[ 53.345829][ T26] audit: type=1800 audit(1573429014.249:27): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 53.373346][ T26] audit: type=1800 audit(1573429014.259:28): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 53.885765][ T8074] sshd (8074) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.148758][ T26] audit: type=1800 audit(1573429015.119:29): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.31' (ECDSA) to the list of known hosts. 2019/11/10 23:37:03 fuzzer started 2019/11/10 23:37:04 dialing manager at 10.128.0.105:33901 2019/11/10 23:37:05 syscalls: 2553 2019/11/10 23:37:05 code coverage: enabled 2019/11/10 23:37:05 comparison tracing: enabled 2019/11/10 23:37:05 extra coverage: extra coverage is not supported by the kernel 2019/11/10 23:37:05 setuid sandbox: enabled 2019/11/10 23:37:05 namespace sandbox: enabled 2019/11/10 23:37:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/10 23:37:05 fault injection: enabled 2019/11/10 23:37:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/10 23:37:05 net packet injection: enabled 2019/11/10 23:37:05 net device setup: enabled 2019/11/10 23:37:05 concurrency sanitizer: enabled 2019/11/10 23:37:05 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 65.422913][ C0] ================================================================== [ 65.431297][ C0] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 65.440360][ C0] [ 65.442721][ C0] write to 0xffffffff86043008 of 8 bytes by task 0 on cpu 1: [ 65.450093][ C0] tick_do_update_jiffies64+0x100/0x250 [ 65.455626][ C0] tick_irq_enter+0x139/0x1c0 [ 65.460302][ C0] irq_enter+0x4f/0x60 [ 65.464362][ C0] smp_apic_timer_interrupt+0x55/0x280 [ 65.469911][ C0] apic_timer_interrupt+0xf/0x20 [ 65.474844][ C0] native_safe_halt+0xe/0x10 [ 65.479426][ C0] arch_cpu_idle+0x1f/0x30 [ 65.483825][ C0] default_idle_call+0x1e/0x40 [ 65.488616][ C0] do_idle+0x1af/0x280 [ 65.492666][ C0] cpu_startup_entry+0x1b/0x20 [ 65.497411][ C0] start_secondary+0x208/0x260 [ 65.502158][ C0] secondary_startup_64+0xa4/0xb0 [ 65.507154][ C0] [ 65.509472][ C0] read to 0xffffffff86043008 of 8 bytes by interrupt on cpu 0: [ 65.517261][ C0] tick_do_update_jiffies64+0x2b/0x250 [ 65.522813][ C0] tick_sched_do_timer+0xd4/0xe0 [ 65.527744][ C0] tick_sched_timer+0x43/0xe0 [ 65.532405][ C0] __hrtimer_run_queues+0x274/0x5f0 [ 65.537581][ C0] hrtimer_interrupt+0x22a/0x480 [ 65.542520][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 65.547977][ C0] apic_timer_interrupt+0xf/0x20 [ 65.552987][ C0] __sanitizer_cov_trace_pc+0xd/0x50 [ 65.558296][ C0] kallsyms_expand_symbol.constprop.0+0xc0/0x160 [ 65.564617][ C0] kallsyms_lookup_name+0x7f/0x120 [ 65.569714][ C0] debugfs_write+0x14b/0x2d0 [ 65.574297][ C0] full_proxy_write+0xbd/0x100 [ 65.579052][ C0] __vfs_write+0x67/0xc0 [ 65.583283][ C0] vfs_write+0x18a/0x390 [ 65.587511][ C0] ksys_write+0xd5/0x1b0 [ 65.591734][ C0] __x64_sys_write+0x4c/0x60 [ 65.596309][ C0] do_syscall_64+0xcc/0x370 [ 65.600806][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.606683][ C0] [ 65.608998][ C0] Reported by Kernel Concurrency Sanitizer on: [ 65.615133][ C0] CPU: 0 PID: 8179 Comm: syz-executor Not tainted 5.4.0-rc6+ #0 [ 65.622754][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.632799][ C0] ================================================================== [ 65.640848][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 65.647430][ C0] CPU: 0 PID: 8179 Comm: syz-executor Not tainted 5.4.0-rc6+ #0 [ 65.655037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.665080][ C0] Call Trace: [ 65.668344][ C0] [ 65.671187][ C0] dump_stack+0xf5/0x159 [ 65.675425][ C0] panic+0x210/0x640 [ 65.679316][ C0] ? vprintk_func+0x8d/0x140 [ 65.684070][ C0] kcsan_report.cold+0xc/0xe [ 65.688659][ C0] kcsan_setup_watchpoint+0x3fe/0x410 [ 65.694032][ C0] __tsan_read8+0x145/0x1f0 [ 65.698523][ C0] tick_do_update_jiffies64+0x2b/0x250 [ 65.703983][ C0] tick_sched_do_timer+0xd4/0xe0 [ 65.708907][ C0] tick_sched_timer+0x43/0xe0 [ 65.713576][ C0] __hrtimer_run_queues+0x274/0x5f0 [ 65.718759][ C0] ? tick_sched_handle+0x100/0x100 [ 65.723858][ C0] hrtimer_interrupt+0x22a/0x480 [ 65.728800][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 65.734244][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 65.739869][ C0] apic_timer_interrupt+0xf/0x20 [ 65.744842][ C0] [ 65.747774][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xd/0x50 [ 65.753929][ C0] Code: 00 48 c7 05 d9 aa be 04 00 00 00 00 e9 6a f1 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 65 48 8b 04 25 40 6c 01 00 <65> 8b 15 34 cf bb 7e 81 e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 08 [ 65.773531][ C0] RSP: 0018:ffffc900016c7bf0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 65.781929][ C0] RAX: ffff888123206080 RBX: ffffffff855d454d RCX: ffffffff814053c6 [ 65.789887][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 65.797948][ C0] RBP: ffffc900016c7bf0 R08: ffff888123206080 R09: 00000000aaaaaaab [ 65.805912][ C0] R10: 0000000000000000 R11: 00000000aaaaaaab R12: 0000000000000062 [ 65.813866][ C0] R13: 0000000000000001 R14: ffffc900016c7c5f R15: 0000000000000069 [ 65.821836][ C0] ? kallsyms_expand_symbol.constprop.0+0xb6/0x160 [ 65.828335][ C0] kallsyms_expand_symbol.constprop.0+0xc0/0x160 [ 65.834662][ C0] kallsyms_lookup_name+0x7f/0x120 [ 65.839772][ C0] ? __check_object_size+0x5f/0x346 [ 65.844958][ C0] ? strlen+0x3b/0x60 [ 65.848931][ C0] debugfs_write+0x14b/0x2d0 [ 65.853514][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.859736][ C0] ? refcount_inc_not_zero_checked+0xba/0x150 [ 65.865806][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 65.872027][ C0] ? debugfs_file_get+0xae/0x1e0 [ 65.876947][ C0] full_proxy_write+0xbd/0x100 [ 65.881694][ C0] __vfs_write+0x67/0xc0 [ 65.885920][ C0] ? full_proxy_poll+0xf0/0xf0 [ 65.890684][ C0] vfs_write+0x18a/0x390 [ 65.894915][ C0] ksys_write+0xd5/0x1b0 [ 65.899152][ C0] __x64_sys_write+0x4c/0x60 [ 65.903727][ C0] do_syscall_64+0xcc/0x370 [ 65.908217][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.914190][ C0] RIP: 0033:0x413cd0 [ 65.918080][ C0] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 43 66 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 65.937676][ C0] RSP: 002b:00007ffd26712fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.946115][ C0] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000000413cd0 [ 65.954306][ C0] RDX: 0000000000000017 RSI: 00000000019ad950 RDI: 0000000000000003 [ 65.962399][ C0] RBP: 00000000019ad950 R08: 0000000000000100 R09: 0000000000000017 [ 65.970366][ C0] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000017 [ 65.978358][ C0] R13: 0000000000000001 R14: 00007ffd26713030 R15: 0000000000000000 [ 65.987777][ C0] Kernel Offset: disabled [ 65.992106][ C0] Rebooting in 86400 seconds..