[ 37.980478][ T23] audit: type=1800 audit(1570709333.206:24): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.405378][ T23] audit: type=1800 audit(1570709333.726:25): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 38.451537][ T23] audit: type=1800 audit(1570709333.726:26): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2019/10/10 12:09:02 fuzzer started 2019/10/10 12:09:04 dialing manager at 10.128.0.105:34287 2019/10/10 12:09:04 syscalls: 2523 2019/10/10 12:09:04 code coverage: enabled 2019/10/10 12:09:04 comparison tracing: enabled 2019/10/10 12:09:04 extra coverage: extra coverage is not supported by the kernel 2019/10/10 12:09:04 setuid sandbox: enabled 2019/10/10 12:09:04 namespace sandbox: enabled 2019/10/10 12:09:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/10 12:09:04 fault injection: enabled 2019/10/10 12:09:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/10 12:09:04 net packet injection: enabled 2019/10/10 12:09:04 net device setup: enabled 2019/10/10 12:09:04 concurrency sanitizer: enabled syzkaller login: [ 51.132977][ T7271] ================================================================== [ 51.141819][ T7271] BUG: KCSAN: data-race in mod_timer / timer_clear_idle [ 51.148907][ T7271] [ 51.151230][ T7271] write to 0xffff88812bf1b6e4 of 1 bytes by task 0 on cpu 1: [ 51.158612][ T7271] timer_clear_idle+0x42/0x50 [ 51.163461][ T7271] __tick_nohz_idle_restart_tick+0x36/0x1b0 [ 51.169369][ T7271] tick_nohz_idle_exit+0x1af/0x1e0 [ 51.174558][ T7271] do_idle+0xb0/0x2c0 [ 51.178538][ T7271] cpu_startup_entry+0x1b/0x20 [ 51.183300][ T7271] start_secondary+0x207/0x260 [ 51.188326][ T7271] secondary_startup_64+0xa4/0xb0 [ 51.193418][ T7271] [ 51.195737][ T7271] read to 0xffff88812bf1b6e4 of 1 bytes by task 7271 on cpu 0: [ 51.203350][ T7271] mod_timer+0x50d/0x7a0 [ 51.207579][ T7271] sk_reset_timer+0x2d/0x70 [ 51.212065][ T7271] tcp_rearm_rto.part.0+0x190/0x240 [ 51.217257][ T7271] tcp_rearm_rto+0x4f/0x60 [ 51.221660][ T7271] tcp_event_new_data_sent+0x1bb/0x1c0 [ 51.227109][ T7271] tcp_write_xmit+0xa16/0x3080 [ 51.233182][ T7271] __tcp_push_pending_frames+0x7b/0x1d0 [ 51.239495][ T7271] tcp_push+0x1e9/0x3d0 [ 51.243636][ T7271] tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 51.248814][ T7271] tcp_sendmsg+0x39/0x60 [ 51.253047][ T7271] inet_sendmsg+0x6d/0x90 [ 51.257387][ T7271] sock_sendmsg+0x9f/0xc0 [ 51.261894][ T7271] sock_write_iter+0x16b/0x210 [ 51.267342][ T7271] [ 51.269849][ T7271] Reported by Kernel Concurrency Sanitizer on: [ 51.276007][ T7271] CPU: 0 PID: 7271 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 51.283110][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.293411][ T7271] ================================================================== [ 51.301628][ T7271] Kernel panic - not syncing: panic_on_warn set ... [ 51.308202][ T7271] CPU: 0 PID: 7271 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 51.315295][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.325339][ T7271] Call Trace: [ 51.328646][ T7271] dump_stack+0xf5/0x159 [ 51.332878][ T7271] panic+0x209/0x639 [ 51.336764][ T7271] ? tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 51.342127][ T7271] ? vprintk_func+0x8d/0x140 [ 51.346720][ T7271] kcsan_report.cold+0xc/0x1b [ 51.351427][ T7271] __kcsan_setup_watchpoint+0x3ee/0x510 [ 51.356974][ T7271] __tsan_read1+0x2c/0x30 [ 51.361295][ T7271] mod_timer+0x50d/0x7a0 [ 51.365696][ T7271] ? __kcsan_setup_watchpoint+0x96/0x510 [ 51.371330][ T7271] ? __kcsan_setup_watchpoint+0x96/0x510 [ 51.376954][ T7271] sk_reset_timer+0x2d/0x70 [ 51.381546][ T7271] tcp_rearm_rto.part.0+0x190/0x240 [ 51.386732][ T7271] tcp_rearm_rto+0x4f/0x60 [ 51.391137][ T7271] tcp_event_new_data_sent+0x1bb/0x1c0 [ 51.396595][ T7271] tcp_write_xmit+0xa16/0x3080 [ 51.401447][ T7271] ? kmem_cache_alloc_node_trace+0x273/0x670 [ 51.407512][ T7271] __tcp_push_pending_frames+0x7b/0x1d0 [ 51.413052][ T7271] tcp_push+0x1e9/0x3d0 [ 51.417209][ T7271] tcp_sendmsg_locked+0x1d1b/0x1ef0 [ 51.422406][ T7271] tcp_sendmsg+0x39/0x60 [ 51.426652][ T7271] inet_sendmsg+0x6d/0x90 [ 51.430979][ T7271] ? inet_send_prepare+0x200/0x200 [ 51.436080][ T7271] sock_sendmsg+0x9f/0xc0 [ 51.440395][ T7271] sock_write_iter+0x16b/0x210 [ 51.445171][ T7271] new_sync_write+0x388/0x4a0 [ 51.449842][ T7271] __vfs_write+0xb1/0xc0 [ 51.454101][ T7271] vfs_write+0x18a/0x390 [ 51.458338][ T7271] ksys_write+0xd5/0x1b0 [ 51.462659][ T7271] __x64_sys_write+0x4c/0x60 [ 51.467242][ T7271] do_syscall_64+0xcf/0x2f0 [ 51.472175][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.478055][ T7271] RIP: 0033:0x47c530 [ 51.481957][ T7271] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 51.501647][ T7271] RSP: 002b:000000c42100d4f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000001 [ 51.510191][ T7271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 51.518163][ T7271] RDX: 0000000000000007 RSI: 000000c420380020 RDI: 0000000000000003 [ 51.526383][ T7271] RBP: 000000c42100d550 R08: 0000000000000000 R09: 0000000000000000 [ 51.534531][ T7271] R10: 0000000000000000 R11: 0000000000000216 R12: 000000c4200afb00 [ 51.542594][ T7271] R13: 000000000000000f R14: 0000000000c11600 R15: 0000000000000b61 [ 52.690214][ T7271] Shutting down cpus with NMI [ 52.696444][ T7271] Kernel Offset: disabled [ 52.700798][ T7271] Rebooting in 86400 seconds..