[ 39.372585][ T25] audit: type=1800 audit(1572729975.848:23): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 39.396290][ T25] audit: type=1800 audit(1572729975.848:24): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.780023][ T25] audit: type=1800 audit(1572729976.298:25): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. 2019/11/02 21:26:26 fuzzer started 2019/11/02 21:26:28 dialing manager at 10.128.0.105:46001 2019/11/02 21:26:28 syscalls: 2554 2019/11/02 21:26:28 code coverage: enabled 2019/11/02 21:26:28 comparison tracing: enabled 2019/11/02 21:26:28 extra coverage: extra coverage is not supported by the kernel 2019/11/02 21:26:28 setuid sandbox: enabled 2019/11/02 21:26:28 namespace sandbox: enabled 2019/11/02 21:26:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/02 21:26:28 fault injection: enabled 2019/11/02 21:26:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/02 21:26:28 net packet injection: enabled 2019/11/02 21:26:28 net device setup: enabled 2019/11/02 21:26:28 concurrency sanitizer: enabled syzkaller login: [ 54.278202][ T7307] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/02 21:26:35 adding functions to KCSAN blacklist: 'pcpu_alloc' '__tcp_select_window' 'ep_poll' 'ext4_free_inodes_count' 'taskstats_exit' 'generic_permission' 'pipe_wait' 'rcu_gp_fqs_check_wake' 'tcp_add_backlog' 'poll_schedule_timeout' '__nf_ct_refresh_acct' 'rcu_gp_fqs_loop' '__nf_conntrack_find_get' 'find_next_bit' 'mod_timer' 'generic_write_end' 'ext4_has_free_clusters' '__ext4_new_inode' '__hrtimer_run_queues' 'tcp_poll' 'tick_nohz_idle_stop_tick' 'vm_area_dup' 'pid_update_inode' 'do_nanosleep' 'ext4_xattr_get' 'tick_sched_do_timer' 'add_timer_on' 'run_timer_softirq' 'tick_do_update_jiffies64' 'dd_has_work' 'task_dump_owner' 'pipe_poll' 'tomoyo_supervisor' 'add_timer' 'ktime_get_real_seconds' 'enqueue_timer' 'ktime_get_with_offset' [ 65.984593][ T7295] ================================================================== [ 65.992743][ T7295] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_advance [ 66.002032][ T7295] [ 66.004377][ T7295] write to 0xffffffff86040b08 of 280 bytes by interrupt on cpu 1: [ 66.012284][ T7295] timekeeping_advance+0x893/0xd80 [ 66.017480][ T7295] update_wall_time+0x19/0x20 [ 66.022329][ T7295] tick_do_update_jiffies64+0x1ae/0x260 [ 66.028045][ T7295] tick_sched_do_timer+0xd4/0xe0 [ 66.032976][ T7295] tick_sched_timer+0x43/0xe0 [ 66.037640][ T7295] __hrtimer_run_queues+0x288/0x600 [ 66.043568][ T7295] hrtimer_interrupt+0x22a/0x480 [ 66.048521][ T7295] smp_apic_timer_interrupt+0xdc/0x280 [ 66.053970][ T7295] apic_timer_interrupt+0xf/0x20 [ 66.060130][ T7295] __kcsan_check_watchpoint+0xc0/0x180 [ 66.065719][ T7295] __tsan_read8+0x15/0x30 [ 66.070032][ T7295] ipt_do_table+0x8e/0xe60 [ 66.074516][ T7295] iptable_raw_hook+0x4a/0x60 [ 66.079190][ T7295] nf_hook_slow+0x83/0x160 [ 66.083579][ T7295] [ 66.086023][ T7295] read to 0xffffffff86040b80 of 8 bytes by task 7295 on cpu 0: [ 66.094010][ T7295] ktime_get_seconds+0x45/0x70 [ 66.098948][ T7295] tcp_rcv_established+0xeeb/0xf50 [ 66.104504][ T7295] tcp_v4_do_rcv+0x381/0x4e0 [ 66.110296][ T7295] __release_sock+0x135/0x1e0 [ 66.115321][ T7295] release_sock+0x61/0x160 [ 66.120799][ T7295] tcp_recvmsg+0x63b/0x1a30 [ 66.126436][ T7295] inet_recvmsg+0xbb/0x250 [ 66.131408][ T7295] sock_recvmsg+0x92/0xb0 [ 66.137192][ T7295] sock_read_iter+0x15f/0x1e0 [ 66.142027][ T7295] new_sync_read+0x389/0x4f0 [ 66.146805][ T7295] __vfs_read+0xb1/0xc0 [ 66.151462][ T7295] vfs_read+0x143/0x2c0 [ 66.155975][ T7295] ksys_read+0xd5/0x1b0 [ 66.160213][ T7295] [ 66.162811][ T7295] Reported by Kernel Concurrency Sanitizer on: [ 66.169163][ T7295] CPU: 0 PID: 7295 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 66.176695][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.186935][ T7295] ================================================================== [ 66.195519][ T7295] Kernel panic - not syncing: panic_on_warn set ... [ 66.202187][ T7295] CPU: 0 PID: 7295 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 66.209975][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.220543][ T7295] Call Trace: [ 66.223952][ T7295] dump_stack+0xf5/0x159 [ 66.228187][ T7295] panic+0x210/0x640 [ 66.232074][ T7295] ? sock_read_iter+0x15f/0x1e0 [ 66.237018][ T7295] ? vprintk_func+0x8d/0x140 [ 66.241594][ T7295] kcsan_report.cold+0xc/0x10 [ 66.246401][ T7295] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 66.252020][ T7295] __tsan_read8+0x2c/0x30 [ 66.257835][ T7295] ktime_get_seconds+0x45/0x70 [ 66.263472][ T7295] tcp_rcv_established+0xeeb/0xf50 [ 66.269405][ T7295] ? ipv4_dst_check+0xc6/0xf0 [ 66.275467][ T7295] tcp_v4_do_rcv+0x381/0x4e0 [ 66.282229][ T7295] __release_sock+0x135/0x1e0 [ 66.289391][ T7295] release_sock+0x61/0x160 [ 66.294781][ T7295] tcp_recvmsg+0x63b/0x1a30 [ 66.299791][ T7295] inet_recvmsg+0xbb/0x250 [ 66.304407][ T7295] ? __tsan_read8+0x2c/0x30 [ 66.308983][ T7295] ? inet_sendpage+0x100/0x100 [ 66.314877][ T7295] sock_recvmsg+0x92/0xb0 [ 66.320571][ T7295] sock_read_iter+0x15f/0x1e0 [ 66.326349][ T7295] new_sync_read+0x389/0x4f0 [ 66.332607][ T7295] __vfs_read+0xb1/0xc0 [ 66.337101][ T7295] vfs_read+0x143/0x2c0 [ 66.341592][ T7295] ksys_read+0xd5/0x1b0 [ 66.346015][ T7295] __x64_sys_read+0x4c/0x60 [ 66.351285][ T7295] do_syscall_64+0xcc/0x370 [ 66.356048][ T7295] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.362919][ T7295] RIP: 0033:0x47c530 [ 66.367449][ T7295] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 66.392117][ T7295] RSP: 002b:000000c4202af7d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 66.402771][ T7295] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 66.411861][ T7295] RDX: 0000000000001000 RSI: 000000c420392000 RDI: 0000000000000003 [ 66.420702][ T7295] RBP: 000000c4202af830 R08: 0000000000000000 R09: 0000000000000000 [ 66.429446][ T7295] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000008 [ 66.437961][ T7295] R13: ffffffffffffffff R14: 0000000000000008 R15: ffffffffffffffff [ 66.450069][ T7295] Kernel Offset: disabled [ 66.454395][ T7295] Rebooting in 86400 seconds..