Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. 2019/10/22 07:16:53 fuzzer started 2019/10/22 07:16:55 dialing manager at 10.128.0.105:37053 2019/10/22 07:16:55 syscalls: 2524 2019/10/22 07:16:55 code coverage: enabled 2019/10/22 07:16:55 comparison tracing: enabled 2019/10/22 07:16:55 extra coverage: extra coverage is not supported by the kernel 2019/10/22 07:16:55 setuid sandbox: enabled 2019/10/22 07:16:55 namespace sandbox: enabled 2019/10/22 07:16:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 07:16:55 fault injection: enabled 2019/10/22 07:16:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 07:16:55 net packet injection: enabled 2019/10/22 07:16:55 net device setup: enabled 2019/10/22 07:16:55 concurrency sanitizer: enabled syzkaller login: [ 48.645946][ C1] ================================================================== [ 48.654371][ C1] BUG: KCSAN: data-race in __nf_conntrack_find_get / __nf_ct_refresh_acct [ 48.663164][ C1] [ 48.665481][ C1] write to 0xffff8881222c6108 of 4 bytes by task 7265 on cpu 0: [ 48.674413][ C1] __nf_ct_refresh_acct+0xfb/0x1b0 [ 48.679601][ C1] nf_conntrack_tcp_packet+0xd40/0x3390 [ 48.685220][ C1] nf_conntrack_in+0x410/0xa80 [ 48.689990][ C1] ipv4_conntrack_local+0xbe/0x130 [ 48.695079][ C1] nf_hook_slow+0x83/0x160 [ 48.699649][ C1] __ip_local_out+0x1f7/0x2b0 [ 48.704331][ C1] ip_local_out+0x31/0x90 [ 48.708694][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 48.713952][ C1] ip_queue_xmit+0x45/0x60 [ 48.718349][ C1] __tcp_transmit_skb+0xe81/0x1d60 [ 48.723446][ C1] __tcp_send_ack+0x246/0x300 [ 48.728157][ C1] tcp_send_ack+0x34/0x40 [ 48.732467][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 48.737503][ C1] tcp_recvmsg+0x633/0x1a30 [ 48.742303][ C1] [ 48.744619][ C1] read to 0xffff8881222c6108 of 4 bytes by interrupt on cpu 1: [ 48.752407][ C1] __nf_conntrack_find_get+0x284/0x880 [ 48.757852][ C1] nf_conntrack_in+0x2ef/0xa80 [ 48.762622][ C1] ipv4_conntrack_in+0x27/0x40 [ 48.767495][ C1] nf_hook_slow+0x83/0x160 [ 48.772407][ C1] ip_rcv+0x12f/0x1a0 [ 48.776410][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 48.782106][ C1] __netif_receive_skb+0x37/0xf0 [ 48.787807][ C1] netif_receive_skb_internal+0x59/0x190 [ 48.793539][ C1] napi_gro_receive+0x28f/0x330 [ 48.799600][ C1] receive_buf+0x284/0x30b0 [ 48.804093][ C1] virtnet_poll+0x436/0x7d0 [ 48.808860][ C1] net_rx_action+0x3ae/0xa90 [ 48.813721][ C1] __do_softirq+0x115/0x33f [ 48.818198][ C1] [ 48.820498][ C1] Reported by Kernel Concurrency Sanitizer on: [ 48.826726][ C1] CPU: 1 PID: 7263 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 48.834167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.844200][ C1] ================================================================== [ 48.853391][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 48.859972][ C1] CPU: 1 PID: 7263 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 48.867926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.878420][ C1] Call Trace: [ 48.881858][ C1] [ 48.884699][ C1] dump_stack+0xf5/0x159 [ 48.888919][ C1] panic+0x210/0x640 [ 48.892814][ C1] ? napi_gro_receive+0x28f/0x330 [ 48.897815][ C1] ? vprintk_func+0x8d/0x140 [ 48.902554][ C1] kcsan_report.cold+0xc/0x10 [ 48.907294][ C1] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 48.913013][ C1] __tsan_read4+0x2c/0x30 [ 48.917338][ C1] __nf_conntrack_find_get+0x284/0x880 [ 48.922769][ C1] ? __tsan_write2+0x32/0x40 [ 48.927335][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 48.932949][ C1] nf_conntrack_in+0x2ef/0xa80 [ 48.937692][ C1] ipv4_conntrack_in+0x27/0x40 [ 48.942525][ C1] nf_hook_slow+0x83/0x160 [ 48.946921][ C1] ? nf_ct_bridge_unregister+0x70/0x70 [ 48.952452][ C1] ip_rcv+0x12f/0x1a0 [ 48.956506][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 48.966470][ C1] ? ip_local_deliver+0x210/0x210 [ 48.971561][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 48.977352][ C1] __netif_receive_skb+0x37/0xf0 [ 48.982356][ C1] netif_receive_skb_internal+0x59/0x190 [ 48.988750][ C1] napi_gro_receive+0x28f/0x330 [ 48.999317][ C1] receive_buf+0x284/0x30b0 [ 49.004245][ C1] ? __tsan_write8+0x32/0x40 [ 49.008892][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 49.014696][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.020311][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.025949][ C1] virtnet_poll+0x436/0x7d0 [ 49.030441][ C1] net_rx_action+0x3ae/0xa90 [ 49.035013][ C1] __do_softirq+0x115/0x33f [ 49.039496][ C1] irq_exit+0xbb/0xe0 [ 49.043466][ C1] do_IRQ+0xa6/0x180 [ 49.047337][ C1] common_interrupt+0xf/0xf [ 49.051812][ C1] [ 49.054728][ C1] RIP: 0010:_raw_spin_unlock_irq+0x4e/0x80 [ 49.060527][ C1] Code: 00 74 44 48 89 df c6 07 00 0f 1f 40 00 48 c7 c7 b0 63 a5 85 e8 b3 f7 bb fc 48 83 3d 5b 94 0e 01 00 74 26 fb 66 0f 1f 44 00 00 01 00 00 00 e8 28 f9 9c fc 65 8b 05 99 9c 6a 7b 85 c0 74 0c e8 [ 49.080476][ C1] RSP: 0018:ffffc900015eb730 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffde [ 49.088873][ C1] RAX: ae147ae147ae2036 RBX: ffff88812bf2a3c0 RCX: 0000000000000556 [ 49.097098][ C1] RDX: 00000000000a2990 RSI: 020c49ba5e353f7d RDI: ffffffff85a563b0 [ 49.105259][ C1] RBP: ffffc900015eb738 R08: 0000000000000000 R09: 0000ffff85a563b7 [ 49.113301][ C1] R10: 00000000aaaaaaab R11: ffffffff86045cc8 R12: ffff88812bf2a3c0 [ 49.121251][ C1] R13: ffff88812b3850c0 R14: ffff8881265f4980 R15: 0000000000000000 [ 49.129515][ C1] finish_task_switch+0x7b/0x260 [ 49.134441][ C1] __schedule+0x319/0x640 [ 49.138790][ C1] schedule+0x47/0xd0 [ 49.143199][ C1] schedule_hrtimeout_range_clock+0x11a/0x1e0 [ 49.149482][ C1] ? hrtimer_active+0x1a0/0x1a0 [ 49.155286][ C1] schedule_hrtimeout_range+0x34/0x50 [ 49.161101][ C1] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 49.168068][ C1] do_select+0xd7f/0x1020 [ 49.172847][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.178458][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.184166][ C1] ? __tsan_read1+0x2c/0x30 [ 49.188751][ C1] ? pvclock_clocksource_read+0x178/0x1e0 [ 49.194458][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.200420][ C1] ? __tsan_write8+0x32/0x40 [ 49.204997][ C1] ? rb_erase+0x2aa/0x990 [ 49.209316][ C1] ? __tsan_read8+0x2c/0x30 [ 49.214494][ C1] ? __tsan_read8+0x2c/0x30 [ 49.218990][ C1] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 49.225729][ C1] ? hrtimer_try_to_cancel+0x57/0x260 [ 49.231078][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.236689][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.242907][ C1] ? hrtimer_cancel+0x3b/0x50 [ 49.247586][ C1] ? __tsan_write4+0x32/0x40 [ 49.252170][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.257792][ C1] ? __rcu_read_unlock+0x66/0x3c0 [ 49.262813][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 49.268715][ C1] core_sys_select+0x381/0x550 [ 49.273480][ C1] ? __tsan_read8+0x2c/0x30 [ 49.278099][ C1] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 49.283827][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 49.289532][ C1] ? _copy_to_user+0x84/0xb0 [ 49.294123][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 49.300011][ C1] ? __tsan_write8+0x32/0x40 [ 49.304585][ C1] ? ktime_get_ts64+0x286/0x2c0 [ 49.309418][ C1] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 49.315401][ C1] ? timespec64_add_safe+0xae/0xd0 [ 49.320682][ C1] do_pselect.constprop.0+0x11d/0x160 [ 49.326054][ C1] __x64_sys_pselect6+0x12e/0x170 [ 49.331151][ C1] ? switch_fpu_return+0x11f/0x250 [ 49.336260][ C1] do_syscall_64+0xcc/0x370 [ 49.340873][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 49.346840][ C1] RIP: 0033:0x45ac23 [ 49.350738][ C1] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 49.370334][ C1] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 49.378729][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac23 [ 49.386690][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.394647][ C1] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 49.402597][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 49.410663][ C1] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 49.420244][ C1] Kernel Offset: disabled [ 49.424571][ C1] Rebooting in 86400 seconds..