[ 55.282370][ T26] audit: type=1800 audit(1573329677.375:27): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 55.316250][ T26] audit: type=1800 audit(1573329677.375:28): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.175373][ T26] audit: type=1800 audit(1573329678.345:29): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 56.227089][ T26] audit: type=1800 audit(1573329678.345:30): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2019/11/09 20:01:25 fuzzer started 2019/11/09 20:01:26 dialing manager at 10.128.0.105:41185 2019/11/09 20:01:27 syscalls: 2553 2019/11/09 20:01:27 code coverage: enabled 2019/11/09 20:01:27 comparison tracing: enabled 2019/11/09 20:01:27 extra coverage: extra coverage is not supported by the kernel 2019/11/09 20:01:27 setuid sandbox: enabled 2019/11/09 20:01:27 namespace sandbox: enabled 2019/11/09 20:01:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/09 20:01:27 fault injection: enabled 2019/11/09 20:01:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/09 20:01:27 net packet injection: enabled 2019/11/09 20:01:27 net device setup: enabled 2019/11/09 20:01:27 concurrency sanitizer: enabled 2019/11/09 20:01:27 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 69.604951][ T8021] KCSAN: could not find function: 'may_open' [ 72.687165][ C1] ================================================================== [ 72.695293][ C1] BUG: KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 [ 72.704205][ C1] [ 72.706530][ C1] write to 0xffffffff86043008 of 8 bytes by task 0 on cpu 0: [ 72.713907][ C1] tick_do_update_jiffies64+0x100/0x250 [ 72.719437][ C1] tick_irq_enter+0x139/0x1c0 [ 72.724108][ C1] irq_enter+0x4f/0x60 [ 72.728162][ C1] smp_apic_timer_interrupt+0x55/0x280 [ 72.733618][ C1] apic_timer_interrupt+0xf/0x20 [ 72.738535][ C1] native_safe_halt+0xe/0x10 [ 72.743106][ C1] arch_cpu_idle+0x1f/0x30 [ 72.747503][ C1] default_idle_call+0x1e/0x40 [ 72.752250][ C1] do_idle+0x1af/0x280 [ 72.756310][ C1] cpu_startup_entry+0x1b/0x20 [ 72.761052][ C1] rest_init+0xec/0xf6 [ 72.765120][ C1] arch_call_rest_init+0x17/0x37 [ 72.770041][ C1] start_kernel+0x838/0x85e [ 72.774527][ C1] x86_64_start_reservations+0x29/0x2b [ 72.779979][ C1] x86_64_start_kernel+0x72/0x76 [ 72.784911][ C1] secondary_startup_64+0xa4/0xb0 [ 72.789997][ C1] [ 72.792321][ C1] read to 0xffffffff86043008 of 8 bytes by interrupt on cpu 1: [ 72.799950][ C1] tick_do_update_jiffies64+0x2b/0x250 [ 72.805398][ C1] tick_sched_do_timer+0xd4/0xe0 [ 72.810317][ C1] tick_sched_timer+0x43/0xe0 [ 72.814976][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 72.820161][ C1] hrtimer_interrupt+0x22a/0x480 [ 72.825081][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 72.830520][ C1] apic_timer_interrupt+0xf/0x20 [ 72.835443][ C1] __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.841580][ C1] kallsyms_expand_symbol.constprop.0+0xcd/0x160 [ 72.847898][ C1] kallsyms_lookup_name+0x7f/0x120 [ 72.852991][ C1] debugfs_write+0x14b/0x2d0 [ 72.857563][ C1] full_proxy_write+0xbd/0x100 [ 72.862305][ C1] __vfs_write+0x67/0xc0 [ 72.866532][ C1] vfs_write+0x18a/0x390 [ 72.870771][ C1] ksys_write+0xd5/0x1b0 [ 72.875007][ C1] __x64_sys_write+0x4c/0x60 [ 72.879585][ C1] do_syscall_64+0xcc/0x370 [ 72.884070][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.889943][ C1] [ 72.892252][ C1] Reported by Kernel Concurrency Sanitizer on: [ 72.898399][ C1] CPU: 1 PID: 8021 Comm: syz-executor Not tainted 5.4.0-rc6+ #0 [ 72.906013][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.916046][ C1] ================================================================== [ 72.924085][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 72.930656][ C1] CPU: 1 PID: 8021 Comm: syz-executor Not tainted 5.4.0-rc6+ #0 [ 72.938260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.948304][ C1] Call Trace: [ 72.951570][ C1] [ 72.955113][ C1] dump_stack+0xf5/0x159 [ 72.959357][ C1] panic+0x210/0x640 [ 72.963240][ C1] ? vprintk_func+0x8d/0x140 [ 72.967826][ C1] kcsan_report.cold+0xc/0xe [ 72.972404][ C1] kcsan_setup_watchpoint+0x3fe/0x410 [ 72.977763][ C1] __tsan_read8+0x145/0x1f0 [ 72.982260][ C1] tick_do_update_jiffies64+0x2b/0x250 [ 72.987704][ C1] tick_sched_do_timer+0xd4/0xe0 [ 72.992626][ C1] tick_sched_timer+0x43/0xe0 [ 72.997382][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 73.002574][ C1] ? tick_sched_handle+0x100/0x100 [ 73.007676][ C1] hrtimer_interrupt+0x22a/0x480 [ 73.012614][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 73.018060][ C1] ? smp_reschedule_interrupt+0x71/0x1d0 [ 73.023679][ C1] apic_timer_interrupt+0xf/0x20 [ 73.028603][ C1] [ 73.031542][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 73.038388][ C1] Code: 8b 4d 08 e8 ba fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 07 00 00 00 48 89 e5 48 8b 4d 08 e8 98 fe ff ff <5d> c3 66 0f 1f 44 00 00 55 48 89 fa 48 89 e5 41 55 41 54 49 89 f4 [ 73.057987][ C1] RSP: 0018:ffffc900016cfbf0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 73.066385][ C1] RAX: 0000000000000000 RBX: ffffffff855d4577 RCX: ffffffff814053dd [ 73.074357][ C1] RDX: 0000000000000078 RSI: 0000000000000001 RDI: 0000000000000007 [ 73.082314][ C1] RBP: ffffc900016cfbf0 R08: ffff888126fb2000 R09: 00000000aaaaaaab [ 73.090290][ C1] R10: 0000000000000000 R11: 00000000aaaaaaab R12: 0000000000000077 [ 73.098255][ C1] R13: 0000000000000001 R14: ffffc900016cfc50 R15: 0000000000000078 [ 73.106229][ C1] ? kallsyms_expand_symbol.constprop.0+0xcd/0x160 [ 73.112785][ C1] kallsyms_expand_symbol.constprop.0+0xcd/0x160 [ 73.119373][ C1] kallsyms_lookup_name+0x7f/0x120 [ 73.124501][ C1] ? __check_object_size+0x5f/0x346 [ 73.129689][ C1] ? strlen+0x3b/0x60 [ 73.133658][ C1] debugfs_write+0x14b/0x2d0 [ 73.138234][ C1] ? csum_and_copy_to_iter+0x1c0/0xef0 [ 73.143687][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.149912][ C1] ? refcount_inc_not_zero_checked+0xba/0x150 [ 73.155974][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 73.162199][ C1] ? debugfs_file_get+0xae/0x1e0 [ 73.167128][ C1] full_proxy_write+0xbd/0x100 [ 73.171902][ C1] __vfs_write+0x67/0xc0 [ 73.176127][ C1] ? full_proxy_poll+0xf0/0xf0 [ 73.180880][ C1] vfs_write+0x18a/0x390 [ 73.185111][ C1] ksys_write+0xd5/0x1b0 [ 73.190211][ C1] __x64_sys_write+0x4c/0x60 [ 73.194801][ C1] do_syscall_64+0xcc/0x370 [ 73.199295][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 73.205369][ C1] RIP: 0033:0x413cd0 [ 73.209496][ C1] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 43 66 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 73.229097][ C1] RSP: 002b:00007ffd9b67be28 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.237512][ C1] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000413cd0 [ 73.245469][ C1] RDX: 0000000000000011 RSI: 0000000001f99950 RDI: 0000000000000003 [ 73.253525][ C1] RBP: 0000000001f99950 R08: 0000000000000100 R09: 0000000000000011 [ 73.261513][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000011 [ 73.269479][ C1] R13: 0000000000000001 R14: 00007ffd9b67bea0 R15: 0000000000000000 [ 73.279004][ C1] Kernel Offset: disabled [ 73.283382][ C1] Rebooting in 86400 seconds..