[ 42.807182][ T26] audit: type=1800 audit(1571157997.722:21): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.855723][ T26] audit: type=1800 audit(1571157997.722:22): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 42.886356][ T26] audit: type=1800 audit(1571157997.722:23): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. 2019/10/15 16:46:48 fuzzer started 2019/10/15 16:46:49 dialing manager at 10.128.0.105:38903 2019/10/15 16:46:49 syscalls: 2523 2019/10/15 16:46:49 code coverage: enabled 2019/10/15 16:46:49 comparison tracing: enabled 2019/10/15 16:46:49 extra coverage: extra coverage is not supported by the kernel 2019/10/15 16:46:49 setuid sandbox: enabled 2019/10/15 16:46:49 namespace sandbox: enabled 2019/10/15 16:46:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/15 16:46:49 fault injection: enabled 2019/10/15 16:46:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/15 16:46:49 net packet injection: enabled 2019/10/15 16:46:49 net device setup: enabled 2019/10/15 16:46:49 concurrency sanitizer: enabled syzkaller login: [ 54.979830][ C1] ================================================================== [ 54.988009][ C1] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 54.996097][ C1] [ 54.998405][ C1] write to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 0: [ 55.006014][ C1] tick_sched_do_timer+0xc0/0xe0 [ 55.010926][ C1] tick_sched_timer+0x43/0xe0 [ 55.015583][ C1] __hrtimer_run_queues+0x288/0x600 [ 55.020764][ C1] hrtimer_interrupt+0x22a/0x480 [ 55.025678][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 55.031123][ C1] apic_timer_interrupt+0xf/0x20 [ 55.036050][ C1] __kcsan_check_watchpoint+0xbb/0x180 [ 55.041491][ C1] __tsan_read4+0x15/0x30 [ 55.045800][ C1] virtqueue_add+0x886/0x1a80 [ 55.050466][ C1] virtqueue_add_inbuf_ctx+0x50/0x6a [ 55.055736][ C1] try_fill_recv+0x68e/0xdc0 [ 55.060308][ C1] virtnet_poll+0x64c/0x7d0 [ 55.064789][ C1] net_rx_action+0x3ae/0xa50 [ 55.069358][ C1] __do_softirq+0x115/0x33f [ 55.073842][ C1] [ 55.076151][ C1] read to 0xffffffff85caf310 of 4 bytes by interrupt on cpu 1: [ 55.083670][ C1] tick_sched_do_timer+0x33/0xe0 [ 55.088583][ C1] tick_sched_timer+0x43/0xe0 [ 55.093237][ C1] __hrtimer_run_queues+0x288/0x600 [ 55.098418][ C1] hrtimer_interrupt+0x22a/0x480 [ 55.103332][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 55.108764][ C1] apic_timer_interrupt+0xf/0x20 [ 55.113676][ C1] [ 55.115979][ C1] Reported by Kernel Concurrency Sanitizer on: [ 55.122111][ C1] CPU: 1 PID: 7199 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 55.129188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.139217][ C1] ================================================================== [ 55.147263][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 55.153834][ C1] CPU: 1 PID: 7199 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 55.160912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.170949][ C1] Call Trace: [ 55.174218][ C1] [ 55.177058][ C1] dump_stack+0xf5/0x159 [ 55.181301][ C1] panic+0x209/0x639 [ 55.185179][ C1] ? vprintk_func+0x8d/0x140 [ 55.189785][ C1] kcsan_report.cold+0xc/0x1b [ 55.194451][ C1] __kcsan_setup_watchpoint+0x3ee/0x510 [ 55.199982][ C1] __tsan_read4+0x2c/0x30 [ 55.204308][ C1] tick_sched_do_timer+0x33/0xe0 [ 55.209270][ C1] tick_sched_timer+0x43/0xe0 [ 55.213941][ C1] __hrtimer_run_queues+0x288/0x600 [ 55.219914][ C1] ? tick_sched_do_timer+0xe0/0xe0 [ 55.225029][ C1] hrtimer_interrupt+0x22a/0x480 [ 55.229964][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 55.235411][ C1] ? smp_reschedule_interrupt+0x71/0x1d0 [ 55.241892][ C1] apic_timer_interrupt+0xf/0x20 [ 55.246801][ C1] [ 55.249717][ C1] RIP: 0033:0x609a2b [ 55.253589][ C1] Code: 44 24 10 48 8b 4c 24 08 48 85 c9 74 d0 48 c7 44 24 50 00 00 00 00 48 89 4c 24 58 48 89 44 24 60 48 8b 6c 24 30 48 83 c4 38 c3 <8b> 53 18 89 d7 81 e2 ff 01 00 00 8b 54 90 08 41 89 d0 83 e2 0f 48 [ 55.273178][ C1] RSP: 002b:000000c42014fa78 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 55.281576][ C1] RAX: 000000c420370028 RBX: 000000c420370000 RCX: 000000c420085380 [ 55.289523][ C1] RDX: 000000000000000e RSI: 000000000000000e RDI: 00000000000000fc [ 55.297469][ C1] RBP: 000000c42014faa8 R08: 000000c4204c4000 R09: 0000000000000f89 [ 55.305418][ C1] R10: ffffffffffffffff R11: 000000000000000e R12: 0000000000000010 [ 55.313366][ C1] R13: ffffffffffffffff R14: 0000000000000002 R15: ffffffffffffffff [ 55.322561][ C1] Kernel Offset: disabled [ 55.326878][ C1] Rebooting in 86400 seconds..