[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.488631][ T26] audit: type=1800 audit(1571932751.900:25): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 40.527288][ T26] audit: type=1800 audit(1571932751.910:26): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 40.564844][ T26] audit: type=1800 audit(1571932751.910:27): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. 2019/10/24 15:59:19 fuzzer started 2019/10/24 15:59:21 dialing manager at 10.128.0.105:42135 2019/10/24 15:59:21 syscalls: 2524 2019/10/24 15:59:21 code coverage: enabled 2019/10/24 15:59:21 comparison tracing: enabled 2019/10/24 15:59:21 extra coverage: extra coverage is not supported by the kernel 2019/10/24 15:59:21 setuid sandbox: enabled 2019/10/24 15:59:21 namespace sandbox: enabled 2019/10/24 15:59:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/24 15:59:21 fault injection: enabled 2019/10/24 15:59:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/24 15:59:21 net packet injection: enabled 2019/10/24 15:59:21 net device setup: enabled 2019/10/24 15:59:21 concurrency sanitizer: enabled syzkaller login: [ 50.695480][ T7245] KCSAN: could not find function: 'poll_schedule_timeout' 2019/10/24 15:59:42 adding functions to KCSAN blacklist: 'add_timer' 'poll_schedule_timeout' 'run_timer_softirq' 'xas_find_marked' 'add_timer_on' 'ktime_get_seconds' 'get_task_cred' 'sk_wait_data' 'install_new_memslots' 'mem_cgroup_select_victim_node' 'ext4_mb_good_group' 'ext4_has_free_clusters' 'timer_clear_idle' 'snd_seq_timer_get_cur_tick' 'generic_write_end' 'filemap_map_pages' 'wbt_issue' 'tomoyo_supervisor' 'rcu_gp_fqs_loop' 'list_lru_count_one' '__skb_wait_for_more_packets' 'blk_mq_get_request' '__splice_from_pipe' '__skb_try_recv_from_queue' 'copy_process' 'pipe_wait' 'find_next_bit' 'process_srcu' '__mark_inode_dirty' 'blk_mq_run_hw_queue' 'do_exit' 'udp6_lib_lookup2' '__tcp_select_window' 'bio_endio' 'tick_nohz_idle_stop_tick' 'balance_dirty_pages' 'osq_lock' 'p9_poll_workfn' 'wq_watchdog_reset_touched' 'pcpu_alloc' 'ext4_nonda_switch' 'ext4_writepages' 'unix_release_sock' 'sit_tunnel_xmit' 'generic_permission' '__nf_ct_refresh_acct' 'ext4_da_write_end' '__alloc_file' 'ext4_free_inodes_count' 'shmem_file_read_iter' 'ext4_mark_iloc_dirty' '__hrtimer_run_queues' 'icmp_global_allow' 'l2tp_tunnel_del_work' 'do_syslog' 'iput' 'd_delete' '__find_get_block' 'pipe_poll' '__ext4_new_inode' 'generic_fillattr' 'vm_area_dup' 'blk_mq_sched_dispatch_requests' 'dd_has_work' 'padata_find_next' 'mm_update_next_owner' '__perf_event_overflow' 'fsnotify' 'page_counter_try_charge' 'do_nanosleep' 'kvm_write_tsc' 'taskstats_exit' '__snd_rawmidi_transmit_ack' 'do_readlinkat' 'kvm_mmu_notifier_invalidate_range_end' '__writeback_single_inode' 'ktime_get_real_seconds' 'tcp_add_backlog' 'ext4_free_inode' 'update_defense_level' 'pid_update_inode' 'blk_mq_dispatch_rq_list' 'atime_needs_update' '__dev_queue_xmit' 'tick_do_update_jiffies64' '__filemap_fdatawrite_range' 'vti_tunnel_xmit' 'exit_signals' 'dput' 'ipip_tunnel_xmit' 'tcp_poll' 'find_get_pages_range_tag' 'rcu_gp_fqs_check_wake' 'mod_timer' 'shmem_getpage_gfp' 'kvm_arch_vcpu_load' '__neigh_event_send' 'ep_poll' 'lru_add_drain_all' 'snd_seq_check_queue' 'kernfs_refresh_inode' 'snapshot_refaults' 'task_dump_owner' 'tick_sched_do_timer' [ 308.003488][ T7230] ================================================================== [ 308.011619][ T7230] BUG: KCSAN: data-race in hrtimer_wakeup / schedule_hrtimeout_range_clock [ 308.020174][ T7230] [ 308.022486][ T7230] write to 0xffffc90001267848 of 8 bytes by interrupt on cpu 0: [ 308.030092][ T7230] hrtimer_wakeup+0x32/0x60 [ 308.034570][ T7230] __hrtimer_run_queues+0x288/0x600 [ 308.039746][ T7230] hrtimer_interrupt+0x22a/0x480 [ 308.044669][ T7230] smp_apic_timer_interrupt+0xdc/0x280 [ 308.050119][ T7230] apic_timer_interrupt+0xf/0x20 [ 308.055040][ T7230] native_safe_halt+0xe/0x10 [ 308.059615][ T7230] arch_cpu_idle+0x1f/0x30 [ 308.064014][ T7230] default_idle_call+0x1e/0x40 [ 308.068760][ T7230] do_idle+0x1af/0x280 [ 308.072823][ T7230] cpu_startup_entry+0x1b/0x20 [ 308.077578][ T7230] rest_init+0xec/0xf6 [ 308.081630][ T7230] arch_call_rest_init+0x17/0x37 [ 308.086553][ T7230] start_kernel+0x838/0x85e [ 308.091051][ T7230] x86_64_start_reservations+0x29/0x2b [ 308.096508][ T7230] [ 308.098841][ T7230] read to 0xffffc90001267848 of 8 bytes by task 7230 on cpu 1: [ 308.106436][ T7230] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 308.112488][ T7230] schedule_hrtimeout_range+0x34/0x50 [ 308.117857][ T7230] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 308.124004][ T7230] do_select+0xd7f/0x1020 [ 308.128318][ T7230] core_sys_select+0x381/0x550 [ 308.133085][ T7230] do_pselect.constprop.0+0x11d/0x160 [ 308.138439][ T7230] __x64_sys_pselect6+0x12e/0x170 [ 308.143486][ T7230] do_syscall_64+0xcc/0x370 [ 308.147972][ T7230] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 308.153843][ T7230] [ 308.156160][ T7230] Reported by Kernel Concurrency Sanitizer on: [ 308.162309][ T7230] CPU: 1 PID: 7230 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 308.169778][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.179826][ T7230] ================================================================== [ 308.187886][ T7230] Kernel panic - not syncing: panic_on_warn set ... [ 308.194473][ T7230] CPU: 1 PID: 7230 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 308.201928][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.211981][ T7230] Call Trace: [ 308.215343][ T7230] dump_stack+0xf5/0x159 [ 308.219577][ T7230] panic+0x210/0x640 [ 308.223522][ T7230] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 308.229582][ T7230] ? vprintk_func+0x8d/0x140 [ 308.234178][ T7230] kcsan_report.cold+0xc/0x10 [ 308.238862][ T7230] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 308.244487][ T7230] __tsan_read8+0x2c/0x30 [ 308.248808][ T7230] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 308.254968][ T7230] ? hrtimer_active+0x1a0/0x1a0 [ 308.259823][ T7230] schedule_hrtimeout_range+0x34/0x50 [ 308.265197][ T7230] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 308.271342][ T7230] do_select+0xd7f/0x1020 [ 308.275663][ T7230] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 308.281287][ T7230] ? __udelay+0x10/0x20 [ 308.285457][ T7230] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 308.291121][ T7230] ? __tsan_write8+0x32/0x40 [ 308.295801][ T7230] ? rb_erase+0x2aa/0x990 [ 308.300134][ T7230] ? __tsan_read8+0x2c/0x30 [ 308.304641][ T7230] ? timerqueue_del+0xa1/0x100 [ 308.309403][ T7230] ? __tsan_read8+0x2c/0x30 [ 308.313904][ T7230] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 308.319698][ T7230] ? hrtimer_try_to_cancel+0x57/0x260 [ 308.325071][ T7230] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 308.330737][ T7230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 308.336968][ T7230] ? hrtimer_cancel+0x3b/0x50 [ 308.341632][ T7230] ? __tsan_write4+0x32/0x40 [ 308.346206][ T7230] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 308.351840][ T7230] ? __rcu_read_unlock+0x66/0x3c0 [ 308.356874][ T7230] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 308.362791][ T7230] core_sys_select+0x381/0x550 [ 308.367597][ T7230] ? __tsan_read8+0x2c/0x30 [ 308.372142][ T7230] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 308.377845][ T7230] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 308.383466][ T7230] ? _copy_to_user+0x84/0xb0 [ 308.388061][ T7230] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 308.393945][ T7230] ? __tsan_write8+0x32/0x40 [ 308.398547][ T7230] ? ktime_get_ts64+0x286/0x2c0 [ 308.403410][ T7230] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 308.409129][ T7230] ? timespec64_add_safe+0xae/0xd0 [ 308.414247][ T7230] do_pselect.constprop.0+0x11d/0x160 [ 308.419634][ T7230] __x64_sys_pselect6+0x12e/0x170 [ 308.424659][ T7230] ? switch_fpu_return+0x11f/0x250 [ 308.429764][ T7230] do_syscall_64+0xcc/0x370 [ 308.434257][ T7230] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 308.440309][ T7230] RIP: 0033:0x45ac23 [ 308.444311][ T7230] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 308.463917][ T7230] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 308.472329][ T7230] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045ac23 [ 308.480308][ T7230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.488287][ T7230] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 308.496251][ T7230] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 308.504220][ T7230] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 308.513644][ T7230] Kernel Offset: disabled [ 308.517988][ T7230] Rebooting in 86400 seconds..