[ 53.149249][ T26] audit: type=1800 audit(1573217937.805:30): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. 2019/11/08 12:59:05 fuzzer started 2019/11/08 12:59:07 dialing manager at 10.128.0.105:41185 2019/11/08 12:59:07 syscalls: 2553 2019/11/08 12:59:07 code coverage: enabled 2019/11/08 12:59:07 comparison tracing: enabled 2019/11/08 12:59:07 extra coverage: extra coverage is not supported by the kernel 2019/11/08 12:59:07 setuid sandbox: enabled 2019/11/08 12:59:07 namespace sandbox: enabled 2019/11/08 12:59:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/08 12:59:07 fault injection: enabled 2019/11/08 12:59:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/08 12:59:07 net packet injection: enabled 2019/11/08 12:59:07 net device setup: enabled 2019/11/08 12:59:07 concurrency sanitizer: enabled 2019/11/08 12:59:07 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 66.741501][ T8034] KCSAN: could not find function: 'poll_schedule_timeout' [ 74.395730][ T8034] KCSAN: could not find function: 'may_open' 2019/11/08 12:59:22 adding functions to KCSAN blacklist: 'kcm_rfree' 'kvm_arch_vcpu_load' 'tick_do_update_jiffies64' 'ima_file_free' 'rcu_gp_fqs_check_wake' 'padata_find_next' 'wbt_done' 'dd_has_work' '__d_lookup_done' '__ext4_new_inode' 'ktime_get_seconds' 'task_dump_owner' 'do_exit' '__dev_queue_xmit' 'timer_clear_idle' 'ext4_da_write_end' 'do_dentry_open' 'blk_mq_dispatch_rq_list' 'p9_poll_workfn' 'poll_schedule_timeout' 'mem_cgroup_select_victim_node' 'audit_log_start' 'kauditd_thread' 'd_lru_del' 'run_timer_softirq' 'find_get_pages_range_tag' 'ext4_nonda_switch' 'xas_clear_mark' 'ext4_has_free_clusters' 'enqueue_timer' 'inactive_list_is_low' 'ext4_free_inodes_count' '__hrtimer_run_queues' 'common_perm_cond' 'pid_update_inode' 'n_tty_receive_buf_common' 'blk_mq_get_request' '__perf_event_overflow' 'inet_putpeer' 'wbc_attach_and_unlock_inode' 'find_next_bit' 'pipe_poll' 'add_timer' 'tick_nohz_idle_stop_tick' 'copy_process' 'fanout_demux_rollover' 'generic_permission' 'tomoyo_supervisor' 'tcp_add_backlog' 'ep_poll' 'pcpu_alloc' 'vm_area_dup' 'rcu_gp_fqs_loop' 'add_timer_on' 'snd_seq_prioq_cell_out' 'list_lru_count_one' 'mod_timer' '__tcp_transmit_skb' 'xas_find_marked' '__snd_rawmidi_transmit_ack' 'futex_wait_queue_me' 'ktime_get_real_seconds' 'generic_write_end' 'ext4_free_inode' '__inode_add_bytes' 'writeback_sb_inodes' 'fsnotify' 'may_open' 'taskstats_exit' 'blk_mq_sched_dispatch_requests' 'queue_access_lock' 'wbc_detach_inode' '__remove_hrtimer' 'tick_sched_do_timer' 'pipe_wait' 'blk_mq_run_hw_queue' 'generic_fillattr' '__ip6_datagram_connect' 'do_nanosleep' 'process_srcu' 'lruvec_lru_size' 'sit_tunnel_xmit' 'echo_char' 'mm_update_next_owner' [ 270.235130][ T8019] ================================================================== [ 270.243365][ T8019] BUG: KCSAN: data-race in hrtimer_wakeup / schedule_hrtimeout_range_clock [ 270.251935][ T8019] [ 270.254310][ T8019] write to 0xffffc900015ff848 of 8 bytes by interrupt on cpu 1: [ 270.261934][ T8019] hrtimer_wakeup+0x32/0x60 [ 270.266433][ T8019] __hrtimer_run_queues+0x274/0x5f0 [ 270.271610][ T8019] hrtimer_interrupt+0x22a/0x480 [ 270.276637][ T8019] smp_apic_timer_interrupt+0xdc/0x280 [ 270.282113][ T8019] apic_timer_interrupt+0xf/0x20 [ 270.287069][ T8019] native_safe_halt+0xe/0x10 [ 270.291672][ T8019] arch_cpu_idle+0x1f/0x30 [ 270.296194][ T8019] default_idle_call+0x1e/0x40 [ 270.300948][ T8019] do_idle+0x1af/0x280 [ 270.305010][ T8019] cpu_startup_entry+0x1b/0x20 [ 270.309764][ T8019] start_secondary+0x208/0x260 [ 270.314570][ T8019] secondary_startup_64+0xa4/0xb0 [ 270.319588][ T8019] [ 270.321940][ T8019] read to 0xffffc900015ff848 of 8 bytes by task 8019 on cpu 0: [ 270.329491][ T8019] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 270.335559][ T8019] schedule_hrtimeout_range+0x34/0x50 [ 270.340963][ T8019] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 270.347112][ T8019] do_select+0xd7f/0x1020 [ 270.351444][ T8019] core_sys_select+0x381/0x550 [ 270.356307][ T8019] do_pselect.constprop.0+0x11d/0x160 [ 270.361681][ T8019] __x64_sys_pselect6+0x12e/0x170 [ 270.366711][ T8019] do_syscall_64+0xcc/0x370 [ 270.371205][ T8019] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 270.377077][ T8019] [ 270.379399][ T8019] Reported by Kernel Concurrency Sanitizer on: [ 270.385551][ T8019] CPU: 0 PID: 8019 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 270.392994][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.403046][ T8019] ================================================================== [ 270.411103][ T8019] Kernel panic - not syncing: panic_on_warn set ... [ 270.417693][ T8019] CPU: 0 PID: 8019 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 270.425156][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.435275][ T8019] Call Trace: [ 270.438584][ T8019] dump_stack+0xf5/0x159 [ 270.442858][ T8019] panic+0x210/0x640 [ 270.446783][ T8019] ? vprintk_func+0x8d/0x140 [ 270.451397][ T8019] kcsan_report.cold+0xc/0xe [ 270.455994][ T8019] kcsan_setup_watchpoint+0x3fe/0x410 [ 270.461358][ T8019] __tsan_read8+0x145/0x1f0 [ 270.465880][ T8019] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 270.471952][ T8019] ? hrtimer_active+0x1a0/0x1a0 [ 270.476802][ T8019] schedule_hrtimeout_range+0x34/0x50 [ 270.482187][ T8019] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 270.488350][ T8019] do_select+0xd7f/0x1020 [ 270.492704][ T8019] ? pvclock_clocksource_read+0x178/0x1e0 [ 270.498454][ T8019] ? __rcu_read_unlock+0x66/0x3c0 [ 270.503498][ T8019] ? __rcu_read_unlock+0x66/0x3c0 [ 270.508544][ T8019] ? rb_erase+0x2aa/0x990 [ 270.512902][ T8019] ? __read_once_size.constprop.0+0x12/0x20 [ 270.518798][ T8019] ? timerqueue_del+0xa1/0x100 [ 270.523579][ T8019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.529838][ T8019] ? __remove_hrtimer+0x7a/0x130 [ 270.534784][ T8019] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 270.540602][ T8019] ? hrtimer_try_to_cancel+0x57/0x260 [ 270.545985][ T8019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.552222][ T8019] ? hrtimer_cancel+0x3b/0x50 [ 270.556908][ T8019] ? futex_wait+0x33f/0x3f0 [ 270.561413][ T8019] ? __rcu_read_unlock+0x66/0x3c0 [ 270.566437][ T8019] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 270.572339][ T8019] core_sys_select+0x381/0x550 [ 270.577114][ T8019] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 270.583010][ T8019] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 270.588723][ T8019] ? _copy_to_user+0x84/0xb0 [ 270.593313][ T8019] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 270.599218][ T8019] ? __read_once_size+0x5a/0xe0 [ 270.604067][ T8019] ? ktime_get_ts64+0x286/0x2c0 [ 270.608918][ T8019] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 270.614654][ T8019] ? timespec64_add_safe+0xae/0xd0 [ 270.619792][ T8019] do_pselect.constprop.0+0x11d/0x160 [ 270.625174][ T8019] __x64_sys_pselect6+0x12e/0x170 [ 270.630227][ T8019] ? switch_fpu_return+0x11f/0x250 [ 270.635352][ T8019] do_syscall_64+0xcc/0x370 [ 270.639859][ T8019] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 270.645747][ T8019] RIP: 0033:0x45ac23 [ 270.649647][ T8019] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 270.669340][ T8019] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 270.677759][ T8019] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045ac23 [ 270.685726][ T8019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.693693][ T8019] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 270.701663][ T8019] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 270.709641][ T8019] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 270.718963][ T8019] Kernel Offset: disabled [ 270.723292][ T8019] Rebooting in 86400 seconds..