[ 39.313914][ T25] audit: type=1800 audit(1570652253.702:23): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 39.341448][ T25] audit: type=1800 audit(1570652253.702:24): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.795400][ T25] audit: type=1800 audit(1570652254.242:25): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. 2019/10/09 20:17:44 fuzzer started 2019/10/09 20:17:46 dialing manager at 10.128.0.105:43471 2019/10/09 20:17:46 syscalls: 2523 2019/10/09 20:17:46 code coverage: enabled 2019/10/09 20:17:46 comparison tracing: enabled 2019/10/09 20:17:46 extra coverage: extra coverage is not supported by the kernel 2019/10/09 20:17:46 setuid sandbox: enabled 2019/10/09 20:17:46 namespace sandbox: enabled 2019/10/09 20:17:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/09 20:17:46 fault injection: enabled 2019/10/09 20:17:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/09 20:17:46 net packet injection: enabled 2019/10/09 20:17:46 net device setup: enabled 2019/10/09 20:17:46 concurrency sanitizer: enabled syzkaller login: [ 53.819137][ T7329] ================================================================== [ 53.827256][ T7329] BUG: KCSAN: data-race in mod_timer / timer_clear_idle [ 53.834164][ T7329] [ 53.836483][ T7329] write to 0xffff88812be1b6e4 of 1 bytes by task 0 on cpu 0: [ 53.843880][ T7329] timer_clear_idle+0x42/0x50 [ 53.848542][ T7329] __tick_nohz_idle_restart_tick+0x36/0x1b0 [ 53.854421][ T7329] tick_nohz_idle_exit+0x1af/0x1e0 [ 53.859516][ T7329] do_idle+0xb0/0x2c0 [ 53.863482][ T7329] cpu_startup_entry+0x1b/0x20 [ 53.868239][ T7329] rest_init+0xec/0xf6 [ 53.872297][ T7329] arch_call_rest_init+0x17/0x37 [ 53.877218][ T7329] start_kernel+0x83e/0x864 [ 53.881705][ T7329] x86_64_start_reservations+0x29/0x2b [ 53.887162][ T7329] x86_64_start_kernel+0x72/0x76 [ 53.892084][ T7329] secondary_startup_64+0xa4/0xb0 [ 53.897112][ T7329] [ 53.899429][ T7329] read to 0xffff88812be1b6e4 of 1 bytes by task 7329 on cpu 1: [ 53.907115][ T7329] mod_timer+0x50d/0x7a0 [ 53.911358][ T7329] sk_reset_timer+0x2d/0x70 [ 53.915847][ T7329] tcp_rearm_rto.part.0+0x190/0x240 [ 53.921030][ T7329] tcp_rearm_rto+0x4f/0x60 [ 53.925441][ T7329] tcp_event_new_data_sent+0x1bb/0x1c0 [ 53.930897][ T7329] tcp_write_xmit+0xa16/0x3080 [ 53.935652][ T7329] __tcp_push_pending_frames+0x7b/0x1d0 [ 53.941180][ T7329] tcp_push+0x1e9/0x3d0 [ 53.945320][ T7329] tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 53.950499][ T7329] tcp_sendmsg+0x39/0x60 [ 53.954725][ T7329] inet_sendmsg+0x6d/0x90 [ 53.959037][ T7329] sock_sendmsg+0x9f/0xc0 [ 53.963349][ T7329] sock_write_iter+0x16b/0x210 [ 53.968088][ T7329] [ 53.970394][ T7329] Reported by Kernel Concurrency Sanitizer on: [ 53.976538][ T7329] CPU: 1 PID: 7329 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 53.983623][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.993659][ T7329] ================================================================== [ 54.001699][ T7329] Kernel panic - not syncing: panic_on_warn set ... [ 54.008271][ T7329] CPU: 1 PID: 7329 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 54.015362][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.025396][ T7329] Call Trace: [ 54.028680][ T7329] dump_stack+0xf5/0x159 [ 54.032914][ T7329] panic+0x209/0x639 [ 54.036797][ T7329] ? tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 54.042164][ T7329] ? vprintk_func+0x8d/0x140 [ 54.046740][ T7329] kcsan_report.cold+0xc/0x1b [ 54.051408][ T7329] __kcsan_setup_watchpoint+0x3ee/0x510 [ 54.056942][ T7329] __tsan_read1+0x2c/0x30 [ 54.061261][ T7329] mod_timer+0x50d/0x7a0 [ 54.065498][ T7329] ? __kcsan_setup_watchpoint+0x96/0x510 [ 54.071986][ T7329] ? __kcsan_setup_watchpoint+0x96/0x510 [ 54.077606][ T7329] sk_reset_timer+0x2d/0x70 [ 54.082100][ T7329] tcp_rearm_rto.part.0+0x190/0x240 [ 54.087284][ T7329] tcp_rearm_rto+0x4f/0x60 [ 54.091689][ T7329] tcp_event_new_data_sent+0x1bb/0x1c0 [ 54.097159][ T7329] tcp_write_xmit+0xa16/0x3080 [ 54.101923][ T7329] ? kmem_cache_alloc_node_trace+0x273/0x670 [ 54.107899][ T7329] __tcp_push_pending_frames+0x7b/0x1d0 [ 54.113440][ T7329] tcp_push+0x1e9/0x3d0 [ 54.117584][ T7329] tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 54.122780][ T7329] tcp_sendmsg+0x39/0x60 [ 54.127007][ T7329] inet_sendmsg+0x6d/0x90 [ 54.131323][ T7329] ? inet_send_prepare+0x200/0x200 [ 54.136423][ T7329] sock_sendmsg+0x9f/0xc0 [ 54.140738][ T7329] sock_write_iter+0x16b/0x210 [ 54.145510][ T7329] new_sync_write+0x388/0x4a0 [ 54.150185][ T7329] __vfs_write+0xb1/0xc0 [ 54.154419][ T7329] vfs_write+0x18a/0x390 [ 54.158652][ T7329] ksys_write+0xd5/0x1b0 [ 54.162891][ T7329] __x64_sys_write+0x4c/0x60 [ 54.167475][ T7329] do_syscall_64+0xcf/0x2f0 [ 54.171979][ T7329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.177862][ T7329] RIP: 0033:0x47c530 [ 54.181746][ T7329] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 54.201335][ T7329] RSP: 002b:000000c42039d4f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000001 [ 54.209738][ T7329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 54.217693][ T7329] RDX: 0000000000000008 RSI: 000000c4201605c0 RDI: 0000000000000003 [ 54.225648][ T7329] RBP: 000000c42039d550 R08: 0000000000000000 R09: 0000000000000000 [ 54.233602][ T7329] R10: 0000000000000000 R11: 0000000000000216 R12: 000000c4200c5b00 [ 54.241564][ T7329] R13: 0000000000000007 R14: 0000000000c11600 R15: 00000000000016cd [ 55.382533][ T7329] Shutting down cpus with NMI [ 55.388965][ T7329] Kernel Offset: disabled [ 55.393285][ T7329] Rebooting in 86400 seconds..