[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.072854][ T25] audit: type=1800 audit(1572048262.600:25): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 37.100006][ T25] audit: type=1800 audit(1572048262.600:26): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 37.130282][ T25] audit: type=1800 audit(1572048262.610:27): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. 2019/10/26 00:04:34 fuzzer started 2019/10/26 00:04:36 dialing manager at 10.128.0.105:32811 2019/10/26 00:04:37 syscalls: 2533 2019/10/26 00:04:37 code coverage: enabled 2019/10/26 00:04:37 comparison tracing: enabled 2019/10/26 00:04:37 extra coverage: extra coverage is not supported by the kernel 2019/10/26 00:04:37 setuid sandbox: enabled 2019/10/26 00:04:37 namespace sandbox: enabled 2019/10/26 00:04:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/26 00:04:37 fault injection: enabled 2019/10/26 00:04:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/26 00:04:37 net packet injection: enabled 2019/10/26 00:04:37 net device setup: enabled 2019/10/26 00:04:37 concurrency sanitizer: enabled 2019/10/26 00:04:46 adding functions to KCSAN blacklist: '__tcp_select_window' 'generic_permission' 'tick_do_update_jiffies64' 'tcp_poll' 'tick_sched_do_timer' 'add_timer' 'schedule_hrtimeout_range_clock' '__rb_erase_color' '__splice_from_pipe' 'blk_mq_dispatch_rq_list' 'ext4_free_inode' 'ep_poll' 'update_defense_level' 'common_perm_cond' 'tcp_add_backlog' 'mod_timer' 'run_timer_softirq' 'unix_release_sock' 'rcu_gp_fqs_check_wake' 'find_next_bit' 'ext4_has_free_clusters' 'taskstats_exit' 'tomoyo_supervisor' 'echo_char' 'blk_mq_sched_dispatch_requests' '__nf_ct_refresh_acct' 'generic_write_end' '__hrtimer_run_queues' 'ktime_get_real_seconds' 'xas_find_marked' '__ext4_new_inode' 'xas_clear_mark' 'shmem_file_read_iter' 'pid_update_inode' 'blk_mq_get_request' 'generic_fillattr' 'task_dump_owner' syzkaller login: [ 63.946349][ T7271] ================================================================== [ 63.954498][ T7271] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_advance [ 63.962394][ T7271] [ 63.964728][ T7271] write to 0xffffffff86040b08 of 280 bytes by interrupt on cpu 0: [ 63.972533][ T7271] timekeeping_advance+0x893/0xd80 [ 63.977664][ T7271] update_wall_time+0x19/0x20 [ 63.982351][ T7271] tick_do_update_jiffies64+0x1ae/0x260 [ 63.987902][ T7271] tick_sched_do_timer+0xd4/0xe0 [ 63.992932][ T7271] tick_sched_timer+0x43/0xe0 [ 63.997609][ T7271] __hrtimer_run_queues+0x288/0x600 [ 64.002807][ T7271] hrtimer_interrupt+0x22a/0x480 [ 64.007748][ T7271] smp_apic_timer_interrupt+0xdc/0x280 [ 64.013210][ T7271] apic_timer_interrupt+0xf/0x20 [ 64.018151][ T7271] __kcsan_setup_watchpoint+0x268/0x4a0 [ 64.023699][ T7271] __tsan_write4+0x32/0x40 [ 64.028124][ T7271] __rcu_read_unlock+0x5a/0x3c0 [ 64.032978][ T7271] nf_ct_deliver_cached_events+0xb5/0x2a0 [ 64.038704][ T7271] nf_confirm+0x27d/0x2b0 [ 64.043026][ T7271] [ 64.045450][ T7271] read to 0xffffffff86040b80 of 8 bytes by task 7271 on cpu 1: [ 64.053021][ T7271] ktime_get_seconds+0x45/0x70 [ 64.057774][ T7271] tcp_rcv_established+0xeeb/0xf50 [ 64.063001][ T7271] tcp_v4_do_rcv+0x381/0x4e0 [ 64.067578][ T7271] __release_sock+0x135/0x1e0 [ 64.072241][ T7271] release_sock+0x61/0x160 [ 64.076649][ T7271] tcp_recvmsg+0x63b/0x1a30 [ 64.081191][ T7271] inet_recvmsg+0xbb/0x250 [ 64.085589][ T7271] sock_recvmsg+0x92/0xb0 [ 64.089964][ T7271] sock_read_iter+0x15f/0x1e0 [ 64.094760][ T7271] new_sync_read+0x389/0x4f0 [ 64.099349][ T7271] __vfs_read+0xb1/0xc0 [ 64.103488][ T7271] vfs_read+0x143/0x2c0 [ 64.107927][ T7271] ksys_read+0xd5/0x1b0 [ 64.112061][ T7271] [ 64.114372][ T7271] Reported by Kernel Concurrency Sanitizer on: [ 64.120509][ T7271] CPU: 1 PID: 7271 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 64.128061][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.138214][ T7271] ================================================================== [ 64.146264][ T7271] Kernel panic - not syncing: panic_on_warn set ... [ 64.152959][ T7271] CPU: 1 PID: 7271 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 64.160406][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.170618][ T7271] Call Trace: [ 64.173908][ T7271] dump_stack+0xf5/0x159 [ 64.178199][ T7271] panic+0x210/0x640 [ 64.182132][ T7271] ? sock_read_iter+0x15f/0x1e0 [ 64.187082][ T7271] ? vprintk_func+0x8d/0x140 [ 64.191836][ T7271] kcsan_report.cold+0xc/0x10 [ 64.196676][ T7271] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 64.202273][ T7271] __tsan_read8+0x2c/0x30 [ 64.206760][ T7271] ktime_get_seconds+0x45/0x70 [ 64.211700][ T7271] tcp_rcv_established+0xeeb/0xf50 [ 64.216859][ T7271] ? ipv4_dst_check+0xc6/0xf0 [ 64.221613][ T7271] tcp_v4_do_rcv+0x381/0x4e0 [ 64.226347][ T7271] __release_sock+0x135/0x1e0 [ 64.231235][ T7271] release_sock+0x61/0x160 [ 64.235651][ T7271] tcp_recvmsg+0x63b/0x1a30 [ 64.240162][ T7271] inet_recvmsg+0xbb/0x250 [ 64.244572][ T7271] ? __tsan_read8+0x2c/0x30 [ 64.249065][ T7271] ? inet_sendpage+0x100/0x100 [ 64.253819][ T7271] sock_recvmsg+0x92/0xb0 [ 64.258135][ T7271] sock_read_iter+0x15f/0x1e0 [ 64.262815][ T7271] new_sync_read+0x389/0x4f0 [ 64.267443][ T7271] __vfs_read+0xb1/0xc0 [ 64.271589][ T7271] vfs_read+0x143/0x2c0 [ 64.275733][ T7271] ksys_read+0xd5/0x1b0 [ 64.279881][ T7271] __x64_sys_read+0x4c/0x60 [ 64.284377][ T7271] do_syscall_64+0xcc/0x370 [ 64.288960][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.294837][ T7271] RIP: 0033:0x47c530 [ 64.298771][ T7271] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 64.318568][ T7271] RSP: 002b:000000c4203dd7d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 64.327060][ T7271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 64.335019][ T7271] RDX: 0000000000001000 RSI: 000000c420058000 RDI: 0000000000000003 [ 64.342979][ T7271] RBP: 000000c4203dd830 R08: 0000000000000000 R09: 0000000000000000 [ 64.350993][ T7271] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000004 [ 64.359088][ T7271] R13: ffffffffffffffff R14: 0000000000000008 R15: ffffffffffffffff [ 64.368750][ T7271] Kernel Offset: disabled [ 64.373123][ T7271] Rebooting in 86400 seconds..