[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. 2020/05/31 09:40:36 fuzzer started 2020/05/31 09:40:36 dialing manager at 10.128.0.105:33205 2020/05/31 09:40:36 syscalls: 3055 2020/05/31 09:40:36 code coverage: enabled 2020/05/31 09:40:36 comparison tracing: enabled 2020/05/31 09:40:36 extra coverage: enabled 2020/05/31 09:40:36 setuid sandbox: enabled 2020/05/31 09:40:36 namespace sandbox: enabled 2020/05/31 09:40:36 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/31 09:40:36 fault injection: enabled 2020/05/31 09:40:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/31 09:40:36 net packet injection: enabled 2020/05/31 09:40:36 net device setup: enabled 2020/05/31 09:40:36 concurrency sanitizer: enabled 2020/05/31 09:40:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/31 09:40:36 USB emulation: enabled syzkaller login: [ 51.069844][ T8907] KCSAN: could not find function: '_find_next_bit' 2020/05/31 09:40:39 adding functions to KCSAN blacklist: '_find_next_bit' 'add_timer' 'copy_process' 'do_signal_stop' '__ext4_new_inode' 'futex_wait_queue_me' 'do_syslog' 'kauditd_thread' 'page_counter_charge' 'decrypt_packet' 'iput' 'fasync_remove_entry' 'ext4_free_inodes_count' 'snd_rawmidi_kernel_write1' 'blk_mq_dispatch_rq_list' 'find_get_pages_range_tag' 'blk_mq_get_request' 'do_nanosleep' 'ext4_da_write_end' 'ep_poll' 'generic_write_end' 'blk_mq_sched_dispatch_requests' '__mark_inode_dirty' [ 121.520307][ T8908] ================================================================== [ 121.528435][ T8908] BUG: KCSAN: data-race in mod_timer / timer_clear_idle [ 121.535341][ T8908] [ 121.537652][ T8908] write to 0xffff88812c11dca4 of 1 bytes by task 0 on cpu 1: [ 121.545000][ T8908] timer_clear_idle+0x3d/0x50 [ 121.549657][ T8908] __tick_nohz_idle_restart_tick+0x32/0x1a0 [ 121.555526][ T8908] tick_nohz_idle_exit+0x19c/0x1d0 [ 121.560612][ T8908] do_idle+0xac/0x290 [ 121.564587][ T8908] cpu_startup_entry+0x14/0x20 [ 121.569358][ T8908] start_secondary+0x169/0x1b0 [ 121.574121][ T8908] secondary_startup_64+0xa4/0xb0 [ 121.579468][ T8908] [ 121.581796][ T8908] read to 0xffff88812c11dca4 of 1 bytes by task 8908 on cpu 0: [ 121.589332][ T8908] mod_timer+0x631/0x830 [ 121.593560][ T8908] sk_reset_timer+0x29/0xc0 [ 121.598049][ T8908] tcp_rearm_rto+0x1ce/0x280 [ 121.602638][ T8908] tcp_event_new_data_sent+0x23f/0x260 [ 121.608273][ T8908] tcp_write_xmit+0x5c6/0x31e0 [ 121.613189][ T8908] __tcp_push_pending_frames+0x72/0x1b0 [ 121.618710][ T8908] tcp_push+0x1ec/0x3e0 [ 121.622840][ T8908] tcp_sendmsg_locked+0x1de3/0x20f0 [ 121.629182][ T8908] tcp_sendmsg+0x35/0x50 [ 121.633418][ T8908] inet_sendmsg+0x69/0x90 [ 121.637738][ T8908] sock_sendmsg+0x98/0xc0 [ 121.642066][ T8908] sock_write_iter+0x186/0x240 [ 121.646823][ T8908] new_sync_write+0x303/0x400 [ 121.651496][ T8908] __vfs_write+0x9e/0xb0 [ 121.655815][ T8908] vfs_write+0x189/0x380 [ 121.660030][ T8908] ksys_write+0x16a/0x1a0 [ 121.664331][ T8908] __x64_sys_write+0x49/0x60 [ 121.668899][ T8908] do_syscall_64+0xc7/0x3b0 [ 121.673378][ T8908] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.679248][ T8908] [ 121.681553][ T8908] Reported by Kernel Concurrency Sanitizer on: [ 121.687794][ T8908] CPU: 0 PID: 8908 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 121.696074][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.706120][ T8908] ================================================================== [ 121.714307][ T8908] Kernel panic - not syncing: panic_on_warn set ... [ 121.720892][ T8908] CPU: 0 PID: 8908 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 121.729129][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.739182][ T8908] Call Trace: [ 121.742474][ T8908] dump_stack+0x11d/0x187 [ 121.746790][ T8908] panic+0x210/0x640 [ 121.751101][ T8908] ? vprintk_func+0x89/0x13a [ 121.755690][ T8908] kcsan_report.cold+0xc/0x1a [ 121.760361][ T8908] kcsan_setup_watchpoint+0x3fb/0x440 [ 121.765723][ T8908] mod_timer+0x631/0x830 [ 121.769954][ T8908] sk_reset_timer+0x29/0xc0 [ 121.774458][ T8908] tcp_rearm_rto+0x1ce/0x280 [ 121.779119][ T8908] tcp_event_new_data_sent+0x23f/0x260 [ 121.785102][ T8908] tcp_write_xmit+0x5c6/0x31e0 [ 121.789876][ T8908] ? iov_iter_advance+0x21c/0x900 [ 121.794888][ T8908] __tcp_push_pending_frames+0x72/0x1b0 [ 121.800420][ T8908] tcp_push+0x1ec/0x3e0 [ 121.804561][ T8908] tcp_sendmsg_locked+0x1de3/0x20f0 [ 121.809745][ T8908] ? aa_label_sk_perm.part.0+0x220/0x290 [ 121.815380][ T8908] tcp_sendmsg+0x35/0x50 [ 121.819628][ T8908] inet_sendmsg+0x69/0x90 [ 121.823941][ T8908] ? inet_send_prepare+0x1f0/0x1f0 [ 121.829040][ T8908] sock_sendmsg+0x98/0xc0 [ 121.833436][ T8908] sock_write_iter+0x186/0x240 [ 121.838186][ T8908] new_sync_write+0x303/0x400 [ 121.842863][ T8908] __vfs_write+0x9e/0xb0 [ 121.847083][ T8908] vfs_write+0x189/0x380 [ 121.851302][ T8908] ksys_write+0x16a/0x1a0 [ 121.855628][ T8908] __x64_sys_write+0x49/0x60 [ 121.860200][ T8908] do_syscall_64+0xc7/0x3b0 [ 121.864702][ T8908] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.870605][ T8908] RIP: 0033:0x4b3cdb [ 121.874515][ T8908] Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 bb a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 121.894110][ T8908] RSP: 002b:000000c007abd540 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 121.902501][ T8908] RAX: ffffffffffffffda RBX: 000000c00002e800 RCX: 00000000004b3cdb [ 121.910470][ T8908] RDX: 0000000000000007 RSI: 000000c00000a3e0 RDI: 0000000000000006 [ 121.918424][ T8908] RBP: 000000c007abd590 R08: 000000c00000a301 R09: 0000000000000007 [ 121.926389][ T8908] R10: 000000c0000c4000 R11: 0000000000000202 R12: 000000000000011e [ 121.934352][ T8908] R13: 000000c0001e4000 R14: 0000000000000007 R15: 000000000000897c [ 123.017066][ T8908] Shutting down cpus with NMI [ 123.023162][ T8908] Kernel Offset: disabled [ 123.027501][ T8908] Rebooting in 86400 seconds..