[ 56.572151][ T26] audit: type=1800 audit(1573370258.901:28): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 57.150459][ T7860] sshd (7860) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.357706][ T26] audit: type=1800 audit(1573370259.791:29): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 57.377742][ T26] audit: type=1800 audit(1573370259.791:30): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. 2019/11/10 07:17:48 fuzzer started 2019/11/10 07:17:50 dialing manager at 10.128.0.105:33901 2019/11/10 07:17:51 syscalls: 2553 2019/11/10 07:17:51 code coverage: enabled 2019/11/10 07:17:51 comparison tracing: enabled 2019/11/10 07:17:51 extra coverage: extra coverage is not supported by the kernel 2019/11/10 07:17:51 setuid sandbox: enabled 2019/11/10 07:17:51 namespace sandbox: enabled 2019/11/10 07:17:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/10 07:17:51 fault injection: enabled 2019/11/10 07:17:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/10 07:17:51 net packet injection: enabled 2019/11/10 07:17:51 net device setup: enabled 2019/11/10 07:17:51 concurrency sanitizer: enabled 2019/11/10 07:17:51 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 69.145976][ T7966] KCSAN: could not find function: 'poll_schedule_timeout' [ 76.967684][ C1] ================================================================== [ 76.975816][ C1] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 76.984773][ C1] [ 76.987092][ C1] write to 0xffffffff86043008 of 8 bytes by task 0 on cpu 0: [ 76.994462][ C1] tick_do_update_jiffies64+0x100/0x250 [ 76.999996][ C1] tick_irq_enter+0x139/0x1c0 [ 77.004670][ C1] irq_enter+0x4f/0x60 [ 77.008779][ C1] smp_apic_timer_interrupt+0x55/0x280 [ 77.014249][ C1] apic_timer_interrupt+0xf/0x20 [ 77.019180][ C1] native_safe_halt+0xe/0x10 [ 77.023757][ C1] arch_cpu_idle+0x1f/0x30 [ 77.028155][ C1] default_idle_call+0x1e/0x40 [ 77.032898][ C1] do_idle+0x1af/0x280 [ 77.036946][ C1] cpu_startup_entry+0x1b/0x20 [ 77.041705][ C1] rest_init+0xec/0xf6 [ 77.045759][ C1] arch_call_rest_init+0x17/0x37 [ 77.050678][ C1] start_kernel+0x838/0x85e [ 77.055164][ C1] x86_64_start_reservations+0x29/0x2b [ 77.060628][ C1] x86_64_start_kernel+0x72/0x76 [ 77.065549][ C1] secondary_startup_64+0xa4/0xb0 [ 77.070545][ C1] [ 77.072858][ C1] read to 0xffffffff86043008 of 8 bytes by interrupt on cpu 1: [ 77.080396][ C1] tick_do_update_jiffies64+0x2b/0x250 [ 77.085887][ C1] tick_sched_do_timer+0xd4/0xe0 [ 77.090811][ C1] tick_sched_timer+0x43/0xe0 [ 77.098211][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 77.103394][ C1] hrtimer_interrupt+0x22a/0x480 [ 77.108408][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 77.113858][ C1] apic_timer_interrupt+0xf/0x20 [ 77.118778][ C1] write_comp_data+0x1e/0x70 [ 77.123440][ C1] kallsyms_expand_symbol.constprop.0+0x12b/0x160 [ 77.129837][ C1] kallsyms_lookup_name+0x7f/0x120 [ 77.134927][ C1] debugfs_write+0x14b/0x2d0 [ 77.139511][ C1] full_proxy_write+0xbd/0x100 [ 77.144293][ C1] __vfs_write+0x67/0xc0 [ 77.148530][ C1] vfs_write+0x18a/0x390 [ 77.152752][ C1] ksys_write+0xd5/0x1b0 [ 77.156978][ C1] __x64_sys_write+0x4c/0x60 [ 77.161558][ C1] do_syscall_64+0xcc/0x370 [ 77.166042][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 77.171905][ C1] [ 77.174217][ C1] Reported by Kernel Concurrency Sanitizer on: [ 77.180352][ C1] CPU: 1 PID: 7966 Comm: syz-executor Not tainted 5.4.0-rc6+ #0 [ 77.188184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.198244][ C1] ================================================================== [ 77.206281][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 77.212851][ C1] CPU: 1 PID: 7966 Comm: syz-executor Not tainted 5.4.0-rc6+ #0 [ 77.220451][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.230485][ C1] Call Trace: [ 77.233749][ C1] [ 77.236601][ C1] dump_stack+0xf5/0x159 [ 77.240826][ C1] panic+0x210/0x640 [ 77.244709][ C1] ? vprintk_func+0x8d/0x140 [ 77.249291][ C1] kcsan_report.cold+0xc/0xe [ 77.253867][ C1] kcsan_setup_watchpoint+0x3fe/0x410 [ 77.259230][ C1] __tsan_read8+0x145/0x1f0 [ 77.263721][ C1] tick_do_update_jiffies64+0x2b/0x250 [ 77.269165][ C1] tick_sched_do_timer+0xd4/0xe0 [ 77.274096][ C1] tick_sched_timer+0x43/0xe0 [ 77.278759][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 77.283940][ C1] ? tick_sched_handle+0x100/0x100 [ 77.289042][ C1] hrtimer_interrupt+0x22a/0x480 [ 77.293977][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 77.299420][ C1] ? smp_reschedule_interrupt+0x71/0x1d0 [ 77.305046][ C1] apic_timer_interrupt+0xf/0x20 [ 77.309974][ C1] [ 77.312900][ C1] RIP: 0010:write_comp_data+0x1e/0x70 [ 77.318257][ C1] Code: 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 40 6c 01 00 65 8b 05 e8 ce bb 7e a9 00 01 1f 00 75 51 41 8b 80 08 0a 00 00 <83> f8 03 75 45 49 8b 80 10 0a 00 00 45 8b 80 0c 0a 00 00 4c 8b 08 [ 77.337926][ C1] RSP: 0018:ffffc9000162bbe8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 77.346322][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: ffffffff8140543b [ 77.354276][ C1] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000005 [ 77.362231][ C1] RBP: ffffc9000162bbf0 R08: ffff888121b5d040 R09: 00000000aaaaaaab [ 77.370184][ C1] R10: 0000000000000000 R11: 00000000aaaaaaab R12: 0000000000000000 [ 77.378135][ C1] R13: 0000000000000001 R14: ffffc9000162bc56 R15: 0000000000000072 [ 77.386121][ C1] ? kallsyms_expand_symbol.constprop.0+0x12b/0x160 [ 77.392707][ C1] ? __tsan_read1+0x13f/0x1e0 [ 77.397378][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.403602][ C1] kallsyms_expand_symbol.constprop.0+0x12b/0x160 [ 77.410005][ C1] kallsyms_lookup_name+0x7f/0x120 [ 77.415103][ C1] ? __check_object_size+0x5f/0x346 [ 77.420283][ C1] ? strlen+0x3b/0x60 [ 77.424424][ C1] debugfs_write+0x14b/0x2d0 [ 77.429011][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.435244][ C1] ? refcount_inc_not_zero_checked+0xba/0x150 [ 77.441308][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 77.447551][ C1] ? debugfs_file_get+0xae/0x1e0 [ 77.452496][ C1] full_proxy_write+0xbd/0x100 [ 77.457252][ C1] __vfs_write+0x67/0xc0 [ 77.461474][ C1] ? full_proxy_poll+0xf0/0xf0 [ 77.466237][ C1] vfs_write+0x18a/0x390 [ 77.470469][ C1] ksys_write+0xd5/0x1b0 [ 77.474697][ C1] __x64_sys_write+0x4c/0x60 [ 77.479631][ C1] do_syscall_64+0xcc/0x370 [ 77.484124][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 77.489994][ C1] RIP: 0033:0x413cd0 [ 77.493875][ C1] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 43 66 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 77.513459][ C1] RSP: 002b:00007ffe816592d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.521855][ C1] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 0000000000413cd0 [ 77.529820][ C1] RDX: 000000000000001c RSI: 0000000001998950 RDI: 0000000000000003 [ 77.537776][ C1] RBP: 0000000001998950 R08: 0000000000000100 R09: 000000000000001c [ 77.545728][ C1] R10: 000000000000001a R11: 0000000000000246 R12: 000000000000001c [ 77.553680][ C1] R13: 0000000000000001 R14: 00007ffe81659350 R15: 0000000000000000 [ 77.563365][ C1] Kernel Offset: disabled [ 77.567689][ C1] Rebooting in 86400 seconds..