[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2020/06/05 13:13:52 fuzzer started 2020/06/05 13:13:53 dialing manager at 10.128.0.105:41441 2020/06/05 13:13:53 syscalls: 3055 2020/06/05 13:13:53 code coverage: enabled 2020/06/05 13:13:53 comparison tracing: enabled 2020/06/05 13:13:53 extra coverage: enabled 2020/06/05 13:13:53 setuid sandbox: enabled 2020/06/05 13:13:53 namespace sandbox: enabled 2020/06/05 13:13:53 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/05 13:13:53 fault injection: enabled 2020/06/05 13:13:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/05 13:13:53 net packet injection: enabled 2020/06/05 13:13:53 net device setup: enabled 2020/06/05 13:13:53 concurrency sanitizer: enabled 2020/06/05 13:13:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/05 13:13:53 USB emulation: enabled 2020/06/05 13:13:54 adding functions to KCSAN blacklist: 'futex_wait_queue_me' '_find_next_bit' syzkaller login: [ 51.323828][ T8923] KCSAN: could not find function: '_find_next_bit' [ 52.949714][ T8911] ================================================================== [ 52.957833][ T8911] BUG: KCSAN: data-race in ep_poll / ep_poll_callback [ 52.964584][ T8911] [ 52.966898][ T8911] write to 0xffff888125559590 of 8 bytes by interrupt on cpu 1: [ 52.974525][ T8911] ep_poll_callback+0x5f2/0x6c0 [ 52.979362][ T8911] __wake_up_common+0x76/0x180 [ 52.984109][ T8911] __wake_up_common_lock+0x77/0xb0 [ 52.989205][ T8911] sock_def_readable+0x9d/0x130 [ 52.994042][ T8911] tcp_data_ready+0x76/0xc0 [ 52.998530][ T8911] tcp_rcv_established+0xcb8/0xee0 [ 53.003621][ T8911] tcp_v4_do_rcv+0x396/0x4f0 [ 53.008195][ T8911] tcp_v4_rcv+0x1c55/0x1e10 [ 53.012683][ T8911] ip_protocol_deliver_rcu+0x4b/0x410 [ 53.018054][ T8911] ip_local_deliver_finish+0xf3/0x120 [ 53.023782][ T8911] ip_local_deliver+0x135/0x220 [ 53.028617][ T8911] ip_sublist_rcv_finish+0xf0/0x140 [ 53.033818][ T8911] ip_sublist_rcv+0x3f8/0x530 [ 53.038481][ T8911] ip_list_rcv+0x2f3/0x321 [ 53.042884][ T8911] __netif_receive_skb_list_core+0x368/0x5c0 [ 53.048850][ T8911] netif_receive_skb_list_internal+0x5c7/0x810 [ 53.054987][ T8911] gro_normal_list.part.0+0x37/0xa0 [ 53.060169][ T8911] gro_normal_one+0x14c/0x160 [ 53.064829][ T8911] napi_gro_receive+0x27d/0x2f0 [ 53.069666][ T8911] receive_buf+0x24c/0x3420 [ 53.074155][ T8911] virtnet_poll+0x343/0x790 [ 53.078642][ T8911] net_rx_action+0x3ad/0xac0 [ 53.083216][ T8911] __do_softirq+0x118/0x34a [ 53.087706][ T8911] run_ksoftirqd+0x41/0x60 [ 53.092105][ T8911] smpboot_thread_fn+0x374/0x4a0 [ 53.097024][ T8911] kthread+0x203/0x230 [ 53.101073][ T8911] ret_from_fork+0x1f/0x30 [ 53.105464][ T8911] [ 53.107780][ T8911] read to 0xffff888125559590 of 8 bytes by task 8911 on cpu 0: [ 53.115306][ T8911] ep_poll+0x5ad/0x910 [ 53.119356][ T8911] do_epoll_wait+0x15a/0x180 [ 53.123927][ T8911] __x64_sys_epoll_pwait+0xc6/0x170 [ 53.129113][ T8911] do_syscall_64+0xc7/0x3b0 [ 53.133600][ T8911] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.139465][ T8911] [ 53.141771][ T8911] Reported by Kernel Concurrency Sanitizer on: [ 53.147911][ T8911] CPU: 0 PID: 8911 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 53.156124][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.166278][ T8911] ================================================================== [ 53.174322][ T8911] Kernel panic - not syncing: panic_on_warn set ... [ 53.180899][ T8911] CPU: 0 PID: 8911 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 53.189130][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.199164][ T8911] Call Trace: [ 53.202444][ T8911] dump_stack+0x11d/0x187 [ 53.206763][ T8911] panic+0x210/0x640 [ 53.210663][ T8911] ? vprintk_func+0x89/0x13a [ 53.215242][ T8911] kcsan_report.cold+0xc/0x1a [ 53.219914][ T8911] kcsan_setup_watchpoint+0x3fb/0x440 [ 53.225449][ T8911] ep_poll+0x5ad/0x910 [ 53.229511][ T8911] ? wake_up_q+0x90/0x90 [ 53.233747][ T8911] do_epoll_wait+0x15a/0x180 [ 53.238326][ T8911] __x64_sys_epoll_pwait+0xc6/0x170 [ 53.243515][ T8911] do_syscall_64+0xc7/0x3b0 [ 53.248007][ T8911] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.253878][ T8911] RIP: 0033:0x469240 [ 53.257763][ T8911] Code: 0f 05 89 44 24 20 c3 cc cc cc 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 44 8b 54 24 1c 49 c7 c0 00 00 00 00 b8 19 01 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 7c 24 08 48 c7 [ 53.277351][ T8911] RSP: 002b:000000c0000497f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 53.285745][ T8911] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000469240 [ 53.293699][ T8911] RDX: 0000000000000080 RSI: 000000c000049840 RDI: 0000000000000003 [ 53.301654][ T8911] RBP: 000000c000049e40 R08: 0000000000000000 R09: 0000000000000000 [ 53.309607][ T8911] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 [ 53.317561][ T8911] R13: 000000c000000f00 R14: 000000522ca97123 R15: 00000000000002a1 [ 53.326937][ T8911] Kernel Offset: disabled [ 53.331255][ T8911] Rebooting in 86400 seconds..