[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. 2020/05/18 22:21:09 fuzzer started 2020/05/18 22:21:10 dialing manager at 10.128.0.105:34165 2020/05/18 22:21:11 syscalls: 3055 2020/05/18 22:21:11 code coverage: enabled 2020/05/18 22:21:11 comparison tracing: enabled 2020/05/18 22:21:11 extra coverage: enabled 2020/05/18 22:21:11 setuid sandbox: enabled 2020/05/18 22:21:11 namespace sandbox: enabled 2020/05/18 22:21:11 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/18 22:21:11 fault injection: enabled 2020/05/18 22:21:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/18 22:21:11 net packet injection: enabled 2020/05/18 22:21:11 net device setup: enabled 2020/05/18 22:21:11 concurrency sanitizer: enabled 2020/05/18 22:21:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/18 22:21:11 USB emulation: enabled 2020/05/18 22:21:11 adding functions to KCSAN blacklist: 'do_exit' '__ext4_new_inode' 'ep_poll' '__mpage_writepage' 'generic_write_end' syzkaller login: [ 58.320648][ C0] ================================================================== [ 58.328790][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 58.337009][ C0] [ 58.339321][ C0] write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: [ 58.347045][ C0] tick_sched_do_timer+0xb4/0xd0 [ 58.352103][ C0] tick_sched_timer+0x3f/0xd0 [ 58.356794][ C0] __hrtimer_run_queues+0x271/0x600 [ 58.362003][ C0] hrtimer_interrupt+0x226/0x490 [ 58.367029][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 58.372494][ C0] apic_timer_interrupt+0xf/0x20 [ 58.377617][ C0] native_safe_halt+0xe/0x10 [ 58.382201][ C0] default_idle+0x21/0x170 [ 58.386709][ C0] do_idle+0x1b7/0x290 [ 58.390875][ C0] cpu_startup_entry+0x14/0x20 [ 58.395750][ C0] start_secondary+0x169/0x1b0 [ 58.400612][ C0] secondary_startup_64+0xa4/0xb0 [ 58.405621][ C0] [ 58.407977][ C0] read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: [ 58.415616][ C0] tick_sched_do_timer+0x2e/0xd0 [ 58.420557][ C0] tick_sched_timer+0x3f/0xd0 [ 58.425234][ C0] __hrtimer_run_queues+0x271/0x600 [ 58.430429][ C0] hrtimer_interrupt+0x226/0x490 [ 58.435368][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 58.440955][ C0] apic_timer_interrupt+0xf/0x20 [ 58.445897][ C0] native_safe_halt+0xe/0x10 [ 58.450478][ C0] default_idle+0x21/0x170 [ 58.454877][ C0] do_idle+0x1b7/0x290 [ 58.459055][ C0] cpu_startup_entry+0x14/0x20 [ 58.463918][ C0] rest_init+0xe4/0xeb [ 58.467994][ C0] arch_call_rest_init+0x13/0x2b [ 58.473201][ C0] start_kernel+0x7fe/0x823 [ 58.477752][ C0] secondary_startup_64+0xa4/0xb0 [ 58.482902][ C0] [ 58.485244][ C0] Reported by Kernel Concurrency Sanitizer on: [ 58.491429][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.7.0-rc1-syzkaller #0 [ 58.499416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.509558][ C0] ================================================================== [ 58.517611][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 58.524293][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.7.0-rc1-syzkaller #0 [ 58.532171][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.542219][ C0] Call Trace: [ 58.545517][ C0] [ 58.548379][ C0] dump_stack+0x11d/0x187 [ 58.552714][ C0] panic+0x210/0x640 [ 58.556610][ C0] ? vprintk_func+0x89/0x13a [ 58.561204][ C0] kcsan_report.cold+0xc/0x1a [ 58.565886][ C0] kcsan_setup_watchpoint+0x3fb/0x440 [ 58.571289][ C0] tick_sched_do_timer+0x2e/0xd0 [ 58.576334][ C0] tick_sched_timer+0x3f/0xd0 [ 58.581013][ C0] __hrtimer_run_queues+0x271/0x600 [ 58.586244][ C0] ? tick_sched_do_timer+0xd0/0xd0 [ 58.591359][ C0] hrtimer_interrupt+0x226/0x490 [ 58.596298][ C0] ? kvm_clock_read+0x14/0x30 [ 58.601002][ C0] smp_apic_timer_interrupt+0xd8/0x270 [ 58.606471][ C0] apic_timer_interrupt+0xf/0x20 [ 58.611485][ C0] [ 58.614438][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 58.619812][ C0] Code: ff cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 0c d6 58 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d fc d5 58 00 fb f4 cc 41 54 55 53 e8 97 b2 71 fb e8 a2 21 bc fc 0f 1f 44 00 00 48 [ 58.639589][ C0] RSP: 0018:ffffffff87203e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 58.648003][ C0] RAX: 0000000000000000 RBX: ffffffff8722b840 RCX: ffffffff8285fdf1 [ 58.656016][ C0] RDX: 0000000000000000 RSI: ffffffff8285fdfa RDI: 0000000000000005 [ 58.663992][ C0] RBP: 0000000000000000 R08: ffffffff8722b840 R09: 0000ffff87047920 [ 58.671964][ C0] R10: 0000ffff87203e58 R11: 0000ffff87047927 R12: ffffffff8722b840 [ 58.679937][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff8722b840 [ 58.687934][ C0] ? debug_smp_processor_id+0x31/0x129 [ 58.693394][ C0] ? debug_smp_processor_id+0x3a/0x129 [ 58.698855][ C0] default_idle+0x21/0x170 [ 58.703437][ C0] do_idle+0x1b7/0x290 [ 58.707483][ C0] ? debug_smp_processor_id+0x3a/0x129 [ 58.712961][ C0] cpu_startup_entry+0x14/0x20 [ 58.717720][ C0] rest_init+0xe4/0xeb [ 58.721782][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 58.728144][ C0] arch_call_rest_init+0x13/0x2b [ 58.733076][ C0] start_kernel+0x7fe/0x823 [ 58.737574][ C0] secondary_startup_64+0xa4/0xb0 [ 58.743885][ C0] Kernel Offset: disabled [ 58.748217][ C0] Rebooting in 86400 seconds..