[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.548300][ T26] audit: type=1800 audit(1571684542.766:25): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.585480][ T26] audit: type=1800 audit(1571684542.766:26): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.627202][ T26] audit: type=1800 audit(1571684542.766:27): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2019/10/21 19:02:31 fuzzer started 2019/10/21 19:02:33 dialing manager at 10.128.0.105:39747 2019/10/21 19:02:33 syscalls: 2524 2019/10/21 19:02:33 code coverage: enabled 2019/10/21 19:02:33 comparison tracing: enabled 2019/10/21 19:02:33 extra coverage: extra coverage is not supported by the kernel 2019/10/21 19:02:33 setuid sandbox: enabled 2019/10/21 19:02:33 namespace sandbox: enabled 2019/10/21 19:02:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/21 19:02:33 fault injection: enabled 2019/10/21 19:02:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/21 19:02:33 net packet injection: enabled 2019/10/21 19:02:33 net device setup: enabled 2019/10/21 19:02:33 concurrency sanitizer: enabled syzkaller login: [ 47.798133][ C1] ================================================================== [ 47.806569][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 47.814901][ C1] [ 47.817213][ C1] write to 0xffffffff85cb2790 of 4 bytes by interrupt on cpu 0: [ 47.824850][ C1] tick_sched_do_timer+0xc0/0xe0 [ 47.829771][ C1] tick_sched_timer+0x43/0xe0 [ 47.834427][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.839604][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.844520][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.849965][ C1] apic_timer_interrupt+0xf/0x20 [ 47.854889][ C1] _raw_spin_unlock_irq+0x4e/0x80 [ 47.859952][ C1] finish_task_switch+0x7b/0x260 [ 47.864991][ C1] __schedule+0x319/0x640 [ 47.869457][ C1] schedule+0x47/0xd0 [ 47.873427][ C1] futex_wait_queue_me+0x18d/0x290 [ 47.878526][ C1] futex_wait+0x19b/0x3f0 [ 47.883064][ C1] do_futex+0xe9/0x18d0 [ 47.887229][ C1] __x64_sys_futex+0x2cd/0x3f0 [ 47.891987][ C1] [ 47.894312][ C1] read to 0xffffffff85cb2790 of 4 bytes by interrupt on cpu 1: [ 47.901905][ C1] tick_sched_do_timer+0x33/0xe0 [ 47.907103][ C1] tick_sched_timer+0x43/0xe0 [ 47.911843][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.917017][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.922064][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.927695][ C1] apic_timer_interrupt+0xf/0x20 [ 47.932716][ C1] [ 47.935021][ C1] Reported by Kernel Concurrency Sanitizer on: [ 47.941334][ C1] CPU: 1 PID: 7282 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 47.948853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.958886][ C1] ================================================================== [ 47.966925][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 47.973494][ C1] CPU: 1 PID: 7282 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 47.980926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.991424][ C1] Call Trace: [ 47.994696][ C1] [ 47.997673][ C1] dump_stack+0xf5/0x159 [ 48.002347][ C1] panic+0x210/0x640 [ 48.006230][ C1] ? vprintk_func+0x8d/0x140 [ 48.010818][ C1] kcsan_report.cold+0xc/0x10 [ 48.015478][ C1] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 48.021136][ C1] __tsan_read4+0x2c/0x30 [ 48.025671][ C1] tick_sched_do_timer+0x33/0xe0 [ 48.030784][ C1] tick_sched_timer+0x43/0xe0 [ 48.035794][ C1] __hrtimer_run_queues+0x288/0x600 [ 48.041081][ C1] ? tick_sched_do_timer+0xe0/0xe0 [ 48.046556][ C1] hrtimer_interrupt+0x22a/0x480 [ 48.051603][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 48.057225][ C1] ? smp_call_function_single_interrupt+0x80/0x1c0 [ 48.063739][ C1] apic_timer_interrupt+0xf/0x20 [ 48.068657][ C1] [ 48.071622][ C1] RIP: 0033:0x409e42 [ 48.075763][ C1] Code: 44 02 28 48 89 44 24 40 c6 44 24 48 01 48 8b 6c 24 18 48 83 c4 20 c3 48 8b 4c 24 28 0f b7 51 54 48 8d 54 10 f8 84 01 48 8b 02 <48> 85 c0 74 08 48 8d 48 08 31 d2 eb a2 48 8d 05 aa 33 43 01 48 89 [ 48.095353][ C1] RSP: 002b:000000c420149810 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 48.104284][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000862040 [ 48.112265][ C1] RDX: 000000c4208db748 RSI: 00000000f2cbf364 RDI: 0000000000000038 [ 48.120227][ C1] RBP: 000000c420149828 R08: 0000000000000000 R09: 000000c42052f65c [ 48.128189][ C1] R10: 000000c42052f650 R11: 0000000000000001 R12: 0000000000000006 [ 48.136414][ C1] R13: ffffffffffffffff R14: 0000000000000001 R15: 0000000000000001 [ 48.146276][ C1] Kernel Offset: disabled [ 48.150611][ C1] Rebooting in 86400 seconds..