[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2020/06/18 01:18:41 fuzzer started 2020/06/18 01:18:41 dialing manager at 10.128.0.105:41225 2020/06/18 01:18:55 syscalls: 3089 2020/06/18 01:18:55 code coverage: enabled 2020/06/18 01:18:55 comparison tracing: enabled 2020/06/18 01:18:55 extra coverage: enabled 2020/06/18 01:18:55 setuid sandbox: enabled 2020/06/18 01:18:55 namespace sandbox: enabled 2020/06/18 01:18:55 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/18 01:18:55 fault injection: enabled 2020/06/18 01:18:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/18 01:18:55 net packet injection: enabled 2020/06/18 01:18:55 net device setup: enabled 2020/06/18 01:18:55 concurrency sanitizer: enabled 2020/06/18 01:18:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/18 01:18:55 USB emulation: enabled syzkaller login: [ 64.480914][ T8918] KCSAN: could not find function: '_find_next_bit' 2020/06/18 01:18:58 suppressing KCSAN reports in functions: 'mod_timer' '__ext4_new_inode' 'run_timer_softirq' 'blk_mq_sched_dispatch_requests' 'n_tty_receive_buf_common' 'futex_wait_queue_me' 'page_counter_charge' '__delete_from_page_cache' 'io_sq_thread' 'ext4_free_inodes_count' '_find_next_bit' 'fat12_ent_put' 'generic_fillattr' 'shmem_getpage_gfp' 'generic_write_end' 'tick_nohz_idle_stop_tick' 'copy_process' 'alloc_pid' 'do_nanosleep' 'generic_file_read_iter' 'pcpu_alloc' 'tick_nohz_next_event' 'pipe_double_lock' 'find_get_pages_range_tag' 'ext4_mark_iloc_dirty' 'do_syslog' 'ep_poll' 'blk_mq_get_request' [ 118.591838][ C1] ================================================================== [ 118.600169][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 118.608244][ C1] [ 118.612486][ C1] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 118.620137][ C1] tick_sched_do_timer+0xb4/0xd0 [ 118.625144][ C1] tick_sched_timer+0x3f/0xd0 [ 118.629811][ C1] __hrtimer_run_queues+0x271/0x600 [ 118.635292][ C1] hrtimer_interrupt+0x226/0x490 [ 118.640210][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 118.645669][ C1] apic_timer_interrupt+0xf/0x20 [ 118.650585][ C1] _raw_spin_unlock_irqrestore+0x4d/0x80 [ 118.656200][ C1] try_to_wake_up+0x3c8/0x6c0 [ 118.660852][ C1] wake_up_q+0x56/0x90 [ 118.664896][ C1] futex_wake+0x309/0x340 [ 118.669199][ C1] do_futex+0x2b3/0x15b0 [ 118.673422][ C1] __x64_sys_futex+0x2dc/0x410 [ 118.678170][ C1] do_syscall_64+0xc7/0x3b0 [ 118.682654][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 118.689128][ C1] [ 118.691434][ C1] read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: [ 118.698971][ C1] tick_sched_do_timer+0x2e/0xd0 [ 118.703917][ C1] tick_sched_timer+0x3f/0xd0 [ 118.708690][ C1] __hrtimer_run_queues+0x271/0x600 [ 118.713895][ C1] hrtimer_interrupt+0x226/0x490 [ 118.719700][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 118.725135][ C1] apic_timer_interrupt+0xf/0x20 [ 118.730077][ C1] __tsan_read4+0x61/0x110 [ 118.734483][ C1] __tcp_select_window+0xb6/0x550 [ 118.739492][ C1] __tcp_transmit_skb+0x6cc/0x1d80 [ 118.744578][ C1] __tcp_send_ack+0x22c/0x2f0 [ 118.749229][ C1] tcp_send_ack+0x2d/0x40 [ 118.753576][ C1] __tcp_ack_snd_check+0xcc/0x550 [ 118.759032][ C1] tcp_rcv_established+0xc95/0xee0 [ 118.765262][ C1] tcp_v4_do_rcv+0x396/0x4f0 [ 118.769841][ C1] tcp_v4_rcv+0x1c55/0x1e10 [ 118.774324][ C1] ip_protocol_deliver_rcu+0x4b/0x410 [ 118.780135][ C1] ip_local_deliver_finish+0xf3/0x120 [ 118.785566][ C1] ip_local_deliver+0x135/0x220 [ 118.790404][ C1] ip_sublist_rcv_finish+0xf0/0x140 [ 118.796861][ C1] ip_sublist_rcv+0x3f8/0x530 [ 118.801518][ C1] ip_list_rcv+0x2f3/0x321 [ 118.806002][ C1] __netif_receive_skb_list_core+0x368/0x5c0 [ 118.812240][ C1] netif_receive_skb_list_internal+0x5c7/0x810 [ 118.819248][ C1] gro_normal_list.part.0+0x37/0xa0 [ 118.824443][ C1] gro_normal_one+0x14c/0x160 [ 118.829195][ C1] napi_gro_receive+0x27d/0x2f0 [ 118.834047][ C1] receive_buf+0x24c/0x3420 [ 118.838536][ C1] virtnet_poll+0x343/0x790 [ 118.843021][ C1] net_rx_action+0x3ad/0xac0 [ 118.847600][ C1] __do_softirq+0x118/0x34a [ 118.852095][ C1] run_ksoftirqd+0x41/0x60 [ 118.856491][ C1] smpboot_thread_fn+0x374/0x4a0 [ 118.861417][ C1] kthread+0x203/0x230 [ 118.865467][ C1] ret_from_fork+0x1f/0x30 [ 118.869852][ C1] [ 118.872160][ C1] Reported by Kernel Concurrency Sanitizer on: [ 118.878305][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 118.886436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.896478][ C1] ================================================================== [ 118.904515][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 118.911079][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 118.919215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.929417][ C1] Call Trace: [ 118.932697][ C1] [ 118.935535][ C1] dump_stack+0x11d/0x187 [ 118.939929][ C1] panic+0x210/0x640 [ 118.943809][ C1] ? vprintk_func+0x89/0x13a [ 118.948380][ C1] kcsan_report.cold+0xc/0x1a [ 118.953053][ C1] kcsan_setup_watchpoint+0x3fb/0x440 [ 118.958407][ C1] tick_sched_do_timer+0x2e/0xd0 [ 118.963328][ C1] tick_sched_timer+0x3f/0xd0 [ 118.967993][ C1] __hrtimer_run_queues+0x271/0x600 [ 118.973175][ C1] ? tick_sched_do_timer+0xd0/0xd0 [ 118.978268][ C1] hrtimer_interrupt+0x226/0x490 [ 118.983189][ C1] ? kvm_clock_read+0x14/0x30 [ 118.987850][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 118.993292][ C1] apic_timer_interrupt+0xf/0x20 [ 118.998202][ C1] [ 119.001120][ C1] RIP: 0010:__tsan_read4+0x61/0x110 [ 119.006298][ C1] Code: 85 c0 79 26 4c 89 c6 4d 89 c2 48 c1 ee 31 49 21 d2 81 e6 ff 3f 00 00 49 8d 74 32 ff 49 39 f1 77 09 4d 39 da 0f 86 95 00 00 00 <48> 83 c1 08 48 39 c8 75 c3 65 8b 05 77 c6 ac 7e a9 00 01 1f 00 74 [ 119.025876][ C1] RSP: 0018:ffffc90000cf3340 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 119.034266][ C1] RAX: ffffffff88af04f0 RBX: ffff88811fc08980 RCX: ffffffff88af04e8 [ 119.042244][ C1] RDX: 0000ffffffffffff RSI: ffffffff8520718c RDI: ffffc90000cf3358 [ 119.050194][ C1] RBP: ffff88811fc08a8c R08: 0000000000000000 R09: 0000c90000cf3358 [ 119.058144][ C1] R10: 000088812158fa34 R11: 0000c90000cf335b R12: 0000000000126900 [ 119.066091][ C1] R13: 0000000000000000 R14: 0000000000000580 R15: ffff88812158fa00 [ 119.074180][ C1] ? __tcp_select_window+0xac/0x550 [ 119.079362][ C1] __tcp_select_window+0xb6/0x550 [ 119.084458][ C1] __tcp_transmit_skb+0x6cc/0x1d80 [ 119.089559][ C1] __tcp_send_ack+0x22c/0x2f0 [ 119.094228][ C1] tcp_send_ack+0x2d/0x40 [ 119.098569][ C1] __tcp_ack_snd_check+0xcc/0x550 [ 119.103580][ C1] tcp_rcv_established+0xc95/0xee0 [ 119.108679][ C1] tcp_v4_do_rcv+0x396/0x4f0 [ 119.113275][ C1] tcp_v4_rcv+0x1c55/0x1e10 [ 119.117773][ C1] ip_protocol_deliver_rcu+0x4b/0x410 [ 119.123134][ C1] ip_local_deliver_finish+0xf3/0x120 [ 119.128508][ C1] ip_local_deliver+0x135/0x220 [ 119.133356][ C1] ? ip_protocol_deliver_rcu+0x410/0x410 [ 119.138979][ C1] ip_sublist_rcv_finish+0xf0/0x140 [ 119.144188][ C1] ip_sublist_rcv+0x3f8/0x530 [ 119.148930][ C1] ? ip_sublist_rcv+0x530/0x530 [ 119.153770][ C1] ip_list_rcv+0x2f3/0x321 [ 119.158171][ C1] ? ip_rcv+0x1b0/0x1b0 [ 119.162315][ C1] __netif_receive_skb_list_core+0x368/0x5c0 [ 119.168280][ C1] ? ktime_get_with_offset+0x1e6/0x230 [ 119.173725][ C1] netif_receive_skb_list_internal+0x5c7/0x810 [ 119.179895][ C1] gro_normal_list.part.0+0x37/0xa0 [ 119.185070][ C1] ? __write_once_size+0x7c/0x100 [ 119.190071][ C1] gro_normal_one+0x14c/0x160 [ 119.195140][ C1] napi_gro_receive+0x27d/0x2f0 [ 119.200079][ C1] receive_buf+0x24c/0x3420 [ 119.204574][ C1] ? virtqueue_get_buf_ctx+0x4db/0x5c0 [ 119.210034][ C1] virtnet_poll+0x343/0x790 [ 119.214536][ C1] net_rx_action+0x3ad/0xac0 [ 119.219114][ C1] __do_softirq+0x118/0x34a [ 119.223603][ C1] ? takeover_tasklets+0x240/0x240 [ 119.228694][ C1] run_ksoftirqd+0x41/0x60 [ 119.233089][ C1] smpboot_thread_fn+0x374/0x4a0 [ 119.238010][ C1] ? constant_test_bit.constprop.0+0x30/0x30 [ 119.243975][ C1] kthread+0x203/0x230 [ 119.248072][ C1] ? kthread_unpark+0xd0/0xd0 [ 119.252731][ C1] ret_from_fork+0x1f/0x30 [ 119.257820][ C1] Kernel Offset: disabled [ 119.262160][ C1] Rebooting in 86400 seconds..