][ C1] RBP: 000000c420039f68 R08: 0000000000000002 R09: 0000000000000004 [ 197.739688][ C1] R10: 0000000000000020 R11: 000000c421575ec0 R12: 0000000000000008 [ 197.747644][ C1] R13: 0000000000000008 R14: 0000000000000020 R15: ffffffffffffffff [ 197.755659][ C1] [ 197.757982][ C1] Uninit was stored to memory at: [ 197.763031][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 197.768752][ C1] __msan_chain_origin+0x6b/0xe0 [ 197.773707][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 197.778465][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 197.783754][ C1] __alloc_skb+0x215/0xa10 [ 197.788158][ C1] aoecmd_cfg+0x205/0xa80 [ 197.792476][ C1] discover_timer+0x86/0xa0 [ 197.796985][ C1] call_timer_fn+0x232/0x530 [ 197.801562][ C1] __run_timers+0xcdc/0x11a0 [ 197.806135][ C1] run_timer_softirq+0x2d/0x50 [ 197.811066][ C1] __do_softirq+0x4a1/0x83a [ 197.815570][ C1] irq_exit+0x230/0x280 [ 197.819714][ C1] exiting_irq+0xe/0x10 [ 197.823858][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 197.829215][ C1] apic_timer_interrupt+0x2e/0x40 [ 197.834216][ C1] [ 197.836547][ C1] Uninit was created at: [ 197.840776][ C1] kmsan_internal_poison_shadow+0x58/0xb0 [ 197.846482][ C1] kmsan_slab_free+0x8d/0x100 [ 197.851160][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 197.856534][ C1] __kfree_skb_flush+0xb0/0x100 [ 197.861373][ C1] net_rx_action+0x1908/0x1950 [ 197.866129][ C1] __do_softirq+0x4a1/0x83a [ 197.870618][ C1] irq_exit+0x230/0x280 [ 197.874757][ C1] do_IRQ+0x20d/0x3a0 [ 197.878727][ C1] ret_from_intr+0x0/0x33 [ 197.883055][ C1] default_idle+0x53/0x90 [ 197.887369][ C1] arch_cpu_idle+0x25/0x30 [ 197.891769][ C1] do_idle+0x1d7/0x790 [ 197.895841][ C1] cpu_startup_entry+0x45/0x50 [ 197.900612][ C1] start_secondary+0x370/0x470 [ 197.905360][ C1] secondary_startup_64+0xa4/0xb0 [ 197.910361][ C1] ================================================================== [ 197.918408][ C1] Disabling lock debugging due to kernel taint [ 197.924556][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 197.931136][ C1] CPU: 1 PID: 11692 Comm: syz-fuzzer Tainted: G B 5.3.0-rc7+ #0 [ 197.940070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.950137][ C1] Call Trace: [ 197.953431][ C1] [ 197.956306][ C1] dump_stack+0x191/0x1f0 [ 197.960651][ C1] panic+0x3c9/0xc1e [ 197.964560][ C1] kmsan_report+0x2ca/0x2d0 [ 197.969079][ C1] __msan_warning+0x75/0xe0 [ 197.973879][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 197.979155][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 197.985038][ C1] ? __alloc_skb+0x215/0xa10 [ 197.989677][ C1] __alloc_skb+0x215/0xa10 [ 197.994118][ C1] ? kmsan_get_shadow_origin_ptr+0x1/0x4c0 [ 197.999928][ C1] aoecmd_cfg+0x205/0xa80 [ 198.004336][ C1] discover_timer+0x86/0xa0 [ 198.008838][ C1] call_timer_fn+0x232/0x530 [ 198.013449][ C1] ? skbfree+0x4a0/0x4a0 [ 198.017697][ C1] __run_timers+0xcdc/0x11a0 [ 198.022290][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.028370][ C1] ? skbfree+0x4a0/0x4a0 [ 198.032607][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 198.037561][ C1] ? kmsan_get_shadow_origin_ptr+0x71/0x4c0 [ 198.043467][ C1] run_timer_softirq+0x2d/0x50 [ 198.048258][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 198.053304][ C1] __do_softirq+0x4a1/0x83a [ 198.057836][ C1] irq_exit+0x230/0x280 [ 198.062031][ C1] exiting_irq+0xe/0x10 [ 198.066191][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 198.071573][ C1] apic_timer_interrupt+0x2e/0x40 [ 198.076588][ C1] [ 198.079524][ C1] RIP: 0033:0x41d80d [ 198.083412][ C1] Code: 8b 48 18 48 8b 54 24 30 48 29 d1 48 89 0c 24 e8 39 f0 ff ff 48 8b 44 24 50 48 8b 4c 24 58 31 d2 e9 64 ff ff ff 48 8b 4c 24 58 <0f> ba e1 00 48 8b 74 24 18 48 8b 54 24 30 e9 94 fe ff ff 48 89 d0 [ 198.103006][ C1] RSP: 002b:000000c420039f28 EFLAGS: 00000283 ORIG_RAX: ffffffffffffff13 [ 198.111407][ C1] RAX: 000000c42001c560 RBX: 000000c41ff54584 RCX: 000000000000000d [ 198.119368][ C1] RDX: 000000c42b3b0000 RSI: 000000c421574f60 RDI: 0000000000000010 [ 198.128148][ C1] RBP: 000000c420039f68 R08: 0000000000000002 R09: 0000000000000004 [ 198.136120][ C1] R10: 0000000000000020 R11: 000000c421575ec0 R12: 0000000000000008 [ 198.144101][ C1] R13: 0000000000000008 R14: 0000000000000020 R15: ffffffffffffffff [ 198.153819][ C1] Kernel Offset: disabled [ 198.158155][ C1] Rebooting in 86400 seconds..