[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.494605][ T25] audit: type=1800 audit(1570857103.672:25): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 34.543035][ T25] audit: type=1800 audit(1570857103.672:26): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 34.569413][ T25] audit: type=1800 audit(1570857103.672:27): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2019/10/12 05:11:55 fuzzer started 2019/10/12 05:11:56 dialing manager at 10.128.0.105:43913 2019/10/12 05:11:56 syscalls: 2523 2019/10/12 05:11:56 code coverage: enabled 2019/10/12 05:11:56 comparison tracing: enabled 2019/10/12 05:11:56 extra coverage: extra coverage is not supported by the kernel 2019/10/12 05:11:56 setuid sandbox: enabled 2019/10/12 05:11:56 namespace sandbox: enabled 2019/10/12 05:11:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/12 05:11:56 fault injection: enabled 2019/10/12 05:11:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/12 05:11:56 net packet injection: enabled 2019/10/12 05:11:56 net device setup: enabled 2019/10/12 05:11:56 concurrency sanitizer: enabled syzkaller login: [ 48.092294][ C1] ================================================================== [ 48.100472][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 48.108504][ C1] [ 48.110811][ C1] read to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 0: [ 48.118326][ C1] tick_sched_do_timer+0x33/0xe0 [ 48.123334][ C1] tick_sched_timer+0x43/0xe0 [ 48.127991][ C1] __hrtimer_run_queues+0x288/0x600 [ 48.133163][ C1] hrtimer_interrupt+0x22a/0x480 [ 48.138074][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 48.143505][ C1] apic_timer_interrupt+0xf/0x20 [ 48.148418][ C1] __kcsan_setup_watchpoint+0x282/0x510 [ 48.153936][ C1] __tsan_read2+0x2c/0x30 [ 48.158246][ C1] nf_hook_slow+0x106/0x160 [ 48.162721][ C1] ip_output+0x1d3/0x210 [ 48.166972][ C1] ip_local_out+0x74/0x90 [ 48.172094][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 48.176856][ C1] ip_queue_xmit+0x45/0x60 [ 48.181251][ C1] __tcp_transmit_skb+0xdeb/0x1cd0 [ 48.186330][ C1] [ 48.188637][ C1] write to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 1: [ 48.196255][ C1] tick_sched_do_timer+0xc0/0xe0 [ 48.201167][ C1] tick_sched_timer+0x43/0xe0 [ 48.205825][ C1] __hrtimer_run_queues+0x288/0x600 [ 48.211000][ C1] hrtimer_interrupt+0x22a/0x480 [ 48.215913][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 48.221342][ C1] apic_timer_interrupt+0xf/0x20 [ 48.226252][ C1] __kcsan_check_watchpoint+0x95/0x180 [ 48.231683][ C1] __tsan_read4+0x15/0x30 [ 48.235988][ C1] virtnet_poll+0x414/0x7d0 [ 48.240462][ C1] net_rx_action+0x3ae/0xa50 [ 48.245027][ C1] __do_softirq+0x115/0x33f [ 48.249520][ C1] run_ksoftirqd+0x46/0x60 [ 48.253910][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 48.258815][ C1] [ 48.261115][ C1] Reported by Kernel Concurrency Sanitizer on: [ 48.267246][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0+ #0 [ 48.274237][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.284264][ C1] ================================================================== [ 48.292302][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 48.298901][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.3.0+ #0 [ 48.305893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.315918][ C1] Call Trace: [ 48.319174][ C1] [ 48.322019][ C1] dump_stack+0xf5/0x159 [ 48.326239][ C1] panic+0x209/0x639 [ 48.330128][ C1] ? virtnet_poll+0x414/0x7d0 [ 48.334791][ C1] ? vprintk_func+0x8d/0x140 [ 48.339357][ C1] kcsan_report.cold+0xc/0x1b [ 48.344035][ C1] __kcsan_setup_watchpoint+0x3ee/0x510 [ 48.349571][ C1] __tsan_write4+0x32/0x40 [ 48.353972][ C1] tick_sched_do_timer+0xc0/0xe0 [ 48.358886][ C1] tick_sched_timer+0x43/0xe0 [ 48.363552][ C1] __hrtimer_run_queues+0x288/0x600 [ 48.368734][ C1] ? tick_sched_do_timer+0xe0/0xe0 [ 48.373825][ C1] hrtimer_interrupt+0x22a/0x480 [ 48.378745][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 48.384182][ C1] apic_timer_interrupt+0xf/0x20 [ 48.389089][ C1] [ 48.392014][ C1] RIP: 0010:__kcsan_check_watchpoint+0x95/0x180 [ 48.398230][ C1] Code: 48 21 cf 83 e6 3f 41 ba ab aa aa aa 4e 8d 4c 37 ff 8d 42 01 48 89 c2 49 0f af c2 89 d3 48 c1 e8 21 8d 04 40 29 c3 8d 44 1e ff <41> 89 c3 41 c1 fb 1f 41 c1 eb 1a 44 01 d8 83 e0 3f 44 29 d8 48 98 [ 48.417827][ C1] RSP: 0018:ffffc90000cf3c88 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 48.426215][ C1] RAX: 0000000000000034 RBX: 0000000000000002 RCX: 0000ffffffffffff [ 48.434163][ C1] RDX: 0000000000000002 RSI: 0000000000000033 RDI: 0000c90000cf3d14 [ 48.442119][ C1] RBP: ffffc90000cf3cb0 R08: 0000000000000000 R09: 0000c90000cf3d17 [ 48.450084][ C1] R10: 00000000aaaaaaab R11: ffffffff86042db8 R12: 0000000000000000 [ 48.458035][ C1] R13: ffffc90000cf3d14 R14: 0000000000000004 R15: ffffc90000cf3d14 [ 48.466013][ C1] __tsan_read4+0x15/0x30 [ 48.470321][ C1] virtnet_poll+0x414/0x7d0 [ 48.474814][ C1] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 48.480525][ C1] net_rx_action+0x3ae/0xa50 [ 48.485105][ C1] __do_softirq+0x115/0x33f [ 48.489592][ C1] ? takeover_tasklets+0x250/0x250 [ 48.494676][ C1] run_ksoftirqd+0x46/0x60 [ 48.499065][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 48.503978][ C1] kthread+0x1d4/0x200 [ 48.508033][ C1] ? constant_test_bit.constprop.0+0x30/0x30 [ 48.513983][ C1] ? kthread_bind+0x50/0x50 [ 48.518466][ C1] ret_from_fork+0x1f/0x30 [ 48.524066][ C1] Kernel Offset: disabled [ 48.528380][ C1] Rebooting in 86400 seconds..