Warning: Permanently added '10.128.1.43' (ECDSA) to the list of known hosts. 2020/06/06 03:32:15 fuzzer started 2020/06/06 03:32:15 dialing manager at 10.128.0.105:35423 2020/06/06 03:32:25 syscalls: 3055 2020/06/06 03:32:25 code coverage: enabled 2020/06/06 03:32:25 comparison tracing: enabled 2020/06/06 03:32:25 extra coverage: enabled 2020/06/06 03:32:25 setuid sandbox: enabled 2020/06/06 03:32:25 namespace sandbox: enabled 2020/06/06 03:32:25 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/06 03:32:25 fault injection: enabled 2020/06/06 03:32:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/06 03:32:25 net packet injection: enabled 2020/06/06 03:32:25 net device setup: enabled 2020/06/06 03:32:25 concurrency sanitizer: enabled 2020/06/06 03:32:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/06 03:32:25 USB emulation: enabled syzkaller login: [ 67.622007][ T8889] KCSAN: could not find function: '_find_next_bit' 2020/06/06 03:32:29 adding functions to KCSAN blacklist: 'blk_mq_dispatch_rq_list' 'find_get_pages_range_tag' 'blk_mq_request_bypass_insert' 'ext4_mb_good_group' 'ktime_get_real_seconds' 'file_update_time' 'blk_mq_sched_dispatch_requests' 'decrypt_packet' 'alloc_pid' '__send_signal' '__mark_inode_dirty' 'dd_has_work' 'mod_timer' 'ext4_free_inodes_count' 'do_syslog' 'vm_area_dup' 'run_timer_softirq' 'wbt_done' 'futex_wait_queue_me' 'tick_nohz_next_event' 'generic_write_end' 'echo_char' 'tick_nohz_idle_stop_tick' 'ext4_mark_iloc_dirty' 'shmem_file_read_iter' 'do_nanosleep' '__ext4_new_inode' 'ep_poll' 'add_timer' 'do_signal_stop' 'generic_fillattr' 'pcpu_alloc' 'copy_process' '_find_next_bit' 'xas_clear_mark' [ 88.894721][ C0] ================================================================== [ 88.902953][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 88.911100][ C0] [ 88.913452][ C0] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: [ 88.921223][ C0] tick_sched_do_timer+0xb4/0xd0 [ 88.926166][ C0] tick_sched_timer+0x3f/0xd0 [ 88.931024][ C0] __hrtimer_run_queues+0x271/0x600 [ 88.936218][ C0] hrtimer_interrupt+0x226/0x490 [ 88.941158][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 88.946611][ C0] apic_timer_interrupt+0xf/0x20 [ 88.951651][ C0] __tsan_read2+0x30/0x110 [ 88.956066][ C0] nf_hook_slow+0x103/0x160 [ 88.960546][ C0] ip_local_deliver+0x1f2/0x220 [ 88.965372][ C0] ip_sublist_rcv_finish+0xf0/0x140 [ 88.970933][ C0] ip_sublist_rcv+0x3f8/0x530 [ 88.975945][ C0] ip_list_rcv+0x2f3/0x321 [ 88.980512][ C0] __netif_receive_skb_list_core+0x368/0x5c0 [ 88.986509][ C0] netif_receive_skb_list_internal+0x5c7/0x810 [ 88.992665][ C0] gro_normal_list.part.0+0x37/0xa0 [ 88.997859][ C0] gro_normal_one+0x14c/0x160 [ 89.002515][ C0] napi_gro_receive+0x27d/0x2f0 [ 89.007346][ C0] receive_buf+0x24c/0x3420 [ 89.011826][ C0] virtnet_poll+0x343/0x790 [ 89.016318][ C0] net_rx_action+0x3ad/0xac0 [ 89.020914][ C0] __do_softirq+0x118/0x34a [ 89.025486][ C0] irq_exit+0xb5/0xd0 [ 89.029461][ C0] do_IRQ+0x7b/0x120 [ 89.033625][ C0] ret_from_intr+0x0/0x21 [ 89.037946][ C0] [ 89.040269][ C0] read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 89.047790][ C0] tick_sched_do_timer+0x2e/0xd0 [ 89.052726][ C0] tick_sched_timer+0x3f/0xd0 [ 89.057384][ C0] __hrtimer_run_queues+0x271/0x600 [ 89.062557][ C0] hrtimer_interrupt+0x226/0x490 [ 89.067490][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 89.073161][ C0] apic_timer_interrupt+0xf/0x20 [ 89.078110][ C0] __tsan_read4+0xe4/0x110 [ 89.082683][ C0] iptable_mangle_hook+0x2f/0x270 [ 89.087788][ C0] nf_hook_slow+0x7c/0x160 [ 89.092190][ C0] __ip_local_out+0x1f3/0x2b0 [ 89.096968][ C0] ip_local_out+0x2d/0x90 [ 89.101391][ C0] __ip_queue_xmit+0x3a6/0xa40 [ 89.106150][ C0] ip_queue_xmit+0x3e/0x50 [ 89.110554][ C0] __tcp_transmit_skb+0xe0c/0x1d80 [ 89.115643][ C0] __tcp_send_ack+0x22c/0x2f0 [ 89.120392][ C0] tcp_send_ack+0x2d/0x40 [ 89.124890][ C0] tcp_cleanup_rbuf+0x124/0x340 [ 89.129729][ C0] tcp_recvmsg+0x686/0x1ba0 [ 89.134225][ C0] inet_recvmsg+0xc1/0x250 [ 89.138631][ C0] sock_recvmsg+0x8e/0xb0 [ 89.142935][ C0] sock_read_iter+0x185/0x230 [ 89.147591][ C0] new_sync_read+0x416/0x450 [ 89.152179][ C0] __vfs_read+0x9e/0xb0 [ 89.156341][ C0] vfs_read+0x13e/0x2b0 [ 89.160488][ C0] ksys_read+0x16a/0x1a0 [ 89.164724][ C0] __x64_sys_read+0x49/0x60 [ 89.169221][ C0] do_syscall_64+0xc7/0x3b0 [ 89.173847][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 89.179800][ C0] [ 89.182103][ C0] Reported by Kernel Concurrency Sanitizer on: [ 89.188251][ C0] CPU: 0 PID: 8890 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 89.196470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.206663][ C0] ================================================================== [ 89.214778][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 89.221360][ C0] CPU: 0 PID: 8890 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 89.229746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.239815][ C0] Call Trace: [ 89.243076][ C0] [ 89.245913][ C0] dump_stack+0x11d/0x187 [ 89.250226][ C0] panic+0x210/0x640 [ 89.254119][ C0] ? vprintk_func+0x89/0x13a [ 89.258689][ C0] kcsan_report.cold+0xc/0x1a [ 89.263363][ C0] kcsan_setup_watchpoint+0x3fb/0x440 [ 89.268802][ C0] tick_sched_do_timer+0x2e/0xd0 [ 89.273718][ C0] tick_sched_timer+0x3f/0xd0 [ 89.278393][ C0] __hrtimer_run_queues+0x271/0x600 [ 89.283595][ C0] ? tick_sched_do_timer+0xd0/0xd0 [ 89.288689][ C0] hrtimer_interrupt+0x226/0x490 [ 89.294035][ C0] ? kvm_clock_read+0x14/0x30 [ 89.298700][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 89.304158][ C0] apic_timer_interrupt+0xf/0x20 [ 89.309073][ C0] [ 89.312017][ C0] RIP: 0010:__tsan_read4+0xe4/0x110 [ 89.317196][ C0] Code: c6 ac 7e 48 c1 e9 10 83 e1 0e 75 cf 83 ea 01 89 50 04 eb c7 80 78 0c 00 75 c1 48 c7 c2 ff ff ff ff 65 48 0f c1 15 7c cf ad 7e <48> 83 ea 01 79 ab 31 d2 be 04 00 00 00 e9 aa f3 ff ff 31 d2 be 04 [ 89.336778][ C0] RSP: 0018:ffffc90000e13788 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13 [ 89.345183][ C0] RAX: ffff888126836a98 RBX: 0000000000000003 RCX: ffffffff88af03f0 [ 89.353132][ C0] RDX: 0000000000000032 RSI: ffffffff852e3707 RDI: ffffc90000e13828 [ 89.361171][ C0] RBP: ffffc90000e13828 R08: 0000000000000000 R09: 0000c90000e13828 [ 89.369143][ C0] R10: 0000888121886203 R11: 0000c90000e1382b R12: ffff8881218da000 [ 89.377121][ C0] R13: ffffffff852e36e0 R14: ffffc90000e13848 R15: ffffc90000e13828 [ 89.385109][ C0] ? iptable_mangle_net_exit+0x90/0x90 [ 89.390562][ C0] ? iptable_mangle_hook+0x27/0x270 [ 89.395818][ C0] iptable_mangle_hook+0x2f/0x270 [ 89.400848][ C0] ? nf_ct_tcp_fixup+0xd0/0xd0 [ 89.405684][ C0] ? iptable_mangle_net_exit+0x90/0x90 [ 89.411142][ C0] nf_hook_slow+0x7c/0x160 [ 89.416289][ C0] __ip_local_out+0x1f3/0x2b0 [ 89.420958][ C0] ? constant_test_bit+0x20/0x20 [ 89.426141][ C0] ip_local_out+0x2d/0x90 [ 89.430581][ C0] __ip_queue_xmit+0x3a6/0xa40 [ 89.435345][ C0] ip_queue_xmit+0x3e/0x50 [ 89.439783][ C0] __tcp_transmit_skb+0xe0c/0x1d80 [ 89.444913][ C0] __tcp_send_ack+0x22c/0x2f0 [ 89.449614][ C0] tcp_send_ack+0x2d/0x40 [ 89.454373][ C0] tcp_cleanup_rbuf+0x124/0x340 [ 89.459242][ C0] tcp_recvmsg+0x686/0x1ba0 [ 89.463838][ C0] inet_recvmsg+0xc1/0x250 [ 89.468537][ C0] ? apparmor_socket_recvmsg+0x38/0x40 [ 89.474182][ C0] ? inet_sendpage+0xf0/0xf0 [ 89.478875][ C0] sock_recvmsg+0x8e/0xb0 [ 89.483636][ C0] sock_read_iter+0x185/0x230 [ 89.488306][ C0] new_sync_read+0x416/0x450 [ 89.492904][ C0] __vfs_read+0x9e/0xb0 [ 89.497246][ C0] vfs_read+0x13e/0x2b0 [ 89.501438][ C0] ksys_read+0x16a/0x1a0 [ 89.505748][ C0] __x64_sys_read+0x49/0x60 [ 89.510371][ C0] do_syscall_64+0xc7/0x3b0 [ 89.515934][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 89.521811][ C0] RIP: 0033:0x4b3cdb [ 89.525707][ C0] Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 bb a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 89.547554][ C0] RSP: 002b:000000c0002e18b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 89.556304][ C0] RAX: ffffffffffffffda RBX: 000000c00002c000 RCX: 00000000004b3cdb [ 89.564291][ C0] RDX: 0000000000001000 RSI: 000000c000090000 RDI: 0000000000000006 [ 89.572258][ C0] RBP: 000000c0002e1908 R08: 00007fffc7ddc001 R09: 0000000000000058 [ 89.580303][ C0] R10: 0000000000000072 R11: 0000000000000212 R12: 0000000000000003 [ 89.588266][ C0] R13: 000000c0000ead80 R14: 0000000000000004 R15: 0000000000000002 [ 89.597555][ C0] Kernel Offset: disabled [ 89.601879][ C0] Rebooting in 86400 seconds..