[ 35.836252][ T25] audit: type=1800 audit(1571754464.422:22): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 35.867443][ T25] audit: type=1800 audit(1571754464.422:23): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 35.887890][ T25] audit: type=1800 audit(1571754464.422:24): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2019/10/22 14:27:57 fuzzer started 2019/10/22 14:27:59 dialing manager at 10.128.0.105:33369 2019/10/22 14:27:59 syscalls: 2524 2019/10/22 14:27:59 code coverage: enabled 2019/10/22 14:27:59 comparison tracing: enabled 2019/10/22 14:27:59 extra coverage: extra coverage is not supported by the kernel 2019/10/22 14:27:59 setuid sandbox: enabled 2019/10/22 14:27:59 namespace sandbox: enabled 2019/10/22 14:27:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 14:27:59 fault injection: enabled 2019/10/22 14:27:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 14:27:59 net packet injection: enabled 2019/10/22 14:27:59 net device setup: enabled 2019/10/22 14:27:59 concurrency sanitizer: enabled syzkaller login: [ 50.708229][ C0] ================================================================== [ 50.716401][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 50.724801][ C0] [ 50.727517][ C0] read to 0xffffffff85cb2790 of 4 bytes by interrupt on cpu 1: [ 50.735057][ C0] tick_sched_do_timer+0x33/0xe0 [ 50.740003][ C0] tick_sched_timer+0x43/0xe0 [ 50.744677][ C0] __hrtimer_run_queues+0x288/0x600 [ 50.749870][ C0] hrtimer_interrupt+0x22a/0x480 [ 50.754790][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 50.760229][ C0] apic_timer_interrupt+0xf/0x20 [ 50.765147][ C0] __read_once_size+0x9/0xe0 [ 50.769739][ C0] ipt_do_table+0x200/0xe60 [ 50.774225][ C0] iptable_mangle_hook+0x7a/0x260 [ 50.779243][ C0] nf_hook_slow+0x83/0x160 [ 50.783685][ C0] ip_rcv+0x12f/0x1a0 [ 50.787648][ C0] __netif_receive_skb_one_core+0xa7/0xe0 [ 50.793421][ C0] __netif_receive_skb+0x37/0xf0 [ 50.798342][ C0] netif_receive_skb_internal+0x59/0x190 [ 50.803961][ C0] [ 50.806286][ C0] write to 0xffffffff85cb2790 of 4 bytes by interrupt on cpu 0: [ 50.813904][ C0] tick_sched_do_timer+0xc0/0xe0 [ 50.818851][ C0] tick_sched_timer+0x43/0xe0 [ 50.823522][ C0] __hrtimer_run_queues+0x288/0x600 [ 50.828699][ C0] hrtimer_interrupt+0x22a/0x480 [ 50.833623][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 50.839068][ C0] apic_timer_interrupt+0xf/0x20 [ 50.843977][ C0] [ 50.846281][ C0] Reported by Kernel Concurrency Sanitizer on: [ 50.852420][ C0] CPU: 0 PID: 7285 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 50.860832][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.871403][ C0] ================================================================== [ 50.879461][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 50.886047][ C0] CPU: 0 PID: 7285 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 50.894968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.905003][ C0] Call Trace: [ 50.908266][ C0] [ 50.911112][ C0] dump_stack+0xf5/0x159 [ 50.915371][ C0] panic+0x210/0x640 [ 50.919253][ C0] ? vprintk_func+0x8d/0x140 [ 50.923828][ C0] kcsan_report.cold+0xc/0x10 [ 50.928490][ C0] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 50.934022][ C0] __tsan_write4+0x32/0x40 [ 50.938423][ C0] tick_sched_do_timer+0xc0/0xe0 [ 50.943444][ C0] tick_sched_timer+0x43/0xe0 [ 50.948103][ C0] __hrtimer_run_queues+0x288/0x600 [ 50.953289][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 50.958395][ C0] hrtimer_interrupt+0x22a/0x480 [ 50.963335][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 50.969130][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 50.974920][ C0] apic_timer_interrupt+0xf/0x20 [ 50.979921][ C0] [ 50.983536][ C0] RIP: 0033:0x609a40 [ 50.987423][ C0] Code: 00 48 89 4c 24 58 48 89 44 24 60 48 8b 6c 24 30 48 83 c4 38 c3 8b 53 18 89 d7 81 e2 ff 01 00 00 8b 54 90 08 41 89 d0 83 e2 0f <48> 83 fa 09 0f 86 1b 01 00 00 48 8b 90 10 08 00 00 4c 8b 88 08 08 [ 51.007324][ C0] RSP: 002b:000000c4204eda40 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 51.015762][ C0] RAX: 000000c4204b2028 RBX: 000000c4204b2000 RCX: 000000c420001c80 [ 51.023717][ C0] RDX: 0000000000000007 RSI: 000000000000000d RDI: 00000000000011be [ 51.031817][ C0] RBP: 000000c4204eda70 R08: 0000000000000947 R09: 00000000000011be [ 51.039783][ C0] R10: 00000000ffffffff R11: 0000000000003eea R12: 0000000000000200 [ 51.047748][ C0] R13: ffffffffffffffff R14: 0000000000000002 R15: ffffffffffffffff [ 51.057205][ C0] Kernel Offset: disabled [ 51.061542][ C0] Rebooting in 86400 seconds..