[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 32.991267][ T25] audit: type=1800 audit(1570950146.952:25): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 33.019056][ T25] audit: type=1800 audit(1570950146.952:26): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 33.046642][ T25] audit: type=1800 audit(1570950146.952:27): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2019/10/13 07:02:37 fuzzer started 2019/10/13 07:02:37 dialing manager at 10.128.0.105:43913 2019/10/13 07:02:37 syscalls: 2523 2019/10/13 07:02:37 code coverage: enabled 2019/10/13 07:02:37 comparison tracing: enabled 2019/10/13 07:02:37 extra coverage: extra coverage is not supported by the kernel 2019/10/13 07:02:37 setuid sandbox: enabled 2019/10/13 07:02:37 namespace sandbox: enabled 2019/10/13 07:02:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/13 07:02:37 fault injection: enabled 2019/10/13 07:02:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/13 07:02:37 net packet injection: enabled 2019/10/13 07:02:37 net device setup: enabled 2019/10/13 07:02:37 concurrency sanitizer: enabled syzkaller login: [ 44.401074][ C0] ================================================================== [ 44.409205][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 44.417261][ C0] [ 44.419575][ C0] read to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 1: [ 44.427190][ C0] tick_sched_do_timer+0x33/0xe0 [ 44.432161][ C0] tick_sched_timer+0x43/0xe0 [ 44.436841][ C0] __hrtimer_run_queues+0x288/0x600 [ 44.442042][ C0] hrtimer_interrupt+0x22a/0x480 [ 44.446973][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 44.452405][ C0] apic_timer_interrupt+0xf/0x20 [ 44.457321][ C0] __kcsan_check_watchpoint+0xb3/0x180 [ 44.462751][ C0] __tsan_write8+0x18/0x40 [ 44.467144][ C0] ipt_do_table+0x16b/0xe40 [ 44.471636][ C0] iptable_filter_hook+0x4a/0x60 [ 44.476562][ C0] nf_hook_slow+0x83/0x160 [ 44.480954][ C0] ip_local_deliver+0x1e5/0x210 [ 44.485904][ C0] ip_rcv_finish+0x121/0x160 [ 44.490473][ C0] ip_rcv+0x18f/0x1a0 [ 44.494427][ C0] [ 44.496739][ C0] write to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 0: [ 44.504351][ C0] tick_sched_do_timer+0xc0/0xe0 [ 44.509302][ C0] tick_sched_timer+0x43/0xe0 [ 44.513990][ C0] __hrtimer_run_queues+0x288/0x600 [ 44.519166][ C0] hrtimer_interrupt+0x22a/0x480 [ 44.524089][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 44.529699][ C0] apic_timer_interrupt+0xf/0x20 [ 44.534634][ C0] __kcsan_setup_watchpoint+0x2d/0x510 [ 44.540248][ C0] __tsan_write8+0x32/0x40 [ 44.544731][ C0] iov_iter_init+0xb7/0x120 [ 44.549220][ C0] new_sync_read+0x365/0x4f0 [ 44.553965][ C0] __vfs_read+0xb1/0xc0 [ 44.558101][ C0] vfs_read+0x143/0x2c0 [ 44.562243][ C0] ksys_read+0xd5/0x1b0 [ 44.566367][ C0] [ 44.568671][ C0] Reported by Kernel Concurrency Sanitizer on: [ 44.574811][ C0] CPU: 0 PID: 7264 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 44.581934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.592326][ C0] ================================================================== [ 44.600391][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 44.606969][ C0] CPU: 0 PID: 7264 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 44.614073][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.624123][ C0] Call Trace: [ 44.627396][ C0] [ 44.630233][ C0] dump_stack+0xf5/0x159 [ 44.634460][ C0] panic+0x209/0x639 [ 44.638354][ C0] ? iov_iter_init+0xb7/0x120 [ 44.643030][ C0] ? vprintk_func+0x8d/0x140 [ 44.647605][ C0] kcsan_report.cold+0xc/0x1b [ 44.652262][ C0] __kcsan_setup_watchpoint+0x3ee/0x510 [ 44.657796][ C0] __tsan_write4+0x32/0x40 [ 44.662300][ C0] tick_sched_do_timer+0xc0/0xe0 [ 44.667391][ C0] tick_sched_timer+0x43/0xe0 [ 44.672060][ C0] __hrtimer_run_queues+0x288/0x600 [ 44.677508][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 44.683398][ C0] hrtimer_interrupt+0x22a/0x480 [ 44.688698][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 44.694144][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 44.699775][ C0] apic_timer_interrupt+0xf/0x20 [ 44.704709][ C0] [ 44.707634][ C0] RIP: 0010:__kcsan_setup_watchpoint+0x2d/0x510 [ 44.713855][ C0] Code: e5 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 53 89 d3 48 83 ec 18 66 0f 1f 44 00 00 65 8b 05 42 96 ae 7e a9 00 01 1f 00 75 3c <65> 48 8b 04 25 40 6c 01 00 8b 88 e4 09 00 00 85 c9 0f 8f e6 01 00 [ 44.733446][ C0] RSP: 0018:ffffc9000139fca8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 44.741914][ C0] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 0000ffffffffffff [ 44.749882][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000139fd98 [ 44.757842][ C0] RBP: ffffc9000139fce8 R08: 0000000000000001 R09: 0000c9000139fd9f [ 44.765811][ C0] R10: 00000000aaaaaaab R11: ffffffff86042d10 R12: 0000000000000008 [ 44.773768][ C0] R13: ffffc9000139fd98 R14: 0000000000000001 R15: ffffc9000139fd68 [ 44.781833][ C0] ? __kcsan_setup_watchpoint+0x96/0x510 [ 44.787447][ C0] __tsan_write8+0x32/0x40 [ 44.792239][ C0] iov_iter_init+0xb7/0x120 [ 44.796731][ C0] new_sync_read+0x365/0x4f0 [ 44.801311][ C0] __vfs_read+0xb1/0xc0 [ 44.805449][ C0] vfs_read+0x143/0x2c0 [ 44.809584][ C0] ksys_read+0xd5/0x1b0 [ 44.813737][ C0] __x64_sys_read+0x4c/0x60 [ 44.818220][ C0] do_syscall_64+0xcf/0x2f0 [ 44.822707][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.828575][ C0] RIP: 0033:0x47c530 [ 44.832820][ C0] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 44.852524][ C0] RSP: 002b:000000c4201877d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 44.860929][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 44.868884][ C0] RDX: 0000000000001000 RSI: 000000c420096000 RDI: 0000000000000003 [ 44.876849][ C0] RBP: 000000c420187830 R08: 0000000000000000 R09: 0000000000000000 [ 44.884799][ C0] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000004 [ 44.892764][ C0] R13: 000000c42012d4d0 R14: 0000000000000002 R15: ffffffffffffffff [ 44.902043][ C0] Kernel Offset: disabled [ 44.906374][ C0] Rebooting in 86400 seconds..