[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2020/06/06 13:16:44 fuzzer started 2020/06/06 13:16:44 dialing manager at 10.128.0.105:33593 2020/06/06 13:16:44 syscalls: 3055 2020/06/06 13:16:44 code coverage: enabled 2020/06/06 13:16:44 comparison tracing: enabled 2020/06/06 13:16:44 extra coverage: enabled 2020/06/06 13:16:44 setuid sandbox: enabled 2020/06/06 13:16:44 namespace sandbox: enabled 2020/06/06 13:16:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/06 13:16:44 fault injection: enabled 2020/06/06 13:16:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/06 13:16:44 net packet injection: enabled 2020/06/06 13:16:44 net device setup: enabled 2020/06/06 13:16:44 concurrency sanitizer: enabled 2020/06/06 13:16:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/06 13:16:44 USB emulation: enabled 2020/06/06 13:16:44 adding functions to KCSAN blacklist: 'do_syslog' syzkaller login: [ 51.854773][ T8896] ================================================================== [ 51.862898][ T8896] BUG: KCSAN: data-race in ep_poll / ep_poll_callback [ 51.869769][ T8896] [ 51.872085][ T8896] write to 0xffff88812b05ce90 of 8 bytes by interrupt on cpu 1: [ 51.879705][ T8896] ep_poll_callback+0x5f2/0x6c0 [ 51.884891][ T8896] __wake_up_common+0x76/0x180 [ 51.889639][ T8896] __wake_up_common_lock+0x77/0xb0 [ 51.894736][ T8896] sock_def_readable+0x9d/0x130 [ 51.899570][ T8896] tcp_data_ready+0x76/0xc0 [ 51.904058][ T8896] tcp_rcv_established+0xcb8/0xee0 [ 51.909151][ T8896] tcp_v4_do_rcv+0x396/0x4f0 [ 51.913721][ T8896] tcp_v4_rcv+0x1c55/0x1e10 [ 51.918210][ T8896] ip_protocol_deliver_rcu+0x4b/0x410 [ 51.923565][ T8896] ip_local_deliver_finish+0xf3/0x120 [ 51.928919][ T8896] ip_local_deliver+0x135/0x220 [ 51.933754][ T8896] ip_sublist_rcv_finish+0xf0/0x140 [ 51.938949][ T8896] ip_sublist_rcv+0x3f8/0x530 [ 51.943610][ T8896] ip_list_rcv+0x2f3/0x321 [ 51.948026][ T8896] __netif_receive_skb_list_core+0x368/0x5c0 [ 51.953989][ T8896] netif_receive_skb_list_internal+0x5c7/0x810 [ 51.960126][ T8896] gro_normal_list.part.0+0x37/0xa0 [ 51.965310][ T8896] gro_normal_one+0x14c/0x160 [ 51.969981][ T8896] napi_gro_receive+0x27d/0x2f0 [ 51.974819][ T8896] receive_buf+0x24c/0x3420 [ 51.979304][ T8896] virtnet_poll+0x343/0x790 [ 51.983824][ T8896] net_rx_action+0x3ad/0xac0 [ 51.988410][ T8896] __do_softirq+0x118/0x34a [ 51.993246][ T8896] run_ksoftirqd+0x41/0x60 [ 51.997644][ T8896] smpboot_thread_fn+0x374/0x4a0 [ 52.002564][ T8896] kthread+0x203/0x230 [ 52.006613][ T8896] ret_from_fork+0x1f/0x30 [ 52.011001][ T8896] [ 52.013316][ T8896] read to 0xffff88812b05ce90 of 8 bytes by task 8896 on cpu 0: [ 52.020841][ T8896] ep_poll+0x473/0x910 [ 52.024963][ T8896] do_epoll_wait+0x15a/0x180 [ 52.029535][ T8896] __x64_sys_epoll_pwait+0xc6/0x170 [ 52.034722][ T8896] do_syscall_64+0xc7/0x3b0 [ 52.039235][ T8896] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.045101][ T8896] [ 52.047407][ T8896] Reported by Kernel Concurrency Sanitizer on: [ 52.053545][ T8896] CPU: 0 PID: 8896 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 52.061759][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.071794][ T8896] ================================================================== [ 52.079833][ T8896] Kernel panic - not syncing: panic_on_warn set ... [ 52.086406][ T8896] CPU: 0 PID: 8896 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 52.094619][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.104669][ T8896] Call Trace: [ 52.107948][ T8896] dump_stack+0x11d/0x187 [ 52.112266][ T8896] panic+0x210/0x640 [ 52.116149][ T8896] ? vprintk_func+0x89/0x13a [ 52.120725][ T8896] kcsan_report.cold+0xc/0x1a [ 52.125393][ T8896] kcsan_setup_watchpoint+0x3fb/0x440 [ 52.130751][ T8896] ep_poll+0x473/0x910 [ 52.134814][ T8896] ? __fget_light+0xc0/0x1a0 [ 52.139403][ T8896] do_epoll_wait+0x15a/0x180 [ 52.143981][ T8896] __x64_sys_epoll_pwait+0xc6/0x170 [ 52.149169][ T8896] do_syscall_64+0xc7/0x3b0 [ 52.153661][ T8896] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.159627][ T8896] RIP: 0033:0x469240 [ 52.163525][ T8896] Code: 0f 05 89 44 24 20 c3 cc cc cc 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 44 8b 54 24 1c 49 c7 c0 00 00 00 00 b8 19 01 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 7c 24 08 48 c7 [ 52.183122][ T8896] RSP: 002b:000000c00004f7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 52.191602][ T8896] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 0000000000469240 [ 52.199555][ T8896] RDX: 0000000000000080 RSI: 000000c00004f840 RDI: 0000000000000003 [ 52.207508][ T8896] RBP: 000000c00004fe40 R08: 0000000000000000 R09: 0000000000000000 [ 52.215462][ T8896] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000003 [ 52.223418][ T8896] R13: 000000c000000900 R14: 0000000000000000 R15: 0000000000000000 [ 52.232744][ T8896] Kernel Offset: disabled [ 52.237060][ T8896] Rebooting in 86400 seconds..