[ 55.979061][ T25] audit: type=1800 audit(1573199088.495:28): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 56.631414][ T7898] sshd (7898) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.923818][ T25] audit: type=1800 audit(1573199089.575:29): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 56.943920][ T25] audit: type=1800 audit(1573199089.575:30): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. 2019/11/08 07:44:59 fuzzer started 2019/11/08 07:45:01 dialing manager at 10.128.0.105:41185 2019/11/08 07:45:02 syscalls: 2553 2019/11/08 07:45:02 code coverage: enabled 2019/11/08 07:45:02 comparison tracing: enabled 2019/11/08 07:45:02 extra coverage: extra coverage is not supported by the kernel 2019/11/08 07:45:02 setuid sandbox: enabled 2019/11/08 07:45:02 namespace sandbox: enabled 2019/11/08 07:45:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/08 07:45:02 fault injection: enabled 2019/11/08 07:45:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/08 07:45:02 net packet injection: enabled 2019/11/08 07:45:02 net device setup: enabled 2019/11/08 07:45:02 concurrency sanitizer: enabled 2019/11/08 07:45:02 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 72.298404][ T7999] KCSAN: could not find function: 'may_open' 2019/11/08 07:45:07 adding functions to KCSAN blacklist: 'vm_area_dup' 'rcu_gp_fqs_loop' 'dd_has_work' '__ext4_new_inode' 'mod_timer' 'ext4_free_inode' 'blk_mq_dispatch_rq_list' 'ktime_get_real_seconds' 'generic_write_end' 'do_dentry_open' 'taskstats_exit' 'ext4_nonda_switch' 'xas_clear_mark' 'ext4_has_free_clusters' 'run_timer_softirq' 'may_open' 'find_get_pages_range_tag' 'tick_sched_do_timer' 'pipe_wait' '__hrtimer_run_queues' 'common_perm_cond' 'pid_update_inode' 'do_nanosleep' 'process_srcu' 'find_next_bit' 'pipe_poll' 'echo_char' 'ep_poll' 'tick_do_update_jiffies64' 'ima_file_free' 'rcu_gp_fqs_check_wake' 'pcpu_alloc' 'generic_permission' 'tomoyo_supervisor' 'tcp_add_backlog' 'padata_find_next' [ 82.838283][ T7985] ================================================================== [ 82.846481][ T7985] BUG: KCSAN: data-race in ktime_get_seconds / timekeeping_advance [ 82.854345][ T7985] [ 82.856655][ T7985] write to 0xffffffff86041b08 of 280 bytes by interrupt on cpu 1: [ 82.864452][ T7985] timekeeping_advance+0x88e/0xd80 [ 82.869557][ T7985] update_wall_time+0x19/0x20 [ 82.874231][ T7985] tick_do_update_jiffies64+0x1a4/0x250 [ 82.879759][ T7985] tick_sched_do_timer+0xd4/0xe0 [ 82.884677][ T7985] tick_sched_timer+0x43/0xe0 [ 82.889352][ T7985] __hrtimer_run_queues+0x274/0x5f0 [ 82.894533][ T7985] hrtimer_interrupt+0x22a/0x480 [ 82.899461][ T7985] smp_apic_timer_interrupt+0xdc/0x280 [ 82.904901][ T7985] apic_timer_interrupt+0xf/0x20 [ 82.909821][ T7985] __tsan_read8+0x148/0x1f0 [ 82.914309][ T7985] ipt_do_table+0x489/0xe60 [ 82.918811][ T7985] iptable_filter_hook+0x4a/0x60 [ 82.923753][ T7985] nf_hook_slow+0x83/0x160 [ 82.928151][ T7985] ip_local_deliver+0x1e5/0x210 [ 82.932981][ T7985] ip_rcv_finish+0x121/0x160 [ 82.937568][ T7985] ip_rcv+0x18f/0x1a0 [ 82.941535][ T7985] __netif_receive_skb_one_core+0xa7/0xe0 [ 82.947252][ T7985] __netif_receive_skb+0x37/0xf0 [ 82.952186][ T7985] netif_receive_skb_internal+0x59/0x190 [ 82.957803][ T7985] napi_gro_receive+0x28f/0x330 [ 82.962636][ T7985] receive_buf+0x284/0x30b0 [ 82.967123][ T7985] virtnet_poll+0x436/0x7d0 [ 82.971605][ T7985] net_rx_action+0x3ae/0xa90 [ 82.976179][ T7985] __do_softirq+0x115/0x33f [ 82.980662][ T7985] run_ksoftirqd+0x46/0x60 [ 82.985059][ T7985] smpboot_thread_fn+0x37d/0x4a0 [ 82.989976][ T7985] kthread+0x1d4/0x200 [ 82.994026][ T7985] ret_from_fork+0x1f/0x30 [ 82.998431][ T7985] [ 83.000742][ T7985] read to 0xffffffff86041b80 of 8 bytes by task 7985 on cpu 0: [ 83.008300][ T7985] ktime_get_seconds+0x45/0x70 [ 83.013055][ T7985] tcp_rcv_established+0xeeb/0xf50 [ 83.018151][ T7985] tcp_v4_do_rcv+0x3b5/0x520 [ 83.022726][ T7985] __release_sock+0x135/0x1e0 [ 83.027403][ T7985] release_sock+0x61/0x160 [ 83.031821][ T7985] tcp_recvmsg+0x653/0x1b40 [ 83.036306][ T7985] inet_recvmsg+0xbb/0x250 [ 83.040707][ T7985] sock_recvmsg+0x92/0xb0 [ 83.045033][ T7985] sock_read_iter+0x15f/0x1e0 [ 83.049692][ T7985] new_sync_read+0x389/0x4f0 [ 83.054264][ T7985] __vfs_read+0xb1/0xc0 [ 83.058400][ T7985] vfs_read+0x143/0x2c0 [ 83.062551][ T7985] ksys_read+0xd5/0x1b0 [ 83.066688][ T7985] __x64_sys_read+0x4c/0x60 [ 83.071187][ T7985] do_syscall_64+0xcc/0x370 [ 83.075673][ T7985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 83.081540][ T7985] [ 83.083847][ T7985] Reported by Kernel Concurrency Sanitizer on: [ 83.089982][ T7985] CPU: 0 PID: 7985 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 83.097430][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.107484][ T7985] ================================================================== [ 83.115525][ T7985] Kernel panic - not syncing: panic_on_warn set ... [ 83.122093][ T7985] CPU: 0 PID: 7985 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 83.129526][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.139560][ T7985] Call Trace: [ 83.142836][ T7985] dump_stack+0xf5/0x159 [ 83.147064][ T7985] panic+0x210/0x640 [ 83.150945][ T7985] ? vprintk_func+0x8d/0x140 [ 83.155522][ T7985] kcsan_report.cold+0xc/0xe [ 83.160101][ T7985] kcsan_setup_watchpoint+0x3fe/0x410 [ 83.165545][ T7985] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 83.171245][ T7985] __tsan_read8+0x145/0x1f0 [ 83.175733][ T7985] ktime_get_seconds+0x45/0x70 [ 83.180498][ T7985] tcp_rcv_established+0xeeb/0xf50 [ 83.185612][ T7985] ? ipv4_dst_check+0xc6/0xf0 [ 83.190277][ T7985] tcp_v4_do_rcv+0x3b5/0x520 [ 83.194856][ T7985] __release_sock+0x135/0x1e0 [ 83.199519][ T7985] release_sock+0x61/0x160 [ 83.203919][ T7985] tcp_recvmsg+0x653/0x1b40 [ 83.208428][ T7985] ? __udelay+0x10/0x20 [ 83.212570][ T7985] inet_recvmsg+0xbb/0x250 [ 83.217007][ T7985] ? __tsan_read8+0x145/0x1f0 [ 83.221726][ T7985] ? security_socket_recvmsg+0x92/0xb0 [ 83.227186][ T7985] ? inet_sendpage+0x100/0x100 [ 83.231941][ T7985] sock_recvmsg+0x92/0xb0 [ 83.236261][ T7985] sock_read_iter+0x15f/0x1e0 [ 83.240928][ T7985] new_sync_read+0x389/0x4f0 [ 83.245514][ T7985] __vfs_read+0xb1/0xc0 [ 83.249658][ T7985] vfs_read+0x143/0x2c0 [ 83.253804][ T7985] ksys_read+0xd5/0x1b0 [ 83.257957][ T7985] __x64_sys_read+0x4c/0x60 [ 83.262452][ T7985] do_syscall_64+0xcc/0x370 [ 83.266948][ T7985] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 83.272821][ T7985] RIP: 0033:0x47c530 [ 83.276704][ T7985] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 83.296290][ T7985] RSP: 002b:000000c4204d97d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 83.304693][ T7985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 83.312648][ T7985] RDX: 0000000000001000 RSI: 000000c420376000 RDI: 0000000000000003 [ 83.320617][ T7985] RBP: 000000c4204d9830 R08: 0000000000000000 R09: 0000000000000000 [ 83.328580][ T7985] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000008 [ 83.336551][ T7985] R13: ffffffffffffffff R14: 0000000000000004 R15: ffffffffffffffff [ 83.345904][ T7985] Kernel Offset: disabled [ 83.350232][ T7985] Rebooting in 86400 seconds..