Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. [ 43.005710][ T8830] sshd (8830) used greatest stack depth: 10864 bytes left Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. 2020/06/05 04:14:53 fuzzer started 2020/06/05 04:14:53 dialing manager at 10.128.0.105:41401 2020/06/05 04:15:08 syscalls: 3055 2020/06/05 04:15:08 code coverage: enabled 2020/06/05 04:15:08 comparison tracing: enabled 2020/06/05 04:15:08 extra coverage: enabled 2020/06/05 04:15:08 setuid sandbox: enabled 2020/06/05 04:15:08 namespace sandbox: enabled 2020/06/05 04:15:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/05 04:15:08 fault injection: enabled 2020/06/05 04:15:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/05 04:15:08 net packet injection: enabled 2020/06/05 04:15:08 net device setup: enabled 2020/06/05 04:15:08 concurrency sanitizer: enabled 2020/06/05 04:15:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/05 04:15:08 USB emulation: enabled syzkaller login: [ 67.394548][ T8918] KCSAN: could not find function: '_find_next_bit' 2020/06/05 04:15:12 adding functions to KCSAN blacklist: 'pcpu_alloc' 'exit_signals' 'do_nanosleep' 'mod_timer' 'generic_write_end' 'ext4_free_inodes_count' 'find_get_pages_range_tag' 'echo_char' '_find_next_bit' 'decrypt_packet' 'ep_poll' 'run_timer_softirq' '__mpage_writepage' 'shmem_add_to_page_cache' '__ext4_new_inode' 'tick_nohz_idle_stop_tick' '__add_to_page_cache_locked' 'blk_mq_get_request' 'xas_find_marked' 'file_update_time' 'do_readlinkat' 'copy_process' 'get_cpu_idle_time_us' 'kauditd_thread' 'xas_clear_mark' 'blk_mq_sched_dispatch_requests' 'generic_fillattr' 'tick_nohz_next_event' 'ext4_mark_iloc_dirty' 'page_counter_charge' 'do_signal_stop' 'futex_wait_queue_me' 'shmem_getpage_gfp' [ 92.309321][ C0] ================================================================== [ 92.317464][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 92.325513][ C0] [ 92.328058][ C0] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: [ 92.335688][ C0] tick_sched_do_timer+0xb4/0xd0 [ 92.340797][ C0] tick_sched_timer+0x3f/0xd0 [ 92.345550][ C0] __hrtimer_run_queues+0x271/0x600 [ 92.350726][ C0] hrtimer_interrupt+0x226/0x490 [ 92.355668][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 92.361105][ C0] apic_timer_interrupt+0xf/0x20 [ 92.366017][ C0] kcsan_setup_watchpoint+0x25a/0x440 [ 92.371386][ C0] dev_gro_receive+0x234/0x10f0 [ 92.376208][ C0] napi_gro_receive+0x76/0x2f0 [ 92.380960][ C0] receive_buf+0x24c/0x3420 [ 92.385436][ C0] virtnet_poll+0x343/0x790 [ 92.389927][ C0] net_rx_action+0x3ad/0xac0 [ 92.394499][ C0] __do_softirq+0x118/0x34a [ 92.398977][ C0] run_ksoftirqd+0x41/0x60 [ 92.403388][ C0] smpboot_thread_fn+0x374/0x4a0 [ 92.408299][ C0] kthread+0x203/0x230 [ 92.412344][ C0] ret_from_fork+0x1f/0x30 [ 92.416724][ C0] [ 92.419029][ C0] read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 92.426555][ C0] tick_sched_do_timer+0x2e/0xd0 [ 92.431467][ C0] tick_sched_timer+0x3f/0xd0 [ 92.436129][ C0] __hrtimer_run_queues+0x271/0x600 [ 92.441393][ C0] hrtimer_interrupt+0x226/0x490 [ 92.446316][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 92.451749][ C0] apic_timer_interrupt+0xf/0x20 [ 92.456660][ C0] __tsan_read4+0xa/0x110 [ 92.460974][ C0] virtqueue_kick_prepare+0x176/0x260 [ 92.466328][ C0] start_xmit+0x6a9/0xc00 [ 92.470734][ C0] dev_hard_start_xmit+0xeb/0x420 [ 92.475744][ C0] sch_direct_xmit+0x2ae/0x8a0 [ 92.480490][ C0] __qdisc_run+0x336/0xe10 [ 92.484896][ C0] __dev_queue_xmit+0xfa5/0x1810 [ 92.489824][ C0] dev_queue_xmit+0x1e/0x30 [ 92.494317][ C0] ip_finish_output2+0x87d/0xed0 [ 92.499241][ C0] __ip_finish_output+0x22f/0x460 [ 92.504243][ C0] ip_finish_output+0x3e/0x160 [ 92.508979][ C0] ip_output+0xf2/0x240 [ 92.513109][ C0] ip_local_out+0x70/0x90 [ 92.517409][ C0] __ip_queue_xmit+0x3a6/0xa40 [ 92.522164][ C0] ip_queue_xmit+0x3e/0x50 [ 92.526566][ C0] __tcp_transmit_skb+0xe0c/0x1d80 [ 92.531660][ C0] __tcp_send_ack+0x22c/0x2f0 [ 92.536320][ C0] tcp_send_ack+0x2d/0x40 [ 92.540621][ C0] tcp_cleanup_rbuf+0x124/0x340 [ 92.545465][ C0] tcp_recvmsg+0x686/0x1ba0 [ 92.549947][ C0] inet_recvmsg+0xc1/0x250 [ 92.554373][ C0] sock_recvmsg+0x8e/0xb0 [ 92.558688][ C0] sock_read_iter+0x185/0x230 [ 92.563358][ C0] new_sync_read+0x416/0x450 [ 92.567927][ C0] __vfs_read+0x9e/0xb0 [ 92.572071][ C0] vfs_read+0x13e/0x2b0 [ 92.576289][ C0] ksys_read+0x16a/0x1a0 [ 92.580508][ C0] __x64_sys_read+0x49/0x60 [ 92.584993][ C0] do_syscall_64+0xc7/0x3b0 [ 92.589470][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 92.595339][ C0] [ 92.597658][ C0] Reported by Kernel Concurrency Sanitizer on: [ 92.603788][ C0] CPU: 0 PID: 8919 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 92.612337][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.622631][ C0] ================================================================== [ 92.630670][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 92.637229][ C0] CPU: 0 PID: 8919 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 92.645436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.655461][ C0] Call Trace: [ 92.658732][ C0] [ 92.661564][ C0] dump_stack+0x11d/0x187 [ 92.665871][ C0] panic+0x210/0x640 [ 92.669771][ C0] ? vprintk_func+0x89/0x13a [ 92.674351][ C0] kcsan_report.cold+0xc/0x1a [ 92.679623][ C0] kcsan_setup_watchpoint+0x3fb/0x440 [ 92.684986][ C0] tick_sched_do_timer+0x2e/0xd0 [ 92.689901][ C0] tick_sched_timer+0x3f/0xd0 [ 92.694562][ C0] __hrtimer_run_queues+0x271/0x600 [ 92.699746][ C0] ? tick_sched_do_timer+0xd0/0xd0 [ 92.704841][ C0] hrtimer_interrupt+0x226/0x490 [ 92.709763][ C0] ? kvm_clock_read+0x14/0x30 [ 92.714418][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 92.719851][ C0] apic_timer_interrupt+0xf/0x20 [ 92.724755][ C0] [ 92.727679][ C0] RIP: 0010:__tsan_read4+0xa/0x110 [ 92.732767][ C0] Code: e9 bb f4 ff ff ba 01 00 00 00 be 02 00 00 00 e9 bc f3 ff ff e9 27 fa ff ff 0f 1f 80 00 00 00 00 48 ba ff ff ff ff ff ff 00 00 <48> 89 f8 49 89 f9 48 c1 e8 09 49 21 d1 4d 8d 59 03 25 f8 01 00 00 [ 92.752533][ C0] RSP: 0018:ffffc90000e073c0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 92.761197][ C0] RAX: ffff888128f68040 RBX: ffff888128cc7540 RCX: ffffffff82b062a3 [ 92.769591][ C0] RDX: 0000ffffffffffff RSI: ffffffff82b062ad RDI: ffff888128cc7590 [ 92.777733][ C0] RBP: 0000000000000001 R08: ffff888128f68040 R09: 0000888128cc75a8 [ 92.785712][ C0] R10: 0000888128cc757d R11: 0000888128cc75af R12: 0000000000000001 [ 92.793663][ C0] R13: 000000000000a668 R14: ffff88821a073000 R15: 0000000000000000 [ 92.801933][ C0] ? virtqueue_kick_prepare+0x163/0x260 [ 92.807467][ C0] ? virtqueue_kick_prepare+0x16d/0x260 [ 92.813013][ C0] virtqueue_kick_prepare+0x176/0x260 [ 92.819332][ C0] start_xmit+0x6a9/0xc00 [ 92.823656][ C0] dev_hard_start_xmit+0xeb/0x420 [ 92.828724][ C0] sch_direct_xmit+0x2ae/0x8a0 [ 92.833577][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 92.839679][ C0] __qdisc_run+0x336/0xe10 [ 92.844084][ C0] __dev_queue_xmit+0xfa5/0x1810 [ 92.849012][ C0] ? ipt_do_table+0x90b/0xe70 [ 92.853763][ C0] ? __rcu_read_unlock+0x77/0x390 [ 92.858767][ C0] dev_queue_xmit+0x1e/0x30 [ 92.863336][ C0] ip_finish_output2+0x87d/0xed0 [ 92.868257][ C0] __ip_finish_output+0x22f/0x460 [ 92.873266][ C0] ? ipv4_confirm+0xcf/0x150 [ 92.877928][ C0] ip_finish_output+0x3e/0x160 [ 92.882681][ C0] ip_output+0xf2/0x240 [ 92.886903][ C0] ? __ip_finish_output+0x460/0x460 [ 92.892218][ C0] ip_local_out+0x70/0x90 [ 92.896540][ C0] __ip_queue_xmit+0x3a6/0xa40 [ 92.901296][ C0] ip_queue_xmit+0x3e/0x50 [ 92.905766][ C0] __tcp_transmit_skb+0xe0c/0x1d80 [ 92.910870][ C0] __tcp_send_ack+0x22c/0x2f0 [ 92.915539][ C0] tcp_send_ack+0x2d/0x40 [ 92.919851][ C0] tcp_cleanup_rbuf+0x124/0x340 [ 92.924681][ C0] tcp_recvmsg+0x686/0x1ba0 [ 92.929169][ C0] inet_recvmsg+0xc1/0x250 [ 92.933676][ C0] ? apparmor_socket_recvmsg+0x38/0x40 [ 92.939115][ C0] ? inet_sendpage+0xf0/0xf0 [ 92.943692][ C0] sock_recvmsg+0x8e/0xb0 [ 92.948001][ C0] sock_read_iter+0x185/0x230 [ 92.952748][ C0] new_sync_read+0x416/0x450 [ 92.957318][ C0] __vfs_read+0x9e/0xb0 [ 92.961461][ C0] vfs_read+0x13e/0x2b0 [ 92.965592][ C0] ksys_read+0x16a/0x1a0 [ 92.969822][ C0] __x64_sys_read+0x49/0x60 [ 92.974305][ C0] do_syscall_64+0xc7/0x3b0 [ 92.978794][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 92.984659][ C0] RIP: 0033:0x4b3cdb [ 92.988541][ C0] Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 bb a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 93.008138][ C0] RSP: 002b:000000c0001f5890 EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 93.016523][ C0] RAX: ffffffffffffffda RBX: 000000c00002c000 RCX: 00000000004b3cdb [ 93.024502][ C0] RDX: 0000000000001000 RSI: 000000c000070000 RDI: 0000000000000006 [ 93.032449][ C0] RBP: 000000c0001f58e0 R08: 0000000000000001 R09: 0000000000000002 [ 93.040393][ C0] R10: 0000000000006691 R11: 0000000000000206 R12: ffffffffffffffff [ 93.048345][ C0] R13: 0000000000002000 R14: 0000000000000020 R15: 0000000000000002 [ 93.056899][ C0] Kernel Offset: disabled [ 93.061215][ C0] Rebooting in 86400 seconds..