[info] Using makefile-style concurrent boot in runlevel 2. [ 48.098142][ T27] audit: type=1800 audit(1579501288.459:21): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 48.140801][ T27] audit: type=1800 audit(1579501288.459:22): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.216' (ECDSA) to the list of known hosts. 2020/01/20 06:21:39 fuzzer started 2020/01/20 06:21:41 dialing manager at 10.128.0.105:43563 2020/01/20 06:21:42 syscalls: 2861 2020/01/20 06:21:42 code coverage: enabled 2020/01/20 06:21:42 comparison tracing: enabled 2020/01/20 06:21:42 extra coverage: enabled 2020/01/20 06:21:42 setuid sandbox: enabled 2020/01/20 06:21:42 namespace sandbox: enabled 2020/01/20 06:21:42 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/20 06:21:42 fault injection: enabled 2020/01/20 06:21:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/20 06:21:42 net packet injection: enabled 2020/01/20 06:21:42 net device setup: enabled 2020/01/20 06:21:42 concurrency sanitizer: enabled 2020/01/20 06:21:42 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 75.573845][ T8021] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/20 06:21:57 adding functions to KCSAN blacklist: 'evict' 'ext4_remount' 'wbt_wait' 'enqueue_timer' 'echo_char' 'copy_process' 'xas_find_marked' 'n_tty_receive_buf_common' 'ext4_free_inodes_count' 'unix_release_sock' 'ktime_get_seconds' 'taskstats_exit' 'ext4_has_free_clusters' 'tick_sched_do_timer' '__skb_try_recv_from_queue' 'snd_pcm_oss_ioctl' 'xas_clear_mark' 'ext4_mb_good_group' 'ext4_mb_find_by_goal' 'tick_nohz_idle_stop_tick' 'pcpu_alloc' 'detach_if_pending' 'page_counter_try_charge' 'ext4_nonda_switch' 'mod_timer' 'blk_mq_run_hw_queue' 'yama_ptracer_del' '__hrtimer_run_queues' 'do_syslog' 'inode_sync_complete' 'ondemand_readahead' 'lookup_fast' 'can_rcv_filter' '__snd_rawmidi_transmit_ack' 'ext4_mark_iloc_dirty' 'rcu_gp_fqs_loop' 'iomap_dio_bio_actor' '__put_unused_fd' 'blk_mq_get_request' '__rb_insert_augmented' 'ktime_get_real_seconds' 'iput' 'bio_endio' 'kauditd_thread' 'timer_clear_idle' '__dentry_kill' 'dput' 'process_srcu' '__rb_erase_color' 'n_hdlc_buf_get' 'ext4_itable_unused_count' 'ext4_set_iomap' 'audit_log_start' 'snd_seq_check_queue' 'generic_fillattr' '__delete_from_page_cache' 'tomoyo_supervisor' 'find_next_bit' 'sit_tunnel_xmit' 'dd_has_work' 'vm_area_dup' 'shmem_file_read_iter' 'commit_echoes' 'ext4_free_inode' 'rcu_gp_fqs_check_wake' 'tick_do_update_jiffies64' 'generic_write_end' 'futex_wait_queue_me' 'exit_signals' 'fasync_remove_entry' 'shmem_getpage_gfp' 'run_timer_softirq' '__mark_inode_dirty' 'snd_rawmidi_kernel_write1' 'pid_update_inode' 'wbt_issue' 'lruvec_lru_size' 'do_signal_stop' 'blk_mq_sched_dispatch_requests' 'generic_file_read_iter' 'do_nanosleep' 'poll_schedule_timeout' 'do_exit' 'blk_mq_dispatch_rq_list' '__process_echoes' '__find_get_block' 'ep_poll' 'find_get_pages_range_tag' 'wbt_done' '__ext4_new_inode' 'snd_seq_prioq_cell_out' 'mm_update_next_owner' 'virtqueue_enable_cb_delayed' 'page_counter_charge' [ 274.100750][ T8341] ================================================================== [ 274.109014][ T8341] BUG: KCSAN: data-race in pipe_poll / pipe_release [ 274.115592][ T8341] [ 274.117926][ T8341] read to 0xffff8881253d804c of 4 bytes by task 8025 on cpu 0: [ 274.125476][ T8341] pipe_poll+0x11b/0x230 [ 274.129716][ T8341] do_select+0x7d0/0x1020 [ 274.134178][ T8341] core_sys_select+0x312/0x650 [ 274.138932][ T8341] do_pselect.constprop.0+0x11d/0x160 [ 274.144309][ T8341] __x64_sys_pselect6+0x12e/0x170 [ 274.149337][ T8341] do_syscall_64+0xcc/0x3a0 [ 274.153840][ T8341] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.159724][ T8341] [ 274.162041][ T8341] write to 0xffff8881253d804c of 4 bytes by task 8341 on cpu 1: [ 274.169668][ T8341] pipe_release+0xd6/0x170 [ 274.174078][ T8341] __fput+0x1e1/0x520 [ 274.178067][ T8341] ____fput+0x1f/0x30 [ 274.182043][ T8341] task_work_run+0xf6/0x130 [ 274.186552][ T8341] do_exit+0x545/0x18c0 [ 274.190702][ T8341] do_group_exit+0xb4/0x1c0 [ 274.195312][ T8341] __x64_sys_exit_group+0x2e/0x30 [ 274.200380][ T8341] do_syscall_64+0xcc/0x3a0 [ 274.204883][ T8341] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.210766][ T8341] [ 274.213105][ T8341] Reported by Kernel Concurrency Sanitizer on: [ 274.219260][ T8341] CPU: 1 PID: 8341 Comm: passwd Not tainted 5.5.0-rc1-syzkaller #0 [ 274.227139][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.237303][ T8341] ================================================================== [ 274.245491][ T8341] Kernel panic - not syncing: panic_on_warn set ... [ 274.252074][ T8341] CPU: 1 PID: 8341 Comm: passwd Not tainted 5.5.0-rc1-syzkaller #0 [ 274.260076][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.270242][ T8341] Call Trace: [ 274.273705][ T8341] dump_stack+0x11d/0x181 [ 274.278148][ T8341] panic+0x210/0x640 [ 274.282140][ T8341] ? vprintk_func+0x8d/0x140 [ 274.286719][ T8341] kcsan_report.cold+0xc/0xd [ 274.291309][ T8341] kcsan_setup_watchpoint+0x3fe/0x460 [ 274.296807][ T8341] __tsan_unaligned_write4+0xc7/0x110 [ 274.302242][ T8341] pipe_release+0xd6/0x170 [ 274.306647][ T8341] __fput+0x1e1/0x520 [ 274.310737][ T8341] ? put_pipe_info+0xb0/0xb0 [ 274.315352][ T8341] ____fput+0x1f/0x30 [ 274.319330][ T8341] task_work_run+0xf6/0x130 [ 274.323829][ T8341] do_exit+0x545/0x18c0 [ 274.328101][ T8341] ? handle_mm_fault+0x271/0x530 [ 274.333088][ T8341] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 274.338974][ T8341] do_group_exit+0xb4/0x1c0 [ 274.343597][ T8341] __x64_sys_exit_group+0x2e/0x30 [ 274.348615][ T8341] do_syscall_64+0xcc/0x3a0 [ 274.353273][ T8341] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.359159][ T8341] RIP: 0033:0x7f37f50e11e8 [ 274.363573][ T8341] Code: Bad RIP value. [ 274.367661][ T8341] RSP: 002b:00007ffdf3c60ff8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 274.376249][ T8341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f37f50e11e8 [ 274.384393][ T8341] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 274.392391][ T8341] RBP: 0000000000000000 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 274.400583][ T8341] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000040247c [ 274.408601][ T8341] R13: 00007ffdf3c612c0 R14: 0000000000000000 R15: 0000000000000000 [ 274.418350][ T8341] Kernel Offset: disabled [ 274.422691][ T8341] Rebooting in 86400 seconds..