[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2020/04/17 05:24:00 fuzzer started syzkaller login: [ 45.165800][ T6721] as (6721) used greatest stack depth: 10848 bytes left 2020/04/17 05:24:01 dialing manager at 10.128.0.105:38905 [ 45.691293][ T6726] ld (6726) used greatest stack depth: 10440 bytes left 2020/04/17 05:24:02 syscalls: 2960 2020/04/17 05:24:02 code coverage: enabled 2020/04/17 05:24:02 comparison tracing: enabled 2020/04/17 05:24:02 extra coverage: enabled 2020/04/17 05:24:02 setuid sandbox: enabled 2020/04/17 05:24:02 namespace sandbox: enabled 2020/04/17 05:24:02 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/17 05:24:02 fault injection: enabled 2020/04/17 05:24:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/17 05:24:02 net packet injection: enabled 2020/04/17 05:24:02 net device setup: enabled 2020/04/17 05:24:02 concurrency sanitizer: enabled 2020/04/17 05:24:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/17 05:24:02 USB emulation: /dev/raw-gadget does not exist [ 48.673412][ T6731] KCSAN: could not find function: 'poll_schedule_timeout' [ 50.736762][ T6731] KCSAN: could not find function: '_find_next_bit' 2020/04/17 05:24:09 adding functions to KCSAN blacklist: 'shmem_getpage_gfp' 'tick_nohz_idle_stop_tick' 'shmem_add_to_page_cache' 'blk_mq_get_request' 'futex_wait_queue_me' 'ep_poll' 'ext4_free_inodes_count' 'tick_nohz_next_event' '__delete_from_page_cache' '__dev_queue_xmit' 'io_sq_thread' 'get_signal' 'unix_release_sock' 'do_exit' '__ext4_new_inode' 'ext4_mb_good_group' 'tick_sched_do_timer' 'wbt_wait' '__put_unused_fd' 'generic_fillattr' 'timer_clear_idle' 'do_signal_stop' 'page_counter_charge' 'ext4_mark_iloc_dirty' '__mark_inode_dirty' 'poll_schedule_timeout' 'commit_echoes' 'do_nanosleep' '__process_echoes' '__find_get_block' 'blk_mq_dispatch_rq_list' 'xas_find_marked' 'xas_clear_mark' 'pcpu_alloc' 'n_tty_receive_buf_common' 'mod_timer' '_find_next_bit' 'blk_mq_sched_dispatch_requests' 'find_get_pages_range_tag' '__snd_rawmidi_transmit_ack' 'ktime_get_real_seconds' 'generic_write_end' 'echo_char' 'dd_has_work' 'ext4_sync_file' 'audit_log_start' 'vti_tunnel_xmit' 'snd_seq_check_queue' '__add_to_page_cache_locked' 'add_timer' 'kauditd_thread' 'do_syslog' 'ext4_ext_try_to_merge_right' '__x64_sys_ptrace' 'copy_process' 'do_wait' 'run_timer_softirq' 'wbt_done' [ 100.994938][ T6729] ================================================================== [ 101.003138][ T6729] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_advance [ 101.011021][ T6729] [ 101.013356][ T6729] write to 0xffffffff86fce8c8 of 280 bytes by interrupt on cpu 1: [ 101.021195][ T6729] timekeeping_advance+0x88e/0xd80 [ 101.026317][ T6729] update_wall_time+0x15/0x20 [ 101.030992][ T6729] tick_do_update_jiffies64+0x1e5/0x2a0 [ 101.036527][ T6729] tick_sched_do_timer+0xc7/0xd0 [ 101.041458][ T6729] tick_sched_timer+0x3f/0xd0 [ 101.046249][ T6729] __hrtimer_run_queues+0x271/0x600 [ 101.051456][ T6729] hrtimer_interrupt+0x226/0x490 [ 101.056382][ T6729] smp_apic_timer_interrupt+0xd8/0x270 [ 101.061826][ T6729] apic_timer_interrupt+0xf/0x20 [ 101.066849][ T6729] memcpy_erms+0x6/0x10 [ 101.070988][ T6729] page_to_skb+0x190/0x560 [ 101.075386][ T6729] receive_buf+0x18ca/0x2ed0 [ 101.079965][ T6729] virtnet_poll+0x343/0x790 [ 101.084449][ T6729] net_rx_action+0x3ad/0xac0 [ 101.089044][ T6729] __do_softirq+0x118/0x34a [ 101.093530][ T6729] run_ksoftirqd+0x41/0x60 [ 101.097929][ T6729] smpboot_thread_fn+0x374/0x4a0 [ 101.102863][ T6729] kthread+0x203/0x230 [ 101.106927][ T6729] ret_from_fork+0x1f/0x30 [ 101.111315][ T6729] [ 101.113643][ T6729] read to 0xffffffff86fce940 of 8 bytes by task 6729 on cpu 0: [ 101.121177][ T6729] ktime_get_seconds+0x42/0x60 [ 101.125923][ T6729] tcp_rcv_established+0xe79/0xee0 [ 101.131028][ T6729] tcp_v4_do_rcv+0x396/0x4f0 [ 101.135600][ T6729] __release_sock+0x130/0x1e0 [ 101.140255][ T6729] release_sock+0x5e/0x160 [ 101.144680][ T6729] tcp_recvmsg+0x68e/0x1ba0 [ 101.149165][ T6729] inet_recvmsg+0xc1/0x250 [ 101.153563][ T6729] sock_recvmsg+0x8e/0xb0 [ 101.157887][ T6729] sock_read_iter+0x185/0x230 [ 101.162544][ T6729] new_sync_read+0x416/0x450 [ 101.167125][ T6729] __vfs_read+0x9e/0xb0 [ 101.171258][ T6729] vfs_read+0x13e/0x2b0 [ 101.175393][ T6729] ksys_read+0x16a/0x1a0 [ 101.179615][ T6729] __x64_sys_read+0x49/0x60 [ 101.184112][ T6729] do_syscall_64+0xc7/0x3b0 [ 101.188667][ T6729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.194539][ T6729] [ 101.196853][ T6729] Reported by Kernel Concurrency Sanitizer on: [ 101.202994][ T6729] CPU: 0 PID: 6729 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 101.211213][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.221266][ T6729] ================================================================== [ 101.229434][ T6729] Kernel panic - not syncing: panic_on_warn set ... [ 101.236012][ T6729] CPU: 0 PID: 6729 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 101.244235][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.254283][ T6729] Call Trace: [ 101.257680][ T6729] dump_stack+0x11d/0x187 [ 101.262012][ T6729] panic+0x210/0x640 [ 101.266033][ T6729] ? vprintk_func+0x89/0x13a [ 101.270611][ T6729] kcsan_report.cold+0xc/0x1a [ 101.275301][ T6729] kcsan_setup_watchpoint+0x3fb/0x440 [ 101.280688][ T6729] ktime_get_seconds+0x42/0x60 [ 101.285438][ T6729] tcp_rcv_established+0xe79/0xee0 [ 101.290588][ T6729] tcp_v4_do_rcv+0x396/0x4f0 [ 101.295166][ T6729] __release_sock+0x130/0x1e0 [ 101.299836][ T6729] release_sock+0x5e/0x160 [ 101.304238][ T6729] tcp_recvmsg+0x68e/0x1ba0 [ 101.308754][ T6729] ? sock_poll+0xfc/0x240 [ 101.313071][ T6729] inet_recvmsg+0xc1/0x250 [ 101.317474][ T6729] ? apparmor_socket_recvmsg+0x38/0x40 [ 101.323006][ T6729] ? inet_sendpage+0xf0/0xf0 [ 101.327600][ T6729] sock_recvmsg+0x8e/0xb0 [ 101.331966][ T6729] sock_read_iter+0x185/0x230 [ 101.336635][ T6729] new_sync_read+0x416/0x450 [ 101.341210][ T6729] __vfs_read+0x9e/0xb0 [ 101.345350][ T6729] vfs_read+0x13e/0x2b0 [ 101.349488][ T6729] ksys_read+0x16a/0x1a0 [ 101.353726][ T6729] __x64_sys_read+0x49/0x60 [ 101.358219][ T6729] do_syscall_64+0xc7/0x3b0 [ 101.362707][ T6729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.368595][ T6729] RIP: 0033:0x47c530 [ 101.372478][ T6729] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 101.392068][ T6729] RSP: 002b:000000c4201cd7d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 101.400460][ T6729] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 101.408430][ T6729] RDX: 0000000000001000 RSI: 000000c4202b2000 RDI: 0000000000000003 [ 101.416398][ T6729] RBP: 000000c4201cd830 R08: 0000000000000000 R09: 0000000000000000 [ 101.424361][ T6729] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000100 [ 101.432588][ T6729] R13: ffffffffffffffff R14: 0000000000000020 R15: ffffffffffffffff [ 101.442208][ T6729] Kernel Offset: disabled [ 101.446891][ T6729] Rebooting in 86400 seconds..