[info] Using makefile-style concurrent boot in runlevel 2. [ 44.669907][ T26] audit: type=1800 audit(1572633240.138:21): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 44.716578][ T26] audit: type=1800 audit(1572633240.138:22): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. 2019/11/01 18:34:09 fuzzer started 2019/11/01 18:34:11 dialing manager at 10.128.0.105:41349 2019/11/01 18:34:12 syscalls: 2540 2019/11/01 18:34:12 code coverage: enabled 2019/11/01 18:34:12 comparison tracing: enabled 2019/11/01 18:34:12 extra coverage: extra coverage is not supported by the kernel 2019/11/01 18:34:12 setuid sandbox: enabled 2019/11/01 18:34:12 namespace sandbox: enabled 2019/11/01 18:34:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/01 18:34:12 fault injection: enabled 2019/11/01 18:34:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/01 18:34:12 net packet injection: enabled 2019/11/01 18:34:12 net device setup: enabled 2019/11/01 18:34:12 concurrency sanitizer: enabled 2019/11/01 18:34:14 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'tcp_add_backlog' 'task_dump_owner' '__nf_conntrack_find_get' 'generic_permission' 'ktime_get_real_seconds' 'common_perm_cond' 'run_timer_softirq' 'ext4_free_inode' 'pipe_poll' 'pid_update_inode' 'tomoyo_supervisor' 'tick_do_update_jiffies64' 'ep_poll' syzkaller login: [ 59.099305][ C0] ================================================================== [ 59.112626][ C0] BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer [ 59.123300][ C0] [ 59.125777][ C0] write to 0xffffffff85cb2790 of 4 bytes by interrupt on cpu 1: [ 59.134441][ C0] tick_sched_do_timer+0xc0/0xe0 [ 59.140435][ C0] tick_sched_timer+0x43/0xe0 [ 59.145914][ C0] __hrtimer_run_queues+0x288/0x600 [ 59.151681][ C0] hrtimer_interrupt+0x22a/0x480 [ 59.157230][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 59.163370][ C0] apic_timer_interrupt+0xf/0x20 [ 59.168960][ C0] tick_nohz_idle_enter+0xe0/0x110 [ 59.174956][ C0] do_idle+0x3b/0x280 [ 59.179110][ C0] cpu_startup_entry+0x1b/0x20 [ 59.185736][ C0] start_secondary+0x208/0x260 [ 59.191095][ C0] secondary_startup_64+0xa4/0xb0 [ 59.197172][ C0] [ 59.199789][ C0] read to 0xffffffff85cb2790 of 4 bytes by interrupt on cpu 0: [ 59.207449][ C0] tick_sched_do_timer+0x33/0xe0 [ 59.213077][ C0] tick_sched_timer+0x43/0xe0 [ 59.218521][ C0] __hrtimer_run_queues+0x288/0x600 [ 59.224276][ C0] hrtimer_interrupt+0x22a/0x480 [ 59.229479][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 59.235509][ C0] apic_timer_interrupt+0xf/0x20 [ 59.240930][ C0] [ 59.243266][ C0] Reported by Kernel Concurrency Sanitizer on: [ 59.250499][ C0] CPU: 0 PID: 7394 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 59.259148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.271745][ C0] ================================================================== [ 59.282461][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 59.291016][ C0] CPU: 0 PID: 7394 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 59.299788][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.312061][ C0] Call Trace: [ 59.316823][ C0] [ 59.319874][ C0] dump_stack+0xf5/0x159 [ 59.324911][ C0] panic+0x210/0x640 [ 59.329824][ C0] ? vprintk_func+0x8d/0x140 [ 59.334519][ C0] kcsan_report.cold+0xc/0x10 [ 59.339713][ C0] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 59.346303][ C0] __tsan_read4+0x2c/0x30 [ 59.352142][ C0] tick_sched_do_timer+0x33/0xe0 [ 59.358027][ C0] tick_sched_timer+0x43/0xe0 [ 59.364112][ C0] __hrtimer_run_queues+0x288/0x600 [ 59.370269][ C0] ? tick_sched_do_timer+0xe0/0xe0 [ 59.375979][ C0] hrtimer_interrupt+0x22a/0x480 [ 59.381502][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 59.387057][ C0] ? smp_call_function_single_interrupt+0x80/0x1c0 [ 59.394075][ C0] apic_timer_interrupt+0xf/0x20 [ 59.399480][ C0] [ 59.404333][ C0] RIP: 0033:0x459091 [ 59.408618][ C0] Code: 0f ef cb 66 45 0f ef c1 66 44 0f d6 02 c3 cc cc cc cc cc cc cc cc cc cc cc 48 8b 44 24 08 f3 0f 7e 44 24 10 66 0f 3a 22 00 02 <66> 0f 38 dc 05 86 98 44 01 66 0f 38 dc 05 8d 98 44 01 66 0f 38 dc [ 59.433098][ C0] RSP: 002b:000000c42028d808 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 59.443846][ C0] RAX: 000000c42028d848 RBX: 0000000000459080 RCX: 0000000000863140 [ 59.452392][ C0] RDX: 0000000000983dd8 RSI: 0000000000863140 RDI: 000000c42028d870 [ 59.460450][ C0] RBP: 000000c42028d828 R08: 00000000017a0540 R09: 000000c42053eb94 [ 59.468632][ C0] R10: 000000c42053eb88 R11: 0000000000000001 R12: 0000000000000004 [ 59.477567][ C0] R13: ffffffffffffffff R14: 0000000000000001 R15: 0000000000000001 [ 59.488631][ C0] Kernel Offset: disabled [ 59.494214][ C0] Rebooting in 86400 seconds..