[ 44.361099][ T26] audit: type=1800 audit(1570943370.708:22): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0
[ 44.387844][ T26] audit: type=1800 audit(1570943370.708:23): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0
[ 44.411804][ T26] audit: type=1800 audit(1570943370.718:24): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts.
2019/10/13 05:09:40 fuzzer started
2019/10/13 05:09:42 dialing manager at 10.128.0.105:43913
2019/10/13 05:09:42 syscalls: 2523
2019/10/13 05:09:42 code coverage: enabled
2019/10/13 05:09:42 comparison tracing: enabled
2019/10/13 05:09:42 extra coverage: extra coverage is not supported by the kernel
2019/10/13 05:09:42 setuid sandbox: enabled
2019/10/13 05:09:42 namespace sandbox: enabled
2019/10/13 05:09:42 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/13 05:09:42 fault injection: enabled
2019/10/13 05:09:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/13 05:09:42 net packet injection: enabled
2019/10/13 05:09:42 net device setup: enabled
2019/10/13 05:09:42 concurrency sanitizer: enabled
syzkaller login: [ 56.290033][ C0] ==================================================================
[ 56.298154][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer
[ 56.306187][ C0]
[ 56.308492][ C0] read to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 1:
[ 56.316009][ C0] tick_sched_do_timer+0x33/0xe0
[ 56.320921][ C0] tick_sched_timer+0x43/0xe0
[ 56.325574][ C0] __hrtimer_run_queues+0x288/0x600
[ 56.330752][ C0] hrtimer_interrupt+0x22a/0x480
[ 56.335668][ C0] smp_apic_timer_interrupt+0xdc/0x280
[ 56.341101][ C0] apic_timer_interrupt+0xf/0x20
[ 56.346019][ C0] __kcsan_setup_watchpoint+0x57/0x510
[ 56.351473][ C0] __tsan_read1+0x2c/0x30
[ 56.355781][ C0] tcp4_gro_receive+0x41a/0x4b0
[ 56.360611][ C0] inet_gro_receive+0x7b5/0x800
[ 56.365440][ C0] dev_gro_receive+0xa05/0x1190
[ 56.370265][ C0] napi_gro_receive+0x7c/0x330
[ 56.375007][ C0] receive_buf+0x284/0x30b0
[ 56.379483][ C0] virtnet_poll+0x436/0x7d0
[ 56.383953][ C0]
[ 56.386260][ C0] write to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 0:
[ 56.393865][ C0] tick_sched_do_timer+0xc0/0xe0
[ 56.398818][ C0] tick_sched_timer+0x43/0xe0
[ 56.403476][ C0] __hrtimer_run_queues+0x288/0x600
[ 56.408660][ C0] hrtimer_interrupt+0x22a/0x480
[ 56.413594][ C0] smp_apic_timer_interrupt+0xdc/0x280
[ 56.419037][ C0] apic_timer_interrupt+0xf/0x20
[ 56.423955][ C0] copy_user_enhanced_fast_string+0xe/0x20
[ 56.429742][ C0] _copy_to_iter+0x170/0xa20
[ 56.434323][ C0] simple_copy_to_iter+0x3f/0x60
[ 56.439247][ C0] __skb_datagram_iter+0x28a/0x470
[ 56.444334][ C0] skb_copy_datagram_iter+0x66/0x170
[ 56.449593][ C0] tcp_recvmsg+0x106c/0x1a30
[ 56.454159][ C0] inet_recvmsg+0xbb/0x250
[ 56.461929][ C0]
[ 56.464231][ C0] Reported by Kernel Concurrency Sanitizer on:
[ 56.470374][ C0] CPU: 0 PID: 7397 Comm: syz-fuzzer Not tainted 5.3.0+ #0
[ 56.477452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 56.487481][ C0] ==================================================================
[ 56.495515][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 56.502077][ C0] CPU: 0 PID: 7397 Comm: syz-fuzzer Not tainted 5.3.0+ #0
[ 56.509174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 56.519204][ C0] Call Trace:
[ 56.522460][ C0]
[ 56.525293][ C0] dump_stack+0xf5/0x159
[ 56.529516][ C0] panic+0x209/0x639
[ 56.534260][ C0] ? simple_copy_to_iter+0x3f/0x60
[ 56.539346][ C0] ? vprintk_func+0x8d/0x140
[ 56.543924][ C0] kcsan_report.cold+0xc/0x1b
[ 56.548577][ C0] __kcsan_setup_watchpoint+0x3ee/0x510
[ 56.554113][ C0] __tsan_write4+0x32/0x40
[ 56.558519][ C0] tick_sched_do_timer+0xc0/0xe0
[ 56.563444][ C0] tick_sched_timer+0x43/0xe0
[ 56.568106][ C0] __hrtimer_run_queues+0x288/0x600
[ 56.573286][ C0] ? tick_sched_do_timer+0xe0/0xe0
[ 56.578419][ C0] hrtimer_interrupt+0x22a/0x480
[ 56.583340][ C0] smp_apic_timer_interrupt+0xdc/0x280
[ 56.588776][ C0] apic_timer_interrupt+0xf/0x20
[ 56.593688][ C0]
[ 56.596612][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 56.603180][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 56.622761][ C0] RSP: 0018:ffffc90001683908 EFLAGS: 00010206 ORIG_RAX: ffffffffffffff13
[ 56.631144][ C0] RAX: ffff88811d8dd080 RBX: 00000000000000b2 RCX: 0000000000000072
[ 56.639088][ C0] RDX: 00000000000000b2 RSI: ffff888124a078cc RDI: 000000c42016ccae
[ 56.647032][ C0] RBP: ffffc90001683940 R08: ffff88811d8dd080 R09: 000088811d8ddb9f
[ 56.654995][ C0] R10: 00000000aaaaaaab R11: ffffffff86042d00 R12: 000000c42016cc6e
[ 56.662944][ C0] R13: 000000c42016cd20 R14: 0000000000000000 R15: 00007ffffffff000
[ 56.670906][ C0] ? copyout+0xa5/0xb0
[ 56.674955][ C0] _copy_to_iter+0x170/0xa20
[ 56.679519][ C0] ? __tsan_read8+0x2c/0x30
[ 56.683998][ C0] ? __tsan_read8+0x2c/0x30
[ 56.688483][ C0] ? __skb_free_datagram_locked+0x2e0/0x2e0
[ 56.694352][ C0] simple_copy_to_iter+0x3f/0x60
[ 56.699269][ C0] __skb_datagram_iter+0x28a/0x470
[ 56.704371][ C0] ? __skb_free_datagram_locked+0x2e0/0x2e0
[ 56.710242][ C0] skb_copy_datagram_iter+0x66/0x170
[ 56.715521][ C0] tcp_recvmsg+0x106c/0x1a30
[ 56.720097][ C0] ? preempt_schedule_common+0x37/0x90
[ 56.725535][ C0] inet_recvmsg+0xbb/0x250
[ 56.729927][ C0] ? __tsan_read8+0x2c/0x30
[ 56.734406][ C0] ? inet_sendpage+0x100/0x100
[ 56.739157][ C0] sock_recvmsg+0x92/0xb0
[ 56.743461][ C0] sock_read_iter+0x15f/0x1e0
[ 56.748131][ C0] new_sync_read+0x389/0x4f0
[ 56.752703][ C0] __vfs_read+0xb1/0xc0
[ 56.756841][ C0] vfs_read+0x143/0x2c0
[ 56.760975][ C0] ksys_read+0xd5/0x1b0
[ 56.765110][ C0] __x64_sys_read+0x4c/0x60
[ 56.769604][ C0] do_syscall_64+0xcf/0x2f0
[ 56.774088][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 56.779958][ C0] RIP: 0033:0x47c530
[ 56.783969][ C0] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[ 56.803556][ C0] RSP: 002b:000000c4204f57d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000
[ 56.811940][ C0] RAX: ffffffffffffffda RBX: 000000c420328800 RCX: 000000000047c530
[ 56.819945][ C0] RDX: 0000000000001000 RSI: 000000c42016c000 RDI: 0000000000000003
[ 56.827900][ C0] RBP: 000000c4204f5830 R08: 0000000000000000 R09: 0000000000000000
[ 56.835968][ C0] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000a598c8
[ 56.843918][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.853261][ C0] Kernel Offset: disabled
[ 56.857579][ C0] Rebooting in 86400 seconds..