[ 65.698160][ T26] audit: type=1800 audit(1580990330.539:21): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 65.749648][ T26] audit: type=1800 audit(1580990330.539:22): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[ 66.219628][ T7799] rsyslogd (7799) used greatest stack depth: 10136 bytes left [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. 2020/02/06 11:59:01 fuzzer started 2020/02/06 11:59:03 dialing manager at 10.128.0.105:36111 2020/02/06 11:59:03 syscalls: 2904 2020/02/06 11:59:03 code coverage: enabled 2020/02/06 11:59:03 comparison tracing: enabled 2020/02/06 11:59:03 extra coverage: enabled 2020/02/06 11:59:03 setuid sandbox: enabled 2020/02/06 11:59:03 namespace sandbox: enabled 2020/02/06 11:59:03 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/06 11:59:03 fault injection: enabled 2020/02/06 11:59:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/06 11:59:03 net packet injection: enabled 2020/02/06 11:59:03 net device setup: enabled 2020/02/06 11:59:03 concurrency sanitizer: enabled 2020/02/06 11:59:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/02/06 11:59:04 adding functions to KCSAN blacklist: 'ext4_free_inode' '__hrtimer_run_queues' 'run_timer_softirq' 'tomoyo_supervisor' 'find_next_bit' 'kauditd_thread' syzkaller login: [ 82.005697][ C1] ================================================================== [ 82.014000][ C1] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 82.022925][ C1] [ 82.025259][ C1] write to 0xffffffff8624c7c8 of 8 bytes by interrupt on cpu 0: [ 82.032887][ C1] tick_do_update_jiffies64+0x100/0x250 [ 82.038436][ C1] tick_sched_do_timer+0xd4/0xe0 [ 82.043375][ C1] tick_sched_timer+0x43/0xe0 [ 82.048076][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 82.053276][ C1] hrtimer_interrupt+0x22a/0x480 [ 82.058359][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 82.063895][ C1] apic_timer_interrupt+0xf/0x20 [ 82.068835][ C1] __tsan_read8+0x34/0x100 [ 82.073256][ C1] release_pages+0x14b/0x980 [ 82.077923][ C1] pagevec_lru_move_fn+0x15b/0x180 [ 82.083054][ C1] __lru_cache_add+0x120/0x1d0 [ 82.087844][ C1] lru_cache_add_active_or_unevictable+0xb6/0x1f0 [ 82.094259][ C1] __handle_mm_fault+0x1c10/0x2e00 [ 82.099361][ C1] handle_mm_fault+0x21b/0x530 [ 82.104119][ C1] __do_page_fault+0x456/0x8d0 [ 82.109061][ C1] do_page_fault+0x38/0x194 [ 82.113558][ C1] page_fault+0x34/0x40 [ 82.117700][ C1] [ 82.120030][ C1] read to 0xffffffff8624c7c8 of 8 bytes by interrupt on cpu 1: [ 82.127576][ C1] tick_do_update_jiffies64+0x2b/0x250 [ 82.133059][ C1] tick_sched_do_timer+0xd4/0xe0 [ 82.139650][ C1] tick_sched_timer+0x43/0xe0 [ 82.144328][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 82.149531][ C1] hrtimer_interrupt+0x22a/0x480 [ 82.154897][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 82.160461][ C1] apic_timer_interrupt+0xf/0x20 [ 82.165491][ C1] [ 82.167812][ C1] Reported by Kernel Concurrency Sanitizer on: [ 82.173998][ C1] CPU: 1 PID: 7927 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 82.182281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.192337][ C1] ================================================================== [ 82.200394][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 82.206985][ C1] CPU: 1 PID: 7927 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 82.215215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.225354][ C1] Call Trace: [ 82.228741][ C1] [ 82.231592][ C1] dump_stack+0x11d/0x181 [ 82.235932][ C1] panic+0x210/0x640 [ 82.239910][ C1] ? vprintk_func+0x8d/0x140 [ 82.244507][ C1] kcsan_report.cold+0xc/0xd [ 82.249110][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 82.254508][ C1] __tsan_read8+0xc6/0x100 [ 82.259167][ C1] tick_do_update_jiffies64+0x2b/0x250 [ 82.264635][ C1] tick_sched_do_timer+0xd4/0xe0 [ 82.269597][ C1] tick_sched_timer+0x43/0xe0 [ 82.274290][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 82.279500][ C1] ? tick_sched_handle+0x100/0x100 [ 82.284619][ C1] hrtimer_interrupt+0x22a/0x480 [ 82.289587][ C1] ? sched_clock+0x13/0x20 [ 82.294014][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 82.299731][ C1] apic_timer_interrupt+0xf/0x20 [ 82.304662][ C1] [ 82.307597][ C1] RIP: 0033:0x41d493 [ 82.311664][ C1] Code: b6 0b 49 89 ca 44 89 c1 41 d3 e9 48 83 ff 08 74 0b 41 0f ba e1 04 0f 83 db 00 00 00 41 0f ba e1 00 73 b1 4c 8d 0c 37 4d 8b 09 <4d> 85 c9 74 a5 4c 39 c8 77 a0 49 39 d1 73 9b 4d 89 cb 49 29 f1 4d [ 82.331289][ C1] RSP: 002b:000000c42004be90 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 82.339729][ C1] RAX: 000000c420000000 RBX: 000000c41ffc91a0 RCX: 0000000000000000 [ 82.347710][ C1] RDX: 000000c4235e0000 RSI: 000000c4206dcbe0 RDI: 0000000000000000 [ 82.355687][ C1] RBP: 000000c42004bf28 R08: 0000000000000000 R09: 0000000000a3e8a0 [ 82.363796][ C1] R10: 0000000000000020 R11: 000000c4206dcbe0 R12: 000000c4209f9000 [ 82.371874][ C1] R13: 0000000000000048 R14: 0000000000000000 R15: 0000000000000000 [ 82.381591][ C1] Kernel Offset: disabled [ 82.385953][ C1] Rebooting in 86400 seconds..