[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. 2020/05/14 12:12:37 fuzzer started 2020/05/14 12:12:37 dialing manager at 10.128.0.105:44163 2020/05/14 12:12:38 syscalls: 3055 2020/05/14 12:12:38 code coverage: enabled 2020/05/14 12:12:38 comparison tracing: enabled 2020/05/14 12:12:38 extra coverage: enabled 2020/05/14 12:12:38 setuid sandbox: enabled 2020/05/14 12:12:38 namespace sandbox: enabled 2020/05/14 12:12:38 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/14 12:12:38 fault injection: enabled 2020/05/14 12:12:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/14 12:12:38 net packet injection: enabled 2020/05/14 12:12:38 net device setup: enabled 2020/05/14 12:12:38 concurrency sanitizer: enabled 2020/05/14 12:12:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/14 12:12:38 USB emulation: enabled syzkaller login: [ 55.660370][ T8926] KCSAN: could not find function: '_find_next_bit' [ 56.339944][ T8926] KCSAN: could not find function: 'poll_schedule_timeout' 2020/05/14 12:12:42 adding functions to KCSAN blacklist: 'page_counter_charge' 'echo_char' '__ext4_new_inode' 'generic_write_end' 'ext4_mark_iloc_dirty' 'dccp_rcv_reset' 'yama_ptracer_del' 'alloc_pid' 'add_timer' 'xas_find_marked' 'blk_mq_dispatch_rq_list' 'do_nanosleep' 'tick_nohz_idle_stop_tick' 'wbt_done' 'copy_process' 'commit_echoes' 'ep_poll' 'do_signal_stop' 'ext4_da_write_end' 'find_get_pages_range_tag' '_find_next_bit' '__synchronize_hardirq' 'mod_timer' 'poll_schedule_timeout' 'ext4_mb_find_by_goal' 'run_timer_softirq' 'generic_fillattr' 'ktime_get_real_seconds' [ 67.408747][ T0] ================================================================== [ 67.417020][ T0] BUG: KCSAN: data-race in tick_nohz_next_event / tick_sched_do_timer [ 67.425158][ T0] [ 67.427494][ T0] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 67.435117][ T0] tick_sched_do_timer+0xb4/0xd0 [ 67.440037][ T0] tick_sched_timer+0x3f/0xd0 [ 67.444689][ T0] __hrtimer_run_queues+0x271/0x600 [ 67.449862][ T0] hrtimer_interrupt+0x226/0x490 [ 67.454782][ T0] smp_apic_timer_interrupt+0xd8/0x270 [ 67.460217][ T0] apic_timer_interrupt+0xf/0x20 [ 67.465152][ T0] __tsan_read8+0x7f/0x110 [ 67.469547][ T0] tcp_rcv_established+0xb76/0xee0 [ 67.474831][ T0] tcp_v4_do_rcv+0x396/0x4f0 [ 67.479399][ T0] tcp_v4_rcv+0x1c55/0x1e10 [ 67.483882][ T0] ip_protocol_deliver_rcu+0x4b/0x410 [ 67.489230][ T0] ip_local_deliver_finish+0xf3/0x120 [ 67.494593][ T0] ip_local_deliver+0x135/0x220 [ 67.499460][ T0] ip_sublist_rcv_finish+0xf0/0x140 [ 67.504633][ T0] ip_sublist_rcv+0x3f8/0x530 [ 67.509301][ T0] ip_list_rcv+0x2f3/0x321 [ 67.513968][ T0] __netif_receive_skb_list_core+0x368/0x5c0 [ 67.519924][ T0] netif_receive_skb_list_internal+0x5c7/0x810 [ 67.526141][ T0] gro_normal_list.part.0+0x37/0xa0 [ 67.531313][ T0] gro_normal_one+0x14c/0x160 [ 67.535963][ T0] napi_gro_receive+0x27d/0x2f0 [ 67.541224][ T0] receive_buf+0x24c/0x3420 [ 67.545703][ T0] virtnet_poll+0x343/0x790 [ 67.550182][ T0] net_rx_action+0x3ad/0xac0 [ 67.554750][ T0] __do_softirq+0x118/0x34a [ 67.559231][ T0] run_ksoftirqd+0x41/0x60 [ 67.563623][ T0] smpboot_thread_fn+0x374/0x4a0 [ 67.569594][ T0] kthread+0x203/0x230 [ 67.573638][ T0] ret_from_fork+0x1f/0x30 [ 67.578022][ T0] [ 67.580354][ T0] read to 0xffffffff8764e210 of 4 bytes by task 0 on cpu 1: [ 67.587624][ T0] tick_nohz_next_event+0x181/0x340 [ 67.592814][ T0] tick_nohz_idle_stop_tick+0x3b9/0x680 [ 67.598348][ T0] do_idle+0x1ad/0x290 [ 67.602421][ T0] cpu_startup_entry+0x14/0x20 [ 67.607248][ T0] start_secondary+0x169/0x1b0 [ 67.611988][ T0] secondary_startup_64+0xa4/0xb0 [ 67.616989][ T0] [ 67.619290][ T0] Reported by Kernel Concurrency Sanitizer on: [ 67.625420][ T0] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 67.633280][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.643397][ T0] ================================================================== [ 67.651447][ T0] Kernel panic - not syncing: panic_on_warn set ... [ 67.658098][ T0] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 67.665961][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.675990][ T0] Call Trace: [ 67.679280][ T0] dump_stack+0x11d/0x187 [ 67.683589][ T0] panic+0x210/0x640 [ 67.687462][ T0] ? vprintk_func+0x89/0x13a [ 67.692048][ T0] kcsan_report.cold+0xc/0x1a [ 67.696724][ T0] kcsan_setup_watchpoint+0x3fb/0x440 [ 67.702091][ T0] tick_nohz_next_event+0x181/0x340 [ 67.707272][ T0] tick_nohz_idle_stop_tick+0x3b9/0x680 [ 67.712806][ T0] ? ktime_get+0x1c9/0x210 [ 67.717199][ T0] ? debug_smp_processor_id+0x3f/0x129 [ 67.722640][ T0] do_idle+0x1ad/0x290 [ 67.726699][ T0] ? debug_smp_processor_id+0x3a/0x129 [ 67.732139][ T0] cpu_startup_entry+0x14/0x20 [ 67.736882][ T0] start_secondary+0x169/0x1b0 [ 67.741644][ T0] secondary_startup_64+0xa4/0xb0 [ 67.747964][ T0] Kernel Offset: disabled [ 67.752285][ T0] Rebooting in 86400 seconds..