[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.213466][ T25] audit: type=1800 audit(1570696741.315:25): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 41.256878][ T25] audit: type=1800 audit(1570696741.315:26): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 41.731898][ T7176] sshd (7176) used greatest stack depth: 10032 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. 2019/10/10 08:39:11 fuzzer started 2019/10/10 08:39:13 dialing manager at 10.128.0.105:43471 2019/10/10 08:39:13 syscalls: 2523 2019/10/10 08:39:13 code coverage: enabled 2019/10/10 08:39:13 comparison tracing: enabled 2019/10/10 08:39:13 extra coverage: extra coverage is not supported by the kernel 2019/10/10 08:39:13 setuid sandbox: enabled 2019/10/10 08:39:13 namespace sandbox: enabled 2019/10/10 08:39:13 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/10 08:39:13 fault injection: enabled 2019/10/10 08:39:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/10 08:39:13 net packet injection: enabled 2019/10/10 08:39:13 net device setup: enabled 2019/10/10 08:39:13 concurrency sanitizer: enabled syzkaller login: [ 53.590341][ C0] ================================================================== [ 53.598602][ C0] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 53.607589][ C0] [ 53.609892][ C0] write to 0xffffffff8603f008 of 8 bytes by interrupt on cpu 1: [ 53.617640][ C0] tick_do_update_jiffies64+0x105/0x260 [ 53.623186][ C0] tick_sched_do_timer+0xd4/0xe0 [ 53.628106][ C0] tick_sched_timer+0x43/0xe0 [ 53.632776][ C0] __hrtimer_run_queues+0x288/0x600 [ 53.637953][ C0] hrtimer_interrupt+0x22a/0x480 [ 53.642869][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 53.648414][ C0] apic_timer_interrupt+0xf/0x20 [ 53.653332][ C0] __kcsan_check_watchpoint+0x29/0x180 [ 53.658764][ C0] __tsan_read2+0x15/0x30 [ 53.663074][ C0] ip_rcv_finish_core.isra.0+0x314/0xaf0 [ 53.668683][ C0] ip_rcv_finish+0xe5/0x160 [ 53.673162][ C0] ip_rcv+0x18f/0x1a0 [ 53.677126][ C0] __netif_receive_skb_one_core+0xa7/0xe0 [ 53.682817][ C0] __netif_receive_skb+0x37/0xf0 [ 53.687721][ C0] [ 53.690027][ C0] read to 0xffffffff8603f008 of 8 bytes by interrupt on cpu 0: [ 53.697551][ C0] tick_do_update_jiffies64+0x2b/0x260 [ 53.702985][ C0] tick_sched_do_timer+0xd4/0xe0 [ 53.707920][ C0] tick_sched_timer+0x43/0xe0 [ 53.712586][ C0] __hrtimer_run_queues+0x288/0x600 [ 53.717758][ C0] hrtimer_interrupt+0x22a/0x480 [ 53.722671][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 53.728104][ C0] apic_timer_interrupt+0xf/0x20 [ 53.733028][ C0] __sanitizer_cov_trace_pc+0x1/0x50 [ 53.738291][ C0] __tcp_send_ack+0x246/0x300 [ 53.742947][ C0] tcp_send_ack+0x34/0x40 [ 53.747260][ C0] tcp_cleanup_rbuf+0x130/0x360 [ 53.752085][ C0] tcp_recvmsg+0x633/0x1a30 [ 53.756566][ C0] inet_recvmsg+0xbb/0x250 [ 53.760953][ C0] [ 53.763256][ C0] Reported by Kernel Concurrency Sanitizer on: [ 53.769388][ C0] CPU: 0 PID: 7266 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 53.776467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.786494][ C0] ================================================================== [ 53.794529][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 53.801092][ C0] CPU: 0 PID: 7266 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 53.808197][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.818227][ C0] Call Trace: [ 53.821661][ C0] [ 53.824505][ C0] dump_stack+0xf5/0x159 [ 53.828740][ C0] panic+0x209/0x639 [ 53.832653][ C0] ? __tcp_send_ack+0x246/0x300 [ 53.837494][ C0] ? vprintk_func+0x8d/0x140 [ 53.842086][ C0] kcsan_report.cold+0xc/0x1b [ 53.846745][ C0] __kcsan_setup_watchpoint+0x3ee/0x510 [ 53.852270][ C0] ? __kcsan_setup_watchpoint+0x96/0x510 [ 53.857890][ C0] __tsan_read8+0x2c/0x30 [ 53.862197][ C0] tick_do_update_jiffies64+0x2b/0x260 [ 53.868081][ C0] tick_sched_do_timer+0xd4/0xe0 [ 53.873011][ C0] tick_sched_timer+0x43/0xe0 [ 53.877672][ C0] __hrtimer_run_queues+0x288/0x600 [ 53.882866][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 53.887972][ C0] hrtimer_interrupt+0x22a/0x480 [ 53.892903][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 53.898341][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 53.904037][ C0] apic_timer_interrupt+0xf/0x20 [ 53.908995][ C0] [ 53.911915][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 [ 53.917958][ C0] Code: ff 48 c7 c7 88 07 04 86 e8 2c dd 0c 00 48 c7 05 79 11 be 04 00 00 00 00 e9 6a f1 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 55 <48> 89 e5 65 48 8b 04 25 40 6c 01 00 65 8b 15 d4 75 bb 7e 81 e2 00 [ 53.937584][ C0] RSP: 0018:ffffc90001523970 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 53.945975][ C0] RAX: f5c28f5c28f5d864 RBX: ffff8881293af760 RCX: 0000000000000784 [ 53.953932][ C0] RDX: 000000000012ebc0 RSI: 020c49ba5e353f7d RDI: ffff8881293af760 [ 53.961891][ C0] RBP: ffffc90001523a58 R08: 0000000000000000 R09: 00008881293af767 [ 53.969839][ C0] R10: 00000000aaaaaaab R11: ffffffff86042d90 R12: 0000000000000000 [ 53.977783][ C0] R13: ffff8881293af7c8 R14: ffff8881293af700 R15: ffff8881268f8900 [ 53.986040][ C0] ? __tcp_transmit_skb+0x102e/0x1cd0 [ 53.991390][ C0] ? __kcsan_setup_watchpoint+0x96/0x510 [ 53.997015][ C0] __tcp_send_ack+0x246/0x300 [ 54.001678][ C0] tcp_send_ack+0x34/0x40 [ 54.005986][ C0] tcp_cleanup_rbuf+0x130/0x360 [ 54.010814][ C0] tcp_recvmsg+0x633/0x1a30 [ 54.015449][ C0] inet_recvmsg+0xbb/0x250 [ 54.019844][ C0] ? __tsan_read8+0x2c/0x30 [ 54.024362][ C0] ? inet_sendpage+0x100/0x100 [ 54.029106][ C0] sock_recvmsg+0x92/0xb0 [ 54.033428][ C0] sock_read_iter+0x15f/0x1e0 [ 54.038104][ C0] new_sync_read+0x389/0x4f0 [ 54.042680][ C0] __vfs_read+0xb1/0xc0 [ 54.046817][ C0] vfs_read+0x143/0x2c0 [ 54.050949][ C0] ksys_read+0xd5/0x1b0 [ 54.055092][ C0] __x64_sys_read+0x4c/0x60 [ 54.059577][ C0] do_syscall_64+0xcf/0x2f0 [ 54.064062][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.072110][ C0] RIP: 0033:0x47c530 [ 54.075984][ C0] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 54.095561][ C0] RSP: 002b:000000c42019f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 54.103946][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 54.111892][ C0] RDX: 0000000000001000 RSI: 000000c4201ac000 RDI: 0000000000000003 [ 54.119839][ C0] RBP: 000000c42019f8a8 R08: 0000000000000000 R09: 0000000000000000 [ 54.127800][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 54.135756][ C0] R13: ffffffffffffffff R14: 0000000000000002 R15: ffffffffffffffff [ 54.145395][ C0] Kernel Offset: disabled [ 54.149731][ C0] Rebooting in 86400 seconds..