[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 106.613248][ T30] audit: type=1800 audit(1565406963.669:25): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 106.637655][ T30] audit: type=1800 audit(1565406963.689:26): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 106.678026][ T30] audit: type=1800 audit(1565406963.719:27): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2019/08/10 03:16:16 fuzzer started 2019/08/10 03:16:23 dialing manager at 10.128.0.26:38049 2019/08/10 03:16:23 syscalls: 2374 2019/08/10 03:16:23 code coverage: enabled 2019/08/10 03:16:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/10 03:16:23 extra coverage: enabled 2019/08/10 03:16:23 setuid sandbox: enabled 2019/08/10 03:16:23 namespace sandbox: enabled 2019/08/10 03:16:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/10 03:16:23 fault injection: enabled 2019/08/10 03:16:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/10 03:16:23 net packet injection: enabled 2019/08/10 03:16:23 net device setup: enabled syzkaller login: [ 197.544537][ C1] ================================================================== [ 197.552841][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 197.560501][ C1] CPU: 1 PID: 11802 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #17 [ 197.568149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.578215][ C1] Call Trace: [ 197.581509][ C1] [ 197.584423][ C1] dump_stack+0x191/0x1f0 [ 197.588789][ C1] kmsan_report+0x162/0x2d0 [ 197.593319][ C1] __msan_warning+0x75/0xe0 [ 197.597835][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 197.603239][ C1] ? __alloc_skb+0x215/0xa10 [ 197.607841][ C1] __alloc_skb+0x215/0xa10 [ 197.612375][ C1] aoecmd_cfg+0x205/0xa80 [ 197.616779][ C1] discover_timer+0x86/0xa0 [ 197.621287][ C1] call_timer_fn+0x232/0x530 [ 197.625953][ C1] ? skbfree+0x4a0/0x4a0 [ 197.630189][ C1] __run_timers+0xcdc/0x11a0 [ 197.634762][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.640819][ C1] ? skbfree+0x4a0/0x4a0 [ 197.645068][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.651040][ C1] run_timer_softirq+0x2d/0x50 [ 197.655789][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 197.660771][ C1] __do_softirq+0x4a1/0x83a [ 197.665368][ C1] do_softirq_own_stack+0x49/0x80 [ 197.670385][ C1] [ 197.673324][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 197.678536][ C1] local_bh_enable+0x36/0x40 [ 197.683415][ C1] ip_finish_output2+0x20dc/0x25d0 [ 197.688516][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 197.694591][ C1] ? nf_ct_deliver_cached_events+0x4d5/0x6e0 [ 197.700606][ C1] __ip_finish_output+0xaf8/0xda0 [ 197.705643][ C1] ip_finish_output+0x2db/0x420 [ 197.710496][ C1] ip_output+0x541/0x610 [ 197.714738][ C1] ? ip_mc_finish_output+0x6d0/0x6d0 [ 197.720096][ C1] ? ip_finish_output+0x420/0x420 [ 197.725106][ C1] __ip_queue_xmit+0x1caf/0x21f0 [ 197.730036][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.736109][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.742172][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.748272][ C1] ip_queue_xmit+0xcc/0xf0 [ 197.752689][ C1] ? tcp_v4_inbound_md5_hash+0xd10/0xd10 [ 197.758311][ C1] __tcp_transmit_skb+0x409e/0x5c60 [ 197.763537][ C1] __tcp_send_ack+0x701/0x840 [ 197.768214][ C1] tcp_send_ack+0x68/0x90 [ 197.772539][ C1] tcp_cleanup_rbuf+0x764/0x800 [ 197.777405][ C1] tcp_recvmsg+0x334d/0x4ff0 [ 197.782103][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.788365][ C1] ? tcp_mmap+0x150/0x150 [ 197.792679][ C1] ? tcp_mmap+0x150/0x150 [ 197.797024][ C1] inet_recvmsg+0x237/0x7d0 [ 197.801795][ C1] ? inet_sendpage+0x2c0/0x2c0 [ 197.806558][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.812527][ C1] ? inet_sendpage+0x2c0/0x2c0 [ 197.817276][ C1] ? inet_sendpage+0x2c0/0x2c0 [ 197.822035][ C1] sock_read_iter+0x5be/0x660 [ 197.826722][ C1] ? kernel_sock_ip_overhead+0x340/0x340 [ 197.832454][ C1] __vfs_read+0xa67/0xc90 [ 197.836815][ C1] vfs_read+0x359/0x6f0 [ 197.841014][ C1] ksys_read+0x265/0x430 [ 197.845262][ C1] __se_sys_read+0x92/0xb0 [ 197.849677][ C1] __x64_sys_read+0x4a/0x70 [ 197.854193][ C1] do_syscall_64+0xbc/0xf0 [ 197.858642][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 197.864532][ C1] RIP: 0033:0x47fcb4 [ 197.868412][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 197.888377][ C1] RSP: 002b:000000c42035d760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.896880][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4 [ 197.904857][ C1] RDX: 0000000000001000 RSI: 000000c4203b0000 RDI: 0000000000000003 [ 197.912818][ C1] RBP: 000000c42035d7b0 R08: 0000000000000000 R09: 0000000000000000 [ 197.920778][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 197.928735][ C1] R13: 0000000000000008 R14: 0000000000000040 R15: ffffffffffffffff [ 197.936737][ C1] [ 197.939057][ C1] Uninit was stored to memory at: [ 197.944088][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 197.949824][ C1] __msan_chain_origin+0x6b/0xe0 [ 197.954773][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 197.959524][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 197.964824][ C1] __alloc_skb+0x215/0xa10 [ 197.969508][ C1] aoecmd_cfg+0x205/0xa80 [ 197.973834][ C1] discover_timer+0x86/0xa0 [ 197.978393][ C1] call_timer_fn+0x232/0x530 [ 197.982980][ C1] __run_timers+0xcdc/0x11a0 [ 197.987558][ C1] run_timer_softirq+0x2d/0x50 [ 197.992321][ C1] __do_softirq+0x4a1/0x83a [ 197.996808][ C1] do_softirq_own_stack+0x49/0x80 [ 198.001819][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 198.007007][ C1] local_bh_enable+0x36/0x40 [ 198.011586][ C1] ip_finish_output2+0x20dc/0x25d0 [ 198.016686][ C1] __ip_finish_output+0xaf8/0xda0 [ 198.021694][ C1] ip_finish_output+0x2db/0x420 [ 198.026532][ C1] ip_output+0x541/0x610 [ 198.030759][ C1] __ip_queue_xmit+0x1caf/0x21f0 [ 198.035801][ C1] ip_queue_xmit+0xcc/0xf0 [ 198.040413][ C1] __tcp_transmit_skb+0x409e/0x5c60 [ 198.045600][ C1] __tcp_send_ack+0x701/0x840 [ 198.050270][ C1] tcp_send_ack+0x68/0x90 [ 198.054582][ C1] tcp_cleanup_rbuf+0x764/0x800 [ 198.059427][ C1] tcp_recvmsg+0x334d/0x4ff0 [ 198.064037][ C1] inet_recvmsg+0x237/0x7d0 [ 198.068538][ C1] sock_read_iter+0x5be/0x660 [ 198.073202][ C1] __vfs_read+0xa67/0xc90 [ 198.077532][ C1] vfs_read+0x359/0x6f0 [ 198.081671][ C1] ksys_read+0x265/0x430 [ 198.085903][ C1] __se_sys_read+0x92/0xb0 [ 198.090322][ C1] __x64_sys_read+0x4a/0x70 [ 198.094825][ C1] do_syscall_64+0xbc/0xf0 [ 198.101357][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.107231][ C1] [ 198.109566][ C1] Uninit was created at: [ 198.113801][ C1] kmsan_internal_poison_shadow+0x53/0xa0 [ 198.119535][ C1] kmsan_slab_free+0x8d/0x100 [ 198.124219][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 198.129584][ C1] __kfree_skb_flush+0xb0/0x100 [ 198.134450][ C1] net_rx_action+0x1908/0x1950 [ 198.139205][ C1] __do_softirq+0x4a1/0x83a [ 198.143706][ C1] irq_exit+0x230/0x280 [ 198.147881][ C1] do_IRQ+0x20d/0x3a0 [ 198.151935][ C1] ret_from_intr+0x0/0x33 [ 198.156248][ C1] virt_to_page_or_null+0xb4/0x100 [ 198.161365][ C1] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.167251][ C1] stack_trace_consume_entry+0x1a6/0x320 [ 198.172980][ C1] arch_stack_walk+0x30f/0x3e0 [ 198.177772][ C1] stack_trace_save+0x11c/0x1b0 [ 198.182611][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 198.188315][ C1] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 198.194278][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 198.199308][ C1] __msan_memcpy+0x56/0x70 [ 198.203714][ C1] sock_read_iter+0x47c/0x660 [ 198.208374][ C1] __vfs_read+0xa67/0xc90 [ 198.212689][ C1] vfs_read+0x359/0x6f0 [ 198.216827][ C1] ksys_read+0x265/0x430 [ 198.221052][ C1] __se_sys_read+0x92/0xb0 [ 198.225473][ C1] __x64_sys_read+0x4a/0x70 [ 198.229963][ C1] do_syscall_64+0xbc/0xf0 [ 198.234392][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.240267][ C1] ================================================================== [ 198.248327][ C1] Disabling lock debugging due to kernel taint [ 198.254467][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 198.261047][ C1] CPU: 1 PID: 11802 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #17 [ 198.271301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.281361][ C1] Call Trace: [ 198.284640][ C1] [ 198.287514][ C1] dump_stack+0x191/0x1f0 [ 198.291881][ C1] panic+0x3c9/0xc1e [ 198.295806][ C1] kmsan_report+0x2ca/0x2d0 [ 198.300315][ C1] __msan_warning+0x75/0xe0 [ 198.304902][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 198.310195][ C1] ? __alloc_skb+0x215/0xa10 [ 198.314799][ C1] __alloc_skb+0x215/0xa10 [ 198.319231][ C1] aoecmd_cfg+0x205/0xa80 [ 198.323593][ C1] discover_timer+0x86/0xa0 [ 198.332860][ C1] call_timer_fn+0x232/0x530 [ 198.337458][ C1] ? skbfree+0x4a0/0x4a0 [ 198.341703][ C1] __run_timers+0xcdc/0x11a0 [ 198.346292][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.352359][ C1] ? skbfree+0x4a0/0x4a0 [ 198.356609][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.362582][ C1] run_timer_softirq+0x2d/0x50 [ 198.367333][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 198.372281][ C1] __do_softirq+0x4a1/0x83a [ 198.376811][ C1] do_softirq_own_stack+0x49/0x80 [ 198.381820][ C1] [ 198.384755][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 198.389979][ C1] local_bh_enable+0x36/0x40 [ 198.394589][ C1] ip_finish_output2+0x20dc/0x25d0 [ 198.399701][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 198.405765][ C1] ? nf_ct_deliver_cached_events+0x4d5/0x6e0 [ 198.411776][ C1] __ip_finish_output+0xaf8/0xda0 [ 198.416808][ C1] ip_finish_output+0x2db/0x420 [ 198.421659][ C1] ip_output+0x541/0x610 [ 198.425932][ C1] ? ip_mc_finish_output+0x6d0/0x6d0 [ 198.431384][ C1] ? ip_finish_output+0x420/0x420 [ 198.436407][ C1] __ip_queue_xmit+0x1caf/0x21f0 [ 198.441357][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.447348][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.453533][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.459642][ C1] ip_queue_xmit+0xcc/0xf0 [ 198.464178][ C1] ? tcp_v4_inbound_md5_hash+0xd10/0xd10 [ 198.469824][ C1] __tcp_transmit_skb+0x409e/0x5c60 [ 198.475055][ C1] __tcp_send_ack+0x701/0x840 [ 198.479735][ C1] tcp_send_ack+0x68/0x90 [ 198.484110][ C1] tcp_cleanup_rbuf+0x764/0x800 [ 198.488965][ C1] tcp_recvmsg+0x334d/0x4ff0 [ 198.493619][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.499591][ C1] ? tcp_mmap+0x150/0x150 [ 198.503911][ C1] ? tcp_mmap+0x150/0x150 [ 198.508318][ C1] inet_recvmsg+0x237/0x7d0 [ 198.512830][ C1] ? inet_sendpage+0x2c0/0x2c0 [ 198.517616][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.523985][ C1] ? inet_sendpage+0x2c0/0x2c0 [ 198.528746][ C1] ? inet_sendpage+0x2c0/0x2c0 [ 198.533503][ C1] sock_read_iter+0x5be/0x660 [ 198.538196][ C1] ? kernel_sock_ip_overhead+0x340/0x340 [ 198.543832][ C1] __vfs_read+0xa67/0xc90 [ 198.548213][ C1] vfs_read+0x359/0x6f0 [ 198.552392][ C1] ksys_read+0x265/0x430 [ 198.556687][ C1] __se_sys_read+0x92/0xb0 [ 198.561103][ C1] __x64_sys_read+0x4a/0x70 [ 198.565602][ C1] do_syscall_64+0xbc/0xf0 [ 198.570046][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.575925][ C1] RIP: 0033:0x47fcb4 [ 198.579809][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 198.599407][ C1] RSP: 002b:000000c42035d760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.607843][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4 [ 198.615814][ C1] RDX: 0000000000001000 RSI: 000000c4203b0000 RDI: 0000000000000003 [ 198.623779][ C1] RBP: 000000c42035d7b0 R08: 0000000000000000 R09: 0000000000000000 [ 198.631738][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 198.639715][ C1] R13: 0000000000000008 R14: 0000000000000040 R15: ffffffffffffffff [ 198.648766][ C1] Kernel Offset: disabled [ 198.653116][ C1] Rebooting in 86400 seconds..