[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.032509][ T25] audit: type=1800 audit(1571079984.093:25): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.060330][ T25] audit: type=1800 audit(1571079984.103:26): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.098684][ T25] audit: type=1800 audit(1571079984.103:27): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. 2019/10/14 19:06:33 fuzzer started 2019/10/14 19:06:34 dialing manager at 10.128.0.105:43961 2019/10/14 19:06:34 syscalls: 2523 2019/10/14 19:06:34 code coverage: enabled 2019/10/14 19:06:34 comparison tracing: enabled 2019/10/14 19:06:34 extra coverage: extra coverage is not supported by the kernel 2019/10/14 19:06:34 setuid sandbox: enabled 2019/10/14 19:06:34 namespace sandbox: enabled 2019/10/14 19:06:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/14 19:06:34 fault injection: enabled 2019/10/14 19:06:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/14 19:06:34 net packet injection: enabled 2019/10/14 19:06:34 net device setup: enabled 2019/10/14 19:06:34 concurrency sanitizer: enabled syzkaller login: [ 46.962979][ C1] ================================================================== [ 46.971154][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 46.979199][ C1] [ 46.981523][ C1] write to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 0: [ 46.989136][ C1] tick_sched_do_timer+0xc0/0xe0 [ 46.994244][ C1] tick_sched_timer+0x43/0xe0 [ 46.998916][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.004092][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.009011][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.014632][ C1] apic_timer_interrupt+0xf/0x20 [ 47.019540][ C1] [ 47.021850][ C1] read to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 1: [ 47.029475][ C1] tick_sched_do_timer+0x33/0xe0 [ 47.034394][ C1] tick_sched_timer+0x43/0xe0 [ 47.039081][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.044271][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.049212][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.054647][ C1] apic_timer_interrupt+0xf/0x20 [ 47.059807][ C1] tcp_v4_early_demux+0xec/0x400 [ 47.064730][ C1] ip_rcv_finish_core.isra.0+0x2f1/0xaf0 [ 47.070345][ C1] ip_rcv_finish+0xe5/0x160 [ 47.074825][ C1] ip_rcv+0x18f/0x1a0 [ 47.078784][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 47.084477][ C1] __netif_receive_skb+0x37/0xf0 [ 47.089413][ C1] netif_receive_skb_internal+0x59/0x190 [ 47.095017][ C1] [ 47.097326][ C1] Reported by Kernel Concurrency Sanitizer on: [ 47.103503][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0+ #0 [ 47.110508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.120537][ C1] ================================================================== [ 47.128575][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 47.135140][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0+ #0 [ 47.142136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.152165][ C1] Call Trace: [ 47.155423][ C1] [ 47.158254][ C1] dump_stack+0xf5/0x159 [ 47.162483][ C1] panic+0x209/0x639 [ 47.166366][ C1] ? ip_rcv_finish+0xe5/0x160 [ 47.171026][ C1] ? vprintk_func+0x8d/0x140 [ 47.175594][ C1] kcsan_report.cold+0xc/0x1b [ 47.180247][ C1] __kcsan_setup_watchpoint+0x3ee/0x510 [ 47.185766][ C1] __tsan_read4+0x2c/0x30 [ 47.190162][ C1] tick_sched_do_timer+0x33/0xe0 [ 47.195079][ C1] tick_sched_timer+0x43/0xe0 [ 47.199738][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.204923][ C1] ? tick_sched_do_timer+0xe0/0xe0 [ 47.210014][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.214932][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.220373][ C1] apic_timer_interrupt+0xf/0x20 [ 47.225281][ C1] [ 47.228213][ C1] RIP: 0010:tcp_v4_early_demux+0xec/0x400 [ 47.233918][ C1] Code: 48 89 45 b8 e8 f5 49 61 fd 48 8d 7b 70 4d 89 e5 4c 2b ab c8 00 00 00 e8 72 49 61 fd 8b 73 70 48 8d 7b 74 41 83 c5 14 89 75 c4 5f 49 61 fd 8b 43 74 44 89 ef 8b 75 c4 89 45 b4 29 c6 89 75 c0 [ 47.253510][ C1] RSP: 0018:ffffc90000cf3918 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 47.261903][ C1] RAX: f5c28f5c28f5f0b8 RBX: ffff8881267aa900 RCX: 000000000000078c [ 47.269850][ C1] RDX: 0000000000280a00 RSI: 0000000000000124 RDI: ffff8881267aa974 [ 47.277827][ C1] RBP: ffffc90000cf3968 R08: 0000000000000000 R09: 00008881267aa973 [ 47.285782][ C1] R10: 00000000aaaaaaab R11: ffffffff86042d68 R12: ffff8881236c8e62 [ 47.293729][ C1] R13: 0000000000000028 R14: ffff8881267aa9c0 R15: ffff8881267aa9b2 [ 47.301719][ C1] ? tcp_v4_early_demux+0xde/0x400 [ 47.306996][ C1] ? tcp_v4_send_synack+0x170/0x170 [ 47.312173][ C1] ip_rcv_finish_core.isra.0+0x2f1/0xaf0 [ 47.317785][ C1] ? __kcsan_setup_watchpoint+0x96/0x510 [ 47.323394][ C1] ? __kcsan_setup_watchpoint+0x96/0x510 [ 47.329015][ C1] ? tcp_v4_send_synack+0x170/0x170 [ 47.334191][ C1] ip_rcv_finish+0xe5/0x160 [ 47.338678][ C1] ip_rcv+0x18f/0x1a0 [ 47.342645][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 47.347557][ C1] ? ip_local_deliver+0x210/0x210 [ 47.352565][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 47.358271][ C1] __netif_receive_skb+0x37/0xf0 [ 47.363185][ C1] netif_receive_skb_internal+0x59/0x190 [ 47.368971][ C1] napi_gro_receive+0x28f/0x330 [ 47.373803][ C1] receive_buf+0x284/0x30b0 [ 47.378283][ C1] ? __tsan_write8+0x32/0x40 [ 47.382874][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 47.388489][ C1] ? __kcsan_setup_watchpoint+0x96/0x510 [ 47.394096][ C1] ? __kcsan_setup_watchpoint+0x96/0x510 [ 47.399718][ C1] virtnet_poll+0x436/0x7d0 [ 47.404204][ C1] ? delay_tsc+0x8f/0xc0 [ 47.408429][ C1] net_rx_action+0x3ae/0xa50 [ 47.413001][ C1] __do_softirq+0x115/0x33f [ 47.417735][ C1] ? takeover_tasklets+0x250/0x250 [ 47.422853][ C1] run_ksoftirqd+0x46/0x60 [ 47.427615][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 47.432552][ C1] kthread+0x1d4/0x200 [ 47.436613][ C1] ? constant_test_bit.constprop.0+0x30/0x30 [ 47.442570][ C1] ? kthread_bind+0x50/0x50 [ 47.447050][ C1] ret_from_fork+0x1f/0x30 [ 47.453116][ C1] Kernel Offset: disabled [ 47.457438][ C1] Rebooting in 86400 seconds..