[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.437372][ T32] audit: type=1800 audit(1569570559.485:25): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 72.460126][ T32] audit: type=1800 audit(1569570559.505:26): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 72.494981][ T32] audit: type=1800 audit(1569570559.535:27): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.176' (ECDSA) to the list of known hosts. 2019/09/27 07:49:32 fuzzer started 2019/09/27 07:49:37 dialing manager at 10.128.0.26:40417 2019/09/27 07:49:37 syscalls: 2382 2019/09/27 07:49:37 code coverage: enabled 2019/09/27 07:49:37 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/27 07:49:37 extra coverage: enabled 2019/09/27 07:49:37 setuid sandbox: enabled 2019/09/27 07:49:37 namespace sandbox: enabled 2019/09/27 07:49:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/27 07:49:37 fault injection: enabled 2019/09/27 07:49:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/27 07:49:37 net packet injection: enabled 2019/09/27 07:49:37 net device setup: enabled 07:52:11 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1ff, 0x100) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x309, r4) keyctl$read(0xb, r5, &(0x7f0000005340)=""/4096, 0xffffffffffffffc2) r6 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x309, r6) keyctl$read(0xb, r7, &(0x7f0000005340)=""/4096, 0xffffffffffffffc2) r8 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)='trusted.overlay.opaque\x00', r7) r9 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x309, r9) keyctl$read(0xb, r10, &(0x7f0000005340)=""/4096, 0xffffffffffffffc2) keyctl$dh_compute(0x17, &(0x7f0000000480)={r5, r8, r10}, &(0x7f00000004c0)=""/19, 0x13, &(0x7f00000005c0)={&(0x7f0000000500)={'michael_mic\x00'}, &(0x7f0000000540)="23877f992738b4058667f3a6fce7288c03b457871eac10006c11047b759e2d9b70eed68c4442cfb36b5706313376c0cc6fd26000ffa58c2b7b195a36c21a6656333188e796678ce104d01214b0ba42dbd3ddef180a16d31bb3c5ab3169271d7370b9841adbeda2841cad287d72e60060ff0e287333ae52", 0x77}) symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000280)='./file0/file0\x00') r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syzkaller login: [ 244.370154][T11016] IPVS: ftp: loaded support on port[0] = 21 [ 244.514394][T11016] chnl_net:caif_netlink_parms(): no params data found [ 244.568792][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.576129][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.584901][T11016] device bridge_slave_0 entered promiscuous mode [ 244.595715][T11016] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.603075][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.611817][T11016] device bridge_slave_1 entered promiscuous mode [ 244.643311][T11016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.655837][T11016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.688047][T11016] team0: Port device team_slave_0 added [ 244.697394][T11016] team0: Port device team_slave_1 added [ 244.886567][T11016] device hsr_slave_0 entered promiscuous mode [ 245.122758][T11016] device hsr_slave_1 entered promiscuous mode [ 245.401493][T11016] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.408773][T11016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.416541][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.423754][T11016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.499450][T11016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.519016][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.531338][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.542615][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.557121][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 245.575186][T11016] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.588470][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.598471][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.607494][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.614757][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.659217][T11016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.670367][T11016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.687823][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.697543][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.706559][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.713760][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.722291][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.732233][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.742223][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.752163][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.761763][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.771559][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.781114][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.790300][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.800046][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.809270][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.823884][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.832660][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.864681][T11016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.877115][T11016] ================================================================== [ 245.885462][T11016] BUG: KMSAN: uninit-value in kmem_cache_alloc+0x4ed/0xd10 [ 245.892665][T11016] CPU: 0 PID: 11016 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 245.900718][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.910787][T11016] Call Trace: [ 245.914206][T11016] dump_stack+0x191/0x1f0 [ 245.918554][T11016] kmsan_report+0x162/0x2d0 [ 245.923074][T11016] __msan_warning+0x75/0xe0 [ 245.927590][T11016] kmem_cache_alloc+0x4ed/0xd10 [ 245.932448][T11016] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 245.938422][T11016] ? skb_clone+0x326/0x5d0 [ 245.942855][T11016] skb_clone+0x326/0x5d0 [ 245.947162][T11016] netlink_deliver_tap+0x804/0xeb0 [ 245.952301][T11016] netlink_unicast+0x9bd/0x1050 [ 245.958056][T11016] netlink_ack+0x1101/0x1240 [ 245.962681][T11016] netlink_rcv_skb+0x316/0x620 [ 245.967516][T11016] ? rtnetlink_bind+0x120/0x120 [ 245.972392][T11016] rtnetlink_rcv+0x50/0x60 [ 245.976823][T11016] netlink_unicast+0xf6c/0x1050 [ 245.981694][T11016] netlink_sendmsg+0x110f/0x1330 [ 245.986650][T11016] ? netlink_getsockopt+0x1430/0x1430 [ 245.992069][T11016] __sys_sendto+0xc44/0xc70 [ 245.996599][T11016] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 246.002496][T11016] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 246.008641][T11016] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 246.014384][T11016] __se_sys_sendto+0x107/0x130 [ 246.019162][T11016] __x64_sys_sendto+0x6e/0x90 [ 246.023845][T11016] do_syscall_64+0xbc/0xf0 [ 246.028292][T11016] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 246.034180][T11016] RIP: 0033:0x413873 [ 246.038071][T11016] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 1d 2a 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 246.057680][T11016] RSP: 002b:0000000000a6fb18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 246.066092][T11016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000413873 [ 246.074060][T11016] RDX: 0000000000000038 RSI: 0000000000a70070 RDI: 0000000000000003 [ 246.082031][T11016] RBP: 0000000000000000 R08: 0000000000a6fb20 R09: 000000000000000c [ 246.090008][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 246.097977][T11016] R13: 0000000000000003 R14: 0000000000a6fbc8 R15: 0000000000000006 [ 246.105960][T11016] [ 246.108284][T11016] Uninit was stored to memory at: [ 246.113399][T11016] kmsan_internal_chain_origin+0xcc/0x150 [ 246.119116][T11016] __msan_chain_origin+0x6b/0xe0 [ 246.124049][T11016] ___slab_alloc+0x1dbc/0x1fb0 [ 246.128811][T11016] kmem_cache_alloc_node+0x769/0xe70 [ 246.134178][T11016] __alloc_skb+0x215/0xa10 [ 246.138588][T11016] netlink_ack+0x579/0x1240 [ 246.143088][T11016] netlink_rcv_skb+0x316/0x620 [ 246.147851][T11016] rtnetlink_rcv+0x50/0x60 [ 246.152299][T11016] netlink_unicast+0xf6c/0x1050 [ 246.157145][T11016] netlink_sendmsg+0x110f/0x1330 [ 246.162077][T11016] __sys_sendto+0xc44/0xc70 [ 246.166571][T11016] __se_sys_sendto+0x107/0x130 [ 246.171518][T11016] __x64_sys_sendto+0x6e/0x90 [ 246.176194][T11016] do_syscall_64+0xbc/0xf0 [ 246.180611][T11016] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 246.186505][T11016] [ 246.188825][T11016] Uninit was created at: [ 246.193063][T11016] kmsan_internal_poison_shadow+0x58/0xb0 [ 246.198780][T11016] kmsan_slab_free+0x8d/0x100 [ 246.203452][T11016] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 246.208823][T11016] __kfree_skb_flush+0xb0/0x100 [ 246.213696][T11016] net_rx_action+0x1908/0x1950 [ 246.218509][T11016] __do_softirq+0x4a1/0x83a [ 246.223066][T11016] irq_exit+0x230/0x280 [ 246.227212][T11016] do_IRQ+0x20d/0x3a0 [ 246.231185][T11016] ret_from_intr+0x0/0x33 [ 246.235500][T11016] ================================================================== [ 246.243549][T11016] Disabling lock debugging due to kernel taint [ 246.249695][T11016] Kernel panic - not syncing: panic_on_warn set ... [ 246.256543][T11016] CPU: 0 PID: 11016 Comm: syz-executor.0 Tainted: G B 5.3.0-rc7+ #0 [ 246.265811][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.275953][T11016] Call Trace: [ 246.279263][T11016] dump_stack+0x191/0x1f0 [ 246.283678][T11016] panic+0x3c9/0xc1e [ 246.287612][T11016] kmsan_report+0x2ca/0x2d0 [ 246.292136][T11016] __msan_warning+0x75/0xe0 [ 246.296661][T11016] kmem_cache_alloc+0x4ed/0xd10 [ 246.301513][T11016] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 246.307421][T11016] ? skb_clone+0x326/0x5d0 [ 246.313419][T11016] skb_clone+0x326/0x5d0 [ 246.317684][T11016] netlink_deliver_tap+0x804/0xeb0 [ 246.322823][T11016] netlink_unicast+0x9bd/0x1050 [ 246.327692][T11016] netlink_ack+0x1101/0x1240 [ 246.332310][T11016] netlink_rcv_skb+0x316/0x620 [ 246.337508][T11016] ? rtnetlink_bind+0x120/0x120 [ 246.342372][T11016] rtnetlink_rcv+0x50/0x60 [ 246.346792][T11016] netlink_unicast+0xf6c/0x1050 [ 246.351660][T11016] netlink_sendmsg+0x110f/0x1330 [ 246.356621][T11016] ? netlink_getsockopt+0x1430/0x1430 [ 246.361994][T11016] __sys_sendto+0xc44/0xc70 [ 246.366517][T11016] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 246.372418][T11016] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 246.378486][T11016] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 246.384210][T11016] __se_sys_sendto+0x107/0x130 [ 246.389000][T11016] __x64_sys_sendto+0x6e/0x90 [ 246.393678][T11016] do_syscall_64+0xbc/0xf0 [ 246.398105][T11016] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 246.404082][T11016] RIP: 0033:0x413873 [ 246.407995][T11016] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 1d 2a 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 246.427610][T11016] RSP: 002b:0000000000a6fb18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 246.436027][T11016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000413873 [ 246.444011][T11016] RDX: 0000000000000038 RSI: 0000000000a70070 RDI: 0000000000000003 [ 246.451979][T11016] RBP: 0000000000000000 R08: 0000000000a6fb20 R09: 000000000000000c [ 246.460037][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 246.468007][T11016] R13: 0000000000000003 R14: 0000000000a6fbc8 R15: 0000000000000006 [ 246.477566][T11016] Kernel Offset: disabled [ 246.481941][T11016] Rebooting in 86400 seconds..