[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. 2020/05/31 10:44:32 fuzzer started 2020/05/31 10:44:32 dialing manager at 10.128.0.105:33205 2020/05/31 10:44:32 syscalls: 3055 2020/05/31 10:44:32 code coverage: enabled 2020/05/31 10:44:32 comparison tracing: enabled 2020/05/31 10:44:32 extra coverage: enabled 2020/05/31 10:44:32 setuid sandbox: enabled 2020/05/31 10:44:32 namespace sandbox: enabled 2020/05/31 10:44:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/31 10:44:32 fault injection: enabled 2020/05/31 10:44:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/31 10:44:32 net packet injection: enabled 2020/05/31 10:44:32 net device setup: enabled 2020/05/31 10:44:32 concurrency sanitizer: enabled 2020/05/31 10:44:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/31 10:44:32 USB emulation: enabled syzkaller login: [ 53.409998][ T8919] KCSAN: could not find function: '_find_next_bit' 2020/05/31 10:44:36 adding functions to KCSAN blacklist: 'add_timer' 'generic_fillattr' 'tick_nohz_idle_stop_tick' 'fasync_remove_entry' 'ext4_free_inodes_count' 'blk_mq_get_request' 'do_nanosleep' 'mod_timer' 'tick_nohz_next_event' 'copy_process' 'do_signal_stop' '__ext4_new_inode' 'futex_wait_queue_me' 'do_syslog' 'kauditd_thread' '_find_next_bit' 'snd_rawmidi_kernel_write1' 'blk_mq_dispatch_rq_list' 'page_counter_charge' 'decrypt_packet' 'iput' 'find_get_pages_range_tag' 'ext4_da_write_end' 'run_timer_softirq' 'ext4_mark_iloc_dirty' 'ep_poll' 'generic_write_end' 'blk_mq_sched_dispatch_requests' '__mark_inode_dirty' 'xas_clear_mark' [ 150.898918][ C1] ================================================================== [ 150.907070][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 150.915113][ C1] [ 150.917436][ C1] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 150.925061][ C1] tick_sched_do_timer+0xb4/0xd0 [ 150.929988][ C1] tick_sched_timer+0x3f/0xd0 [ 150.934655][ C1] __hrtimer_run_queues+0x271/0x600 [ 150.939841][ C1] hrtimer_interrupt+0x226/0x490 [ 150.944773][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 150.950217][ C1] apic_timer_interrupt+0xf/0x20 [ 150.955131][ C1] __tsan_read4+0x30/0x110 [ 150.959523][ C1] __rcu_read_unlock+0x57/0x390 [ 150.964349][ C1] inet_gro_receive+0x734/0x770 [ 150.969173][ C1] dev_gro_receive+0x9d9/0x10f0 [ 150.974017][ C1] napi_gro_receive+0x76/0x2f0 [ 150.978753][ C1] receive_buf+0x24c/0x3420 [ 150.983230][ C1] virtnet_poll+0x343/0x790 [ 150.987706][ C1] net_rx_action+0x3ad/0xac0 [ 150.992269][ C1] __do_softirq+0x118/0x34a [ 150.996755][ C1] run_ksoftirqd+0x41/0x60 [ 151.001146][ C1] smpboot_thread_fn+0x374/0x4a0 [ 151.006052][ C1] kthread+0x203/0x230 [ 151.010092][ C1] ret_from_fork+0x1f/0x30 [ 151.014489][ C1] [ 151.016808][ C1] read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: [ 151.024602][ C1] tick_sched_do_timer+0x2e/0xd0 [ 151.029513][ C1] tick_sched_timer+0x3f/0xd0 [ 151.034160][ C1] __hrtimer_run_queues+0x271/0x600 [ 151.039330][ C1] hrtimer_interrupt+0x226/0x490 [ 151.044240][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 151.049669][ C1] apic_timer_interrupt+0xf/0x20 [ 151.054593][ C1] __tsan_read8+0xe4/0x110 [ 151.058996][ C1] check_stack_object+0x31/0x90 [ 151.063829][ C1] __check_object_size+0xd5/0x337 [ 151.068825][ C1] simple_copy_to_iter+0x48/0x80 [ 151.073733][ C1] __skb_datagram_iter+0x23f/0x470 [ 151.078821][ C1] skb_copy_datagram_iter+0x65/0x160 [ 151.084087][ C1] tcp_recvmsg+0x109e/0x1ba0 [ 151.088648][ C1] inet_recvmsg+0xc1/0x250 [ 151.093052][ C1] sock_recvmsg+0x8e/0xb0 [ 151.097352][ C1] sock_read_iter+0x185/0x230 [ 151.102006][ C1] new_sync_read+0x416/0x450 [ 151.106580][ C1] __vfs_read+0x9e/0xb0 [ 151.110708][ C1] vfs_read+0x13e/0x2b0 [ 151.114850][ C1] ksys_read+0x16a/0x1a0 [ 151.119064][ C1] __x64_sys_read+0x49/0x60 [ 151.123554][ C1] do_syscall_64+0xc7/0x3b0 [ 151.128045][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.133917][ C1] [ 151.136220][ C1] Reported by Kernel Concurrency Sanitizer on: [ 151.142628][ C1] CPU: 1 PID: 8908 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 151.150837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.160864][ C1] ================================================================== [ 151.168895][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 151.175467][ C1] CPU: 1 PID: 8908 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 151.183671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.193697][ C1] Call Trace: [ 151.196960][ C1] [ 151.199808][ C1] dump_stack+0x11d/0x187 [ 151.204118][ C1] panic+0x210/0x640 [ 151.208002][ C1] ? vprintk_func+0x89/0x13a [ 151.212566][ C1] kcsan_report.cold+0xc/0x1a [ 151.217251][ C1] kcsan_setup_watchpoint+0x3fb/0x440 [ 151.222600][ C1] tick_sched_do_timer+0x2e/0xd0 [ 151.227525][ C1] tick_sched_timer+0x3f/0xd0 [ 151.232177][ C1] __hrtimer_run_queues+0x271/0x600 [ 151.237360][ C1] ? tick_sched_do_timer+0xd0/0xd0 [ 151.242452][ C1] hrtimer_interrupt+0x226/0x490 [ 151.247365][ C1] ? kvm_clock_read+0x14/0x30 [ 151.252041][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 151.257484][ C1] apic_timer_interrupt+0xf/0x20 [ 151.262411][ C1] [ 151.265326][ C1] RIP: 0010:__tsan_read8+0xe4/0x110 [ 151.270500][ C1] Code: c4 ac 7e 48 c1 e9 10 83 e1 0e 75 cf 83 ea 01 89 50 04 eb c7 80 78 0c 00 75 c1 48 c7 c2 ff ff ff ff 65 48 0f c1 15 5c cd ad 7e <48> 83 ea 01 79 ab 31 d2 be 08 00 00 00 e9 8a f1 ff ff 31 d2 be 08 [ 151.290093][ C1] RSP: 0018:ffffc90000dd79e0 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13 [ 151.298487][ C1] RAX: ffff8881268e1a58 RBX: ffff88811dd4a53e RCX: ffffffff88af0460 [ 151.306446][ C1] RDX: 0000000000000032 RSI: ffffffff817020c7 RDI: ffff8881268e1058 [ 151.314403][ C1] RBP: ffff88811dd4a48c R08: 0000000000000000 R09: 00008881268e1058 [ 151.322347][ C1] R10: 000088811e7e24c2 R11: 00008881268e105f R12: ffff8881268e1040 [ 151.330294][ C1] R13: ffff88811dd4a53d R14: 00000000000004ee R15: 000000000000000a [ 151.338249][ C1] ? check_stack_object+0x27/0x90 [ 151.343250][ C1] check_stack_object+0x31/0x90 [ 151.348074][ C1] __check_object_size+0xd5/0x337 [ 151.353074][ C1] simple_copy_to_iter+0x48/0x80 [ 151.357999][ C1] __skb_datagram_iter+0x23f/0x470 [ 151.363270][ C1] ? skb_copy_datagram_iter+0x160/0x160 [ 151.368804][ C1] skb_copy_datagram_iter+0x65/0x160 [ 151.374064][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 151.379947][ C1] tcp_recvmsg+0x109e/0x1ba0 [ 151.384534][ C1] inet_recvmsg+0xc1/0x250 [ 151.388940][ C1] ? apparmor_socket_recvmsg+0x38/0x40 [ 151.394415][ C1] ? inet_sendpage+0xf0/0xf0 [ 151.398984][ C1] sock_recvmsg+0x8e/0xb0 [ 151.403288][ C1] sock_read_iter+0x185/0x230 [ 151.407945][ C1] new_sync_read+0x416/0x450 [ 151.412515][ C1] __vfs_read+0x9e/0xb0 [ 151.416647][ C1] vfs_read+0x13e/0x2b0 [ 151.420779][ C1] ksys_read+0x16a/0x1a0 [ 151.425005][ C1] __x64_sys_read+0x49/0x60 [ 151.429523][ C1] do_syscall_64+0xc7/0x3b0 [ 151.434001][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.439877][ C1] RIP: 0033:0x4b3cdb [ 151.443748][ C1] Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 bb a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 151.463326][ C1] RSP: 002b:000000c000077890 EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 151.471708][ C1] RAX: ffffffffffffffda RBX: 000000c00002c000 RCX: 00000000004b3cdb [ 151.479653][ C1] RDX: 0000000000001000 RSI: 000000c000230000 RDI: 0000000000000006 [ 151.487597][ C1] RBP: 000000c0000778e0 R08: 0000000000000001 R09: 0000000000000002 [ 151.495567][ C1] R10: 0000000000005fad R11: 0000000000000206 R12: 00000000000069c1 [ 151.503518][ C1] R13: 0000000000000400 R14: 0000000000000040 R15: 0000000000000020 [ 151.512934][ C1] Kernel Offset: disabled [ 151.517247][ C1] Rebooting in 86400 seconds..