Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. 2019/08/06 01:47:55 fuzzer started 2019/08/06 01:48:01 dialing manager at 10.128.0.26:46627 2019/08/06 01:48:02 syscalls: 2367 2019/08/06 01:48:02 code coverage: enabled 2019/08/06 01:48:02 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/06 01:48:02 extra coverage: enabled 2019/08/06 01:48:02 setuid sandbox: enabled 2019/08/06 01:48:02 namespace sandbox: enabled 2019/08/06 01:48:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/06 01:48:02 fault injection: enabled 2019/08/06 01:48:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/06 01:48:02 net packet injection: enabled 2019/08/06 01:48:02 net device setup: enabled syzkaller login: [ 258.972466][ C1] ================================================================== [ 258.980895][ C1] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 258.988552][ C1] CPU: 1 PID: 11521 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #16 [ 258.996220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.006279][ C1] Call Trace: [ 259.009559][ C1] [ 259.012496][ C1] dump_stack+0x191/0x1f0 [ 259.016834][ C1] kmsan_report+0x162/0x2d0 [ 259.021337][ C1] __msan_warning+0x75/0xe0 [ 259.025866][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.031255][ C1] ? __alloc_skb+0x215/0xa10 [ 259.035863][ C1] __alloc_skb+0x215/0xa10 [ 259.040388][ C1] aoecmd_cfg+0x205/0xa80 [ 259.044730][ C1] discover_timer+0x86/0xa0 [ 259.049302][ C1] call_timer_fn+0x232/0x530 [ 259.053889][ C1] ? skbfree+0x4a0/0x4a0 [ 259.058129][ C1] __run_timers+0xcdc/0x11a0 [ 259.062713][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.068777][ C1] ? skbfree+0x4a0/0x4a0 [ 259.073025][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.079018][ C1] run_timer_softirq+0x2d/0x50 [ 259.083772][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.088751][ C1] __do_softirq+0x4a1/0x83a [ 259.093281][ C1] irq_exit+0x230/0x280 [ 259.097469][ C1] exiting_irq+0xe/0x10 [ 259.101619][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 259.106985][ C1] apic_timer_interrupt+0x2e/0x40 [ 259.111990][ C1] [ 259.114912][ C1] RIP: 0033:0x411b33 [ 259.118800][ C1] Code: 80 74 6a 48 8b 08 48 89 4c 24 10 48 8b 4c 24 40 48 89 0c 24 48 8b 54 24 48 48 89 54 24 08 e8 f4 b5 04 00 0f b6 05 12 fa 3d 01 <84> c0 75 0a 48 8b 6c 24 28 48 83 c4 30 c3 48 8b 44 24 38 48 8b 08 [ 259.138395][ C1] RSP: 002b:000000c4257d9810 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 259.146836][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000c42a58a0f0 [ 259.154825][ C1] RDX: 000000c4257d98b8 RSI: 000000c4257d98b8 RDI: 000000c42a58a0f0 [ 259.162829][ C1] RBP: 000000c4257d9838 R08: 53f55377a0892064 R09: 000000c42a58a0f0 [ 259.171044][ C1] R10: 000000c42a58a10a R11: 00000000ffffffff R12: 000000c42a58a0e2 [ 259.179012][ C1] R13: 0000000000000020 R14: ffffffffffffffff R15: 0000000000000020 [ 259.186990][ C1] [ 259.189338][ C1] Uninit was stored to memory at: [ 259.194364][ C1] kmsan_internal_chain_origin+0xcc/0x150 [ 259.200076][ C1] __msan_chain_origin+0x6b/0xe0 [ 259.205008][ C1] ___slab_alloc+0x1dbc/0x1fb0 [ 259.209759][ C1] kmem_cache_alloc_node+0x769/0xe70 [ 259.215033][ C1] __alloc_skb+0x215/0xa10 [ 259.219456][ C1] aoecmd_cfg+0x205/0xa80 [ 259.223773][ C1] discover_timer+0x86/0xa0 [ 259.228264][ C1] call_timer_fn+0x232/0x530 [ 259.232840][ C1] __run_timers+0xcdc/0x11a0 [ 259.237420][ C1] run_timer_softirq+0x2d/0x50 [ 259.242180][ C1] __do_softirq+0x4a1/0x83a [ 259.246701][ C1] irq_exit+0x230/0x280 [ 259.250854][ C1] exiting_irq+0xe/0x10 [ 259.255021][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 259.260397][ C1] apic_timer_interrupt+0x2e/0x40 [ 259.265401][ C1] [ 259.267729][ C1] Uninit was created at: [ 259.271961][ C1] kmsan_internal_poison_shadow+0x53/0xa0 [ 259.277663][ C1] kmsan_slab_free+0x8d/0x100 [ 259.282333][ C1] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 259.287694][ C1] __kfree_skb_flush+0xb0/0x100 [ 259.292561][ C1] net_rx_action+0x1908/0x1950 [ 259.297312][ C1] __do_softirq+0x4a1/0x83a [ 259.301804][ C1] irq_exit+0x230/0x280 [ 259.305968][ C1] do_IRQ+0x20d/0x3a0 [ 259.309956][ C1] ret_from_intr+0x0/0x33 [ 259.314292][ C1] _raw_spin_unlock_irqrestore+0x4b/0x70 [ 259.319965][ C1] __wake_up_sync_key+0x24b/0x2c0 [ 259.324986][ C1] sock_def_readable+0x103/0x230 [ 259.329944][ C1] tcp_rcv_established+0x2f75/0x31f0 [ 259.335217][ C1] tcp_v4_do_rcv+0x684/0xd70 [ 259.339826][ C1] __release_sock+0x448/0x640 [ 259.344490][ C1] release_sock+0x99/0x2a0 [ 259.348889][ C1] tcp_recvmsg+0x335f/0x4ff0 [ 259.353489][ C1] inet_recvmsg+0x237/0x7d0 [ 259.357979][ C1] sock_read_iter+0x5be/0x660 [ 259.362700][ C1] __vfs_read+0xa67/0xc90 [ 259.367014][ C1] vfs_read+0x359/0x6f0 [ 259.371175][ C1] ksys_read+0x265/0x430 [ 259.375415][ C1] __se_sys_read+0x92/0xb0 [ 259.379830][ C1] __x64_sys_read+0x4a/0x70 [ 259.384352][ C1] do_syscall_64+0xbc/0xf0 [ 259.388775][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.394650][ C1] ================================================================== [ 259.402709][ C1] Disabling lock debugging due to kernel taint [ 259.408860][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 259.415455][ C1] CPU: 1 PID: 11521 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #16 [ 259.424456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.434504][ C1] Call Trace: [ 259.437781][ C1] [ 259.440651][ C1] dump_stack+0x191/0x1f0 [ 259.445035][ C1] panic+0x3c9/0xc1e [ 259.448957][ C1] kmsan_report+0x2ca/0x2d0 [ 259.453462][ C1] __msan_warning+0x75/0xe0 [ 259.457963][ C1] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.463245][ C1] ? __alloc_skb+0x215/0xa10 [ 259.467848][ C1] __alloc_skb+0x215/0xa10 [ 259.472281][ C1] aoecmd_cfg+0x205/0xa80 [ 259.476623][ C1] discover_timer+0x86/0xa0 [ 259.481119][ C1] call_timer_fn+0x232/0x530 [ 259.485712][ C1] ? skbfree+0x4a0/0x4a0 [ 259.489945][ C1] __run_timers+0xcdc/0x11a0 [ 259.494523][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.500575][ C1] ? skbfree+0x4a0/0x4a0 [ 259.504822][ C1] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.510790][ C1] run_timer_softirq+0x2d/0x50 [ 259.515556][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.520496][ C1] __do_softirq+0x4a1/0x83a [ 259.525013][ C1] irq_exit+0x230/0x280 [ 259.529163][ C1] exiting_irq+0xe/0x10 [ 259.533309][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 259.538675][ C1] apic_timer_interrupt+0x2e/0x40 [ 259.543680][ C1] [ 259.546607][ C1] RIP: 0033:0x411b33 [ 259.550487][ C1] Code: 80 74 6a 48 8b 08 48 89 4c 24 10 48 8b 4c 24 40 48 89 0c 24 48 8b 54 24 48 48 89 54 24 08 e8 f4 b5 04 00 0f b6 05 12 fa 3d 01 <84> c0 75 0a 48 8b 6c 24 28 48 83 c4 30 c3 48 8b 44 24 38 48 8b 08 [ 259.570079][ C1] RSP: 002b:000000c4257d9810 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 259.578570][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000c42a58a0f0 [ 259.586536][ C1] RDX: 000000c4257d98b8 RSI: 000000c4257d98b8 RDI: 000000c42a58a0f0 [ 259.594500][ C1] RBP: 000000c4257d9838 R08: 53f55377a0892064 R09: 000000c42a58a0f0 [ 259.602479][ C1] R10: 000000c42a58a10a R11: 00000000ffffffff R12: 000000c42a58a0e2 [ 259.610457][ C1] R13: 0000000000000020 R14: ffffffffffffffff R15: 0000000000000020 [ 259.619215][ C1] Kernel Offset: disabled [ 259.623566][ C1] Rebooting in 86400 seconds..