[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 101.630590][ T30] audit: type=1800 audit(1565848384.685:25): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 101.656904][ T30] audit: type=1800 audit(1565848384.715:26): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 101.703803][ T30] audit: type=1800 audit(1565848384.745:27): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts.
2019/08/15 05:53:21 fuzzer started
2019/08/15 05:53:27 dialing manager at 10.128.0.26:38375
2019/08/15 05:53:27 syscalls: 2376
2019/08/15 05:53:27 code coverage: enabled
2019/08/15 05:53:27 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/08/15 05:53:27 extra coverage: enabled
2019/08/15 05:53:27 setuid sandbox: enabled
2019/08/15 05:53:27 namespace sandbox: enabled
2019/08/15 05:53:27 Android sandbox: /sys/fs/selinux/policy does not exist
2019/08/15 05:53:27 fault injection: enabled
2019/08/15 05:53:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/08/15 05:53:27 net packet injection: enabled
2019/08/15 05:53:27 net device setup: enabled
syzkaller login: [ 197.524326][ C1] ==================================================================
[ 197.532483][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70
[ 197.540141][ C1] CPU: 1 PID: 11783 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #17
[ 197.547805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 197.557883][ C1] Call Trace:
[ 197.561179][ C1]
[ 197.564028][ C1] dump_stack+0x191/0x1f0
[ 197.568363][ C1] kmsan_report+0x162/0x2d0
[ 197.572870][ C1] __msan_warning+0x75/0xe0
[ 197.577373][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 197.582651][ C1] ? __alloc_skb+0x215/0xa10
[ 197.587250][ C1] __alloc_skb+0x215/0xa10
[ 197.591805][ C1] aoecmd_cfg+0x205/0xa80
[ 197.596147][ C1] discover_timer+0x86/0xa0
[ 197.600649][ C1] call_timer_fn+0x232/0x530
[ 197.605258][ C1] ? skbfree+0x4a0/0x4a0
[ 197.609505][ C1] __run_timers+0xcdc/0x11a0
[ 197.614089][ C1] ? skbfree+0x4a0/0x4a0
[ 197.618387][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 197.624435][ C1] run_timer_softirq+0x2d/0x50
[ 197.629196][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 197.634126][ C1] __do_softirq+0x4a1/0x83a
[ 197.638651][ C1] irq_exit+0x230/0x280
[ 197.642806][ C1] do_IRQ+0x20d/0x3a0
[ 197.646819][ C1] common_interrupt+0x2e/0x2e
[ 197.651518][ C1]
[ 197.654453][ C1] RIP: 0010:__msan_instrument_asm_store+0xf9/0x150
[ 197.660944][ C1] Code: df 4c 89 f6 31 d2 e8 b6 e1 ff ff 65 ff 0d 03 d2 fe 7d 65 8b 05 fc d1 fe 7d 85 c0 75 2e e8 1f 0f 38 ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e
[ 197.680539][ C1] RSP: 0018:ffff8880aa80ef88 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9
[ 197.689203][ C1] RAX: 0000000000000000 RBX: ffff8880aa80efd8 RCX: 0000000000000003
[ 197.697182][ C1] RDX: 0000000000000002 RSI: ffffd0ffffffffff RDI: ffff8880aa80efe0
[ 197.705149][ C1] RBP: ffff8880aa80efb8 R08: ffffea000000000f R09: ffff88812fffb000
[ 197.713136][ C1] R10: 0000000000000004 R11: ffffffff8be73a50 R12: ffff888112eb6460
[ 197.721101][ C1] R13: 0000000000000200 R14: 0000000000000008 R15: 0000000000000286
[ 197.729090][ C1] ? pfifo_fast_enqueue+0x8d0/0x8d0
[ 197.734307][ C1] __local_bh_enable_ip+0xf7/0x1d0
[ 197.739441][ C1] local_bh_enable+0x36/0x40
[ 197.744036][ C1] ip_finish_output2+0x20dc/0x25d0
[ 197.749142][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 197.755211][ C1] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 197.761206][ C1] __ip_finish_output+0xaf8/0xda0
[ 197.766257][ C1] ip_finish_output+0x2db/0x420
[ 197.771111][ C1] ip_output+0x541/0x610
[ 197.775381][ C1] ? ip_mc_finish_output+0x6d0/0x6d0
[ 197.780658][ C1] ? ip_finish_output+0x420/0x420
[ 197.785669][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 197.790607][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 197.796614][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 197.802762][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 197.808846][ C1] ip_queue_xmit+0xcc/0xf0
[ 197.813276][ C1] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 197.818907][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 197.824136][ C1] __tcp_send_ack+0x701/0x840
[ 197.828840][ C1] tcp_send_ack+0x68/0x90
[ 197.833180][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 197.838031][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 197.842665][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 197.848635][ C1] ? tcp_mmap+0x150/0x150
[ 197.852968][ C1] ? tcp_mmap+0x150/0x150
[ 197.857294][ C1] inet_recvmsg+0x237/0x7d0
[ 197.861992][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 197.866754][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 197.872726][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 197.877498][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 197.882253][ C1] sock_read_iter+0x5be/0x660
[ 197.886939][ C1] ? kernel_sock_ip_overhead+0x340/0x340
[ 197.892583][ C1] __vfs_read+0xa67/0xc90
[ 197.896944][ C1] vfs_read+0x359/0x6f0
[ 197.901109][ C1] ksys_read+0x265/0x430
[ 197.905352][ C1] __se_sys_read+0x92/0xb0
[ 197.909761][ C1] __x64_sys_read+0x4a/0x70
[ 197.914251][ C1] do_syscall_64+0xbc/0xf0
[ 197.918654][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 197.924534][ C1] RIP: 0033:0x47fcb4
[ 197.928430][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 197.949085][ C1] RSP: 002b:000000c420317760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 197.957494][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4
[ 197.965453][ C1] RDX: 0000000000001000 RSI: 000000c4202ba000 RDI: 0000000000000003
[ 197.973414][ C1] RBP: 000000c4203177b0 R08: 0000000000000000 R09: 0000000000000000
[ 197.981376][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 197.989349][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff
[ 197.997326][ C1]
[ 197.999637][ C1] Uninit was stored to memory at:
[ 198.004680][ C1] kmsan_internal_chain_origin+0xcc/0x150
[ 198.010386][ C1] __msan_chain_origin+0x6b/0xe0
[ 198.015343][ C1] ___slab_alloc+0x1dbc/0x1fb0
[ 198.020105][ C1] kmem_cache_alloc_node+0x769/0xe70
[ 198.025381][ C1] __alloc_skb+0x215/0xa10
[ 198.029791][ C1] aoecmd_cfg+0x205/0xa80
[ 198.034108][ C1] discover_timer+0x86/0xa0
[ 198.038603][ C1] call_timer_fn+0x232/0x530
[ 198.043178][ C1] __run_timers+0xcdc/0x11a0
[ 198.047754][ C1] run_timer_softirq+0x2d/0x50
[ 198.052506][ C1] __do_softirq+0x4a1/0x83a
[ 198.057005][ C1] irq_exit+0x230/0x280
[ 198.061149][ C1] do_IRQ+0x20d/0x3a0
[ 198.065121][ C1] ret_from_intr+0x0/0x33
[ 198.069442][ C1] __msan_instrument_asm_store+0xf9/0x150
[ 198.075244][ C1] __local_bh_enable_ip+0xf7/0x1d0
[ 198.080353][ C1] local_bh_enable+0x36/0x40
[ 198.084941][ C1] ip_finish_output2+0x20dc/0x25d0
[ 198.090042][ C1] __ip_finish_output+0xaf8/0xda0
[ 198.095050][ C1] ip_finish_output+0x2db/0x420
[ 198.099910][ C1] ip_output+0x541/0x610
[ 198.104141][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 198.109071][ C1] ip_queue_xmit+0xcc/0xf0
[ 198.113489][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 198.118674][ C1] __tcp_send_ack+0x701/0x840
[ 198.123334][ C1] tcp_send_ack+0x68/0x90
[ 198.127648][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 198.132488][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 198.137060][ C1] inet_recvmsg+0x237/0x7d0
[ 198.141547][ C1] sock_read_iter+0x5be/0x660
[ 198.146209][ C1] __vfs_read+0xa67/0xc90
[ 198.150524][ C1] vfs_read+0x359/0x6f0
[ 198.154769][ C1] ksys_read+0x265/0x430
[ 198.158997][ C1] __se_sys_read+0x92/0xb0
[ 198.163398][ C1] __x64_sys_read+0x4a/0x70
[ 198.167894][ C1] do_syscall_64+0xbc/0xf0
[ 198.172319][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 198.178188][ C1]
[ 198.180500][ C1] Uninit was created at:
[ 198.184763][ C1] kmsan_internal_poison_shadow+0x53/0xa0
[ 198.190472][ C1] kmsan_slab_free+0x8d/0x100
[ 198.195138][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50
[ 198.200495][ C1] __kfree_skb_flush+0xb0/0x100
[ 198.205342][ C1] net_rx_action+0x1908/0x1950
[ 198.210100][ C1] __do_softirq+0x4a1/0x83a
[ 198.214611][ C1] irq_exit+0x230/0x280
[ 198.218832][ C1] do_IRQ+0x20d/0x3a0
[ 198.222820][ C1] ret_from_intr+0x0/0x33
[ 198.227135][ C1] default_idle+0x53/0x90
[ 198.231450][ C1] arch_cpu_idle+0x25/0x30
[ 198.235851][ C1] do_idle+0x1d7/0x790
[ 198.239913][ C1] cpu_startup_entry+0x45/0x50
[ 198.244665][ C1] start_secondary+0x370/0x470
[ 198.249433][ C1] secondary_startup_64+0xa4/0xb0
[ 198.254436][ C1] ==================================================================
[ 198.262476][ C1] Disabling lock debugging due to kernel taint
[ 198.268610][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 198.275186][ C1] CPU: 1 PID: 11783 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #17
[ 198.284186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 198.294235][ C1] Call Trace:
[ 198.297528][ C1]
[ 198.300386][ C1] dump_stack+0x191/0x1f0
[ 198.304725][ C1] panic+0x3c9/0xc1e
[ 198.308641][ C1] kmsan_report+0x2ca/0x2d0
[ 198.313159][ C1] __msan_warning+0x75/0xe0
[ 198.317661][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 198.322957][ C1] ? __alloc_skb+0x215/0xa10
[ 198.327583][ C1] __alloc_skb+0x215/0xa10
[ 198.332010][ C1] aoecmd_cfg+0x205/0xa80
[ 198.336348][ C1] discover_timer+0x86/0xa0
[ 198.340886][ C1] call_timer_fn+0x232/0x530
[ 198.345482][ C1] ? skbfree+0x4a0/0x4a0
[ 198.349732][ C1] __run_timers+0xcdc/0x11a0
[ 198.354334][ C1] ? skbfree+0x4a0/0x4a0
[ 198.358584][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 198.364569][ C1] run_timer_softirq+0x2d/0x50
[ 198.369340][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 198.374291][ C1] __do_softirq+0x4a1/0x83a
[ 198.378802][ C1] irq_exit+0x230/0x280
[ 198.382953][ C1] do_IRQ+0x20d/0x3a0
[ 198.386946][ C1] common_interrupt+0x2e/0x2e
[ 198.391605][ C1]
[ 198.394534][ C1] RIP: 0010:__msan_instrument_asm_store+0xf9/0x150
[ 198.401017][ C1] Code: df 4c 89 f6 31 d2 e8 b6 e1 ff ff 65 ff 0d 03 d2 fe 7d 65 8b 05 fc d1 fe 7d 85 c0 75 2e e8 1f 0f 38 ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e
[ 198.420621][ C1] RSP: 0018:ffff8880aa80ef88 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9
[ 198.429023][ C1] RAX: 0000000000000000 RBX: ffff8880aa80efd8 RCX: 0000000000000003
[ 198.436985][ C1] RDX: 0000000000000002 RSI: ffffd0ffffffffff RDI: ffff8880aa80efe0
[ 198.444944][ C1] RBP: ffff8880aa80efb8 R08: ffffea000000000f R09: ffff88812fffb000
[ 198.452925][ C1] R10: 0000000000000004 R11: ffffffff8be73a50 R12: ffff888112eb6460
[ 198.460890][ C1] R13: 0000000000000200 R14: 0000000000000008 R15: 0000000000000286
[ 198.468871][ C1] ? pfifo_fast_enqueue+0x8d0/0x8d0
[ 198.474079][ C1] __local_bh_enable_ip+0xf7/0x1d0
[ 198.479193][ C1] local_bh_enable+0x36/0x40
[ 198.483795][ C1] ip_finish_output2+0x20dc/0x25d0
[ 198.488903][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 198.494965][ C1] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 198.500990][ C1] __ip_finish_output+0xaf8/0xda0
[ 198.506063][ C1] ip_finish_output+0x2db/0x420
[ 198.510940][ C1] ip_output+0x541/0x610
[ 198.515202][ C1] ? ip_mc_finish_output+0x6d0/0x6d0
[ 198.520571][ C1] ? ip_finish_output+0x420/0x420
[ 198.525592][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 198.530532][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 198.536514][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 198.542578][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 198.548661][ C1] ip_queue_xmit+0xcc/0xf0
[ 198.553079][ C1] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 198.558708][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 198.563944][ C1] __tcp_send_ack+0x701/0x840
[ 198.568627][ C1] tcp_send_ack+0x68/0x90
[ 198.572952][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 198.577805][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 198.582439][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 198.588410][ C1] ? tcp_mmap+0x150/0x150
[ 198.592736][ C1] ? tcp_mmap+0x150/0x150
[ 198.597067][ C1] inet_recvmsg+0x237/0x7d0
[ 198.601571][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 198.606334][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 198.613541][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 198.618291][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 198.623047][ C1] sock_read_iter+0x5be/0x660
[ 198.627750][ C1] ? kernel_sock_ip_overhead+0x340/0x340
[ 198.633379][ C1] __vfs_read+0xa67/0xc90
[ 198.637747][ C1] vfs_read+0x359/0x6f0
[ 198.641909][ C1] ksys_read+0x265/0x430
[ 198.646160][ C1] __se_sys_read+0x92/0xb0
[ 198.650578][ C1] __x64_sys_read+0x4a/0x70
[ 198.655076][ C1] do_syscall_64+0xbc/0xf0
[ 198.659487][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 198.665393][ C1] RIP: 0033:0x47fcb4
[ 198.669301][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 198.688895][ C1] RSP: 002b:000000c420317760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 198.697385][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4
[ 198.705341][ C1] RDX: 0000000000001000 RSI: 000000c4202ba000 RDI: 0000000000000003
[ 198.713401][ C1] RBP: 000000c4203177b0 R08: 0000000000000000 R09: 0000000000000000
[ 198.722338][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 198.730300][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff
[ 198.739569][ C1] Kernel Offset: disabled
[ 198.743910][ C1] Rebooting in 86400 seconds..