Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. 2019/10/04 00:46:29 fuzzer started 2019/10/04 00:46:34 dialing manager at 10.128.0.26:46029 2019/10/04 00:46:34 syscalls: 2412 2019/10/04 00:46:34 code coverage: enabled 2019/10/04 00:46:34 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/04 00:46:34 extra coverage: enabled 2019/10/04 00:46:34 setuid sandbox: enabled 2019/10/04 00:46:34 namespace sandbox: enabled 2019/10/04 00:46:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 00:46:34 fault injection: enabled 2019/10/04 00:46:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 00:46:34 net packet injection: enabled 2019/10/04 00:46:34 net device setup: enabled syzkaller login: [ 209.218866][T11681] ===================================================== [ 209.225858][T11681] BUG: KMSAN: uninit-value in kfree_skb+0x473/0x4c0 [ 209.232477][T11681] CPU: 0 PID: 11681 Comm: syz-fuzzer Not tainted 5.3.0-rc7+ #0 [ 209.240000][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.250080][T11681] Call Trace: [ 209.253361][T11681] dump_stack+0x191/0x1f0 [ 209.257673][T11681] kmsan_report+0x13a/0x2b0 [ 209.262164][T11681] __msan_warning+0x73/0xe0 [ 209.266693][T11681] kmem_cache_free+0x3df/0x2b70 [ 209.271532][T11681] ? kmsan_internal_set_origin+0x6a/0xb0 [ 209.277202][T11681] ? kfree_skb+0x473/0x4c0 [ 209.281599][T11681] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 209.287708][T11681] kfree_skb+0x473/0x4c0 [ 209.291932][T11681] ? packet_rcv_spkt+0x719/0x840 [ 209.296859][T11681] packet_rcv_spkt+0x719/0x840 [ 209.301651][T11681] ? packet_rcv+0x2190/0x2190 [ 209.306309][T11681] dev_queue_xmit_nit+0x1125/0x1200 [ 209.311499][T11681] dev_hard_start_xmit+0x21e/0xab0 [ 209.316597][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 209.322518][T11681] sch_direct_xmit+0x56c/0x18c0 [ 209.327358][T11681] __dev_queue_xmit+0x1e53/0x4270 [ 209.332375][T11681] dev_queue_xmit+0x4b/0x60 [ 209.336859][T11681] ip_finish_output2+0x20c6/0x25d0 [ 209.341952][T11681] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 209.347997][T11681] ? nf_ct_deliver_cached_events+0x4d5/0x6e0 [ 209.353968][T11681] __ip_finish_output+0xaf8/0xda0 [ 209.358976][T11681] ip_finish_output+0x2db/0x420 [ 209.363840][T11681] ip_output+0x541/0x610 [ 209.368089][T11681] ? ip_mc_finish_output+0x6d0/0x6d0 [ 209.373363][T11681] ? ip_finish_output+0x420/0x420 [ 209.378367][T11681] __ip_queue_xmit+0x1caf/0x21f0 [ 209.383725][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 209.389598][T11681] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 209.395681][T11681] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 209.401767][T11681] ip_queue_xmit+0xcc/0xf0 [ 209.406180][T11681] ? tcp_v4_inbound_md5_hash+0xd10/0xd10 [ 209.411790][T11681] __tcp_transmit_skb+0x409e/0x5c60 [ 209.416982][T11681] __tcp_send_ack+0x701/0x840 [ 209.421641][T11681] tcp_send_ack+0x68/0x90 [ 209.425951][T11681] tcp_cleanup_rbuf+0x764/0x800 [ 209.430781][T11681] tcp_recvmsg+0x334d/0x4ff0 [ 209.435389][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 209.441265][T11681] ? tcp_mmap+0x150/0x150 [ 209.445580][T11681] ? tcp_mmap+0x150/0x150 [ 209.449887][T11681] inet_recvmsg+0x237/0x7d0 [ 209.454372][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 209.460242][T11681] ? inet_sendpage+0x2c0/0x2c0 [ 209.464997][T11681] ? inet_sendpage+0x2c0/0x2c0 [ 209.469739][T11681] sock_read_iter+0x5be/0x660 [ 209.474413][T11681] ? kernel_sock_ip_overhead+0x340/0x340 [ 209.480023][T11681] __vfs_read+0xa67/0xc90 [ 209.484365][T11681] vfs_read+0x359/0x6f0 [ 209.488508][T11681] ksys_read+0x265/0x430 [ 209.492755][T11681] __se_sys_read+0x92/0xb0 [ 209.497154][T11681] __x64_sys_read+0x4a/0x70 [ 209.501637][T11681] do_syscall_64+0xbc/0xf0 [ 209.506036][T11681] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 209.511906][T11681] RIP: 0033:0x47fd44 [ 209.515776][T11681] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 209.535367][T11681] RSP: 002b:000000c420355710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.543799][T11681] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44 [ 209.551749][T11681] RDX: 0000000000001000 RSI: 000000c4203b8000 RDI: 0000000000000003 [ 209.559711][T11681] RBP: 000000c420355760 R08: 0000000000000000 R09: 0000000000000000 [ 209.567676][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 209.575628][T11681] R13: 0000000000000004 R14: 0000000000000004 R15: ffffffffffffffff [ 209.583590][T11681] [ 209.585896][T11681] Uninit was stored to memory at: [ 209.590903][T11681] kmsan_internal_chain_origin+0xd2/0x170 [ 209.596600][T11681] __msan_chain_origin+0x6b/0xe0 [ 209.601513][T11681] ___slab_alloc+0x1dbc/0x1fb0 [ 209.606254][T11681] kmem_cache_alloc+0xade/0xd10 [ 209.611090][T11681] skb_clone+0x326/0x5d0 [ 209.615309][T11681] dev_queue_xmit_nit+0x539/0x1200 [ 209.620393][T11681] dev_hard_start_xmit+0x21e/0xab0 [ 209.625481][T11681] sch_direct_xmit+0x56c/0x18c0 [ 209.630306][T11681] __dev_queue_xmit+0x1e53/0x4270 [ 209.635304][T11681] dev_queue_xmit+0x4b/0x60 [ 209.639784][T11681] ip_finish_output2+0x20c6/0x25d0 [ 209.644870][T11681] __ip_finish_output+0xaf8/0xda0 [ 209.649957][T11681] ip_finish_output+0x2db/0x420 [ 209.654792][T11681] ip_output+0x541/0x610 [ 209.659017][T11681] __ip_queue_xmit+0x1caf/0x21f0 [ 209.663942][T11681] ip_queue_xmit+0xcc/0xf0 [ 209.668337][T11681] __tcp_transmit_skb+0x409e/0x5c60 [ 209.673507][T11681] __tcp_send_ack+0x701/0x840 [ 209.678156][T11681] tcp_send_ack+0x68/0x90 [ 209.682473][T11681] tcp_cleanup_rbuf+0x764/0x800 [ 209.687299][T11681] tcp_recvmsg+0x334d/0x4ff0 [ 209.691864][T11681] inet_recvmsg+0x237/0x7d0 [ 209.696341][T11681] sock_read_iter+0x5be/0x660 [ 209.701005][T11681] __vfs_read+0xa67/0xc90 [ 209.705309][T11681] vfs_read+0x359/0x6f0 [ 209.709438][T11681] ksys_read+0x265/0x430 [ 209.713654][T11681] __se_sys_read+0x92/0xb0 [ 209.718041][T11681] __x64_sys_read+0x4a/0x70 [ 209.722520][T11681] do_syscall_64+0xbc/0xf0 [ 209.726912][T11681] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 209.732786][T11681] [ 209.735089][T11681] Uninit was created at: [ 209.739307][T11681] kmsan_internal_poison_shadow+0x53/0x100 [ 209.745088][T11681] kmsan_slab_free+0x8d/0x100 [ 209.749742][T11681] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 209.755089][T11681] __kfree_skb_flush+0xb0/0x100 [ 209.759916][T11681] net_rx_action+0x1908/0x1950 [ 209.764667][T11681] __do_softirq+0x4a1/0x83a [ 209.769154][T11681] irq_exit+0x230/0x280 [ 209.773283][T11681] do_IRQ+0x20d/0x3a0 [ 209.777256][T11681] ret_from_intr+0x0/0x33 [ 209.781559][T11681] default_idle+0x53/0x90 [ 209.785866][T11681] arch_cpu_idle+0x25/0x30 [ 209.790260][T11681] do_idle+0x1d7/0x790 [ 209.794302][T11681] cpu_startup_entry+0x45/0x50 [ 209.799041][T11681] rest_init+0x1be/0x1f0 [ 209.803262][T11681] arch_call_rest_init+0x13/0x15 [ 209.808174][T11681] start_kernel+0x991/0xb61 [ 209.812666][T11681] x86_64_start_reservations+0x18/0x2e [ 209.818100][T11681] x86_64_start_kernel+0x81/0x84 [ 209.823017][T11681] secondary_startup_64+0xa4/0xb0 [ 209.828020][T11681] ===================================================== [ 209.834931][T11681] Disabling lock debugging due to kernel taint [ 209.841069][T11681] Kernel panic - not syncing: panic_on_warn set ... [ 209.847636][T11681] CPU: 0 PID: 11681 Comm: syz-fuzzer Tainted: G B 5.3.0-rc7+ #0 [ 209.856537][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.866576][T11681] Call Trace: [ 209.869875][T11681] dump_stack+0x191/0x1f0 [ 209.874196][T11681] panic+0x3c9/0xc1e [ 209.878084][T11681] kmsan_report+0x2a2/0x2b0 [ 209.882567][T11681] __msan_warning+0x73/0xe0 [ 209.887050][T11681] kmem_cache_free+0x3df/0x2b70 [ 209.891876][T11681] ? kmsan_internal_set_origin+0x6a/0xb0 [ 209.897484][T11681] ? kfree_skb+0x473/0x4c0 [ 209.901904][T11681] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 209.907970][T11681] kfree_skb+0x473/0x4c0 [ 209.912191][T11681] ? packet_rcv_spkt+0x719/0x840 [ 209.917109][T11681] packet_rcv_spkt+0x719/0x840 [ 209.921868][T11681] ? packet_rcv+0x2190/0x2190 [ 209.926533][T11681] dev_queue_xmit_nit+0x1125/0x1200 [ 209.931720][T11681] dev_hard_start_xmit+0x21e/0xab0 [ 209.936814][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 209.942701][T11681] sch_direct_xmit+0x56c/0x18c0 [ 209.947551][T11681] __dev_queue_xmit+0x1e53/0x4270 [ 209.952566][T11681] dev_queue_xmit+0x4b/0x60 [ 209.957064][T11681] ip_finish_output2+0x20c6/0x25d0 [ 209.962155][T11681] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 209.968199][T11681] ? nf_ct_deliver_cached_events+0x4d5/0x6e0 [ 209.974169][T11681] __ip_finish_output+0xaf8/0xda0 [ 209.979353][T11681] ip_finish_output+0x2db/0x420 [ 209.984197][T11681] ip_output+0x541/0x610 [ 209.988424][T11681] ? ip_mc_finish_output+0x6d0/0x6d0 [ 209.993688][T11681] ? ip_finish_output+0x420/0x420 [ 209.998688][T11681] __ip_queue_xmit+0x1caf/0x21f0 [ 210.003609][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 210.009494][T11681] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.015536][T11681] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.021595][T11681] ip_queue_xmit+0xcc/0xf0 [ 210.026002][T11681] ? tcp_v4_inbound_md5_hash+0xd10/0xd10 [ 210.031713][T11681] __tcp_transmit_skb+0x409e/0x5c60 [ 210.036954][T11681] __tcp_send_ack+0x701/0x840 [ 210.041625][T11681] tcp_send_ack+0x68/0x90 [ 210.045940][T11681] tcp_cleanup_rbuf+0x764/0x800 [ 210.050840][T11681] tcp_recvmsg+0x334d/0x4ff0 [ 210.055436][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 210.061506][T11681] ? tcp_mmap+0x150/0x150 [ 210.065852][T11681] ? tcp_mmap+0x150/0x150 [ 210.070163][T11681] inet_recvmsg+0x237/0x7d0 [ 210.074649][T11681] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 210.080534][T11681] ? inet_sendpage+0x2c0/0x2c0 [ 210.085278][T11681] ? inet_sendpage+0x2c0/0x2c0 [ 210.090022][T11681] sock_read_iter+0x5be/0x660 [ 210.094699][T11681] ? kernel_sock_ip_overhead+0x340/0x340 [ 210.100309][T11681] __vfs_read+0xa67/0xc90 [ 210.104633][T11681] vfs_read+0x359/0x6f0 [ 210.108776][T11681] ksys_read+0x265/0x430 [ 210.113094][T11681] __se_sys_read+0x92/0xb0 [ 210.117528][T11681] __x64_sys_read+0x4a/0x70 [ 210.122023][T11681] do_syscall_64+0xbc/0xf0 [ 210.126426][T11681] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 210.132307][T11681] RIP: 0033:0x47fd44 [ 210.136193][T11681] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 210.155789][T11681] RSP: 002b:000000c420355710 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.164198][T11681] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd44 [ 210.172149][T11681] RDX: 0000000000001000 RSI: 000000c4203b8000 RDI: 0000000000000003 [ 210.180794][T11681] RBP: 000000c420355760 R08: 0000000000000000 R09: 0000000000000000 [ 210.188743][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 210.196692][T11681] R13: 0000000000000004 R14: 0000000000000004 R15: ffffffffffffffff [ 210.206067][T11681] Kernel Offset: disabled [ 210.210414][T11681] Rebooting in 86400 seconds..