[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.250' (ECDSA) to the list of known hosts. 2020/05/02 18:28:19 fuzzer started 2020/05/02 18:28:19 dialing manager at 10.128.0.105:44117 2020/05/02 18:28:19 syscalls: 2964 2020/05/02 18:28:19 code coverage: enabled 2020/05/02 18:28:19 comparison tracing: enabled 2020/05/02 18:28:19 extra coverage: enabled 2020/05/02 18:28:19 setuid sandbox: enabled 2020/05/02 18:28:19 namespace sandbox: enabled 2020/05/02 18:28:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/02 18:28:19 fault injection: enabled 2020/05/02 18:28:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/02 18:28:19 net packet injection: enabled 2020/05/02 18:28:19 net device setup: enabled 2020/05/02 18:28:19 concurrency sanitizer: enabled 2020/05/02 18:28:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/02 18:28:19 USB emulation: /dev/raw-gadget does not exist syzkaller login: [ 43.577651][ T6725] KCSAN: could not find function: 'poll_schedule_timeout' [ 46.105205][ T6725] KCSAN: could not find function: '_find_next_bit' 2020/05/02 18:28:24 adding functions to KCSAN blacklist: 'get_cpu_idle_time_us' 'ext4_writepages' 'atime_needs_update' 'echo_char' 'pcpu_alloc' 'poll_schedule_timeout' 'blk_mq_get_request' 'add_timer' 'tick_nohz_next_event' 'futex_wait_queue_me' 'ep_poll' 'blk_mq_sched_dispatch_requests' 'do_nanosleep' 'blk_mq_dispatch_rq_list' 'tick_sched_do_timer' 'ext4_mark_iloc_dirty' 'wbt_issue' '__delete_from_page_cache' 'tick_nohz_idle_stop_tick' 'generic_fillattr' 'ext4_free_inodes_count' 'kauditd_thread' 'run_timer_softirq' 'ext4_write_end' '__snd_rawmidi_transmit_ack' '_find_next_bit' 'dd_has_work' 'n_tty_receive_buf_common' 'ktime_get_real_seconds' 'fasync_remove_entry' 'xas_clear_mark' 'do_wait' 'find_get_pages_range_tag' '__mark_inode_dirty' 'mod_timer' 'bond_start_xmit' '__mpage_writepage' '__ext4_new_inode' 'generic_write_end' 'copy_process' 'page_counter_charge' 'filemap_map_pages' [ 154.007472][ T6711] ================================================================== [ 154.015622][ T6711] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_advance [ 154.023500][ T6711] [ 154.025827][ T6711] write to 0xffffffff86fce8c8 of 280 bytes by interrupt on cpu 1: [ 154.033628][ T6711] timekeeping_advance+0x88e/0xd80 [ 154.038726][ T6711] update_wall_time+0x15/0x20 [ 154.043418][ T6711] tick_do_update_jiffies64+0x1e5/0x2a0 [ 154.048937][ T6711] tick_sched_do_timer+0xc7/0xd0 [ 154.054092][ T6711] tick_sched_timer+0x3f/0xd0 [ 154.058750][ T6711] __hrtimer_run_queues+0x271/0x600 [ 154.063936][ T6711] hrtimer_interrupt+0x226/0x490 [ 154.068864][ T6711] smp_apic_timer_interrupt+0xd8/0x270 [ 154.074311][ T6711] apic_timer_interrupt+0xf/0x20 [ 154.079226][ T6711] __write_once_size.constprop.0+0x14/0x20 [ 154.085023][ T6711] nf_hook_slow_list+0x1df/0x29f [ 154.089934][ T6711] ip_sublist_rcv+0x4f9/0x530 [ 154.094584][ T6711] ip_list_rcv+0x2f3/0x321 [ 154.098988][ T6711] __netif_receive_skb_list_core+0x368/0x5c0 [ 154.104947][ T6711] netif_receive_skb_list_internal+0x5c7/0x810 [ 154.111127][ T6711] gro_normal_list.part.0+0x37/0xa0 [ 154.116305][ T6711] gro_normal_one+0x14c/0x160 [ 154.120959][ T6711] napi_gro_receive+0x27d/0x2f0 [ 154.125785][ T6711] receive_buf+0x252/0x2ed0 [ 154.130274][ T6711] virtnet_poll+0x343/0x790 [ 154.134751][ T6711] net_rx_action+0x3ad/0xac0 [ 154.139315][ T6711] __do_softirq+0x118/0x34a [ 154.143795][ T6711] run_ksoftirqd+0x41/0x60 [ 154.148207][ T6711] smpboot_thread_fn+0x374/0x4a0 [ 154.153120][ T6711] kthread+0x203/0x230 [ 154.157163][ T6711] ret_from_fork+0x1f/0x30 [ 154.161564][ T6711] [ 154.163872][ T6711] read to 0xffffffff86fce940 of 8 bytes by task 6711 on cpu 0: [ 154.171388][ T6711] ktime_get_seconds+0x42/0x60 [ 154.176137][ T6711] tcp_rcv_established+0xe79/0xee0 [ 154.181221][ T6711] tcp_v4_do_rcv+0x396/0x4f0 [ 154.185957][ T6711] __release_sock+0x130/0x1e0 [ 154.190605][ T6711] release_sock+0x5e/0x160 [ 154.194993][ T6711] tcp_recvmsg+0x68e/0x1ba0 [ 154.199471][ T6711] inet_recvmsg+0xc1/0x250 [ 154.203864][ T6711] sock_recvmsg+0x8e/0xb0 [ 154.208165][ T6711] sock_read_iter+0x185/0x230 [ 154.212815][ T6711] new_sync_read+0x416/0x450 [ 154.217377][ T6711] __vfs_read+0x9e/0xb0 [ 154.221516][ T6711] vfs_read+0x13e/0x2b0 [ 154.225654][ T6711] ksys_read+0x16a/0x1a0 [ 154.229877][ T6711] __x64_sys_read+0x49/0x60 [ 154.234357][ T6711] do_syscall_64+0xc7/0x3b0 [ 154.238836][ T6711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 154.244705][ T6711] [ 154.247004][ T6711] Reported by Kernel Concurrency Sanitizer on: [ 154.253137][ T6711] CPU: 0 PID: 6711 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 154.261344][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.271371][ T6711] ================================================================== [ 154.279412][ T6711] Kernel panic - not syncing: panic_on_warn set ... [ 154.285983][ T6711] CPU: 0 PID: 6711 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 154.294187][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.304215][ T6711] Call Trace: [ 154.307487][ T6711] dump_stack+0x11d/0x187 [ 154.311805][ T6711] panic+0x210/0x640 [ 154.315677][ T6711] ? vprintk_func+0x89/0x13a [ 154.320250][ T6711] kcsan_report.cold+0xc/0x1a [ 154.324906][ T6711] kcsan_setup_watchpoint+0x3fb/0x440 [ 154.330290][ T6711] ktime_get_seconds+0x42/0x60 [ 154.335033][ T6711] tcp_rcv_established+0xe79/0xee0 [ 154.340133][ T6711] tcp_v4_do_rcv+0x396/0x4f0 [ 154.344701][ T6711] __release_sock+0x130/0x1e0 [ 154.349366][ T6711] release_sock+0x5e/0x160 [ 154.353758][ T6711] tcp_recvmsg+0x68e/0x1ba0 [ 154.358255][ T6711] inet_recvmsg+0xc1/0x250 [ 154.362651][ T6711] ? apparmor_socket_recvmsg+0x38/0x40 [ 154.368093][ T6711] ? inet_sendpage+0xf0/0xf0 [ 154.372660][ T6711] sock_recvmsg+0x8e/0xb0 [ 154.376966][ T6711] sock_read_iter+0x185/0x230 [ 154.381632][ T6711] new_sync_read+0x416/0x450 [ 154.386203][ T6711] __vfs_read+0x9e/0xb0 [ 154.390333][ T6711] vfs_read+0x13e/0x2b0 [ 154.394473][ T6711] ksys_read+0x16a/0x1a0 [ 154.398692][ T6711] __x64_sys_read+0x49/0x60 [ 154.403183][ T6711] do_syscall_64+0xc7/0x3b0 [ 154.407662][ T6711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 154.413535][ T6711] RIP: 0033:0x47c530 [ 154.417422][ T6711] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 154.437363][ T6711] RSP: 002b:000000c42028b810 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 154.445748][ T6711] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 154.453703][ T6711] RDX: 0000000000001000 RSI: 000000c4202fc000 RDI: 0000000000000003 [ 154.461665][ T6711] RBP: 000000c42028b868 R08: 0000000000000000 R09: 0000000000000000 [ 154.469697][ T6711] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 154.477648][ T6711] R13: ffffffffffffffff R14: 0000000000000004 R15: ffffffffffffffff [ 154.486970][ T6711] Kernel Offset: disabled [ 154.491285][ T6711] Rebooting in 86400 seconds..