[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.967121][ T26] audit: type=1800 audit(1571185010.969:25): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 35.986892][ T26] audit: type=1800 audit(1571185010.969:26): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.006828][ T26] audit: type=1800 audit(1571185010.969:27): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.254' (ECDSA) to the list of known hosts. 2019/10/16 00:17:02 fuzzer started 2019/10/16 00:17:04 dialing manager at 10.128.0.105:34737 2019/10/16 00:17:04 syscalls: 2524 2019/10/16 00:17:04 code coverage: enabled 2019/10/16 00:17:04 comparison tracing: enabled 2019/10/16 00:17:04 extra coverage: extra coverage is not supported by the kernel 2019/10/16 00:17:04 setuid sandbox: enabled 2019/10/16 00:17:04 namespace sandbox: enabled 2019/10/16 00:17:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/16 00:17:04 fault injection: enabled 2019/10/16 00:17:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/16 00:17:04 net packet injection: enabled 2019/10/16 00:17:04 net device setup: enabled 2019/10/16 00:17:04 concurrency sanitizer: enabled syzkaller login: [ 50.055249][ C0] ================================================================== [ 50.063395][ C0] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 50.072310][ C0] [ 50.074753][ C0] write to 0xffffffff86042008 of 8 bytes by interrupt on cpu 1: [ 50.082486][ C0] tick_do_update_jiffies64+0x105/0x260 [ 50.088009][ C0] tick_sched_do_timer+0xd4/0xe0 [ 50.092925][ C0] tick_sched_timer+0x43/0xe0 [ 50.097583][ C0] __hrtimer_run_queues+0x288/0x600 [ 50.102759][ C0] hrtimer_interrupt+0x22a/0x480 [ 50.107683][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 50.113128][ C0] apic_timer_interrupt+0xf/0x20 [ 50.118046][ C0] __kcsan_setup_watchpoint+0x9a/0x510 [ 50.123494][ C0] __tsan_read4+0x2c/0x30 [ 50.127803][ C0] ipt_do_table+0x560/0xe60 [ 50.132304][ C0] iptable_mangle_hook+0x7a/0x260 [ 50.137362][ C0] nf_hook_slow+0x83/0x160 [ 50.141770][ C0] ip_local_deliver+0x1e5/0x210 [ 50.146600][ C0] ip_rcv_finish+0x121/0x160 [ 50.151170][ C0] [ 50.153552][ C0] read to 0xffffffff86042008 of 8 bytes by interrupt on cpu 0: [ 50.161189][ C0] tick_do_update_jiffies64+0x2b/0x260 [ 50.167047][ C0] tick_sched_do_timer+0xd4/0xe0 [ 50.171967][ C0] tick_sched_timer+0x43/0xe0 [ 50.176721][ C0] __hrtimer_run_queues+0x288/0x600 [ 50.182804][ C0] hrtimer_interrupt+0x22a/0x480 [ 50.187730][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 50.193185][ C0] apic_timer_interrupt+0xf/0x20 [ 50.198109][ C0] __sanitizer_cov_trace_pc+0x0/0x50 [ 50.203393][ C0] ip_output+0xdf/0x210 [ 50.207539][ C0] ip_local_out+0x74/0x90 [ 50.211860][ C0] __ip_queue_xmit+0x3a8/0xa40 [ 50.216613][ C0] ip_queue_xmit+0x45/0x60 [ 50.221025][ C0] __tcp_transmit_skb+0xe81/0x1d60 [ 50.226135][ C0] [ 50.228442][ C0] Reported by Kernel Concurrency Sanitizer on: [ 50.234592][ C0] CPU: 0 PID: 7216 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 50.242030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.252073][ C0] ================================================================== [ 50.260110][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 50.266678][ C0] CPU: 0 PID: 7216 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 50.274107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.284156][ C0] Call Trace: [ 50.287436][ C0] [ 50.290276][ C0] dump_stack+0xf5/0x159 [ 50.294497][ C0] panic+0x210/0x640 [ 50.298373][ C0] ? ip_output+0xdf/0x210 [ 50.302679][ C0] ? vprintk_func+0x8d/0x140 [ 50.307246][ C0] kcsan_report.cold+0xc/0x1b [ 50.311899][ C0] __kcsan_setup_watchpoint+0x3ee/0x510 [ 50.317423][ C0] ? __kcsan_setup_watchpoint+0x96/0x510 [ 50.323032][ C0] __tsan_read8+0x2c/0x30 [ 50.327356][ C0] tick_do_update_jiffies64+0x2b/0x260 [ 50.332796][ C0] tick_sched_do_timer+0xd4/0xe0 [ 50.337763][ C0] tick_sched_timer+0x43/0xe0 [ 50.342426][ C0] __hrtimer_run_queues+0x288/0x600 [ 50.347627][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 50.352733][ C0] hrtimer_interrupt+0x22a/0x480 [ 50.357667][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 50.363103][ C0] ? do_IRQ+0xcb/0x180 [ 50.367149][ C0] apic_timer_interrupt+0xf/0x20 [ 50.372075][ C0] [ 50.375004][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 50.381057][ C0] Code: f2 ff 48 c7 c7 88 37 04 86 e8 6c ff 0c 00 48 c7 05 d9 77 be 04 00 00 00 00 e9 6a f1 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 65 48 8b 04 25 40 6c 01 00 65 8b 15 34 ac bb 7e 81 e2 [ 50.400794][ C0] RSP: 0018:ffffc9000161f7e8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 50.409185][ C0] RAX: ffff88812a2f10c0 RBX: ffff88812680cf80 RCX: ffffffff83ee9168 [ 50.417137][ C0] RDX: ffff888124dbf700 RSI: ffff888122da8900 RDI: ffffffff83ee905f [ 50.425100][ C0] RBP: ffffc9000161f818 R08: ffff88812a2f10c0 R09: 000088812a2f143b [ 50.433047][ C0] R10: 00000000aaaaaaab R11: ffffffff86045da0 R12: ffff888122da8900 [ 50.440994][ C0] R13: ffff888124dbf700 R14: ffff888122da8900 R15: ffffffff85bf9e40 [ 50.448958][ C0] ? ip_output+0x1e8/0x210 [ 50.453351][ C0] ? ip_output+0xdf/0x210 [ 50.457671][ C0] ? nf_hook_slow+0xb8/0x160 [ 50.462238][ C0] ? ip_finish_output+0x24/0x160 [ 50.467151][ C0] ip_output+0xdf/0x210 [ 50.471283][ C0] ? __ip_finish_output+0x490/0x490 [ 50.476461][ C0] ip_local_out+0x74/0x90 [ 50.480787][ C0] __ip_queue_xmit+0x3a8/0xa40 [ 50.485553][ C0] ip_queue_xmit+0x45/0x60 [ 50.489958][ C0] __tcp_transmit_skb+0xe81/0x1d60 [ 50.495135][ C0] __tcp_send_ack+0x246/0x300 [ 50.499795][ C0] tcp_send_ack+0x34/0x40 [ 50.504111][ C0] tcp_cleanup_rbuf+0x130/0x360 [ 50.508953][ C0] tcp_recvmsg+0x633/0x1a30 [ 50.520967][ C0] inet_recvmsg+0xbb/0x250 [ 50.525361][ C0] ? __tsan_read8+0x2c/0x30 [ 50.530005][ C0] ? inet_sendpage+0x100/0x100 [ 50.534789][ C0] sock_recvmsg+0x92/0xb0 [ 50.539113][ C0] sock_read_iter+0x15f/0x1e0 [ 50.543821][ C0] new_sync_read+0x389/0x4f0 [ 50.548418][ C0] __vfs_read+0xb1/0xc0 [ 50.552558][ C0] vfs_read+0x143/0x2c0 [ 50.556695][ C0] ksys_read+0xd5/0x1b0 [ 50.560833][ C0] __x64_sys_read+0x4c/0x60 [ 50.565331][ C0] do_syscall_64+0xcc/0x370 [ 50.569833][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.575713][ C0] RIP: 0033:0x47c530 [ 50.579605][ C0] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 50.599189][ C0] RSP: 002b:000000c4202eb818 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 50.607588][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 50.615546][ C0] RDX: 0000000000001000 RSI: 000000c420310000 RDI: 0000000000000003 [ 50.624145][ C0] RBP: 000000c4202eb870 R08: 0000000000000000 R09: 0000000000000000 [ 50.632116][ C0] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000004 [ 50.640429][ C0] R13: 000000c42007fa10 R14: 0000000000000002 R15: ffffffffffffffff [ 50.649956][ C0] Kernel Offset: disabled [ 50.654275][ C0] Rebooting in 86400 seconds..