[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 316.268050] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 316.279489] clocksource: 'kvm-clock' wd_now: 4b0301c7f6 wd_last: 4ae534a60d mask: ffffffffffffffff [ 316.290738] clocksource: 'tsc' cs_now: 779ddfc2 cs_last: a4788f0a6e mask: ffffffffffffffff [ 316.301088] tsc: Marking TSC unstable due to clocksource watchdog [ 636.971515] [Firmware Bug]: TSC ADJUST differs: CPU0 0 --> -705490478624. Restoring [ 636.971515] watchdog: BUG: soft lockup - CPU#1 stuck for 303s! [syz-executor402:7994] [ 636.979312] Modules linked in: [ 636.979312] irq event stamp: 229122 [ 636.979312] hardirqs last enabled at (229121): [] _flat_send_IPI_mask+0x109/0x1a0 [ 636.979312] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [ 636.979312] hardirqs last disabled at (229122): [] apic_timer_interrupt+0x8e/0xa0 [ 636.979312] softirqs last enabled at (226806): [] __do_softirq+0x68b/0x9ff [ 636.979312] systemd[1]: systemd-journald.service: Unit entered failed state. [ 636.979312] softirqs last disabled at (226795): [] irq_exit+0x193/0x240 [ 636.979312] CPU: 1 PID: 7994 Comm: syz-executor402 Not tainted 4.14.276-syzkaller #0 [ 636.979312] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. [ 636.979312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.979312] task: ffff88809f6183c0 task.stack: ffff888095bf8000 [ 636.979312] RIP: 0010:smp_call_function_single+0x181/0x370 [ 636.979312] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 636.979312] RSP: 0018:ffff888095bffaa0 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10 [ 636.979312] RAX: ffff88809f6183c0 RBX: 1ffff11012b7ff58 RCX: 0000000000000000 [ 636.979312] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 636.979312] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 636.979312] RBP: ffff888095bffb48 R08: 0000000000000001 R09: 0000000000000000 [ 636.979312] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 636.979312] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 636.979312] R13: ffff888095bffb78 R14: 0000000000000001 R15: 0000000000000010 [ 636.979312] FS: 0000555556ab0300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 636.979312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.979312] systemd[1]: Stopped Journal Service. [ 636.979312] CR2: 00007fc592fe7130 CR3: 00000000ac072000 CR4: 00000000003406e0 [ 636.979312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.979312] systemd[1]: Starting Journal Service... [ 636.979312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.979312] Call Trace: [ 636.979312] ? __rdmsr_safe_on_cpu+0x1a0/0x1a0 [ 636.979312] ? generic_exec_single+0x420/0x420 [ 636.979312] ? __rdmsr_safe_on_cpu+0x1a0/0x1a0 [ 636.979312] wrmsr_safe_on_cpu+0x8f/0xd0 [ 636.979312] ? rdmsr_safe_on_cpu+0x140/0x140 [ 636.979312] ? _copy_from_user+0x96/0x100 [ 636.979312] msr_write+0xfc/0x190 [ 636.979312] ? msr_ioctl+0x220/0x220 [ 636.979312] ? rw_verify_area+0xe1/0x2a0 [ 636.979312] do_iter_write+0x3da/0x550 [ 636.979312] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 636.979312] vfs_writev+0x125/0x290 [ 636.979312] ? vfs_iter_write+0xa0/0xa0 [ 636.979312] ? __do_page_fault+0x571/0xad0 [ 636.979312] ? lock_downgrade+0x740/0x740 [ 636.979312] SyS_pwritev+0x15a/0x200 [ 636.979312] ? SyS_preadv2+0x230/0x230 [ 636.979312] ? __do_page_fault+0x159/0xad0 [ 636.979312] ? do_syscall_64+0x4c/0x640 [ 636.979312] ? SyS_preadv2+0x230/0x230 [ 636.979312] do_syscall_64+0x1d5/0x640 [ 636.979312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 636.979312] RIP: 0033:0x7fc592f763c9 [ 636.979312] RSP: 002b:00007ffdf0adb548 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 636.979312] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc592f763c9 [ 636.979312] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000004 [ 636.979312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.979312] R10: 0000000000000010 R11: 0000000000000246 R12: 00007ffdf0adb570 [ 636.979312] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 636.979312] Code: cd 08 00 48 8b 54 24 10 4c 89 e9 8b 7c 24 1c 48 8d 74 24 40 e8 71 fa ff ff 41 89 c4 8b 44 24 58 a8 01 74 0f e8 b1 cd 08 00 f3 90 <8b> 44 24 58 a8 01 75 f1 e8 a2 cd 08 00 e8 9d cd 08 00 bf 01 00 [ 636.979312] Kernel panic - not syncing: softlockup: hung tasks [ 636.979312] CPU: 1 PID: 7994 Comm: syz-executor402 Tainted: G L 4.14.276-syzkaller #0 [ 636.979312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.979312] Call Trace: [ 636.979312] [ 636.979312] dump_stack+0x1b2/0x281 [ 636.979312] panic+0x1f9/0x42d [ 636.979312] ? add_taint.cold+0x16/0x16 [ 636.979312] watchdog_timer_fn.cold+0x16/0x25 [ 636.979312] __hrtimer_run_queues+0x30b/0xc80 [ 636.979312] ? watchdog+0x50/0x50 [ 636.979312] ? retrigger_next_event+0x310/0x310 [ 636.979312] ? ktime_get_update_offsets_now+0x272/0x3f0 [ 636.979312] hrtimer_interrupt+0x1e6/0x5e0 [ 636.979312] smp_apic_timer_interrupt+0x117/0x5e0 [ 636.979312] apic_timer_interrupt+0x93/0xa0 [ 636.979312] [ 636.979312] RIP: 0010:smp_call_function_single+0x181/0x370 [ 636.979312] RSP: 0018:ffff888095bffaa0 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10 [ 636.979312] RAX: ffff88809f6183c0 RBX: 1ffff11012b7ff58 RCX: 0000000000000000 [ 636.979312] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 636.979312] RBP: ffff888095bffb48 R08: 0000000000000001 R09: 0000000000000000 [ 636.979312] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 636.979312] R13: ffff888095bffb78 R14: 0000000000000001 R15: 0000000000000010 [ 636.979312] ? __rdmsr_safe_on_cpu+0x1a0/0x1a0 [ 636.979312] ? generic_exec_single+0x420/0x420 [ 636.979312] ? __rdmsr_safe_on_cpu+0x1a0/0x1a0 [ 636.979312] wrmsr_safe_on_cpu+0x8f/0xd0 [ 636.979312] ? rdmsr_safe_on_cpu+0x140/0x140 [ 636.979312] ? _copy_from_user+0x96/0x100 [ 636.979312] msr_write+0xfc/0x190 [ 636.979312] ? msr_ioctl+0x220/0x220 [ 636.979312] ? rw_verify_area+0xe1/0x2a0 [ 636.979312] do_iter_write+0x3da/0x550 [ 636.979312] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 636.979312] vfs_writev+0x125/0x290 [ 636.979312] ? vfs_iter_write+0xa0/0xa0 [ 636.979312] ? __do_page_fault+0x571/0xad0 [ 636.979312] ? lock_downgrade+0x740/0x740 [ 636.979312] SyS_pwritev+0x15a/0x200 [ 636.979312] ? SyS_preadv2+0x230/0x230 [ 636.979312] ? __do_page_fault+0x159/0xad0 [ 636.979312] ? do_syscall_64+0x4c/0x640 [ 636.979312] ? SyS_preadv2+0x230/0x230 [ 636.979312] do_syscall_64+0x1d5/0x640 [ 636.979312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 636.979312] RIP: 0033:0x7fc592f763c9 [ 636.979312] RSP: 002b:00007ffdf0adb548 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 636.979312] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc592f763c9 [ 636.979312] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000004 [ 636.979312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.979312] R10: 0000000000000010 R11: 0000000000000246 R12: 00007ffdf0adb570 [ 636.979312] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 636.979312] Kernel Offset: disabled [ 636.979312] Rebooting in 86400 seconds..