[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.398745][ T25] audit: type=1800 audit(1570204363.390:25): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 35.445612][ T25] audit: type=1800 audit(1570204363.390:26): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 35.467357][ T25] audit: type=1800 audit(1570204363.390:27): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. 2019/10/04 15:52:53 fuzzer started 2019/10/04 15:52:55 dialing manager at 10.128.0.105:44881 2019/10/04 15:52:55 syscalls: 2523 2019/10/04 15:52:55 code coverage: enabled 2019/10/04 15:52:55 comparison tracing: enabled 2019/10/04 15:52:55 extra coverage: extra coverage is not supported by the kernel 2019/10/04 15:52:55 setuid sandbox: enabled 2019/10/04 15:52:55 namespace sandbox: enabled 2019/10/04 15:52:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 15:52:55 fault injection: enabled 2019/10/04 15:52:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 15:52:55 net packet injection: enabled 2019/10/04 15:52:55 net device setup: enabled 2019/10/04 15:52:55 concurrency sanitizer: enabled syzkaller login: [ 47.703639][ C1] ================================================================== [ 47.711875][ C1] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 47.721009][ C1] [ 47.723318][ C1] write to 0xffffffff8603f008 of 8 bytes by interrupt on cpu 0: [ 47.730966][ C1] tick_do_update_jiffies64+0x105/0x260 [ 47.736494][ C1] tick_sched_do_timer+0xd4/0xe0 [ 47.741672][ C1] tick_sched_timer+0x43/0xe0 [ 47.746333][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.751611][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.756541][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.761986][ C1] apic_timer_interrupt+0xf/0x20 [ 47.766929][ C1] __kcsan_check_watchpoint+0xbb/0x180 [ 47.772563][ C1] __tsan_read8+0x15/0x30 [ 47.776960][ C1] ip_local_deliver_finish+0xb5/0x140 [ 47.782417][ C1] ip_local_deliver+0x133/0x210 [ 47.787266][ C1] ip_rcv_finish+0x121/0x160 [ 47.792106][ C1] ip_rcv+0x18f/0x1a0 [ 47.796093][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 47.801784][ C1] [ 47.804112][ C1] read to 0xffffffff8603f008 of 8 bytes by interrupt on cpu 1: [ 47.811859][ C1] tick_do_update_jiffies64+0x2b/0x260 [ 47.817577][ C1] tick_sched_do_timer+0xd4/0xe0 [ 47.822506][ C1] tick_sched_timer+0x43/0xe0 [ 47.827165][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.832354][ C1] hrtimer_interrupt+0x22a/0x480 [ 47.837506][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 47.843046][ C1] apic_timer_interrupt+0xf/0x20 [ 47.848076][ C1] __kcsan_check_watchpoint+0x101/0x180 [ 47.854066][ C1] __nf_conntrack_find_get+0x1f6/0x870 [ 47.859589][ C1] nf_conntrack_in+0x2ef/0xaa0 [ 47.864467][ C1] ipv4_conntrack_local+0xbe/0x130 [ 47.870019][ C1] nf_hook_slow+0x83/0x160 [ 47.874589][ C1] __ip_local_out+0x1f7/0x2b0 [ 47.879948][ C1] [ 47.882274][ C1] Reported by Kernel Concurrency Sanitizer on: [ 47.888419][ C1] CPU: 1 PID: 7264 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 47.895510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.905544][ C1] ================================================================== [ 47.914473][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 47.921074][ C1] CPU: 1 PID: 7264 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 47.928889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.942258][ C1] Call Trace: [ 47.945529][ C1] [ 47.948389][ C1] dump_stack+0xf5/0x159 [ 47.952708][ C1] panic+0x209/0x639 [ 47.956596][ C1] ? vprintk_func+0x8d/0x140 [ 47.961180][ C1] kcsan_report.cold+0x57/0xeb [ 47.965945][ C1] __kcsan_setup_watchpoint+0x342/0x500 [ 47.972062][ C1] __tsan_read8+0x2c/0x30 [ 47.976391][ C1] tick_do_update_jiffies64+0x2b/0x260 [ 47.981836][ C1] tick_sched_do_timer+0xd4/0xe0 [ 47.987017][ C1] tick_sched_timer+0x43/0xe0 [ 47.991783][ C1] __hrtimer_run_queues+0x288/0x600 [ 47.996975][ C1] ? tick_sched_do_timer+0xe0/0xe0 [ 48.002166][ C1] hrtimer_interrupt+0x22a/0x480 [ 48.007089][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 48.012529][ C1] apic_timer_interrupt+0xf/0x20 [ 48.017624][ C1] [ 48.020556][ C1] RIP: 0010:__kcsan_check_watchpoint+0x101/0x180 [ 48.027143][ C1] Code: 78 05 45 84 c0 74 0f 4d 39 cf 77 0a 49 8d 5c 1f ff 48 39 df 76 2f 83 fa 03 75 8a b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d 65 8b 0d 47 96 af 7e 85 c9 0f 84 40 ff ff ff 5b 41 5c 41 5d 41 [ 48.047123][ C1] RSP: 0018:ffffc900017cf5f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 48.055665][ C1] RAX: 0000000000000001 RBX: ffffc900017cf748 RCX: 0000ffffffffffff [ 48.064164][ C1] RDX: 0000000000000003 RSI: 0000000000000019 RDI: 0000888124219030 [ 48.072266][ C1] RBP: ffffc900017cf608 R08: 0000000000000000 R09: 0000888124219033 [ 48.080218][ C1] R10: 00000000aaaaaaab R11: ffffffff86042ce0 R12: ffff888124219030 [ 48.088180][ C1] R13: ffff888124219000 R14: 00000000000204bb R15: 0000000000000000 [ 48.096243][ C1] ? __tsan_read4+0x15/0x30 [ 48.100845][ C1] __nf_conntrack_find_get+0x1f6/0x870 [ 48.106579][ C1] ? __tsan_write2+0x32/0x40 [ 48.111359][ C1] ? nf_ct_get_tuple+0x325/0x490 [ 48.116567][ C1] nf_conntrack_in+0x2ef/0xaa0 [ 48.121590][ C1] ipv4_conntrack_local+0xbe/0x130 [ 48.126811][ C1] nf_hook_slow+0x83/0x160 [ 48.131547][ C1] ? nf_ct_tcp_fixup+0xe0/0xe0 [ 48.136499][ C1] __ip_local_out+0x1f7/0x2b0 [ 48.141179][ C1] ? constant_test_bit+0x30/0x30 [ 48.146303][ C1] ip_local_out+0x31/0x90 [ 48.150740][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 48.155530][ C1] ip_queue_xmit+0x45/0x60 [ 48.159933][ C1] __tcp_transmit_skb+0xdeb/0x1cd0 [ 48.165047][ C1] __tcp_send_ack+0x246/0x300 [ 48.169723][ C1] tcp_send_ack+0x34/0x40 [ 48.174041][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 48.178903][ C1] tcp_recvmsg+0x633/0x1a30 [ 48.183422][ C1] inet_recvmsg+0xbb/0x250 [ 48.187953][ C1] ? __tsan_read8+0x2c/0x30 [ 48.192594][ C1] ? inet_sendpage+0x100/0x100 [ 48.197507][ C1] sock_recvmsg+0x92/0xb0 [ 48.201821][ C1] sock_read_iter+0x15f/0x1e0 [ 48.206688][ C1] new_sync_read+0x389/0x4f0 [ 48.211375][ C1] __vfs_read+0xb1/0xc0 [ 48.215946][ C1] vfs_read+0x143/0x2c0 [ 48.220143][ C1] ksys_read+0xd5/0x1b0 [ 48.224498][ C1] __x64_sys_read+0x4c/0x60 [ 48.229386][ C1] do_syscall_64+0xcf/0x2f0 [ 48.233979][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.240226][ C1] RIP: 0033:0x47c530 [ 48.244379][ C1] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 48.264344][ C1] RSP: 002b:000000c4203d97d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 48.272944][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 48.281126][ C1] RDX: 0000000000001000 RSI: 000000c4202b4000 RDI: 0000000000000003 [ 48.289460][ C1] RBP: 000000c4203d9830 R08: 0000000000000000 R09: 0000000000000000 [ 48.297553][ C1] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000100 [ 48.306049][ C1] R13: ffffffffffffffff R14: 0000000000000002 R15: ffffffffffffffff [ 48.316214][ C1] Kernel Offset: disabled [ 48.320837][ C1] Rebooting in 86400 seconds..