[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. 2020/06/03 05:35:05 fuzzer started 2020/06/03 05:35:05 dialing manager at 10.128.0.105:34577 2020/06/03 05:35:05 syscalls: 3055 2020/06/03 05:35:05 code coverage: enabled 2020/06/03 05:35:05 comparison tracing: enabled 2020/06/03 05:35:05 extra coverage: enabled 2020/06/03 05:35:05 setuid sandbox: enabled 2020/06/03 05:35:05 namespace sandbox: enabled 2020/06/03 05:35:05 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/03 05:35:05 fault injection: enabled 2020/06/03 05:35:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/03 05:35:05 net packet injection: enabled 2020/06/03 05:35:05 net device setup: enabled 2020/06/03 05:35:05 concurrency sanitizer: enabled 2020/06/03 05:35:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/03 05:35:05 USB emulation: enabled syzkaller login: [ 55.523585][ T8911] KCSAN: could not find function: 'poll_schedule_timeout' [ 57.894461][ T8911] KCSAN: could not find function: '_find_next_bit' 2020/06/03 05:35:11 adding functions to KCSAN blacklist: 'file_update_time' 'kauditd_thread' 'blk_mq_get_request' 'ext4_mark_iloc_dirty' 'xas_find_marked' 'decrypt_packet' 'sit_tunnel_xmit' 'generic_write_end' 'futex_wait_queue_me' '__writeback_single_inode' 'tick_nohz_idle_stop_tick' 'atime_needs_update' 'vm_area_dup' 'generic_fillattr' 'ext4_mb_good_group' 'run_timer_softirq' 'mod_timer' 'blk_mq_dispatch_rq_list' '__mark_inode_dirty' 'kcm_rfree' 'tick_nohz_next_event' 'poll_schedule_timeout' '__add_to_page_cache_locked' 'add_timer' 'copy_process' 'install_new_memslots' 'blk_mq_sched_dispatch_requests' 'do_signal_stop' 'shmem_file_read_iter' '__perf_event_overflow' 'io_sq_thread' 'xas_clear_mark' 'do_nanosleep' '__ext4_new_inode' 'page_counter_charge' 'ext4_free_inodes_count' 'hrtimer_interrupt' 'do_syslog' 'ext4_da_write_end' 'ep_poll' 'complete_signal' '_find_next_bit' '__get_user_pages' '__delete_from_page_cache' 'find_get_pages_range_tag' '__filemap_fdatawrite_range' 'dd_has_work' [ 173.916796][ C1] ================================================================== [ 173.925035][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 173.933114][ C1] [ 173.935419][ C1] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 173.943088][ C1] tick_sched_do_timer+0xb4/0xd0 [ 173.948153][ C1] tick_sched_timer+0x3f/0xd0 [ 173.952904][ C1] __hrtimer_run_queues+0x271/0x600 [ 173.958081][ C1] hrtimer_interrupt+0x226/0x490 [ 173.963014][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 173.968465][ C1] apic_timer_interrupt+0xf/0x20 [ 173.973397][ C1] kcsan_setup_watchpoint+0x25a/0x440 [ 173.978764][ C1] do_epoll_wait+0x143/0x180 [ 173.983472][ C1] __x64_sys_epoll_pwait+0xc6/0x170 [ 173.988652][ C1] do_syscall_64+0xc7/0x3b0 [ 173.993142][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 173.999002][ C1] [ 174.001399][ C1] read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: [ 174.008926][ C1] tick_sched_do_timer+0x2e/0xd0 [ 174.013864][ C1] tick_sched_timer+0x3f/0xd0 [ 174.018709][ C1] __hrtimer_run_queues+0x271/0x600 [ 174.023891][ C1] hrtimer_interrupt+0x226/0x490 [ 174.028815][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 174.034352][ C1] apic_timer_interrupt+0xf/0x20 [ 174.039273][ C1] __tsan_unaligned_write8+0xd/0x110 [ 174.044542][ C1] tcp_try_coalesce+0x399/0x430 [ 174.049377][ C1] tcp_queue_rcv+0x9b/0x380 [ 174.053864][ C1] tcp_rcv_established+0xba3/0xee0 [ 174.058953][ C1] tcp_v4_do_rcv+0x396/0x4f0 [ 174.063539][ C1] tcp_v4_rcv+0x1c55/0x1e10 [ 174.068032][ C1] ip_protocol_deliver_rcu+0x4b/0x410 [ 174.073405][ C1] ip_local_deliver_finish+0xf3/0x120 [ 174.078755][ C1] ip_local_deliver+0x135/0x220 [ 174.083588][ C1] ip_sublist_rcv_finish+0xf0/0x140 [ 174.088779][ C1] ip_sublist_rcv+0x3f8/0x530 [ 174.093449][ C1] ip_list_rcv+0x2f3/0x321 [ 174.097849][ C1] __netif_receive_skb_list_core+0x368/0x5c0 [ 174.103821][ C1] netif_receive_skb_list_internal+0x5c7/0x810 [ 174.109954][ C1] gro_normal_list.part.0+0x37/0xa0 [ 174.115216][ C1] gro_normal_one+0x14c/0x160 [ 174.119889][ C1] napi_gro_receive+0x27d/0x2f0 [ 174.124800][ C1] receive_buf+0x24c/0x3420 [ 174.129369][ C1] virtnet_poll+0x343/0x790 [ 174.133864][ C1] net_rx_action+0x3ad/0xac0 [ 174.138440][ C1] __do_softirq+0x118/0x34a [ 174.142921][ C1] run_ksoftirqd+0x41/0x60 [ 174.147336][ C1] smpboot_thread_fn+0x374/0x4a0 [ 174.152269][ C1] kthread+0x203/0x230 [ 174.156865][ C1] ret_from_fork+0x1f/0x30 [ 174.161308][ C1] [ 174.163734][ C1] Reported by Kernel Concurrency Sanitizer on: [ 174.169928][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 174.178064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.188123][ C1] ================================================================== [ 174.196174][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 174.202748][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.7.0-rc1-syzkaller #0 [ 174.210941][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.221311][ C1] Call Trace: [ 174.224578][ C1] [ 174.227425][ C1] dump_stack+0x11d/0x187 [ 174.231748][ C1] panic+0x210/0x640 [ 174.235656][ C1] ? vprintk_func+0x89/0x13a [ 174.240221][ C1] kcsan_report.cold+0xc/0x1a [ 174.244937][ C1] kcsan_setup_watchpoint+0x3fb/0x440 [ 174.250323][ C1] tick_sched_do_timer+0x2e/0xd0 [ 174.255262][ C1] tick_sched_timer+0x3f/0xd0 [ 174.259928][ C1] __hrtimer_run_queues+0x271/0x600 [ 174.265192][ C1] ? tick_sched_do_timer+0xd0/0xd0 [ 174.270314][ C1] hrtimer_interrupt+0x226/0x490 [ 174.275241][ C1] ? kvm_clock_read+0x14/0x30 [ 174.279920][ C1] smp_apic_timer_interrupt+0xd8/0x270 [ 174.285366][ C1] apic_timer_interrupt+0xf/0x20 [ 174.290286][ C1] [ 174.293206][ C1] RIP: 0010:__tsan_unaligned_write8+0xd/0x110 [ 174.299261][ C1] Code: f1 ff ff 31 d2 be 08 00 00 00 e9 8e f0 ff ff e9 f9 f6 ff ff 66 0f 1f 84 00 00 00 00 00 48 ba ff ff ff ff ff ff 00 00 48 89 f8 <49> 89 fa 48 c1 e8 09 49 21 d2 48 89 d6 4d 8d 5a 07 25 f8 01 00 00 [ 174.319254][ C1] RSP: 0018:ffffc90000cf34e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 174.327797][ C1] RAX: ffff888121f97120 RBX: ffff888121075000 RCX: ffffffff88af0500 [ 174.335752][ C1] RDX: 0000ffffffffffff RSI: 0000ffffffffffff RDI: ffff888121f97120 [ 174.343697][ C1] RBP: ffff888121f97100 R08: 0000000000000000 R09: 0000888121075020 [ 174.351659][ C1] R10: 0000888121f97137 R11: 0000888121075027 R12: 1614f1fa9c468c85 [ 174.360043][ C1] R13: ffff888121f97134 R14: 0000000000000001 R15: ffff888121f9712c [ 174.368028][ C1] tcp_try_coalesce+0x399/0x430 [ 174.372875][ C1] tcp_queue_rcv+0x9b/0x380 [ 174.377363][ C1] tcp_rcv_established+0xba3/0xee0 [ 174.382472][ C1] tcp_v4_do_rcv+0x396/0x4f0 [ 174.387137][ C1] tcp_v4_rcv+0x1c55/0x1e10 [ 174.391643][ C1] ip_protocol_deliver_rcu+0x4b/0x410 [ 174.396998][ C1] ip_local_deliver_finish+0xf3/0x120 [ 174.402351][ C1] ip_local_deliver+0x135/0x220 [ 174.407195][ C1] ? ip_protocol_deliver_rcu+0x410/0x410 [ 174.412833][ C1] ip_sublist_rcv_finish+0xf0/0x140 [ 174.418016][ C1] ip_sublist_rcv+0x3f8/0x530 [ 174.422677][ C1] ? ip_sublist_rcv+0x530/0x530 [ 174.427519][ C1] ip_list_rcv+0x2f3/0x321 [ 174.431929][ C1] ? ip_rcv+0x1b0/0x1b0 [ 174.436072][ C1] __netif_receive_skb_list_core+0x368/0x5c0 [ 174.442029][ C1] ? ktime_get_with_offset+0x1e6/0x230 [ 174.447475][ C1] netif_receive_skb_list_internal+0x5c7/0x810 [ 174.454318][ C1] gro_normal_list.part.0+0x37/0xa0 [ 174.459501][ C1] ? __write_once_size+0x7c/0x100 [ 174.464557][ C1] gro_normal_one+0x14c/0x160 [ 174.469268][ C1] napi_gro_receive+0x27d/0x2f0 [ 174.474117][ C1] receive_buf+0x24c/0x3420 [ 174.478612][ C1] ? virtqueue_get_buf_ctx+0x4db/0x5c0 [ 174.484064][ C1] virtnet_poll+0x343/0x790 [ 174.488568][ C1] net_rx_action+0x3ad/0xac0 [ 174.493162][ C1] __do_softirq+0x118/0x34a [ 174.497661][ C1] ? takeover_tasklets+0x240/0x240 [ 174.502874][ C1] run_ksoftirqd+0x41/0x60 [ 174.507280][ C1] smpboot_thread_fn+0x374/0x4a0 [ 174.512209][ C1] ? constant_test_bit.constprop.0+0x30/0x30 [ 174.518168][ C1] kthread+0x203/0x230 [ 174.523121][ C1] ? kthread_unpark+0xd0/0xd0 [ 174.527958][ C1] ret_from_fork+0x1f/0x30 [ 174.533867][ C1] Kernel Offset: disabled [ 174.538213][ C1] Rebooting in 86400 seconds..