[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2020/04/22 16:13:51 fuzzer started 2020/04/22 16:13:53 dialing manager at 10.128.0.105:45959 2020/04/22 16:13:53 syscalls: 2960 2020/04/22 16:13:53 code coverage: enabled 2020/04/22 16:13:53 comparison tracing: enabled 2020/04/22 16:13:53 extra coverage: enabled 2020/04/22 16:13:53 setuid sandbox: enabled 2020/04/22 16:13:53 namespace sandbox: enabled 2020/04/22 16:13:53 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/22 16:13:53 fault injection: enabled 2020/04/22 16:13:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/22 16:13:53 net packet injection: enabled 2020/04/22 16:13:53 net device setup: enabled 2020/04/22 16:13:53 concurrency sanitizer: enabled 2020/04/22 16:13:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/22 16:13:53 USB emulation: /dev/raw-gadget does not exist syzkaller login: [ 49.043590][ T6740] KCSAN: could not find function: 'poll_schedule_timeout' [ 52.912325][ T6740] KCSAN: could not find function: '_find_next_bit' 2020/04/22 16:13:59 adding functions to KCSAN blacklist: 'ext4_mark_iloc_dirty' '__bpf_lru_node_move_in' '__mark_inode_dirty' 'page_counter_charge' 'copy_process' 'blk_mq_get_request' '__perf_event_overflow' 'ktime_get_real_seconds' 'atime_needs_update' 'n_tty_receive_buf_common' 'audit_log_start' 'xas_clear_mark' 'blk_mq_sched_dispatch_requests' 'get_cpu_idle_time_us' 'mod_timer' '__tty_hangup' '__writeback_single_inode' 'poll_schedule_timeout' 'ext4_writepages' 'run_timer_softirq' 'tick_nohz_idle_stop_tick' 'add_timer' 'filemap_map_pages' 'snd_seq_check_queue' '__delete_from_page_cache' '__add_to_page_cache_locked' 'tick_nohz_next_event' 'unix_release_sock' 'tick_sched_do_timer' 'lruvec_lru_size' 'wbt_done' 'ext4_set_iomap' 'ep_poll' 'dd_has_work' 'find_get_pages_range_tag' 'do_signal_stop' 'wbt_issue' '__snd_rawmidi_transmit_ack' 'do_syslog' '__filemap_fdatawrite_range' 'echo_char' 'pcpu_alloc' 'kauditd_thread' 'do_nanosleep' 'blk_mq_dispatch_rq_list' 'generic_write_end' 'generic_fillattr' 'do_exit' '__ext4_new_inode' 'ext4_free_inodes_count' '_find_next_bit' 'io_sq_thread' [ 178.986623][ T6723] ================================================================== [ 178.994801][ T6723] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_advance [ 179.002696][ T6723] [ 179.005032][ T6723] write to 0xffffffff86fce8c8 of 280 bytes by interrupt on cpu 0: [ 179.012831][ T6723] timekeeping_advance+0x88e/0xd80 [ 179.017939][ T6723] update_wall_time+0x15/0x20 [ 179.022610][ T6723] tick_do_update_jiffies64+0x1e5/0x2a0 [ 179.028248][ T6723] tick_sched_do_timer+0xc7/0xd0 [ 179.033213][ T6723] tick_sched_timer+0x3f/0xd0 [ 179.037870][ T6723] __hrtimer_run_queues+0x271/0x600 [ 179.043045][ T6723] hrtimer_interrupt+0x226/0x490 [ 179.047962][ T6723] smp_apic_timer_interrupt+0xd8/0x270 [ 179.053423][ T6723] apic_timer_interrupt+0xf/0x20 [ 179.058343][ T6723] __tsan_unaligned_write4+0xa0/0x110 [ 179.063693][ T6723] __build_skb_around+0x54/0x1b0 [ 179.068625][ T6723] __build_skb+0x5f/0x80 [ 179.072842][ T6723] __napi_alloc_skb+0x185/0x210 [ 179.077672][ T6723] page_to_skb+0x99/0x560 [ 179.081978][ T6723] receive_buf+0x18ca/0x2ed0 [ 179.086550][ T6723] virtnet_poll+0x343/0x790 [ 179.091049][ T6723] net_rx_action+0x3ad/0xac0 [ 179.095616][ T6723] __do_softirq+0x118/0x34a [ 179.100097][ T6723] run_ksoftirqd+0x41/0x60 [ 179.104509][ T6723] smpboot_thread_fn+0x374/0x4a0 [ 179.109434][ T6723] kthread+0x203/0x230 [ 179.113479][ T6723] ret_from_fork+0x1f/0x30 [ 179.117883][ T6723] [ 179.120208][ T6723] read to 0xffffffff86fce940 of 8 bytes by task 6723 on cpu 1: [ 179.127752][ T6723] ktime_get_seconds+0x42/0x60 [ 179.132515][ T6723] tcp_rcv_established+0xe79/0xee0 [ 179.137607][ T6723] tcp_v4_do_rcv+0x396/0x4f0 [ 179.142191][ T6723] __release_sock+0x130/0x1e0 [ 179.146843][ T6723] release_sock+0x5e/0x160 [ 179.151252][ T6723] tcp_recvmsg+0x68e/0x1ba0 [ 179.155751][ T6723] inet_recvmsg+0xc1/0x250 [ 179.160172][ T6723] sock_recvmsg+0x8e/0xb0 [ 179.164691][ T6723] sock_read_iter+0x185/0x230 [ 179.169346][ T6723] new_sync_read+0x416/0x450 [ 179.173926][ T6723] __vfs_read+0x9e/0xb0 [ 179.178079][ T6723] vfs_read+0x13e/0x2b0 [ 179.182230][ T6723] ksys_read+0x16a/0x1a0 [ 179.186473][ T6723] __x64_sys_read+0x49/0x60 [ 179.190974][ T6723] do_syscall_64+0xc7/0x3b0 [ 179.195474][ T6723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 179.201349][ T6723] [ 179.203675][ T6723] Reported by Kernel Concurrency Sanitizer on: [ 179.209834][ T6723] CPU: 1 PID: 6723 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 179.218043][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.228073][ T6723] ================================================================== [ 179.236109][ T6723] Kernel panic - not syncing: panic_on_warn set ... [ 179.242672][ T6723] CPU: 1 PID: 6723 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 179.250891][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.260940][ T6723] Call Trace: [ 179.264213][ T6723] dump_stack+0x11d/0x187 [ 179.268521][ T6723] panic+0x210/0x640 [ 179.272393][ T6723] ? vprintk_func+0x89/0x13a [ 179.276977][ T6723] kcsan_report.cold+0xc/0x1a [ 179.281651][ T6723] kcsan_setup_watchpoint+0x3fb/0x440 [ 179.287004][ T6723] ktime_get_seconds+0x42/0x60 [ 179.291747][ T6723] tcp_rcv_established+0xe79/0xee0 [ 179.296843][ T6723] tcp_v4_do_rcv+0x396/0x4f0 [ 179.301428][ T6723] __release_sock+0x130/0x1e0 [ 179.306101][ T6723] release_sock+0x5e/0x160 [ 179.310505][ T6723] tcp_recvmsg+0x68e/0x1ba0 [ 179.315018][ T6723] ? sock_poll+0xfc/0x240 [ 179.319344][ T6723] inet_recvmsg+0xc1/0x250 [ 179.323740][ T6723] ? apparmor_socket_recvmsg+0x38/0x40 [ 179.329193][ T6723] ? inet_sendpage+0xf0/0xf0 [ 179.333760][ T6723] sock_recvmsg+0x8e/0xb0 [ 179.338069][ T6723] sock_read_iter+0x185/0x230 [ 179.342740][ T6723] new_sync_read+0x416/0x450 [ 179.347325][ T6723] __vfs_read+0x9e/0xb0 [ 179.351456][ T6723] vfs_read+0x13e/0x2b0 [ 179.355589][ T6723] ksys_read+0x16a/0x1a0 [ 179.359810][ T6723] __x64_sys_read+0x49/0x60 [ 179.364292][ T6723] do_syscall_64+0xc7/0x3b0 [ 179.368778][ T6723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 179.374661][ T6723] RIP: 0033:0x47c530 [ 179.378539][ T6723] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 179.398211][ T6723] RSP: 002b:000000c4202837d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 179.406599][ T6723] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 179.414547][ T6723] RDX: 0000000000001000 RSI: 000000c4200a8000 RDI: 0000000000000003 [ 179.422510][ T6723] RBP: 000000c420283830 R08: 0000000000000000 R09: 0000000000000000 [ 179.430460][ T6723] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000008 [ 179.438412][ T6723] R13: ffffffffffffffff R14: 0000000000000004 R15: ffffffffffffffff [ 179.447749][ T6723] Kernel Offset: disabled [ 179.452086][ T6723] Rebooting in 86400 seconds..