Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. 2019/08/17 04:55:11 fuzzer started 2019/08/17 04:55:16 dialing manager at 10.128.0.26:38533 2019/08/17 04:55:16 syscalls: 2376 2019/08/17 04:55:16 code coverage: enabled 2019/08/17 04:55:16 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/17 04:55:16 extra coverage: enabled 2019/08/17 04:55:16 setuid sandbox: enabled 2019/08/17 04:55:16 namespace sandbox: enabled 2019/08/17 04:55:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/17 04:55:16 fault injection: enabled 2019/08/17 04:55:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/17 04:55:16 net packet injection: enabled 2019/08/17 04:55:16 net device setup: enabled syzkaller login: [ 136.103018][ C1] ================================================================== [ 136.111188][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 136.118816][ C1] CPU: 1 PID: 11497 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #17 [ 136.126416][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.136446][ C1] Call Trace: [ 136.139711][ C1] [ 136.142547][ C1] dump_stack+0x191/0x1f0 [ 136.146857][ C1] kmsan_report+0x162/0x2d0 [ 136.151339][ C1] __msan_warning+0x75/0xe0 [ 136.155836][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 136.161107][ C1] ? __alloc_skb+0x215/0xa10 [ 136.165683][ C1] __alloc_skb+0x215/0xa10 [ 136.170084][ C1] aoecmd_cfg+0x205/0xa80 [ 136.174409][ C1] discover_timer+0x86/0xa0 [ 136.178891][ C1] call_timer_fn+0x232/0x530 [ 136.183456][ C1] ? skbfree+0x4a0/0x4a0 [ 136.187679][ C1] __run_timers+0xcdc/0x11a0 [ 136.192246][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 136.198287][ C1] ? skbfree+0x4a0/0x4a0 [ 136.202530][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 136.208487][ C1] run_timer_softirq+0x2d/0x50 [ 136.213240][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 136.218158][ C1] __do_softirq+0x4a1/0x83a [ 136.222645][ C1] irq_exit+0x230/0x280 [ 136.226780][ C1] exiting_irq+0xe/0x10 [ 136.230916][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 136.236265][ C1] apic_timer_interrupt+0x2e/0x40 [ 136.241263][ C1] [ 136.244180][ C1] RIP: 0010:virt_to_page_or_null+0x87/0x100 [ 136.250046][ C1] Code: 32 48 89 d6 48 c1 ee 22 4c 8b 0c f1 4d 85 c9 74 25 48 89 d6 48 c1 ee 1b 83 e6 7f 48 c1 e6 05 4c 89 c9 48 01 f1 74 12 4c 8b 01 <41> f6 c0 02 75 0c 31 c0 c3 31 c0 c3 31 c0 c3 31 c0 c3 41 f6 c0 08 [ 136.269624][ C1] RSP: 0018:ffff8880b126f568 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 136.278011][ C1] RAX: 000000000f612b40 RBX: ffffffff902c1000 RCX: ffff88812fffb020 [ 136.286045][ C1] RDX: 000000000f612b40 RSI: 0000000000000020 RDI: ffffffff8f612b40 [ 136.294023][ C1] RBP: ffff8880b126f5a0 R08: ffffea000000000f R09: ffff88812fffb000 [ 136.302014][ C1] R10: 0000000000000000 R11: ffffffff8182bd40 R12: 0000000000000001 [ 136.309960][ C1] R13: ffffffff8f612b40 R14: ffffffff8f612b40 R15: 0000000000000004 [ 136.317916][ C1] ? stack_trace_save+0x1b0/0x1b0 [ 136.322925][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 136.328888][ C1] __msan_metadata_ptr_for_load_4+0x10/0x20 [ 136.334761][ C1] is_bpf_text_address+0xe7/0x4b0 [ 136.339765][ C1] ? is_module_text_address+0x4b/0x2c0 [ 136.345226][ C1] __kernel_text_address+0x24f/0x350 [ 136.350492][ C1] unwind_get_return_address+0x8c/0x130 [ 136.356016][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 136.362058][ C1] arch_stack_walk+0x29a/0x3e0 [ 136.366799][ C1] ? stack_trace_save+0x1b0/0x1b0 [ 136.371809][ C1] stack_trace_save+0x11c/0x1b0 [ 136.376645][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 136.382338][ C1] ? kmsan_internal_chain_origin+0xcc/0x150 [ 136.388203][ C1] ? kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 136.394328][ C1] ? kmsan_memcpy_metadata+0xb/0x10 [ 136.399506][ C1] ? __msan_memcpy+0x56/0x70 [ 136.404069][ C1] ? sock_read_iter+0x47c/0x660 [ 136.408900][ C1] ? __vfs_read+0xa67/0xc90 [ 136.413386][ C1] ? vfs_read+0x359/0x6f0 [ 136.417692][ C1] ? ksys_read+0x265/0x430 [ 136.422084][ C1] ? __se_sys_read+0x92/0xb0 [ 136.426648][ C1] ? __x64_sys_read+0x4a/0x70 [ 136.431300][ C1] ? do_syscall_64+0xbc/0xf0 [ 136.435868][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 136.441930][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 136.447909][ C1] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 136.453875][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 136.458875][ C1] __msan_memcpy+0x56/0x70 [ 136.463270][ C1] sock_read_iter+0x47c/0x660 [ 136.467931][ C1] ? kernel_sock_ip_overhead+0x340/0x340 [ 136.473539][ C1] __vfs_read+0xa67/0xc90 [ 136.477858][ C1] vfs_read+0x359/0x6f0 [ 136.481999][ C1] ksys_read+0x265/0x430 [ 136.486223][ C1] __se_sys_read+0x92/0xb0 [ 136.490620][ C1] __x64_sys_read+0x4a/0x70 [ 136.495101][ C1] do_syscall_64+0xbc/0xf0 [ 136.499496][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 136.505361][ C1] RIP: 0033:0x47fcb4 [ 136.509233][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 136.528812][ C1] RSP: 002b:000000c4203b9760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.537197][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4 [ 136.545145][ C1] RDX: 0000000000001000 RSI: 000000c4202e0000 RDI: 0000000000000003 [ 136.553090][ C1] RBP: 000000c4203b97b0 R08: 0000000000000000 R09: 0000000000000000 [ 136.561037][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 136.568982][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff [ 136.576937][ C1] [ 136.579240][ C1] Uninit was stored to memory at: [ 136.584244][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 136.589934][ C1] __msan_chain_origin+0x6b/0xe0 [ 136.594845][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 136.599581][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 136.604841][ C1] __alloc_skb+0x215/0xa10 [ 136.609233][ C1] aoecmd_cfg+0x205/0xa80 [ 136.613537][ C1] discover_timer+0x86/0xa0 [ 136.618015][ C1] call_timer_fn+0x232/0x530 [ 136.622582][ C1] __run_timers+0xcdc/0x11a0 [ 136.627141][ C1] run_timer_softirq+0x2d/0x50 [ 136.631883][ C1] __do_softirq+0x4a1/0x83a [ 136.636361][ C1] irq_exit+0x230/0x280 [ 136.640496][ C1] exiting_irq+0xe/0x10 [ 136.644627][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 136.649979][ C1] apic_timer_interrupt+0x2e/0x40 [ 136.654975][ C1] virt_to_page_or_null+0x87/0x100 [ 136.660058][ C1] __msan_metadata_ptr_for_load_4+0x10/0x20 [ 136.665928][ C1] is_bpf_text_address+0xe7/0x4b0 [ 136.670927][ C1] __kernel_text_address+0x24f/0x350 [ 136.676189][ C1] unwind_get_return_address+0x8c/0x130 [ 136.681709][ C1] arch_stack_walk+0x29a/0x3e0 [ 136.686445][ C1] stack_trace_save+0x11c/0x1b0 [ 136.691267][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 136.696961][ C1] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 136.702914][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 136.707910][ C1] __msan_memcpy+0x56/0x70 [ 136.712324][ C1] sock_read_iter+0x47c/0x660 [ 136.716973][ C1] __vfs_read+0xa67/0xc90 [ 136.721273][ C1] vfs_read+0x359/0x6f0 [ 136.725405][ C1] ksys_read+0x265/0x430 [ 136.729622][ C1] __se_sys_read+0x92/0xb0 [ 136.734016][ C1] __x64_sys_read+0x4a/0x70 [ 136.738495][ C1] do_syscall_64+0xbc/0xf0 [ 136.742889][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 136.748750][ C1] [ 136.751071][ C1] Uninit was created at: [ 136.755307][ C1] kmsan_internal_poison_shadow+0x53/0xa0 [ 136.761027][ C1] kmsan_slab_free+0x8d/0x100 [ 136.765679][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 136.771024][ C1] __kfree_skb_flush+0xb0/0x100 [ 136.775870][ C1] net_rx_action+0x1908/0x1950 [ 136.780614][ C1] __do_softirq+0x4a1/0x83a [ 136.785092][ C1] irq_exit+0x230/0x280 [ 136.789221][ C1] do_IRQ+0x20d/0x3a0 [ 136.793182][ C1] ret_from_intr+0x0/0x33 [ 136.797506][ C1] kmsan_slab_alloc+0xd5/0x120 [ 136.802248][ C1] kmem_cache_alloc_node+0x8f8/0xe70 [ 136.807505][ C1] __alloc_skb+0x215/0xa10 [ 136.811899][ C1] __tcp_send_ack+0xfb/0x840 [ 136.816463][ C1] tcp_send_ack+0x68/0x90 [ 136.820769][ C1] tcp_cleanup_rbuf+0x764/0x800 [ 136.825678][ C1] tcp_recvmsg+0x334d/0x4ff0 [ 136.830244][ C1] inet_recvmsg+0x237/0x7d0 [ 136.834722][ C1] sock_read_iter+0x5be/0x660 [ 136.839372][ C1] __vfs_read+0xa67/0xc90 [ 136.843678][ C1] vfs_read+0x359/0x6f0 [ 136.847809][ C1] ksys_read+0x265/0x430 [ 136.852027][ C1] __se_sys_read+0x92/0xb0 [ 136.856503][ C1] __x64_sys_read+0x4a/0x70 [ 136.860979][ C1] do_syscall_64+0xbc/0xf0 [ 136.865370][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 136.871233][ C1] ================================================================== [ 136.879267][ C1] Disabling lock debugging due to kernel taint [ 136.885407][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 136.891974][ C1] CPU: 1 PID: 11497 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #17 [ 136.900964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.910995][ C1] Call Trace: [ 136.914258][ C1] [ 136.917094][ C1] dump_stack+0x191/0x1f0 [ 136.921420][ C1] panic+0x3c9/0xc1e [ 136.925308][ C1] kmsan_report+0x2ca/0x2d0 [ 136.929792][ C1] __msan_warning+0x75/0xe0 [ 136.935944][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 136.941207][ C1] ? __alloc_skb+0x215/0xa10 [ 136.945783][ C1] __alloc_skb+0x215/0xa10 [ 136.950185][ C1] aoecmd_cfg+0x205/0xa80 [ 136.954500][ C1] discover_timer+0x86/0xa0 [ 136.958982][ C1] call_timer_fn+0x232/0x530 [ 136.963548][ C1] ? skbfree+0x4a0/0x4a0 [ 136.967769][ C1] __run_timers+0xcdc/0x11a0 [ 136.972346][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 136.978392][ C1] ? skbfree+0x4a0/0x4a0 [ 136.982622][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 136.988579][ C1] run_timer_softirq+0x2d/0x50 [ 136.993321][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 136.998236][ C1] __do_softirq+0x4a1/0x83a [ 137.002721][ C1] irq_exit+0x230/0x280 [ 137.006856][ C1] exiting_irq+0xe/0x10 [ 137.010987][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 137.016340][ C1] apic_timer_interrupt+0x2e/0x40 [ 137.021338][ C1] [ 137.024257][ C1] RIP: 0010:virt_to_page_or_null+0x87/0x100 [ 137.030124][ C1] Code: 32 48 89 d6 48 c1 ee 22 4c 8b 0c f1 4d 85 c9 74 25 48 89 d6 48 c1 ee 1b 83 e6 7f 48 c1 e6 05 4c 89 c9 48 01 f1 74 12 4c 8b 01 <41> f6 c0 02 75 0c 31 c0 c3 31 c0 c3 31 c0 c3 31 c0 c3 41 f6 c0 08 [ 137.049706][ C1] RSP: 0018:ffff8880b126f568 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 137.058094][ C1] RAX: 000000000f612b40 RBX: ffffffff902c1000 RCX: ffff88812fffb020 [ 137.066041][ C1] RDX: 000000000f612b40 RSI: 0000000000000020 RDI: ffffffff8f612b40 [ 137.073990][ C1] RBP: ffff8880b126f5a0 R08: ffffea000000000f R09: ffff88812fffb000 [ 137.081938][ C1] R10: 0000000000000000 R11: ffffffff8182bd40 R12: 0000000000000001 [ 137.089888][ C1] R13: ffffffff8f612b40 R14: ffffffff8f612b40 R15: 0000000000000004 [ 137.097846][ C1] ? stack_trace_save+0x1b0/0x1b0 [ 137.102860][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 137.108819][ C1] __msan_metadata_ptr_for_load_4+0x10/0x20 [ 137.114700][ C1] is_bpf_text_address+0xe7/0x4b0 [ 137.119703][ C1] ? is_module_text_address+0x4b/0x2c0 [ 137.125141][ C1] __kernel_text_address+0x24f/0x350 [ 137.130407][ C1] unwind_get_return_address+0x8c/0x130 [ 137.135958][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 137.142002][ C1] arch_stack_walk+0x29a/0x3e0 [ 137.146742][ C1] ? stack_trace_save+0x1b0/0x1b0 [ 137.151758][ C1] stack_trace_save+0x11c/0x1b0 [ 137.156594][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 137.162289][ C1] ? kmsan_internal_chain_origin+0xcc/0x150 [ 137.168157][ C1] ? kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 137.174283][ C1] ? kmsan_memcpy_metadata+0xb/0x10 [ 137.179476][ C1] ? __msan_memcpy+0x56/0x70 [ 137.184144][ C1] ? sock_read_iter+0x47c/0x660 [ 137.188987][ C1] ? __vfs_read+0xa67/0xc90 [ 137.193469][ C1] ? vfs_read+0x359/0x6f0 [ 137.197858][ C1] ? ksys_read+0x265/0x430 [ 137.202247][ C1] ? __se_sys_read+0x92/0xb0 [ 137.206812][ C1] ? __x64_sys_read+0x4a/0x70 [ 137.211465][ C1] ? do_syscall_64+0xbc/0xf0 [ 137.216205][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 137.222265][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 137.228225][ C1] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 137.234188][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 137.239188][ C1] __msan_memcpy+0x56/0x70 [ 137.243584][ C1] sock_read_iter+0x47c/0x660 [ 137.248245][ C1] ? kernel_sock_ip_overhead+0x340/0x340 [ 137.253855][ C1] __vfs_read+0xa67/0xc90 [ 137.258183][ C1] vfs_read+0x359/0x6f0 [ 137.262323][ C1] ksys_read+0x265/0x430 [ 137.266547][ C1] __se_sys_read+0x92/0xb0 [ 137.270940][ C1] __x64_sys_read+0x4a/0x70 [ 137.275420][ C1] do_syscall_64+0xbc/0xf0 [ 137.279814][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 137.285681][ C1] RIP: 0033:0x47fcb4 [ 137.289555][ C1] Code: ff ff cc cc cc cc e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 137.309134][ C1] RSP: 002b:000000c4203b9760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.317519][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcb4 [ 137.325464][ C1] RDX: 0000000000001000 RSI: 000000c4202e0000 RDI: 0000000000000003 [ 137.333413][ C1] RBP: 000000c4203b97b0 R08: 0000000000000000 R09: 0000000000000000 [ 137.341360][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 137.349311][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffffffffffffffff [ 137.358498][ C1] Kernel Offset: disabled [ 137.362824][ C1] Rebooting in 86400 seconds..