[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 112.061647][ T31] audit: type=1800 audit(1565089307.108:25): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 112.087341][ T31] audit: type=1800 audit(1565089307.138:26): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 112.126855][ T31] audit: type=1800 audit(1565089307.168:27): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts.
2019/08/06 11:02:03 fuzzer started
2019/08/06 11:02:09 dialing manager at 10.128.0.26:36487
2019/08/06 11:02:09 syscalls: 2367
2019/08/06 11:02:09 code coverage: enabled
2019/08/06 11:02:09 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/08/06 11:02:09 extra coverage: enabled
2019/08/06 11:02:09 setuid sandbox: enabled
2019/08/06 11:02:09 namespace sandbox: enabled
2019/08/06 11:02:09 Android sandbox: /sys/fs/selinux/policy does not exist
2019/08/06 11:02:09 fault injection: enabled
2019/08/06 11:02:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/08/06 11:02:09 net packet injection: enabled
2019/08/06 11:02:09 net device setup: enabled
syzkaller login: [ 258.973615][ C1] ==================================================================
[ 258.982013][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70
[ 258.989706][ C1] CPU: 1 PID: 12983 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #16
[ 258.997534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 259.007624][ C1] Call Trace:
[ 259.010948][ C1]
[ 259.013951][ C1] dump_stack+0x191/0x1f0
[ 259.018348][ C1] kmsan_report+0x162/0x2d0
[ 259.022885][ C1] __msan_warning+0x75/0xe0
[ 259.027431][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 259.032859][ C1] ? __alloc_skb+0x215/0xa10
[ 259.037540][ C1] __alloc_skb+0x215/0xa10
[ 259.042143][ C1] aoecmd_cfg+0x205/0xa80
[ 259.046626][ C1] discover_timer+0x86/0xa0
[ 259.051239][ C1] call_timer_fn+0x232/0x530
[ 259.055874][ C1] ? skbfree+0x4a0/0x4a0
[ 259.060370][ C1] __run_timers+0xcdc/0x11a0
[ 259.064993][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 259.071086][ C1] ? skbfree+0x4a0/0x4a0
[ 259.075403][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 259.081448][ C1] run_timer_softirq+0x2d/0x50
[ 259.086608][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 259.091904][ C1] __do_softirq+0x4a1/0x83a
[ 259.096502][ C1] irq_exit+0x230/0x280
[ 259.100923][ C1] exiting_irq+0xe/0x10
[ 259.105111][ C1] smp_apic_timer_interrupt+0x48/0x70
[ 259.110703][ C1] apic_timer_interrupt+0x2e/0x40
[ 259.115825][ C1]
[ 259.118780][ C1] RIP: 0033:0x41debf
[ 259.122716][ C1] Code: b6 0b 49 89 ca 44 89 c1 41 d3 e9 48 83 ff 08 74 0b 41 0f ba e1 04 0f 83 db 00 00 00 41 0f ba e1 00 73 b1 4c 8d 0c 37 4d 8b 09 <4d> 85 c9 74 a5 4c 39 c8 77 a0 49 39 d1 73 9b 4d 89 cb 49 29 f1 4d
[ 259.143476][ C1] RSP: 002b:000000c420069e80 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13
[ 259.151911][ C1] RAX: 000000c420000000 RBX: 000000c41ff48418 RCX: 0000000000000002
[ 259.160100][ C1] RDX: 000000c429e30000 RSI: 000000c4216f7ce0 RDI: 0000000000000010
[ 259.168098][ C1] RBP: 000000c420069f18 R08: 0000000000000002 R09: 000000c422840960
[ 259.176312][ C1] R10: 0000000000000030 R11: 000000c4216f7ce0 R12: 0000000000000010
[ 259.184571][ C1] R13: 0000000000000010 R14: 0000000000000008 R15: ffffffffffffffff
[ 259.192676][ C1]
[ 259.195010][ C1] Uninit was stored to memory at:
[ 259.200162][ C1] kmsan_internal_chain_origin+0xcc/0x150
[ 259.205900][ C1] __msan_chain_origin+0x6b/0xe0
[ 259.210855][ C1] ___slab_alloc+0x1dbc/0x1fb0
[ 259.215739][ C1] kmem_cache_alloc_node+0x769/0xe70
[ 259.221130][ C1] __alloc_skb+0x215/0xa10
[ 259.225562][ C1] aoecmd_cfg+0x205/0xa80
[ 259.229909][ C1] discover_timer+0x86/0xa0
[ 259.234425][ C1] call_timer_fn+0x232/0x530
[ 259.239027][ C1] __run_timers+0xcdc/0x11a0
[ 259.243804][ C1] run_timer_softirq+0x2d/0x50
[ 259.248672][ C1] __do_softirq+0x4a1/0x83a
[ 259.253183][ C1] irq_exit+0x230/0x280
[ 259.257349][ C1] exiting_irq+0xe/0x10
[ 259.261629][ C1] smp_apic_timer_interrupt+0x48/0x70
[ 259.267381][ C1] apic_timer_interrupt+0x2e/0x40
[ 259.272401][ C1]
[ 259.274739][ C1] Uninit was created at:
[ 259.279181][ C1] kmsan_internal_poison_shadow+0x53/0xa0
[ 259.285003][ C1] kmsan_slab_free+0x8d/0x100
[ 259.289699][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50
[ 259.295260][ C1] __kfree_skb_flush+0xb0/0x100
[ 259.300157][ C1] net_rx_action+0x1908/0x1950
[ 259.305028][ C1] __do_softirq+0x4a1/0x83a
[ 259.309553][ C1] do_softirq_own_stack+0x49/0x80
[ 259.314595][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 259.319971][ C1] local_bh_enable+0x36/0x40
[ 259.324944][ C1] ip_finish_output2+0x20dc/0x25d0
[ 259.330109][ C1] __ip_finish_output+0xaf8/0xda0
[ 259.335177][ C1] ip_finish_output+0x2db/0x420
[ 259.340055][ C1] ip_output+0x541/0x610
[ 259.344415][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 259.349403][ C1] ip_queue_xmit+0xcc/0xf0
[ 259.353930][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 259.359154][ C1] __tcp_send_ack+0x701/0x840
[ 259.363855][ C1] tcp_send_ack+0x68/0x90
[ 259.368207][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 259.373105][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 259.377752][ C1] inet_recvmsg+0x237/0x7d0
[ 259.382298][ C1] sock_read_iter+0x5be/0x660
[ 259.387364][ C1] __vfs_read+0xa67/0xc90
[ 259.391911][ C1] vfs_read+0x359/0x6f0
[ 259.396104][ C1] ksys_read+0x265/0x430
[ 259.400365][ C1] __se_sys_read+0x92/0xb0
[ 259.404805][ C1] __x64_sys_read+0x4a/0x70
[ 259.409488][ C1] do_syscall_64+0xbc/0xf0
[ 259.413935][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 259.419835][ C1] ==================================================================
[ 259.427908][ C1] Disabling lock debugging due to kernel taint
[ 259.434382][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 259.441100][ C1] CPU: 1 PID: 12983 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #16
[ 259.451266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 259.462138][ C1] Call Trace:
[ 259.465455][ C1]
[ 259.468346][ C1] dump_stack+0x191/0x1f0
[ 259.472793][ C1] panic+0x3c9/0xc1e
[ 259.476768][ C1] kmsan_report+0x2ca/0x2d0
[ 259.481322][ C1] __msan_warning+0x75/0xe0
[ 259.486050][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 259.491370][ C1] ? __alloc_skb+0x215/0xa10
[ 259.496010][ C1] __alloc_skb+0x215/0xa10
[ 259.500915][ C1] aoecmd_cfg+0x205/0xa80
[ 259.505298][ C1] discover_timer+0x86/0xa0
[ 259.521305][ C1] call_timer_fn+0x232/0x530
[ 259.525936][ C1] ? skbfree+0x4a0/0x4a0
[ 259.530252][ C1] __run_timers+0xcdc/0x11a0
[ 259.534871][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 259.541227][ C1] ? skbfree+0x4a0/0x4a0
[ 259.545523][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 259.551525][ C1] run_timer_softirq+0x2d/0x50
[ 259.556309][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 259.561272][ C1] __do_softirq+0x4a1/0x83a
[ 259.565820][ C1] irq_exit+0x230/0x280
[ 259.570109][ C1] exiting_irq+0xe/0x10
[ 259.574304][ C1] smp_apic_timer_interrupt+0x48/0x70
[ 259.579900][ C1] apic_timer_interrupt+0x2e/0x40
[ 259.584933][ C1]
[ 259.587884][ C1] RIP: 0033:0x41debf
[ 259.591796][ C1] Code: b6 0b 49 89 ca 44 89 c1 41 d3 e9 48 83 ff 08 74 0b 41 0f ba e1 04 0f 83 db 00 00 00 41 0f ba e1 00 73 b1 4c 8d 0c 37 4d 8b 09 <4d> 85 c9 74 a5 4c 39 c8 77 a0 49 39 d1 73 9b 4d 89 cb 49 29 f1 4d
[ 259.612455][ C1] RSP: 002b:000000c420069e80 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13
[ 259.621153][ C1] RAX: 000000c420000000 RBX: 000000c41ff48418 RCX: 0000000000000002
[ 259.629155][ C1] RDX: 000000c429e30000 RSI: 000000c4216f7ce0 RDI: 0000000000000010
[ 259.637134][ C1] RBP: 000000c420069f18 R08: 0000000000000002 R09: 000000c422840960
[ 259.645121][ C1] R10: 0000000000000030 R11: 000000c4216f7ce0 R12: 0000000000000010
[ 259.653278][ C1] R13: 0000000000000010 R14: 0000000000000008 R15: ffffffffffffffff
[ 259.662421][ C1] Kernel Offset: disabled
[ 259.666794][ C1] Rebooting in 86400 seconds..