[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 82.761238][ T30] audit: type=1800 audit(1573850631.815:25): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 82.785441][ T30] audit: type=1800 audit(1573850631.845:26): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 82.810698][ T30] audit: type=1800 audit(1573850631.865:27): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.206' (ECDSA) to the list of known hosts.
2019/11/15 20:44:05 fuzzer started
2019/11/15 20:44:10 dialing manager at 10.128.0.26:43093
2019/11/15 20:44:10 syscalls: 2397
2019/11/15 20:44:10 code coverage: enabled
2019/11/15 20:44:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2019/11/15 20:44:10 extra coverage: enabled
2019/11/15 20:44:10 setuid sandbox: enabled
2019/11/15 20:44:10 namespace sandbox: enabled
2019/11/15 20:44:10 Android sandbox: /sys/fs/selinux/policy does not exist
2019/11/15 20:44:10 fault injection: enabled
2019/11/15 20:44:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/11/15 20:44:10 net packet injection: enabled
2019/11/15 20:44:10 net device setup: enabled
2019/11/15 20:44:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/11/15 20:44:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [ 136.083421][ C0] =====================================================
[ 136.090439][ C0] BUG: KMSAN: use-after-free in kmem_cache_alloc_node+0x5a9/0xe60
[ 136.098256][ C0] CPU: 0 PID: 11792 Comm: syz-fuzzer Not tainted 5.4.0-rc5+ #0
[ 136.105970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 136.116463][ C0] Call Trace:
[ 136.121578][ C0]
[ 136.124436][ C0] dump_stack+0x191/0x1f0
[ 136.129713][ C0] kmsan_report+0x128/0x220
[ 136.134302][ C0] __msan_warning+0x73/0xe0
[ 136.138792][ C0] kmem_cache_alloc_node+0x5a9/0xe60
[ 136.144191][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.150141][ C0] ? __alloc_skb+0x215/0xa10
[ 136.154831][ C0] __alloc_skb+0x215/0xa10
[ 136.159938][ C0] aoecmd_cfg+0x205/0xa80
[ 136.164349][ C0] discover_timer+0x86/0xa0
[ 136.168956][ C0] call_timer_fn+0x232/0x530
[ 136.173528][ C0] ? skbfree+0x4a0/0x4a0
[ 136.177761][ C0] __run_timers+0xd60/0x1270
[ 136.182513][ C0] ? skbfree+0x4a0/0x4a0
[ 136.186744][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.192631][ C0] run_timer_softirq+0x2d/0x50
[ 136.197371][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 136.202438][ C0] __do_softirq+0x4a1/0x83a
[ 136.206950][ C0] do_softirq_own_stack+0x49/0x80
[ 136.212045][ C0]
[ 136.214989][ C0] __local_bh_enable_ip+0x184/0x1d0
[ 136.220188][ C0] local_bh_enable+0x36/0x40
[ 136.224853][ C0] ip_finish_output2+0x20ec/0x25d0
[ 136.229959][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 136.236288][ C0] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 136.242452][ C0] __ip_finish_output+0xaf8/0xda0
[ 136.247608][ C0] ip_finish_output+0x2db/0x420
[ 136.252458][ C0] ip_output+0x541/0x610
[ 136.256705][ C0] ? ip_mc_finish_output+0x6d0/0x6d0
[ 136.261974][ C0] ? ip_finish_output+0x420/0x420
[ 136.267100][ C0] __ip_queue_xmit+0x1caf/0x21f0
[ 136.272042][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.277931][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 136.284812][ C0] ip_queue_xmit+0xcc/0xf0
[ 136.289314][ C0] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 136.294934][ C0] __tcp_transmit_skb+0x40e3/0x5d90
[ 136.300150][ C0] __tcp_send_ack+0x701/0x840
[ 136.305008][ C0] tcp_send_ack+0x68/0x90
[ 136.309323][ C0] tcp_cleanup_rbuf+0x764/0x800
[ 136.314349][ C0] tcp_recvmsg+0x334d/0x4ff0
[ 136.319136][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.325021][ C0] ? tcp_mmap+0x150/0x150
[ 136.329852][ C0] ? tcp_mmap+0x150/0x150
[ 136.334161][ C0] inet_recvmsg+0x237/0x7d0
[ 136.338646][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 136.343394][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.349738][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 136.354492][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 136.359243][ C0] sock_read_iter+0x5be/0x660
[ 136.363919][ C0] ? kernel_sock_ip_overhead+0x340/0x340
[ 136.369536][ C0] __vfs_read+0xa67/0xc90
[ 136.374206][ C0] vfs_read+0x359/0x6f0
[ 136.378349][ C0] ksys_read+0x265/0x430
[ 136.382587][ C0] __se_sys_read+0x92/0xb0
[ 136.386989][ C0] __x64_sys_read+0x4a/0x70
[ 136.391704][ C0] do_syscall_64+0xb6/0x160
[ 136.396390][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 136.402271][ C0] RIP: 0033:0x47fd44
[ 136.406152][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 136.427087][ C0] RSP: 002b:000000c4203a7710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 136.435482][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 136.443808][ C0] RDX: 0000000000001000 RSI: 000000c4203b4000 RDI: 0000000000000003
[ 136.452092][ C0] RBP: 000000c4203a7760 R08: 0000000000000000 R09: 0000000000000000
[ 136.460643][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 136.468795][ C0] R13: 0000000000000004 R14: 0000000000000020 R15: ffffffffffffffff
[ 136.477669][ C0]
[ 136.479979][ C0] Uninit was stored to memory at:
[ 136.485253][ C0] kmsan_internal_chain_origin+0xbd/0x180
[ 136.491342][ C0] __msan_chain_origin+0x6b/0xd0
[ 136.496295][ C0] ___slab_alloc+0x1dbc/0x1fb0
[ 136.501134][ C0] kmem_cache_alloc_node+0xaf4/0xe60
[ 136.506406][ C0] __alloc_skb+0x215/0xa10
[ 136.510898][ C0] aoecmd_cfg+0x205/0xa80
[ 136.515202][ C0] discover_timer+0x86/0xa0
[ 136.519769][ C0] call_timer_fn+0x232/0x530
[ 136.524429][ C0] __run_timers+0xd60/0x1270
[ 136.528993][ C0] run_timer_softirq+0x2d/0x50
[ 136.533734][ C0] __do_softirq+0x4a1/0x83a
[ 136.538229][ C0] do_softirq_own_stack+0x49/0x80
[ 136.543289][ C0] __local_bh_enable_ip+0x184/0x1d0
[ 136.549125][ C0] local_bh_enable+0x36/0x40
[ 136.553846][ C0] ip_finish_output2+0x20ec/0x25d0
[ 136.559051][ C0] __ip_finish_output+0xaf8/0xda0
[ 136.564334][ C0] ip_finish_output+0x2db/0x420
[ 136.569457][ C0] ip_output+0x541/0x610
[ 136.573862][ C0] __ip_queue_xmit+0x1caf/0x21f0
[ 136.578880][ C0] ip_queue_xmit+0xcc/0xf0
[ 136.583747][ C0] __tcp_transmit_skb+0x40e3/0x5d90
[ 136.588928][ C0] __tcp_send_ack+0x701/0x840
[ 136.593766][ C0] tcp_send_ack+0x68/0x90
[ 136.598078][ C0] tcp_cleanup_rbuf+0x764/0x800
[ 136.602907][ C0] tcp_recvmsg+0x334d/0x4ff0
[ 136.607486][ C0] inet_recvmsg+0x237/0x7d0
[ 136.611988][ C0] sock_read_iter+0x5be/0x660
[ 136.616655][ C0] __vfs_read+0xa67/0xc90
[ 136.620964][ C0] vfs_read+0x359/0x6f0
[ 136.630241][ C0] ksys_read+0x265/0x430
[ 136.634470][ C0] __se_sys_read+0x92/0xb0
[ 136.638889][ C0] __x64_sys_read+0x4a/0x70
[ 136.643471][ C0] do_syscall_64+0xb6/0x160
[ 136.648247][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 136.654121][ C0]
[ 136.656432][ C0] Uninit was created at:
[ 136.660835][ C0] kmsan_internal_poison_shadow+0x60/0x120
[ 136.666646][ C0] kmsan_slab_free+0x8d/0xf0
[ 136.671233][ C0] kmem_cache_free_bulk+0x3ad9/0x3f10
[ 136.676588][ C0] __kfree_skb_flush+0xb0/0x100
[ 136.681519][ C0] net_rx_action+0x1a5e/0x1aa0
[ 136.686285][ C0] __do_softirq+0x4a1/0x83a
[ 136.690770][ C0] irq_exit+0x230/0x280
[ 136.694901][ C0] do_IRQ+0x123/0x360
[ 136.698859][ C0] ret_from_intr+0x0/0x33
[ 136.703163][ C0] default_idle+0x53/0x90
[ 136.707482][ C0] arch_cpu_idle+0x25/0x30
[ 136.711970][ C0] do_idle+0x1d5/0x780
[ 136.716025][ C0] cpu_startup_entry+0x45/0x50
[ 136.720835][ C0] rest_init+0x1be/0x1f0
[ 136.725170][ C0] arch_call_rest_init+0x13/0x15
[ 136.730097][ C0] start_kernel+0x987/0xb57
[ 136.734596][ C0] x86_64_start_reservations+0x18/0x2e
[ 136.740050][ C0] x86_64_start_kernel+0x81/0x84
[ 136.745090][ C0] secondary_startup_64+0xa4/0xb0
[ 136.750093][ C0] =====================================================
[ 136.757023][ C0] Disabling lock debugging due to kernel taint
[ 136.763278][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 136.770267][ C0] CPU: 0 PID: 11792 Comm: syz-fuzzer Tainted: G B 5.4.0-rc5+ #0
[ 136.779441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 136.789564][ C0] Call Trace:
[ 136.793529][ C0]
[ 136.796369][ C0] dump_stack+0x191/0x1f0
[ 136.800689][ C0] panic+0x3c9/0xc1e
[ 136.804681][ C0] kmsan_report+0x215/0x220
[ 136.809384][ C0] __msan_warning+0x73/0xe0
[ 136.813867][ C0] kmem_cache_alloc_node+0x5a9/0xe60
[ 136.819142][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.825177][ C0] ? __alloc_skb+0x215/0xa10
[ 136.829860][ C0] __alloc_skb+0x215/0xa10
[ 136.834304][ C0] aoecmd_cfg+0x205/0xa80
[ 136.838796][ C0] discover_timer+0x86/0xa0
[ 136.843298][ C0] call_timer_fn+0x232/0x530
[ 136.848498][ C0] ? skbfree+0x4a0/0x4a0
[ 136.852888][ C0] __run_timers+0xd60/0x1270
[ 136.857569][ C0] ? skbfree+0x4a0/0x4a0
[ 136.861971][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.867965][ C0] run_timer_softirq+0x2d/0x50
[ 136.872867][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 136.877802][ C0] __do_softirq+0x4a1/0x83a
[ 136.882387][ C0] do_softirq_own_stack+0x49/0x80
[ 136.887498][ C0]
[ 136.890679][ C0] __local_bh_enable_ip+0x184/0x1d0
[ 136.895984][ C0] local_bh_enable+0x36/0x40
[ 136.900556][ C0] ip_finish_output2+0x20ec/0x25d0
[ 136.905841][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 136.911892][ C0] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 136.917861][ C0] __ip_finish_output+0xaf8/0xda0
[ 136.922882][ C0] ip_finish_output+0x2db/0x420
[ 136.927730][ C0] ip_output+0x541/0x610
[ 136.931958][ C0] ? ip_mc_finish_output+0x6d0/0x6d0
[ 136.937889][ C0] ? ip_finish_output+0x420/0x420
[ 136.942936][ C0] __ip_queue_xmit+0x1caf/0x21f0
[ 136.947880][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.953755][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 136.959815][ C0] ip_queue_xmit+0xcc/0xf0
[ 136.964249][ C0] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 136.969988][ C0] __tcp_transmit_skb+0x40e3/0x5d90
[ 136.975417][ C0] __tcp_send_ack+0x701/0x840
[ 136.980092][ C0] tcp_send_ack+0x68/0x90
[ 136.984409][ C0] tcp_cleanup_rbuf+0x764/0x800
[ 136.989269][ C0] tcp_recvmsg+0x334d/0x4ff0
[ 136.993876][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 136.999750][ C0] ? tcp_mmap+0x150/0x150
[ 137.004068][ C0] ? tcp_mmap+0x150/0x150
[ 137.008391][ C0] inet_recvmsg+0x237/0x7d0
[ 137.012883][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 137.017678][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 137.023609][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 137.028362][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 137.033139][ C0] sock_read_iter+0x5be/0x660
[ 137.037831][ C0] ? kernel_sock_ip_overhead+0x340/0x340
[ 137.043538][ C0] __vfs_read+0xa67/0xc90
[ 137.047879][ C0] vfs_read+0x359/0x6f0
[ 137.052125][ C0] ksys_read+0x265/0x430
[ 137.056353][ C0] __se_sys_read+0x92/0xb0
[ 137.060769][ C0] __x64_sys_read+0x4a/0x70
[ 137.065250][ C0] do_syscall_64+0xb6/0x160
[ 137.069731][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 137.075603][ C0] RIP: 0033:0x47fd44
[ 137.079475][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 137.099432][ C0] RSP: 002b:000000c4203a7710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 137.108050][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 137.116019][ C0] RDX: 0000000000001000 RSI: 000000c4203b4000 RDI: 0000000000000003
[ 137.123980][ C0] RBP: 000000c4203a7760 R08: 0000000000000000 R09: 0000000000000000
[ 137.132433][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 137.140432][ C0] R13: 0000000000000004 R14: 0000000000000020 R15: ffffffffffffffff
[ 137.148862][ C0] ------------[ cut here ]------------
[ 137.154508][ C0] kernel BUG at mm/kmsan/kmsan.c:470!
[ 137.159883][ C0] invalid opcode: 0000 [#1] SMP
[ 137.164719][ C0] CPU: 0 PID: 11792 Comm: syz-fuzzer Tainted: G B 5.4.0-rc5+ #0
[ 137.173648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 137.183707][ C0] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0
[ 137.190448][ C0] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a
[ 137.210043][ C0] RSP: 0018:ffff88812fc11730 EFLAGS: 00010046
[ 137.216092][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000004f70001
[ 137.224060][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812fc1180c
[ 137.232032][ C0] RBP: ffff88812fc117d8 R08: 0000000000000000 R09: ffff88812fc41910
[ 137.240002][ C0] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001
[ 137.247975][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000004f70001
[ 137.255945][ C0] FS: 000000c4200298e8(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000
[ 137.264867][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 137.271524][ C0] CR2: 000000c424173000 CR3: 00000000b884a000 CR4: 00000000001406f0
[ 137.279721][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 137.287683][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 137.295807][ C0] Call Trace:
[ 137.299070][ C0]
[ 137.301931][ C0] kmsan_check_memory+0xd/0x10
[ 137.306682][ C0] iowrite8+0x99/0x2e0
[ 137.310735][ C0] ? pvpanic_mmio_remove+0x60/0x60
[ 137.315825][ C0] pvpanic_panic_notify+0x46/0x70
[ 137.320921][ C0] atomic_notifier_call_chain+0x13d/0x240
[ 137.326859][ C0] panic+0x45a/0xc1e
[ 137.330912][ C0] kmsan_report+0x215/0x220
[ 137.335564][ C0] __msan_warning+0x73/0xe0
[ 137.340220][ C0] kmem_cache_alloc_node+0x5a9/0xe60
[ 137.345697][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 137.351690][ C0] ? __alloc_skb+0x215/0xa10
[ 137.356290][ C0] __alloc_skb+0x215/0xa10
[ 137.360725][ C0] aoecmd_cfg+0x205/0xa80
[ 137.365318][ C0] discover_timer+0x86/0xa0
[ 137.369825][ C0] call_timer_fn+0x232/0x530
[ 137.374413][ C0] ? skbfree+0x4a0/0x4a0
[ 137.378810][ C0] __run_timers+0xd60/0x1270
[ 137.383405][ C0] ? skbfree+0x4a0/0x4a0
[ 137.387701][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 137.393581][ C0] run_timer_softirq+0x2d/0x50
[ 137.398324][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 137.403268][ C0] __do_softirq+0x4a1/0x83a
[ 137.407765][ C0] do_softirq_own_stack+0x49/0x80
[ 137.412777][ C0]
[ 137.415750][ C0] __local_bh_enable_ip+0x184/0x1d0
[ 137.420953][ C0] local_bh_enable+0x36/0x40
[ 137.425552][ C0] ip_finish_output2+0x20ec/0x25d0
[ 137.430841][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 137.437067][ C0] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 137.443062][ C0] __ip_finish_output+0xaf8/0xda0
[ 137.448254][ C0] ip_finish_output+0x2db/0x420
[ 137.453111][ C0] ip_output+0x541/0x610
[ 137.457386][ C0] ? ip_mc_finish_output+0x6d0/0x6d0
[ 137.462688][ C0] ? ip_finish_output+0x420/0x420
[ 137.467701][ C0] __ip_queue_xmit+0x1caf/0x21f0
[ 137.472797][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 137.478770][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 137.484850][ C0] ip_queue_xmit+0xcc/0xf0
[ 137.489264][ C0] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 137.495021][ C0] __tcp_transmit_skb+0x40e3/0x5d90
[ 137.500226][ C0] __tcp_send_ack+0x701/0x840
[ 137.504901][ C0] tcp_send_ack+0x68/0x90
[ 137.509301][ C0] tcp_cleanup_rbuf+0x764/0x800
[ 137.514137][ C0] tcp_recvmsg+0x334d/0x4ff0
[ 137.518731][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 137.524642][ C0] ? tcp_mmap+0x150/0x150
[ 137.528984][ C0] ? tcp_mmap+0x150/0x150
[ 137.533297][ C0] inet_recvmsg+0x237/0x7d0
[ 137.537794][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 137.542764][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 137.548920][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 137.553761][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 137.558518][ C0] sock_read_iter+0x5be/0x660
[ 137.563197][ C0] ? kernel_sock_ip_overhead+0x340/0x340
[ 137.571333][ C0] __vfs_read+0xa67/0xc90
[ 137.575661][ C0] vfs_read+0x359/0x6f0
[ 137.579823][ C0] ksys_read+0x265/0x430
[ 137.584056][ C0] __se_sys_read+0x92/0xb0
[ 137.588608][ C0] __x64_sys_read+0x4a/0x70
[ 137.593102][ C0] do_syscall_64+0xb6/0x160
[ 137.597702][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 137.603581][ C0] RIP: 0033:0x47fd44
[ 137.607486][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 137.627436][ C0] RSP: 002b:000000c4203a7710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 137.636128][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 137.644092][ C0] RDX: 0000000000001000 RSI: 000000c4203b4000 RDI: 0000000000000003
[ 137.652043][ C0] RBP: 000000c4203a7760 R08: 0000000000000000 R09: 0000000000000000
[ 137.659993][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 137.667961][ C0] R13: 0000000000000004 R14: 0000000000000020 R15: ffffffffffffffff
[ 137.676103][ C0] Modules linked in:
[ 137.680010][ C0] ---[ end trace f6711648e52fa66a ]---
[ 137.686152][ C0] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0
[ 137.692725][ C0] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a
[ 137.712319][ C0] RSP: 0018:ffff88812fc11730 EFLAGS: 00010046
[ 137.718733][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000004f70001
[ 137.726796][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812fc1180c
[ 137.734767][ C0] RBP: ffff88812fc117d8 R08: 0000000000000000 R09: ffff88812fc41910
[ 137.742952][ C0] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001
[ 137.750911][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000004f70001
[ 137.758869][ C0] FS: 000000c4200298e8(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000
[ 137.768227][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 137.774874][ C0] CR2: 000000c424173000 CR3: 00000000b884a000 CR4: 00000000001406f0
[ 137.783054][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 137.791652][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 137.800236][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 137.807621][ C0] ------------[ cut here ]------------
[ 137.813276][ C0] kernel BUG at mm/kmsan/kmsan.c:470!
[ 137.818658][ C0] invalid opcode: 0000 [#2] SMP
[ 137.823622][ C0] CPU: 0 PID: 11792 Comm: syz-fuzzer Tainted: G B D 5.4.0-rc5+ #0
[ 137.832566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 137.842661][ C0] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0
[ 137.849232][ C0] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a
[ 137.868980][ C0] RSP: 0018:ffff88812fc11220 EFLAGS: 00010002
[ 137.875049][ C0] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000006ad01cb
[ 137.883002][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812fc112fc
[ 137.891417][ C0] RBP: ffff88812fc112c8 R08: 0000000000000000 R09: ffff88812fc41910
[ 137.899449][ C0] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001
[ 137.907427][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000006ad01cb
[ 137.915401][ C0] FS: 000000c4200298e8(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000
[ 137.924795][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 137.931525][ C0] CR2: 000000c424173000 CR3: 00000000b884a000 CR4: 00000000001406f0
[ 137.939496][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 137.947592][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 137.955549][ C0] Call Trace:
[ 137.958812][ C0]
[ 137.961835][ C0] kmsan_check_memory+0xd/0x10
[ 137.966593][ C0] iowrite8+0x99/0x2e0
[ 137.970672][ C0] ? pvpanic_mmio_remove+0x60/0x60
[ 137.975761][ C0] pvpanic_panic_notify+0x46/0x70
[ 137.980819][ C0] atomic_notifier_call_chain+0x13d/0x240
[ 137.986602][ C0] panic+0x45a/0xc1e
[ 137.990561][ C0] oops_end+0x2a5/0x2d0
[ 137.994812][ C0] die+0x124/0x140
[ 137.998558][ C0] do_invalid_op+0x612/0x8a0
[ 138.003309][ C0] ? kmsan_internal_check_memory+0x477/0x4a0
[ 138.009553][ C0] invalid_op+0x3d/0x50
[ 138.013711][ C0] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0
[ 138.020294][ C0] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a
[ 138.040601][ C0] RSP: 0018:ffff88812fc11730 EFLAGS: 00010046
[ 138.046654][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000004f70001
[ 138.054715][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812fc1180c
[ 138.062675][ C0] RBP: ffff88812fc117d8 R08: 0000000000000000 R09: ffff88812fc41910
[ 138.071249][ C0] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001
[ 138.079640][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000004f70001
[ 138.087619][ C0] ? pvpanic_mmio_remove+0x60/0x60
[ 138.092734][ C0] kmsan_check_memory+0xd/0x10
[ 138.097505][ C0] iowrite8+0x99/0x2e0
[ 138.101617][ C0] ? pvpanic_mmio_remove+0x60/0x60
[ 138.106715][ C0] pvpanic_panic_notify+0x46/0x70
[ 138.111754][ C0] atomic_notifier_call_chain+0x13d/0x240
[ 138.117474][ C0] panic+0x45a/0xc1e
[ 138.121483][ C0] kmsan_report+0x215/0x220
[ 138.125972][ C0] __msan_warning+0x73/0xe0
[ 138.130457][ C0] kmem_cache_alloc_node+0x5a9/0xe60
[ 138.135724][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 138.141595][ C0] ? __alloc_skb+0x215/0xa10
[ 138.146173][ C0] __alloc_skb+0x215/0xa10
[ 138.150599][ C0] aoecmd_cfg+0x205/0xa80
[ 138.155006][ C0] discover_timer+0x86/0xa0
[ 138.159514][ C0] call_timer_fn+0x232/0x530
[ 138.164099][ C0] ? skbfree+0x4a0/0x4a0
[ 138.168608][ C0] __run_timers+0xd60/0x1270
[ 138.173204][ C0] ? skbfree+0x4a0/0x4a0
[ 138.177452][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 138.183334][ C0] run_timer_softirq+0x2d/0x50
[ 138.188117][ C0] ? timers_dead_cpu+0x9d0/0x9d0
[ 138.193053][ C0] __do_softirq+0x4a1/0x83a
[ 138.197805][ C0] do_softirq_own_stack+0x49/0x80
[ 138.202829][ C0]
[ 138.205852][ C0] __local_bh_enable_ip+0x184/0x1d0
[ 138.211128][ C0] local_bh_enable+0x36/0x40
[ 138.215729][ C0] ip_finish_output2+0x20ec/0x25d0
[ 138.221003][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20
[ 138.227073][ C0] ? nf_ct_deliver_cached_events+0x4d5/0x6e0
[ 138.233077][ C0] __ip_finish_output+0xaf8/0xda0
[ 138.238120][ C0] ip_finish_output+0x2db/0x420
[ 138.242966][ C0] ip_output+0x541/0x610
[ 138.247201][ C0] ? ip_mc_finish_output+0x6d0/0x6d0
[ 138.252491][ C0] ? ip_finish_output+0x420/0x420
[ 138.257519][ C0] __ip_queue_xmit+0x1caf/0x21f0
[ 138.262491][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 138.268384][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20
[ 138.274660][ C0] ip_queue_xmit+0xcc/0xf0
[ 138.279067][ C0] ? tcp_v4_inbound_md5_hash+0xd10/0xd10
[ 138.284978][ C0] __tcp_transmit_skb+0x40e3/0x5d90
[ 138.290194][ C0] __tcp_send_ack+0x701/0x840
[ 138.295080][ C0] tcp_send_ack+0x68/0x90
[ 138.299496][ C0] tcp_cleanup_rbuf+0x764/0x800
[ 138.304343][ C0] tcp_recvmsg+0x334d/0x4ff0
[ 138.308943][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 138.314925][ C0] ? tcp_mmap+0x150/0x150
[ 138.319264][ C0] ? tcp_mmap+0x150/0x150
[ 138.323594][ C0] inet_recvmsg+0x237/0x7d0
[ 138.328229][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 138.332990][ C0] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 138.338885][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 138.343656][ C0] ? inet_sendpage+0x2c0/0x2c0
[ 138.348413][ C0] sock_read_iter+0x5be/0x660
[ 138.353096][ C0] ? kernel_sock_ip_overhead+0x340/0x340
[ 138.358713][ C0] __vfs_read+0xa67/0xc90
[ 138.363043][ C0] vfs_read+0x359/0x6f0
[ 138.367279][ C0] ksys_read+0x265/0x430
[ 138.371525][ C0] __se_sys_read+0x92/0xb0
[ 138.375937][ C0] __x64_sys_read+0x4a/0x70
[ 138.380427][ C0] do_syscall_64+0xb6/0x160
[ 138.385128][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 138.391022][ C0] RIP: 0033:0x47fd44
[ 138.394911][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 138.414678][ C0] RSP: 002b:000000c4203a7710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 138.424132][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44
[ 138.432190][ C0] RDX: 0000000000001000 RSI: 000000c4203b4000 RDI: 0000000000000003
[ 138.440154][ C0] RBP: 000000c4203a7760 R08: 0000000000000000 R09: 0000000000000000
[ 138.448141][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 138.456544][ C0] R13: 0000000000000004 R14: 0000000000000020 R15: ffffffffffffffff
[ 138.464547][ C0] Modules linked in:
[ 138.468444][ C0] ---[ end trace f6711648e52fa66b ]---
[ 138.474071][ C0] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0
[ 138.480645][ C0] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a
[ 138.500353][ C0] RSP: 0018:ffff88812fc11730 EFLAGS: 00010046
[ 138.506721][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000004f70001
[ 138.514693][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812fc1180c
[ 138.523181][ C0] RBP: ffff88812fc117d8 R08: 0000000000000000 R09: ffff88812fc41910
[ 138.531284][ C0] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001
[ 138.539651][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000004f70001
[ 138.547613][ C0] FS: 000000c4200298e8(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000
[ 138.556627][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 138.563197][ C0] CR2: 000000c424173000 CR3: 00000000b884a000 CR4: 00000000001406f0
[ 138.571164][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 138.579114][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 138.587079][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 138.594980][ C0] Kernel Offset: disabled
[ 138.599351][ C0] Rebooting in 86400 seconds..