[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.171' (ECDSA) to the list of known hosts. 2020/05/20 10:44:47 fuzzer started 2020/05/20 10:44:48 dialing manager at 10.128.0.105:35495 2020/05/20 10:44:48 syscalls: 3055 2020/05/20 10:44:48 code coverage: enabled 2020/05/20 10:44:48 comparison tracing: enabled 2020/05/20 10:44:48 extra coverage: enabled 2020/05/20 10:44:48 setuid sandbox: enabled 2020/05/20 10:44:48 namespace sandbox: enabled 2020/05/20 10:44:48 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/20 10:44:48 fault injection: enabled 2020/05/20 10:44:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/20 10:44:48 net packet injection: enabled 2020/05/20 10:44:48 net device setup: enabled 2020/05/20 10:44:48 concurrency sanitizer: enabled 2020/05/20 10:44:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/20 10:44:48 USB emulation: enabled syzkaller login: [ 53.562138][ T8926] KCSAN: could not find function: '_find_next_bit' 2020/05/20 10:44:50 adding functions to KCSAN blacklist: 'do_exit' 'find_get_pages_range_tag' 'generic_write_end' 'ep_poll' 'ext4_free_inodes_count' 'do_nanosleep' 'page_counter_charge' 'do_signal_stop' 'run_timer_softirq' '_find_next_bit' 'generic_fillattr' '__ext4_new_inode' [ 86.553811][ T8927] ================================================================== [ 86.562091][ T8927] BUG: KCSAN: data-race in mod_timer / timer_clear_idle [ 86.568998][ T8927] [ 86.571307][ T8927] write to 0xffff88812c01dca4 of 1 bytes by task 0 on cpu 0: [ 86.578692][ T8927] timer_clear_idle+0x3d/0x50 [ 86.583359][ T8927] __tick_nohz_idle_restart_tick+0x32/0x1a0 [ 86.589263][ T8927] tick_nohz_idle_exit+0x19c/0x1d0 [ 86.594357][ T8927] do_idle+0xac/0x290 [ 86.598335][ T8927] cpu_startup_entry+0x14/0x20 [ 86.603086][ T8927] rest_init+0xe4/0xeb [ 86.607135][ T8927] arch_call_rest_init+0x13/0x2b [ 86.612146][ T8927] start_kernel+0x7fe/0x823 [ 86.616699][ T8927] secondary_startup_64+0xa4/0xb0 [ 86.621789][ T8927] [ 86.624104][ T8927] read to 0xffff88812c01dca4 of 1 bytes by task 8927 on cpu 1: [ 86.631630][ T8927] mod_timer+0x631/0x830 [ 86.635974][ T8927] sk_reset_timer+0x29/0xc0 [ 86.640474][ T8927] tcp_rearm_rto+0x1ce/0x280 [ 86.645063][ T8927] tcp_event_new_data_sent+0x23f/0x260 [ 86.650503][ T8927] tcp_write_xmit+0x5c6/0x31e0 [ 86.655260][ T8927] __tcp_push_pending_frames+0x72/0x1b0 [ 86.660814][ T8927] tcp_push+0x1ec/0x3e0 [ 86.664959][ T8927] tcp_sendmsg_locked+0x1de3/0x20f0 [ 86.670146][ T8927] tcp_sendmsg+0x35/0x50 [ 86.674405][ T8927] inet_sendmsg+0x69/0x90 [ 86.678715][ T8927] sock_sendmsg+0x98/0xc0 [ 86.683026][ T8927] sock_write_iter+0x186/0x240 [ 86.687773][ T8927] new_sync_write+0x303/0x400 [ 86.692428][ T8927] __vfs_write+0x9e/0xb0 [ 86.696644][ T8927] vfs_write+0x189/0x380 [ 86.700864][ T8927] ksys_write+0x16a/0x1a0 [ 86.705169][ T8927] __x64_sys_write+0x49/0x60 [ 86.709753][ T8927] do_syscall_64+0xc7/0x3b0 [ 86.714265][ T8927] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 86.720129][ T8927] [ 86.722433][ T8927] Reported by Kernel Concurrency Sanitizer on: [ 86.728585][ T8927] CPU: 1 PID: 8927 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 86.736812][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.746869][ T8927] ================================================================== [ 86.754917][ T8927] Kernel panic - not syncing: panic_on_warn set ... [ 86.761507][ T8927] CPU: 1 PID: 8927 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 86.769880][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.779926][ T8927] Call Trace: [ 86.783233][ T8927] dump_stack+0x11d/0x187 [ 86.787543][ T8927] panic+0x210/0x640 [ 86.791421][ T8927] ? vprintk_func+0x89/0x13a [ 86.796100][ T8927] kcsan_report.cold+0xc/0x1a [ 86.800763][ T8927] kcsan_setup_watchpoint+0x3fb/0x440 [ 86.806197][ T8927] mod_timer+0x631/0x830 [ 86.810720][ T8927] sk_reset_timer+0x29/0xc0 [ 86.815615][ T8927] tcp_rearm_rto+0x1ce/0x280 [ 86.820610][ T8927] tcp_event_new_data_sent+0x23f/0x260 [ 86.826071][ T8927] tcp_write_xmit+0x5c6/0x31e0 [ 86.830823][ T8927] ? iov_iter_advance+0x21c/0x900 [ 86.835845][ T8927] __tcp_push_pending_frames+0x72/0x1b0 [ 86.841379][ T8927] tcp_push+0x1ec/0x3e0 [ 86.845784][ T8927] tcp_sendmsg_locked+0x1de3/0x20f0 [ 86.850968][ T8927] ? aa_label_sk_perm.part.0+0x220/0x290 [ 86.856585][ T8927] tcp_sendmsg+0x35/0x50 [ 86.860807][ T8927] inet_sendmsg+0x69/0x90 [ 86.865220][ T8927] ? inet_send_prepare+0x1f0/0x1f0 [ 86.870501][ T8927] sock_sendmsg+0x98/0xc0 [ 86.874885][ T8927] sock_write_iter+0x186/0x240 [ 86.879651][ T8927] new_sync_write+0x303/0x400 [ 86.884338][ T8927] __vfs_write+0x9e/0xb0 [ 86.888573][ T8927] vfs_write+0x189/0x380 [ 86.892805][ T8927] ksys_write+0x16a/0x1a0 [ 86.897135][ T8927] __x64_sys_write+0x49/0x60 [ 86.902101][ T8927] do_syscall_64+0xc7/0x3b0 [ 86.906599][ T8927] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 86.912494][ T8927] RIP: 0033:0x47c530 [ 86.916405][ T8927] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 86.935995][ T8927] RSP: 002b:000000c4222d14a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 86.944391][ T8927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 86.952339][ T8927] RDX: 0000000000000007 RSI: 000000c420368200 RDI: 0000000000000003 [ 86.960291][ T8927] RBP: 000000c4222d14f8 R08: 0000000000000000 R09: 0000000000000000 [ 86.968246][ T8927] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c4200cdb00 [ 86.976347][ T8927] R13: 0000000000000007 R14: 0000000000c77780 R15: 00000000000054e4 [ 88.069628][ T8927] Shutting down cpus with NMI [ 88.075758][ T8927] Kernel Offset: disabled [ 88.080099][ T8927] Rebooting in 86400 seconds..