[ 35.751019][ T26] audit: type=1800 audit(1570703954.232:22): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 35.805256][ T26] audit: type=1800 audit(1570703954.242:23): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 35.825324][ T26] audit: type=1800 audit(1570703954.242:24): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2019/10/10 10:39:26 fuzzer started 2019/10/10 10:39:28 dialing manager at 10.128.0.105:34287 2019/10/10 10:39:28 syscalls: 2523 2019/10/10 10:39:28 code coverage: enabled 2019/10/10 10:39:28 comparison tracing: enabled 2019/10/10 10:39:28 extra coverage: extra coverage is not supported by the kernel 2019/10/10 10:39:28 setuid sandbox: enabled 2019/10/10 10:39:28 namespace sandbox: enabled 2019/10/10 10:39:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/10 10:39:28 fault injection: enabled 2019/10/10 10:39:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/10 10:39:28 net packet injection: enabled 2019/10/10 10:39:28 net device setup: enabled 2019/10/10 10:39:28 concurrency sanitizer: enabled syzkaller login: [ 51.173303][ T7377] ================================================================== [ 51.181807][ T7377] BUG: KCSAN: data-race in mod_timer / timer_clear_idle [ 51.188726][ T7377] [ 51.191045][ T7377] write to 0xffff88812be1b6e4 of 1 bytes by task 0 on cpu 0: [ 51.198404][ T7377] timer_clear_idle+0x42/0x50 [ 51.203072][ T7377] __tick_nohz_idle_restart_tick+0x36/0x1b0 [ 51.208959][ T7377] tick_nohz_idle_exit+0x1af/0x1e0 [ 51.214057][ T7377] do_idle+0xb0/0x2c0 [ 51.218023][ T7377] cpu_startup_entry+0x1b/0x20 [ 51.226946][ T7377] rest_init+0xec/0xf6 [ 51.231017][ T7377] arch_call_rest_init+0x17/0x37 [ 51.235949][ T7377] start_kernel+0x83e/0x864 [ 51.240441][ T7377] x86_64_start_reservations+0x29/0x2b [ 51.245887][ T7377] x86_64_start_kernel+0x72/0x76 [ 51.250819][ T7377] secondary_startup_64+0xa4/0xb0 [ 51.255816][ T7377] [ 51.258133][ T7377] read to 0xffff88812be1b6e4 of 1 bytes by task 7377 on cpu 1: [ 51.265682][ T7377] mod_timer+0x50d/0x7a0 [ 51.269916][ T7377] sk_reset_timer+0x2d/0x70 [ 51.274402][ T7377] tcp_rearm_rto.part.0+0x190/0x240 [ 51.279583][ T7377] tcp_rearm_rto+0x4f/0x60 [ 51.283996][ T7377] tcp_event_new_data_sent+0x1bb/0x1c0 [ 51.289440][ T7377] tcp_write_xmit+0xa16/0x3080 [ 51.294195][ T7377] __tcp_push_pending_frames+0x7b/0x1d0 [ 51.299726][ T7377] tcp_push+0x1e9/0x3d0 [ 51.303865][ T7377] tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 51.309048][ T7377] tcp_sendmsg+0x39/0x60 [ 51.313275][ T7377] inet_sendmsg+0x6d/0x90 [ 51.317589][ T7377] sock_sendmsg+0x9f/0xc0 [ 51.321899][ T7377] sock_write_iter+0x16b/0x210 [ 51.326635][ T7377] [ 51.328945][ T7377] Reported by Kernel Concurrency Sanitizer on: [ 51.335092][ T7377] CPU: 1 PID: 7377 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 51.342188][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.352395][ T7377] ================================================================== [ 51.360438][ T7377] Kernel panic - not syncing: panic_on_warn set ... [ 51.367009][ T7377] CPU: 1 PID: 7377 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 51.374097][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.384147][ T7377] Call Trace: [ 51.387440][ T7377] dump_stack+0xf5/0x159 [ 51.391684][ T7377] panic+0x209/0x639 [ 51.395565][ T7377] ? tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 51.400922][ T7377] ? vprintk_func+0x8d/0x140 [ 51.405516][ T7377] kcsan_report.cold+0xc/0x1b [ 51.410183][ T7377] __kcsan_setup_watchpoint+0x3ee/0x510 [ 51.415715][ T7377] __tsan_read1+0x2c/0x30 [ 51.420041][ T7377] mod_timer+0x50d/0x7a0 [ 51.424271][ T7377] ? __kcsan_setup_watchpoint+0x96/0x510 [ 51.429892][ T7377] ? __kcsan_setup_watchpoint+0x96/0x510 [ 51.435518][ T7377] sk_reset_timer+0x2d/0x70 [ 51.440024][ T7377] tcp_rearm_rto.part.0+0x190/0x240 [ 51.445209][ T7377] tcp_rearm_rto+0x4f/0x60 [ 51.449616][ T7377] tcp_event_new_data_sent+0x1bb/0x1c0 [ 51.455075][ T7377] tcp_write_xmit+0xa16/0x3080 [ 51.459831][ T7377] ? kmem_cache_alloc_node_trace+0x273/0x670 [ 51.465812][ T7377] __tcp_push_pending_frames+0x7b/0x1d0 [ 51.471342][ T7377] tcp_push+0x1e9/0x3d0 [ 51.475492][ T7377] tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 51.480688][ T7377] tcp_sendmsg+0x39/0x60 [ 51.484920][ T7377] inet_sendmsg+0x6d/0x90 [ 51.489245][ T7377] ? inet_send_prepare+0x200/0x200 [ 51.494342][ T7377] sock_sendmsg+0x9f/0xc0 [ 51.498658][ T7377] sock_write_iter+0x16b/0x210 [ 51.503589][ T7377] new_sync_write+0x388/0x4a0 [ 51.508259][ T7377] __vfs_write+0xb1/0xc0 [ 51.512490][ T7377] vfs_write+0x18a/0x390 [ 51.516735][ T7377] ksys_write+0xd5/0x1b0 [ 51.520969][ T7377] __x64_sys_write+0x4c/0x60 [ 51.525546][ T7377] do_syscall_64+0xcf/0x2f0 [ 51.530050][ T7377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.535924][ T7377] RIP: 0033:0x47c530 [ 51.539812][ T7377] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 51.559400][ T7377] RSP: 002b:000000c4203d34f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000001 [ 51.567808][ T7377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 51.575766][ T7377] RDX: 0000000000000007 RSI: 000000c42016e5c0 RDI: 0000000000000003 [ 51.583721][ T7377] RBP: 000000c4203d3550 R08: 0000000000000000 R09: 0000000000000000 [ 51.591680][ T7377] R10: 0000000000000000 R11: 0000000000000216 R12: 000000c4200c3b00 [ 51.599633][ T7377] R13: 000000000000000f R14: 0000000000c11600 R15: 0000000000000c41 [ 52.738195][ T7377] Shutting down cpus with NMI [ 52.744299][ T7377] Kernel Offset: disabled [ 52.748709][ T7377] Rebooting in 86400 seconds..