[ 46.488586][ T27] audit: type=1800 audit(1578046321.976:21): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 46.533651][ T27] audit: type=1800 audit(1578046321.976:22): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 47.780304][ T7828] sshd (7828) used greatest stack depth: 10136 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2020/01/03 10:12:11 fuzzer started 2020/01/03 10:12:12 dialing manager at 10.128.0.105:42817 2020/01/03 10:12:12 syscalls: 2723 2020/01/03 10:12:12 code coverage: enabled 2020/01/03 10:12:12 comparison tracing: enabled 2020/01/03 10:12:12 extra coverage: enabled 2020/01/03 10:12:12 setuid sandbox: enabled 2020/01/03 10:12:12 namespace sandbox: enabled 2020/01/03 10:12:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/03 10:12:12 fault injection: enabled 2020/01/03 10:12:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/03 10:12:12 net packet injection: enabled 2020/01/03 10:12:12 net device setup: enabled 2020/01/03 10:12:12 concurrency sanitizer: enabled 2020/01/03 10:12:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/01/03 10:12:16 adding functions to KCSAN blacklist: 'mod_timer' 'generic_write_end' 'tick_nohz_idle_stop_tick' 'do_nanosleep' 'blk_mq_get_request' 'tick_do_update_jiffies64' 'find_next_bit' '__hrtimer_run_queues' 'ep_poll' 'vm_area_dup' 'wbt_done' 'tomoyo_supervisor' 'taskstats_exit' 'ext4_has_free_clusters' 'bio_endio' 'pcpu_alloc' 'run_timer_softirq' 'xas_clear_mark' 'futex_wait_queue_me' 'timer_clear_idle' 'blk_stat_add' 'ext4_free_inodes_count' syzkaller login: [ 65.159167][ C1] ================================================================== [ 65.167311][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 65.175345][ C1] [ 65.177657][ C1] write to 0xffffffff85ebb590 of 4 bytes by interrupt on cpu 0: [ 65.185274][ C1] tick_sched_do_timer+0xc0/0xe0 [ 65.190563][ C1] tick_sched_timer+0x43/0xe0 [ 65.195252][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 65.200443][ C1] hrtimer_interrupt+0x22a/0x480 [ 65.205362][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 65.210802][ C1] apic_timer_interrupt+0xf/0x20 [ 65.215719][ C1] __tsan_read8+0xb4/0x100 [ 65.220113][ C1] __list_del_entry_valid+0x2d/0x93 [ 65.225326][ C1] netif_receive_skb_list_internal+0xa7/0x830 [ 65.231374][ C1] gro_normal_list.part.0+0x3a/0xb0 [ 65.236551][ C1] gro_normal_one+0x162/0x170 [ 65.241208][ C1] napi_gro_receive+0x288/0x300 [ 65.246035][ C1] receive_buf+0x284/0x30b0 [ 65.250555][ C1] virtnet_poll+0x436/0x7d0 [ 65.255035][ C1] net_rx_action+0x3ae/0xa90 [ 65.259600][ C1] __do_softirq+0x115/0x33f [ 65.264079][ C1] run_ksoftirqd+0x46/0x60 [ 65.268474][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 65.273387][ C1] kthread+0x1d4/0x200 [ 65.277432][ C1] ret_from_fork+0x1f/0x30 [ 65.281815][ C1] [ 65.284122][ C1] read to 0xffffffff85ebb590 of 4 bytes by interrupt on cpu 1: [ 65.291641][ C1] tick_sched_do_timer+0x33/0xe0 [ 65.296557][ C1] tick_sched_timer+0x43/0xe0 [ 65.301209][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 65.306386][ C1] hrtimer_interrupt+0x22a/0x480 [ 65.311297][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 65.316742][ C1] apic_timer_interrupt+0xf/0x20 [ 65.321647][ C1] [ 65.323950][ C1] Reported by Kernel Concurrency Sanitizer on: [ 65.330081][ C1] CPU: 1 PID: 7896 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 65.338288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.348490][ C1] ================================================================== [ 65.356525][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 65.363092][ C1] CPU: 1 PID: 7896 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 65.371323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.381458][ C1] Call Trace: [ 65.384719][ C1] [ 65.387553][ C1] dump_stack+0x11d/0x181 [ 65.391872][ C1] panic+0x210/0x640 [ 65.395749][ C1] ? vprintk_func+0x8d/0x140 [ 65.400318][ C1] kcsan_report.cold+0xc/0xd [ 65.404888][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 65.410240][ C1] __tsan_read4+0xc6/0x100 [ 65.414636][ C1] tick_sched_do_timer+0x33/0xe0 [ 65.419554][ C1] tick_sched_timer+0x43/0xe0 [ 65.424209][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 65.429385][ C1] ? tick_sched_handle+0x100/0x100 [ 65.434485][ C1] hrtimer_interrupt+0x22a/0x480 [ 65.439414][ C1] ? sched_clock+0x13/0x20 [ 65.443835][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 65.449273][ C1] apic_timer_interrupt+0xf/0x20 [ 65.454183][ C1] [ 65.457096][ C1] RIP: 0033:0x6099c3 [ 65.460974][ C1] Code: a3 d9 e4 ff e9 0e ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 b4 01 00 00 <48> 83 ec 38 48 89 6c 24 30 48 8d 6c 24 30 48 8b 44 24 48 48 8b 10 [ 65.480565][ C1] RSP: 002b:000000c420147a78 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 65.488956][ C1] RAX: 000000c4203d0028 RBX: 0000000000008000 RCX: 000000c42006ec00 [ 65.496905][ C1] RDX: 0000000000000e41 RSI: 00000000000071bf RDI: 0000000000000083 [ 65.504867][ C1] RBP: 000000c420147b18 R08: 000000c42042a000 R09: 0000000000007a79 [ 65.512817][ C1] R10: ffffffffffffffff R11: 0000000000000926 R12: 0000000000000010 [ 65.520774][ C1] R13: ffffffffffffffff R14: 0000000000000008 R15: ffffffffffffffff [ 65.530209][ C1] Kernel Offset: disabled [ 65.534534][ C1] Rebooting in 86400 seconds..