Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts.
2019/10/09 06:49:11 fuzzer started
2019/10/09 06:49:15 dialing manager at 10.128.0.26:43589
2019/10/09 06:49:16 syscalls: 2412
2019/10/09 06:49:16 code coverage: enabled
2019/10/09 06:49:16 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/10/09 06:49:16 extra coverage: enabled
2019/10/09 06:49:16 setuid sandbox: enabled
2019/10/09 06:49:16 namespace sandbox: enabled
2019/10/09 06:49:16 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/09 06:49:16 fault injection: enabled
2019/10/09 06:49:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/09 06:49:16 net packet injection: enabled
2019/10/09 06:49:16 net device setup: enabled
2019/10/09 06:49:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
syzkaller login: [ 320.423393][ C0] =====================================================
[ 320.431032][ C0] BUG: KMSAN: use-after-free in __alloc_skb+0x215/0xa10
[ 320.438466][ C0] CPU: 0 PID: 12155 Comm: syz-fuzzer Not tainted 5.3.0-rc7+ #0
[ 320.446659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 320.456882][ C0] Call Trace:
[ 320.460156][ C0]
[ 320.463068][ C0] dump_stack+0x191/0x1f0
[ 320.467387][ C0] kmsan_report+0x17d/0x2f0
[ 320.471961][ C0] __msan_warning+0x73/0xe0
[ 320.476455][ C0] kmem_cache_alloc_node+0x5d0/0xe70
[ 320.481730][ C0] ? __alloc_skb+0x215/0xa10
[ 320.486306][ C0] __alloc_skb+0x215/0xa10
[ 320.490710][ C0] aoecmd_cfg+0x205/0xa80
[ 320.495195][ C0] discover_timer+0x86/0xa0
[ 320.499709][ C0] call_timer_fn+0x232/0x530
[ 320.504313][ C0] ? skbfree+0x4a0/0x4a0
[ 320.508565][ C0] __run_timers+0xcdc/0x11a0
[ 320.513151][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 320.519484][ C0] ? skbfree+0x4a0/0x4a0
[ 320.525682][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 320.531073][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 320.537921][ C0] run_timer_softirq+0x2d/0x50
[ 320.542665][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 320.547918][ C0] __do_softirq+0x4a1/0x83a
[ 320.552525][ C0] irq_exit+0x230/0x280
[ 320.556769][ C0] exiting_irq+0xe/0x10
[ 320.560970][ C0] smp_apic_timer_interrupt+0x48/0x70
[ 320.566354][ C0] apic_timer_interrupt+0x2e/0x40
[ 320.571480][ C0]
[ 320.574429][ C0] RIP: 0010:kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 320.580919][ C0] Code: 7d 85 c0 74 18 4c 89 e3 48 89 d8 4c 89 e2 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4c 89 f7 4c 89 fe 31 d2 e8 02 cf ff ff <84> c0 0f 84 45 04 00 00 48 b8 ff ff ff ff ff d0 ff ff 4d 89 f5 49
[ 320.601166][ C0] RSP: 0018:ffff8880b69bf620 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 320.609628][ C0] RAX: 0000000013a6a701 RBX: ffff8880b69bf808 RCX: ffff888113a69e40
[ 320.617771][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b69bf808
[ 320.625751][ C0] RBP: ffff8880b69bf650 R08: 0000000000000000 R09: 0000000000000000
[ 320.633840][ C0] R10: 0000000000000000 R11: ffffffff8182a660 R12: ffffffff902c1000
[ 320.641803][ C0] R13: ffff888113a6a7e0 R14: ffff8880b69bf808 R15: 0000000000000004
[ 320.649786][ C0] ? stack_trace_save+0x1b0/0x1b0
[ 320.654810][ C0] __msan_metadata_ptr_for_load_4+0x10/0x20
[ 320.660695][ C0] stack_trace_consume_entry+0x68/0x320
[ 320.666229][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 320.672107][ C0] ? stack_trace_save+0x11c/0x1b0
[ 320.677389][ C0] ? stack_trace_save+0x11c/0x1b0
[ 320.682394][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 320.688495][ C0] ? stack_trace_save+0x11c/0x1b0
[ 320.693515][ C0] arch_stack_walk+0x30f/0x3e0
[ 320.698287][ C0] ? stack_trace_save+0x1b0/0x1b0
[ 320.705504][ C0] ? stack_trace_save+0x11c/0x1b0
[ 320.710534][ C0] stack_trace_save+0x11c/0x1b0
[ 320.715397][ C0] kmsan_internal_chain_origin+0xde/0x190
[ 320.723914][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 320.732078][ C0] kmsan_memcpy_memmove_metadata+0x25b/0x2d0
[ 320.738301][ C0] kmsan_memcpy_metadata+0xb/0x10
[ 320.743339][ C0] __msan_memcpy+0x56/0x70
[ 320.748831][ C0] sock_read_iter+0x47c/0x660
[ 320.753636][ C0] ? kernel_sock_ip_overhead+0x340/0x340
[ 320.759444][ C0] __vfs_read+0xa67/0xc90
[ 320.763795][ C0] vfs_read+0x359/0x6f0
[ 320.771448][ C0] ksys_read+0x265/0x430
[ 320.776016][ C0] __se_sys_read+0x92/0xb0
[ 320.780552][ C0] __x64_sys_read+0x4a/0x70
[ 320.785410][ C0] do_syscall_64+0xbc/0xf0
[ 320.789892][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 320.795803][ C0] RIP: 0033:0x47fd44
[ 320.799867][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 320.819454][ C0] RSP: 002b:000000c420301760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 320.827847][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 320.835884][ C0] RDX: 0000000000001000 RSI: 000000c420356000 RDI: 0000000000000003
[ 320.843836][ C0] RBP: 000000c4203017b0 R08: 0000000000000000 R09: 0000000000000000
[ 320.851801][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 320.859757][ C0] R13: 0000000000000008 R14: 0000000000000004 R15: ffffffffffffffff
[ 320.867720][ C0]
[ 320.870035][ C0] Uninit was stored to memory at:
[ 320.875151][ C0] kmsan_internal_chain_origin+0xde/0x190
[ 320.880855][ C0] __msan_chain_origin+0x6b/0xe0
[ 320.885774][ C0] ___slab_alloc+0x1dbc/0x1fb0
[ 320.890529][ C0] kmem_cache_alloc_node+0x769/0xe70
[ 320.895798][ C0] __alloc_skb+0x215/0xa10
[ 320.900195][ C0] aoecmd_cfg+0x205/0xa80
[ 320.904529][ C0] discover_timer+0x86/0xa0
[ 320.909048][ C0] call_timer_fn+0x232/0x530
[ 320.913623][ C0] __run_timers+0xcdc/0x11a0
[ 320.918211][ C0] run_timer_softirq+0x2d/0x50
[ 320.923162][ C0] __do_softirq+0x4a1/0x83a
[ 320.927666][ C0] irq_exit+0x230/0x280
[ 320.931836][ C0] exiting_irq+0xe/0x10
[ 320.935997][ C0] smp_apic_timer_interrupt+0x48/0x70
[ 320.941351][ C0] apic_timer_interrupt+0x2e/0x40
[ 320.946585][ C0] kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 320.952312][ C0] __msan_metadata_ptr_for_load_4+0x10/0x20
[ 320.958268][ C0] stack_trace_consume_entry+0x68/0x320
[ 320.963809][ C0] arch_stack_walk+0x30f/0x3e0
[ 320.968572][ C0] stack_trace_save+0x11c/0x1b0
[ 320.973424][ C0] kmsan_internal_chain_origin+0xde/0x190
[ 320.979160][ C0] kmsan_memcpy_memmove_metadata+0x25b/0x2d0
[ 320.985139][ C0] kmsan_memcpy_metadata+0xb/0x10
[ 320.990144][ C0] __msan_memcpy+0x56/0x70
[ 320.994545][ C0] sock_read_iter+0x47c/0x660
[ 320.999202][ C0] __vfs_read+0xa67/0xc90
[ 321.004066][ C0] vfs_read+0x359/0x6f0
[ 321.008202][ C0] ksys_read+0x265/0x430
[ 321.012597][ C0] __se_sys_read+0x92/0xb0
[ 321.016991][ C0] __x64_sys_read+0x4a/0x70
[ 321.021478][ C0] do_syscall_64+0xbc/0xf0
[ 321.025875][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 321.032434][ C0]
[ 321.034741][ C0] Uninit was created at:
[ 321.038976][ C0] kmsan_internal_poison_shadow+0x60/0x120
[ 321.044760][ C0] kmsan_slab_free+0x8d/0x100
[ 321.049545][ C0] kmem_cache_free_bulk+0x3ad9/0x3f50
[ 321.054910][ C0] __kfree_skb_flush+0xb0/0x100
[ 321.059815][ C0] net_rx_action+0x1908/0x1950
[ 321.064561][ C0] __do_softirq+0x4a1/0x83a
[ 321.069069][ C0] irq_exit+0x230/0x280
[ 321.073214][ C0] do_IRQ+0x20d/0x3a0
[ 321.077177][ C0] ret_from_intr+0x0/0x33
[ 321.081492][ C0] __kmalloc_node_track_caller+0x6e2/0x1320
[ 321.087993][ C0] __alloc_skb+0x306/0xa10
[ 321.092470][ C0] __tcp_send_ack+0xfb/0x840
[ 321.097059][ C0] tcp_send_ack+0x68/0x90
[ 321.101373][ C0] tcp_cleanup_rbuf+0x764/0x800
[ 321.106219][ C0] tcp_recvmsg+0x334d/0x4ff0
[ 321.110810][ C0] inet_recvmsg+0x237/0x7d0
[ 321.115296][ C0] sock_read_iter+0x5be/0x660
[ 321.119955][ C0] __vfs_read+0xa67/0xc90
[ 321.124262][ C0] vfs_read+0x359/0x6f0
[ 321.128416][ C0] ksys_read+0x265/0x430
[ 321.132655][ C0] __se_sys_read+0x92/0xb0
[ 321.137050][ C0] __x64_sys_read+0x4a/0x70
[ 321.141554][ C0] do_syscall_64+0xbc/0xf0
[ 321.145972][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 321.151849][ C0] =====================================================
[ 321.159379][ C0] Disabling lock debugging due to kernel taint
[ 321.165529][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 321.172210][ C0] CPU: 0 PID: 12155 Comm: syz-fuzzer Tainted: G B 5.3.0-rc7+ #0
[ 321.181155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 321.191692][ C0] Call Trace:
[ 321.195051][ C0]
[ 321.197906][ C0] dump_stack+0x191/0x1f0
[ 321.202224][ C0] panic+0x3c9/0xc1e
[ 321.206117][ C0] kmsan_report+0x2e5/0x2f0
[ 321.210751][ C0] __msan_warning+0x73/0xe0
[ 321.215283][ C0] kmem_cache_alloc_node+0x5d0/0xe70
[ 321.220569][ C0] ? __alloc_skb+0x215/0xa10
[ 321.225165][ C0] __alloc_skb+0x215/0xa10
[ 321.229576][ C0] aoecmd_cfg+0x205/0xa80
[ 321.233919][ C0] discover_timer+0x86/0xa0
[ 321.238422][ C0] call_timer_fn+0x232/0x530
[ 321.243010][ C0] ? skbfree+0x4a0/0x4a0
[ 321.247237][ C0] __run_timers+0xcdc/0x11a0
[ 321.251811][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 321.257893][ C0] ? skbfree+0x4a0/0x4a0
[ 321.262134][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 321.267064][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 321.272942][ C0] run_timer_softirq+0x2d/0x50
[ 321.277859][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 321.282787][ C0] __do_softirq+0x4a1/0x83a
[ 321.287296][ C0] irq_exit+0x230/0x280
[ 321.291450][ C0] exiting_irq+0xe/0x10
[ 321.295590][ C0] smp_apic_timer_interrupt+0x48/0x70
[ 321.300950][ C0] apic_timer_interrupt+0x2e/0x40
[ 321.305949][ C0]
[ 321.309132][ C0] RIP: 0010:kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 321.315614][ C0] Code: 7d 85 c0 74 18 4c 89 e3 48 89 d8 4c 89 e2 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 4c 89 f7 4c 89 fe 31 d2 e8 02 cf ff ff <84> c0 0f 84 45 04 00 00 48 b8 ff ff ff ff ff d0 ff ff 4d 89 f5 49
[ 321.335217][ C0] RSP: 0018:ffff8880b69bf620 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 321.343610][ C0] RAX: 0000000013a6a701 RBX: ffff8880b69bf808 RCX: ffff888113a69e40
[ 321.351576][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b69bf808
[ 321.360402][ C0] RBP: ffff8880b69bf650 R08: 0000000000000000 R09: 0000000000000000
[ 321.368362][ C0] R10: 0000000000000000 R11: ffffffff8182a660 R12: ffffffff902c1000
[ 321.376324][ C0] R13: ffff888113a6a7e0 R14: ffff8880b69bf808 R15: 0000000000000004
[ 321.384293][ C0] ? stack_trace_save+0x1b0/0x1b0
[ 321.389308][ C0] __msan_metadata_ptr_for_load_4+0x10/0x20
[ 321.395207][ C0] stack_trace_consume_entry+0x68/0x320
[ 321.400733][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 321.406616][ C0] ? stack_trace_save+0x11c/0x1b0
[ 321.411634][ C0] ? stack_trace_save+0x11c/0x1b0
[ 321.416640][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 321.422688][ C0] ? stack_trace_save+0x11c/0x1b0
[ 321.427695][ C0] arch_stack_walk+0x30f/0x3e0
[ 321.432440][ C0] ? stack_trace_save+0x1b0/0x1b0
[ 321.437463][ C0] ? stack_trace_save+0x11c/0x1b0
[ 321.442470][ C0] stack_trace_save+0x11c/0x1b0
[ 321.447307][ C0] kmsan_internal_chain_origin+0xde/0x190
[ 321.453056][ C0] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0
[ 321.458970][ C0] kmsan_memcpy_memmove_metadata+0x25b/0x2d0
[ 321.464942][ C0] kmsan_memcpy_metadata+0xb/0x10
[ 321.469953][ C0] __msan_memcpy+0x56/0x70
[ 321.474361][ C0] sock_read_iter+0x47c/0x660
[ 321.479024][ C0] ? kernel_sock_ip_overhead+0x340/0x340
[ 321.484658][ C0] __vfs_read+0xa67/0xc90
[ 321.488982][ C0] vfs_read+0x359/0x6f0
[ 321.493220][ C0] ksys_read+0x265/0x430
[ 321.497480][ C0] __se_sys_read+0x92/0xb0
[ 321.501889][ C0] __x64_sys_read+0x4a/0x70
[ 321.506387][ C0] do_syscall_64+0xbc/0xf0
[ 321.510809][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 321.516704][ C0] RIP: 0033:0x47fd44
[ 321.520583][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 321.540203][ C0] RSP: 002b:000000c420301760 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 321.548617][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 321.556573][ C0] RDX: 0000000000001000 RSI: 000000c420356000 RDI: 0000000000000003
[ 321.564527][ C0] RBP: 000000c4203017b0 R08: 0000000000000000 R09: 0000000000000000
[ 321.572494][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 321.580444][ C0] R13: 0000000000000008 R14: 0000000000000004 R15: ffffffffffffffff
[ 321.589328][ C0] Kernel Offset: disabled
[ 321.593678][ C0] Rebooting in 86400 seconds..