[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 91.484554][ T31] audit: type=1800 audit(1574168808.532:25): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 91.507826][ T31] audit: type=1800 audit(1574168808.552:26): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 91.552581][ T31] audit: type=1800 audit(1574168808.582:27): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. 2019/11/19 13:07:04 fuzzer started 2019/11/19 13:07:08 dialing manager at 10.128.0.26:46379 2019/11/19 13:07:09 syscalls: 2397 2019/11/19 13:07:09 code coverage: enabled 2019/11/19 13:07:09 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/19 13:07:09 extra coverage: enabled 2019/11/19 13:07:09 setuid sandbox: enabled 2019/11/19 13:07:09 namespace sandbox: enabled 2019/11/19 13:07:09 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/19 13:07:09 fault injection: enabled 2019/11/19 13:07:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/19 13:07:09 net packet injection: enabled 2019/11/19 13:07:09 net device setup: enabled 2019/11/19 13:07:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/19 13:07:09 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 258.974190][ C0] ===================================================== [ 258.981333][ C0] BUG: KMSAN: use-after-free in kmem_cache_alloc_node+0x5a9/0xe60 [ 258.989836][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc5+ #0 [ 258.997302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.007350][ C0] Call Trace: [ 259.010633][ C0] dump_stack+0x191/0x1f0 [ 259.014989][ C0] kmsan_report+0x128/0x220 [ 259.019896][ C0] __msan_warning+0x73/0xe0 [ 259.024417][ C0] kmem_cache_alloc_node+0x5a9/0xe60 [ 259.029690][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 259.035578][ C0] ? __alloc_skb+0x215/0xa10 [ 259.040297][ C0] __alloc_skb+0x215/0xa10 [ 259.045032][ C0] aoecmd_cfg+0x205/0xa80 [ 259.049821][ C0] discover_timer+0x86/0xa0 [ 259.054335][ C0] call_timer_fn+0x232/0x530 [ 259.059001][ C0] ? skbfree+0x4a0/0x4a0 [ 259.063237][ C0] __run_timers+0xd60/0x1270 [ 259.067837][ C0] ? skbfree+0x4a0/0x4a0 [ 259.072091][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 259.078387][ C0] run_timer_softirq+0x2d/0x50 [ 259.083328][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.088258][ C0] __do_softirq+0x4a1/0x83a [ 259.092755][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 259.097951][ C0] ? takeover_tasklets+0x900/0x900 [ 259.103062][ C0] run_ksoftirqd+0x25/0x40 [ 259.108243][ C0] smpboot_thread_fn+0x4a3/0x990 [ 259.114103][ C0] kthread+0x4b5/0x4f0 [ 259.118246][ C0] ? cpu_report_death+0x190/0x190 [ 259.123271][ C0] ? kthread_blkcg+0xf0/0xf0 [ 259.127863][ C0] ret_from_fork+0x35/0x40 [ 259.132279][ C0] [ 259.134586][ C0] Uninit was stored to memory at: [ 259.139724][ C0] kmsan_internal_chain_origin+0xbd/0x180 [ 259.145526][ C0] __msan_chain_origin+0x6b/0xd0 [ 259.150469][ C0] ___slab_alloc+0x1dbc/0x1fb0 [ 259.155412][ C0] kmem_cache_alloc_node+0xaf4/0xe60 [ 259.160767][ C0] __alloc_skb+0x215/0xa10 [ 259.165433][ C0] aoecmd_cfg+0x205/0xa80 [ 259.169757][ C0] discover_timer+0x86/0xa0 [ 259.174262][ C0] call_timer_fn+0x232/0x530 [ 259.178838][ C0] __run_timers+0xd60/0x1270 [ 259.183410][ C0] run_timer_softirq+0x2d/0x50 [ 259.188152][ C0] __do_softirq+0x4a1/0x83a [ 259.192637][ C0] run_ksoftirqd+0x25/0x40 [ 259.197128][ C0] smpboot_thread_fn+0x4a3/0x990 [ 259.202162][ C0] kthread+0x4b5/0x4f0 [ 259.206246][ C0] ret_from_fork+0x35/0x40 [ 259.210651][ C0] [ 259.213106][ C0] Uninit was created at: [ 259.217356][ C0] kmsan_internal_poison_shadow+0x60/0x120 [ 259.223162][ C0] kmsan_slab_free+0x8d/0xf0 [ 259.228024][ C0] kmem_cache_free_bulk+0x3ad9/0x3f10 [ 259.234026][ C0] __kfree_skb_flush+0xb0/0x100 [ 259.238881][ C0] net_rx_action+0x1a5e/0x1aa0 [ 259.243914][ C0] __do_softirq+0x4a1/0x83a [ 259.248518][ C0] irq_exit+0x230/0x280 [ 259.252782][ C0] do_IRQ+0x123/0x360 [ 259.256751][ C0] ret_from_intr+0x0/0x33 [ 259.261078][ C0] do_user_addr_fault+0x2de/0x1510 [ 259.266177][ C0] __do_page_fault+0x1a2/0x410 [ 259.270923][ C0] do_page_fault+0xbb/0x500 [ 259.275409][ C0] page_fault+0x4e/0x60 [ 259.279536][ C0] ===================================================== [ 259.286840][ C0] Disabling lock debugging due to kernel taint [ 259.293097][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 259.299684][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.4.0-rc5+ #0 [ 259.308620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.318713][ C0] Call Trace: [ 259.322528][ C0] dump_stack+0x191/0x1f0 [ 259.326851][ C0] panic+0x3c9/0xc1e [ 259.331094][ C0] kmsan_report+0x215/0x220 [ 259.335587][ C0] __msan_warning+0x73/0xe0 [ 259.340083][ C0] kmem_cache_alloc_node+0x5a9/0xe60 [ 259.345543][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 259.352064][ C0] ? __alloc_skb+0x215/0xa10 [ 259.356932][ C0] __alloc_skb+0x215/0xa10 [ 259.361519][ C0] aoecmd_cfg+0x205/0xa80 [ 259.366451][ C0] discover_timer+0x86/0xa0 [ 259.371204][ C0] call_timer_fn+0x232/0x530 [ 259.375801][ C0] ? skbfree+0x4a0/0x4a0 [ 259.380141][ C0] __run_timers+0xd60/0x1270 [ 259.384752][ C0] ? skbfree+0x4a0/0x4a0 [ 259.389155][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 259.395381][ C0] run_timer_softirq+0x2d/0x50 [ 259.400413][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.405865][ C0] __do_softirq+0x4a1/0x83a [ 259.410484][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 259.415688][ C0] ? takeover_tasklets+0x900/0x900 [ 259.421657][ C0] run_ksoftirqd+0x25/0x40 [ 259.426177][ C0] smpboot_thread_fn+0x4a3/0x990 [ 259.431213][ C0] kthread+0x4b5/0x4f0 [ 259.435383][ C0] ? cpu_report_death+0x190/0x190 [ 259.440388][ C0] ? kthread_blkcg+0xf0/0xf0 [ 259.445854][ C0] ret_from_fork+0x35/0x40 [ 259.451820][ C0] Kernel Offset: disabled [ 259.456164][ C0] Rebooting in 86400 seconds..