[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.447089][ T26] audit: type=1800 audit(1571118841.134:25): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 34.489719][ T26] audit: type=1800 audit(1571118841.134:26): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 34.515781][ T26] audit: type=1800 audit(1571118841.144:27): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2019/10/15 05:54:11 fuzzer started 2019/10/15 05:54:12 dialing manager at 10.128.0.105:33683 2019/10/15 05:54:12 syscalls: 2523 2019/10/15 05:54:12 code coverage: enabled 2019/10/15 05:54:12 comparison tracing: enabled 2019/10/15 05:54:12 extra coverage: extra coverage is not supported by the kernel 2019/10/15 05:54:12 setuid sandbox: enabled 2019/10/15 05:54:12 namespace sandbox: enabled 2019/10/15 05:54:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/15 05:54:12 fault injection: enabled 2019/10/15 05:54:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/15 05:54:12 net packet injection: enabled 2019/10/15 05:54:12 net device setup: enabled 2019/10/15 05:54:12 concurrency sanitizer: enabled syzkaller login: [ 46.629693][ C0] ================================================================== [ 46.637835][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 46.645886][ C0] [ 46.648198][ C0] write to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 1: [ 46.655815][ C0] tick_sched_do_timer+0xc0/0xe0 [ 46.660731][ C0] tick_sched_timer+0x43/0xe0 [ 46.665391][ C0] __hrtimer_run_queues+0x288/0x600 [ 46.670582][ C0] hrtimer_interrupt+0x22a/0x480 [ 46.675512][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 46.680947][ C0] apic_timer_interrupt+0xf/0x20 [ 46.686383][ C0] __sanitizer_cov_trace_pc+0x14/0x50 [ 46.691746][ C0] nf_nat_packet+0x6d/0x110 [ 46.696416][ C0] nf_nat_inet_fn+0x1b5/0x4f0 [ 46.701077][ C0] nf_nat_ipv4_fn+0x99/0x160 [ 46.705658][ C0] nf_hook_slow+0x83/0x160 [ 46.710071][ C0] ip_local_deliver+0x1e5/0x210 [ 46.714927][ C0] ip_rcv_finish+0x121/0x160 [ 46.719519][ C0] ip_rcv+0x18f/0x1a0 [ 46.723478][ C0] [ 46.725793][ C0] read to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 0: [ 46.733325][ C0] tick_sched_do_timer+0x33/0xe0 [ 46.738364][ C0] tick_sched_timer+0x43/0xe0 [ 46.743058][ C0] __hrtimer_run_queues+0x288/0x600 [ 46.748247][ C0] hrtimer_interrupt+0x22a/0x480 [ 46.753171][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 46.758618][ C0] apic_timer_interrupt+0xf/0x20 [ 46.763751][ C0] [ 46.766056][ C0] Reported by Kernel Concurrency Sanitizer on: [ 46.772293][ C0] CPU: 0 PID: 7192 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 46.779415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.789463][ C0] ================================================================== [ 46.797509][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 46.804077][ C0] CPU: 0 PID: 7192 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 46.811158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.821205][ C0] Call Trace: [ 46.824470][ C0] [ 46.827307][ C0] dump_stack+0xf5/0x159 [ 46.831533][ C0] panic+0x209/0x639 [ 46.835420][ C0] ? vprintk_func+0x8d/0x140 [ 46.839987][ C0] kcsan_report.cold+0xc/0x1b [ 46.844642][ C0] __kcsan_setup_watchpoint+0x3ee/0x510 [ 46.850252][ C0] __tsan_read4+0x2c/0x30 [ 46.854573][ C0] tick_sched_do_timer+0x33/0xe0 [ 46.859511][ C0] tick_sched_timer+0x43/0xe0 [ 46.864171][ C0] __hrtimer_run_queues+0x288/0x600 [ 46.869345][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 46.874436][ C0] hrtimer_interrupt+0x22a/0x480 [ 46.879354][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 46.884805][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 46.890415][ C0] apic_timer_interrupt+0xf/0x20 [ 46.895322][ C0] [ 46.898237][ C0] RIP: 0033:0x6086e9 [ 46.902109][ C0] Code: 48 8d 91 88 10 00 00 84 02 48 8b 91 90 10 00 00 48 8b 99 88 10 00 00 48 8b b1 a0 10 00 00 48 39 d6 0f 83 f9 09 00 00 88 04 33 <48> 8b 91 a0 10 00 00 48 ff c2 48 89 91 a0 10 00 00 48 8b 99 98 10 [ 46.921689][ C0] RSP: 002b:000000c4203afab8 EFLAGS: 00000287 ORIG_RAX: ffffffffffffff13 [ 46.930092][ C0] RAX: 0000000000000026 RBX: 000000c4204b2000 RCX: 000000c420316000 [ 46.938041][ C0] RDX: 0000000000008000 RSI: 00000000000015d1 RDI: 0000000000000026 [ 46.945990][ C0] RBP: 000000c4203afb50 R08: 0000000000000268 R09: 0000000000000005 [ 46.953944][ C0] R10: 00000000ffffffff R11: 00000000000010f5 R12: 0000000000000003 [ 46.961904][ C0] R13: 000000c4209648f8 R14: 0000000000000002 R15: ffffffffffffffff [ 46.971171][ C0] Kernel Offset: disabled [ 46.975499][ C0] Rebooting in 86400 seconds..