[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 109.541825][ T30] audit: type=1800 audit(1565761440.596:25): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 109.584454][ T30] audit: type=1800 audit(1565761440.626:26): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 109.604862][ T30] audit: type=1800 audit(1565761440.636:27): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts.
2019/08/14 05:44:14 fuzzer started
2019/08/14 05:44:20 dialing manager at 10.128.0.26:42669
2019/08/14 05:44:21 syscalls: 2374
2019/08/14 05:44:21 code coverage: enabled
2019/08/14 05:44:21 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/08/14 05:44:21 extra coverage: enabled
2019/08/14 05:44:21 setuid sandbox: enabled
2019/08/14 05:44:21 namespace sandbox: enabled
2019/08/14 05:44:21 Android sandbox: /sys/fs/selinux/policy does not exist
2019/08/14 05:44:21 fault injection: enabled
2019/08/14 05:44:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/08/14 05:44:21 net packet injection: enabled
2019/08/14 05:44:21 net device setup: enabled
syzkaller login: [ 320.404344][ C1] ==================================================================
[ 320.412557][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70
[ 320.420233][ C1] CPU: 1 PID: 11941 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #17
[ 320.427904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 320.437977][ C1] Call Trace:
[ 320.441283][ C1]
[ 320.444201][ C1] dump_stack+0x191/0x1f0
[ 320.448569][ C1] kmsan_report+0x162/0x2d0
[ 320.453118][ C1] __msan_warning+0x75/0xe0
[ 320.457662][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 320.463001][ C1] ? __alloc_skb+0x215/0xa10
[ 320.467653][ C1] __alloc_skb+0x215/0xa10
[ 320.472143][ C1] aoecmd_cfg+0x205/0xa80
[ 320.476503][ C1] discover_timer+0x86/0xa0
[ 320.481224][ C1] call_timer_fn+0x232/0x530
[ 320.485812][ C1] ? skbfree+0x4a0/0x4a0
[ 320.490069][ C1] __run_timers+0xcdc/0x11a0
[ 320.494674][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 320.500764][ C1] ? skbfree+0x4a0/0x4a0
[ 320.505026][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 320.511012][ C1] run_timer_softirq+0x2d/0x50
[ 320.515772][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 320.520733][ C1] __do_softirq+0x4a1/0x83a
[ 320.525262][ C1] do_softirq_own_stack+0x49/0x80
[ 320.530275][ C1]
[ 320.533224][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 320.538449][ C1] local_bh_enable+0x36/0x40
[ 320.543038][ C1] ip_finish_output2+0x20dc/0x25d0
[ 320.548155][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 320.554224][ C1] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 320.560254][ C1] __ip_finish_output+0xaf8/0xda0
[ 320.565332][ C1] ip_finish_output+0x2db/0x420
[ 320.570227][ C1] ip_output+0x541/0x610
[ 320.574668][ C1] ? ip_mc_finish_output+0x6d0/0x6d0
[ 320.579965][ C1] ? ip_finish_output+0x420/0x420
[ 320.584995][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 320.590200][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 320.596206][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 320.602283][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 320.608411][ C1] ip_queue_xmit+0xcc/0xf0
[ 320.612840][ C1] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 320.618500][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 320.623744][ C1] __tcp_send_ack+0x701/0x840
[ 320.628465][ C1] tcp_send_ack+0x68/0x90
[ 320.632801][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 320.637750][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 320.642389][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 320.648373][ C1] ? tcp_mmap+0x150/0x150
[ 320.652715][ C1] ? tcp_mmap+0x150/0x150
[ 320.657051][ C1] inet_recvmsg+0x237/0x7d0
[ 320.661628][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 320.666396][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 320.672399][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 320.677179][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 320.681957][ C1] sock_read_iter+0x5be/0x660
[ 320.686653][ C1] ? kernel_sock_ip_overhead+0x340/0x340
[ 320.692310][ C1] __vfs_read+0xa67/0xc90
[ 320.696665][ C1] vfs_read+0x359/0x6f0
[ 320.700846][ C1] ksys_read+0x265/0x430
[ 320.705098][ C1] __se_sys_read+0x92/0xb0
[ 320.709513][ C1] __x64_sys_read+0x4a/0x70
[ 320.714020][ C1] do_syscall_64+0xbc/0xf0
[ 320.718457][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 320.724367][ C1] RIP: 0033:0x47fcb4
[ 320.728281][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 320.747881][ C1] RSP: 002b:000000c420363710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 320.756290][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4
[ 320.764260][ C1] RDX: 0000000000001000 RSI: 000000c420354000 RDI: 0000000000000003
[ 320.772230][ C1] RBP: 000000c420363760 R08: 0000000000000000 R09: 0000000000000000
[ 320.780219][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[ 320.788184][ C1] R13: 0000000000000010 R14: 0000000000000002 R15: ffffffffffffffff
[ 320.796204][ C1]
[ 320.798540][ C1] Uninit was stored to memory at:
[ 320.803602][ C1] kmsan_internal_chain_origin+0xcc/0x150
[ 320.809313][ C1] __msan_chain_origin+0x6b/0xe0
[ 320.814243][ C1] ___slab_alloc+0x1dbc/0x1fb0
[ 320.819010][ C1] kmem_cache_alloc_node+0x769/0xe70
[ 320.824284][ C1] __alloc_skb+0x215/0xa10
[ 320.828707][ C1] aoecmd_cfg+0x205/0xa80
[ 320.833027][ C1] discover_timer+0x86/0xa0
[ 320.837517][ C1] call_timer_fn+0x232/0x530
[ 320.842106][ C1] __run_timers+0xcdc/0x11a0
[ 320.846684][ C1] run_timer_softirq+0x2d/0x50
[ 320.851604][ C1] __do_softirq+0x4a1/0x83a
[ 320.856101][ C1] do_softirq_own_stack+0x49/0x80
[ 320.861125][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 320.866315][ C1] local_bh_enable+0x36/0x40
[ 320.870895][ C1] ip_finish_output2+0x20dc/0x25d0
[ 320.876029][ C1] __ip_finish_output+0xaf8/0xda0
[ 320.881053][ C1] ip_finish_output+0x2db/0x420
[ 320.885906][ C1] ip_output+0x541/0x610
[ 320.890145][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 320.895076][ C1] ip_queue_xmit+0xcc/0xf0
[ 320.899496][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 320.904690][ C1] __tcp_send_ack+0x701/0x840
[ 320.909359][ C1] tcp_send_ack+0x68/0x90
[ 320.913675][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 320.918518][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 320.923109][ C1] inet_recvmsg+0x237/0x7d0
[ 320.927636][ C1] sock_read_iter+0x5be/0x660
[ 320.932336][ C1] __vfs_read+0xa67/0xc90
[ 320.936658][ C1] vfs_read+0x359/0x6f0
[ 320.940803][ C1] ksys_read+0x265/0x430
[ 320.945035][ C1] __se_sys_read+0x92/0xb0
[ 320.949445][ C1] __x64_sys_read+0x4a/0x70
[ 320.953949][ C1] do_syscall_64+0xbc/0xf0
[ 320.958373][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 320.964251][ C1]
[ 320.966570][ C1] Uninit was created at:
[ 320.970828][ C1] kmsan_internal_poison_shadow+0x53/0xa0
[ 320.976545][ C1] kmsan_slab_free+0x8d/0x100
[ 320.981223][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50
[ 320.986619][ C1] __kfree_skb_flush+0xb0/0x100
[ 320.991475][ C1] net_rx_action+0x1908/0x1950
[ 320.996236][ C1] __do_softirq+0x4a1/0x83a
[ 321.000737][ C1] irq_exit+0x230/0x280
[ 321.004985][ C1] do_IRQ+0x20d/0x3a0
[ 321.008956][ C1] ret_from_intr+0x0/0x33
[ 321.013338][ C1] ==================================================================
[ 321.021421][ C1] Disabling lock debugging due to kernel taint
[ 321.027568][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 321.034182][ C1] CPU: 1 PID: 11941 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #17
[ 321.043193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 321.053245][ C1] Call Trace:
[ 321.056541][ C1]
[ 321.059395][ C1] dump_stack+0x191/0x1f0
[ 321.063761][ C1] panic+0x3c9/0xc1e
[ 321.068243][ C1] kmsan_report+0x2ca/0x2d0
[ 321.072761][ C1] __msan_warning+0x75/0xe0
[ 321.077277][ C1] kmem_cache_alloc_node+0x5d0/0xe70
[ 321.082921][ C1] ? __alloc_skb+0x215/0xa10
[ 321.087537][ C1] __alloc_skb+0x215/0xa10
[ 321.091973][ C1] aoecmd_cfg+0x205/0xa80
[ 321.096333][ C1] discover_timer+0x86/0xa0
[ 321.100919][ C1] call_timer_fn+0x232/0x530
[ 321.105504][ C1] ? skbfree+0x4a0/0x4a0
[ 321.109776][ C1] __run_timers+0xcdc/0x11a0
[ 321.114389][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 321.120455][ C1] ? skbfree+0x4a0/0x4a0
[ 321.124734][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 321.130726][ C1] run_timer_softirq+0x2d/0x50
[ 321.135605][ C1] ? timers_dead_cpu+0x9d0/0x9d0
[ 321.140538][ C1] __do_softirq+0x4a1/0x83a
[ 321.145055][ C1] do_softirq_own_stack+0x49/0x80
[ 321.150077][ C1]
[ 321.153029][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 321.158247][ C1] local_bh_enable+0x36/0x40
[ 321.162855][ C1] ip_finish_output2+0x20dc/0x25d0
[ 321.167961][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 321.174020][ C1] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 321.180038][ C1] __ip_finish_output+0xaf8/0xda0
[ 321.185102][ C1] ip_finish_output+0x2db/0x420
[ 321.189964][ C1] ip_output+0x541/0x610
[ 321.194214][ C1] ? ip_mc_finish_output+0x6d0/0x6d0
[ 321.199594][ C1] ? ip_finish_output+0x420/0x420
[ 321.204611][ C1] __ip_queue_xmit+0x1caf/0x21f0
[ 321.209547][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 321.215533][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 321.221627][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 321.227734][ C1] ip_queue_xmit+0xcc/0xf0
[ 321.232161][ C1] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 321.237834][ C1] __tcp_transmit_skb+0x409e/0x5c60
[ 321.243082][ C1] __tcp_send_ack+0x701/0x840
[ 321.247799][ C1] tcp_send_ack+0x68/0x90
[ 321.252133][ C1] tcp_cleanup_rbuf+0x764/0x800
[ 321.256994][ C1] tcp_recvmsg+0x334d/0x4ff0
[ 321.261638][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 321.267627][ C1] ? tcp_mmap+0x150/0x150
[ 321.271955][ C1] ? tcp_mmap+0x150/0x150
[ 321.276307][ C1] inet_recvmsg+0x237/0x7d0
[ 321.282192][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 321.286982][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0
[ 321.292970][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 321.297738][ C1] ? inet_sendpage+0x2c0/0x2c0
[ 321.302529][ C1] sock_read_iter+0x5be/0x660
[ 321.307225][ C1] ? kernel_sock_ip_overhead+0x340/0x340
[ 321.312944][ C1] __vfs_read+0xa67/0xc90
[ 321.317299][ C1] vfs_read+0x359/0x6f0
[ 321.321463][ C1] ksys_read+0x265/0x430
[ 321.325976][ C1] __se_sys_read+0x92/0xb0
[ 321.330406][ C1] __x64_sys_read+0x4a/0x70
[ 321.335086][ C1] do_syscall_64+0xbc/0xf0
[ 321.339534][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 321.345444][ C1] RIP: 0033:0x47fcb4
[ 321.349365][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 321.369317][ C1] RSP: 002b:000000c420363710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 321.377725][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4
[ 321.385793][ C1] RDX: 0000000000001000 RSI: 000000c420354000 RDI: 0000000000000003
[ 321.394225][ C1] RBP: 000000c420363760 R08: 0000000000000000 R09: 0000000000000000
[ 321.402528][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[ 321.410931][ C1] R13: 0000000000000010 R14: 0000000000000002 R15: ffffffffffffffff
[ 321.422115][ C1] Kernel Offset: disabled
[ 321.426470][ C1] Rebooting in 86400 seconds..