[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 108.269777][ T32] audit: type=1800 audit(1565449917.315:25): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 108.302155][ T32] audit: type=1800 audit(1565449917.345:26): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 108.343001][ T32] audit: type=1800 audit(1565449917.375:27): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. 2019/08/10 15:12:14 fuzzer started 2019/08/10 15:12:21 dialing manager at 10.128.0.26:38049 2019/08/10 15:12:21 syscalls: 2374 2019/08/10 15:12:21 code coverage: enabled 2019/08/10 15:12:21 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/10 15:12:21 extra coverage: enabled 2019/08/10 15:12:21 setuid sandbox: enabled 2019/08/10 15:12:21 namespace sandbox: enabled 2019/08/10 15:12:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/10 15:12:21 fault injection: enabled 2019/08/10 15:12:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/10 15:12:21 net packet injection: enabled 2019/08/10 15:12:21 net device setup: enabled syzkaller login: [ 197.544760][ C0] ================================================================== [ 197.552978][ C0] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 197.560868][ C0] CPU: 0 PID: 12094 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #17 [ 197.568526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.578694][ C0] Call Trace: [ 197.582002][ C0] [ 197.585174][ C0] dump_stack+0x191/0x1f0 [ 197.591217][ C0] kmsan_report+0x162/0x2d0 [ 197.596049][ C0] __msan_warning+0x75/0xe0 [ 197.600676][ C0] kmem_cache_alloc_node+0x5d0/0xe70 [ 197.606023][ C0] ? __alloc_skb+0x215/0xa10 [ 197.611121][ C0] __alloc_skb+0x215/0xa10 [ 197.615675][ C0] aoecmd_cfg+0x205/0xa80 [ 197.620027][ C0] discover_timer+0x86/0xa0 [ 197.624894][ C0] call_timer_fn+0x232/0x530 [ 197.629516][ C0] ? skbfree+0x4a0/0x4a0 [ 197.633808][ C0] __run_timers+0xcdc/0x11a0 [ 197.638405][ C0] ? skbfree+0x4a0/0x4a0 [ 197.642657][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.648629][ C0] run_timer_softirq+0x2d/0x50 [ 197.653514][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 197.658484][ C0] __do_softirq+0x4a1/0x83a [ 197.663008][ C0] irq_exit+0x230/0x280 [ 197.667187][ C0] do_IRQ+0x20d/0x3a0 [ 197.671184][ C0] common_interrupt+0x2e/0x2e [ 197.675852][ C0] [ 197.678783][ C0] RIP: 0010:kmsan_get_shadow_origin_ptr+0x176/0x3a0 [ 197.685385][ C0] Code: 89 c2 48 d3 ea 48 85 d2 75 64 48 89 c1 48 c1 e9 2e 75 5b 48 8b 0d 9a 86 26 0e 48 85 c9 74 4f 48 89 c2 48 c1 ea 22 48 8b 0c d1 <48> 85 c9 74 3f 48 89 c2 48 c1 ea 1b 83 e2 7f 48 c1 e2 05 48 89 ce [ 197.705211][ C0] RSP: 0018:ffff8880abfdef78 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 [ 197.713823][ C0] RAX: 00000000abfdefd8 RBX: ffffffff902c1000 RCX: ffff88812fffb000 [ 197.721785][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f23e2e8 [ 197.729773][ C0] RBP: ffff8880abfdefa8 R08: ffffea000000000f R09: ffff88812fffb000 [ 197.737911][ C0] R10: 0000000000000004 R11: ffffffff8be73a50 R12: ffff888115ee27e0 [ 197.746141][ C0] R13: ffff8880abfdefd8 R14: ffff8880abfdefd8 R15: 0000000000000008 [ 197.755393][ C0] ? pfifo_fast_enqueue+0x8d0/0x8d0 [ 197.760710][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x3a0 [ 197.766694][ C0] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.772703][ C0] __local_bh_enable_ip+0x107/0x1d0 [ 197.777927][ C0] local_bh_enable+0x36/0x40 [ 197.782536][ C0] ip_finish_output2+0x20dc/0x25d0 [ 197.787679][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 197.803224][ C0] ? nf_ct_deliver_cached_events+0x4d5/0x6e0 [ 197.811459][ C0] __ip_finish_output+0xaf8/0xda0 [ 197.816504][ C0] ip_finish_output+0x2db/0x420 [ 197.821371][ C0] ip_output+0x541/0x610 [ 197.825813][ C0] ? ip_mc_finish_output+0x6d0/0x6d0 [ 197.831476][ C0] ? ip_finish_output+0x420/0x420 [ 197.836515][ C0] __ip_queue_xmit+0x1caf/0x21f0 [ 197.841469][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.847553][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.853732][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.860164][ C0] ip_queue_xmit+0xcc/0xf0 [ 197.865073][ C0] ? tcp_v4_inbound_md5_hash+0xd10/0xd10 [ 197.871376][ C0] __tcp_transmit_skb+0x409e/0x5c60 [ 197.876627][ C0] __tcp_send_ack+0x701/0x840 [ 197.881412][ C0] tcp_send_ack+0x68/0x90 [ 197.885863][ C0] tcp_cleanup_rbuf+0x764/0x800 [ 197.891703][ C0] tcp_recvmsg+0x334d/0x4ff0 [ 197.896376][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.902466][ C0] ? tcp_mmap+0x150/0x150 [ 197.906893][ C0] ? tcp_mmap+0x150/0x150 [ 197.911242][ C0] inet_recvmsg+0x237/0x7d0 [ 197.915959][ C0] ? inet_sendpage+0x2c0/0x2c0 [ 197.920738][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 197.927427][ C0] ? inet_sendpage+0x2c0/0x2c0 [ 197.932282][ C0] ? inet_sendpage+0x2c0/0x2c0 [ 197.937078][ C0] sock_read_iter+0x5be/0x660 [ 197.942155][ C0] ? kernel_sock_ip_overhead+0x340/0x340 [ 197.950213][ C0] __vfs_read+0xa67/0xc90 [ 197.954582][ C0] vfs_read+0x359/0x6f0 [ 197.958750][ C0] ksys_read+0x265/0x430 [ 197.963016][ C0] __se_sys_read+0x92/0xb0 [ 197.967469][ C0] __x64_sys_read+0x4a/0x70 [ 197.972000][ C0] do_syscall_64+0xbc/0xf0 [ 197.976441][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 197.982326][ C0] RIP: 0033:0x47fcb4 [ 197.986231][ C0] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 198.006088][ C0] RSP: 002b:000000c420a54710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.014494][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4 [ 198.022497][ C0] RDX: 0000000000001000 RSI: 000000c420388000 RDI: 0000000000000003 [ 198.030657][ C0] RBP: 000000c420a54760 R08: 0000000000000000 R09: 0000000000000000 [ 198.041658][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 198.049621][ C0] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff [ 198.057616][ C0] [ 198.059932][ C0] Uninit was stored to memory at: [ 198.064948][ C0] kmsan_internal_chain_origin+0xcc/0x150 [ 198.071179][ C0] __msan_chain_origin+0x6b/0xe0 [ 198.076109][ C0] ___slab_alloc+0x1dbc/0x1fb0 [ 198.080867][ C0] kmem_cache_alloc_node+0x769/0xe70 [ 198.086260][ C0] __alloc_skb+0x215/0xa10 [ 198.090695][ C0] aoecmd_cfg+0x205/0xa80 [ 198.095016][ C0] discover_timer+0x86/0xa0 [ 198.099603][ C0] call_timer_fn+0x232/0x530 [ 198.104198][ C0] __run_timers+0xcdc/0x11a0 [ 198.108781][ C0] run_timer_softirq+0x2d/0x50 [ 198.113538][ C0] __do_softirq+0x4a1/0x83a [ 198.118040][ C0] irq_exit+0x230/0x280 [ 198.122211][ C0] do_IRQ+0x20d/0x3a0 [ 198.126288][ C0] ret_from_intr+0x0/0x33 [ 198.130628][ C0] kmsan_get_shadow_origin_ptr+0x176/0x3a0 [ 198.136508][ C0] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.142394][ C0] __local_bh_enable_ip+0x107/0x1d0 [ 198.147603][ C0] local_bh_enable+0x36/0x40 [ 198.152810][ C0] ip_finish_output2+0x20dc/0x25d0 [ 198.157911][ C0] __ip_finish_output+0xaf8/0xda0 [ 198.162937][ C0] ip_finish_output+0x2db/0x420 [ 198.167776][ C0] ip_output+0x541/0x610 [ 198.172010][ C0] __ip_queue_xmit+0x1caf/0x21f0 [ 198.176974][ C0] ip_queue_xmit+0xcc/0xf0 [ 198.181500][ C0] __tcp_transmit_skb+0x409e/0x5c60 [ 198.186714][ C0] __tcp_send_ack+0x701/0x840 [ 198.191428][ C0] tcp_send_ack+0x68/0x90 [ 198.195769][ C0] tcp_cleanup_rbuf+0x764/0x800 [ 198.200723][ C0] tcp_recvmsg+0x334d/0x4ff0 [ 198.205510][ C0] inet_recvmsg+0x237/0x7d0 [ 198.210036][ C0] sock_read_iter+0x5be/0x660 [ 198.214735][ C0] __vfs_read+0xa67/0xc90 [ 198.219066][ C0] vfs_read+0x359/0x6f0 [ 198.223405][ C0] ksys_read+0x265/0x430 [ 198.227658][ C0] __se_sys_read+0x92/0xb0 [ 198.232082][ C0] __x64_sys_read+0x4a/0x70 [ 198.236602][ C0] do_syscall_64+0xbc/0xf0 [ 198.241047][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.246932][ C0] [ 198.249265][ C0] Uninit was created at: [ 198.253606][ C0] kmsan_internal_poison_shadow+0x53/0xa0 [ 198.259353][ C0] kmsan_slab_free+0x8d/0x100 [ 198.264042][ C0] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 198.269425][ C0] __kfree_skb_flush+0xb0/0x100 [ 198.274519][ C0] net_rx_action+0x1908/0x1950 [ 198.279299][ C0] __do_softirq+0x4a1/0x83a [ 198.283816][ C0] irq_exit+0x230/0x280 [ 198.287980][ C0] do_IRQ+0x20d/0x3a0 [ 198.292077][ C0] ret_from_intr+0x0/0x33 [ 198.296431][ C0] do_idle+0x5be/0x790 [ 198.300534][ C0] cpu_startup_entry+0x45/0x50 [ 198.305479][ C0] rest_init+0x1be/0x1f0 [ 198.309780][ C0] arch_call_rest_init+0x13/0x15 [ 198.314748][ C0] start_kernel+0x991/0xb61 [ 198.319276][ C0] x86_64_start_reservations+0x18/0x2e [ 198.324755][ C0] x86_64_start_kernel+0x81/0x84 [ 198.329699][ C0] secondary_startup_64+0xa4/0xb0 [ 198.334720][ C0] ================================================================== [ 198.342871][ C0] Disabling lock debugging due to kernel taint [ 198.349204][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 198.356159][ C0] CPU: 0 PID: 12094 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #17 [ 198.365274][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.375345][ C0] Call Trace: [ 198.378649][ C0] [ 198.381548][ C0] dump_stack+0x191/0x1f0 [ 198.385918][ C0] panic+0x3c9/0xc1e [ 198.389883][ C0] kmsan_report+0x2ca/0x2d0 [ 198.394421][ C0] __msan_warning+0x75/0xe0 [ 198.399124][ C0] kmem_cache_alloc_node+0x5d0/0xe70 [ 198.404443][ C0] ? __alloc_skb+0x215/0xa10 [ 198.409074][ C0] __alloc_skb+0x215/0xa10 [ 198.413723][ C0] aoecmd_cfg+0x205/0xa80 [ 198.418102][ C0] discover_timer+0x86/0xa0 [ 198.422629][ C0] call_timer_fn+0x232/0x530 [ 198.427328][ C0] ? skbfree+0x4a0/0x4a0 [ 198.431602][ C0] __run_timers+0xcdc/0x11a0 [ 198.436321][ C0] ? skbfree+0x4a0/0x4a0 [ 198.440601][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.446610][ C0] run_timer_softirq+0x2d/0x50 [ 198.451409][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 198.456364][ C0] __do_softirq+0x4a1/0x83a [ 198.460901][ C0] irq_exit+0x230/0x280 [ 198.465093][ C0] do_IRQ+0x20d/0x3a0 [ 198.469102][ C0] common_interrupt+0x2e/0x2e [ 198.473782][ C0] [ 198.476765][ C0] RIP: 0010:kmsan_get_shadow_origin_ptr+0x176/0x3a0 [ 198.483372][ C0] Code: 89 c2 48 d3 ea 48 85 d2 75 64 48 89 c1 48 c1 e9 2e 75 5b 48 8b 0d 9a 86 26 0e 48 85 c9 74 4f 48 89 c2 48 c1 ea 22 48 8b 0c d1 <48> 85 c9 74 3f 48 89 c2 48 c1 ea 1b 83 e2 7f 48 c1 e2 05 48 89 ce [ 198.503274][ C0] RSP: 0018:ffff8880abfdef78 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 [ 198.511706][ C0] RAX: 00000000abfdefd8 RBX: ffffffff902c1000 RCX: ffff88812fffb000 [ 198.519869][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f23e2e8 [ 198.527857][ C0] RBP: ffff8880abfdefa8 R08: ffffea000000000f R09: ffff88812fffb000 [ 198.535840][ C0] R10: 0000000000000004 R11: ffffffff8be73a50 R12: ffff888115ee27e0 [ 198.543907][ C0] R13: ffff8880abfdefd8 R14: ffff8880abfdefd8 R15: 0000000000000008 [ 198.552698][ C0] ? pfifo_fast_enqueue+0x8d0/0x8d0 [ 198.557960][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x3a0 [ 198.563882][ C0] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.569857][ C0] __local_bh_enable_ip+0x107/0x1d0 [ 198.575168][ C0] local_bh_enable+0x36/0x40 [ 198.579773][ C0] ip_finish_output2+0x20dc/0x25d0 [ 198.584901][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 198.591071][ C0] ? nf_ct_deliver_cached_events+0x4d5/0x6e0 [ 198.597109][ C0] __ip_finish_output+0xaf8/0xda0 [ 198.602173][ C0] ip_finish_output+0x2db/0x420 [ 198.607055][ C0] ip_output+0x541/0x610 [ 198.611335][ C0] ? ip_mc_finish_output+0x6d0/0x6d0 [ 198.616632][ C0] ? ip_finish_output+0x420/0x420 [ 198.621667][ C0] __ip_queue_xmit+0x1caf/0x21f0 [ 198.626715][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.632800][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.638976][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.645096][ C0] ip_queue_xmit+0xcc/0xf0 [ 198.649543][ C0] ? tcp_v4_inbound_md5_hash+0xd10/0xd10 [ 198.656607][ C0] __tcp_transmit_skb+0x409e/0x5c60 [ 198.661882][ C0] __tcp_send_ack+0x701/0x840 [ 198.666612][ C0] tcp_send_ack+0x68/0x90 [ 198.671044][ C0] tcp_cleanup_rbuf+0x764/0x800 [ 198.676134][ C0] tcp_recvmsg+0x334d/0x4ff0 [ 198.680814][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.686817][ C0] ? tcp_mmap+0x150/0x150 [ 198.691181][ C0] ? tcp_mmap+0x150/0x150 [ 198.695531][ C0] inet_recvmsg+0x237/0x7d0 [ 198.700054][ C0] ? inet_sendpage+0x2c0/0x2c0 [ 198.704832][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 198.710835][ C0] ? inet_sendpage+0x2c0/0x2c0 [ 198.715607][ C0] ? inet_sendpage+0x2c0/0x2c0 [ 198.720396][ C0] sock_read_iter+0x5be/0x660 [ 198.725116][ C0] ? kernel_sock_ip_overhead+0x340/0x340 [ 198.730982][ C0] __vfs_read+0xa67/0xc90 [ 198.735378][ C0] vfs_read+0x359/0x6f0 [ 198.739571][ C0] ksys_read+0x265/0x430 [ 198.743846][ C0] __se_sys_read+0x92/0xb0 [ 198.748291][ C0] __x64_sys_read+0x4a/0x70 [ 198.752814][ C0] do_syscall_64+0xbc/0xf0 [ 198.757249][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.763156][ C0] RIP: 0033:0x47fcb4 [ 198.767061][ C0] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 198.786680][ C0] RSP: 002b:000000c420a54710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.795107][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4 [ 198.803079][ C0] RDX: 0000000000001000 RSI: 000000c420388000 RDI: 0000000000000003 [ 198.811066][ C0] RBP: 000000c420a54760 R08: 0000000000000000 R09: 0000000000000000 [ 198.820511][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 198.828501][ C0] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff [ 198.837842][ C0] Kernel Offset: disabled [ 198.842177][ C0] Rebooting in 86400 seconds..