[ 52.563530][ T26] audit: type=1800 audit(1572882396.514:27): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 52.586279][ T26] audit: type=1800 audit(1572882396.514:28): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.541962][ T26] audit: type=1800 audit(1572882397.564:29): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 53.562062][ T26] audit: type=1800 audit(1572882397.564:30): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. 2019/11/04 15:46:46 fuzzer started 2019/11/04 15:46:48 dialing manager at 10.128.0.105:42499 2019/11/04 15:46:50 syscalls: 2553 2019/11/04 15:46:50 code coverage: enabled 2019/11/04 15:46:50 comparison tracing: enabled 2019/11/04 15:46:50 extra coverage: extra coverage is not supported by the kernel 2019/11/04 15:46:50 setuid sandbox: enabled 2019/11/04 15:46:50 namespace sandbox: enabled 2019/11/04 15:46:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/04 15:46:50 fault injection: enabled 2019/11/04 15:46:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/04 15:46:50 net packet injection: enabled 2019/11/04 15:46:50 net device setup: enabled 2019/11/04 15:46:50 concurrency sanitizer: enabled 2019/11/04 15:46:50 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 70.140637][ T8098] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/04 15:46:58 adding functions to KCSAN blacklist: 'tick_sched_do_timer' 'inet_putpeer' 'generic_write_end' 'ext4_nonda_switch' 'wbt_issue' 'tick_do_update_jiffies64' 'ep_poll' 'ext4_free_inode' 'page_counter_try_charge' '__skb_try_recv_from_queue' 'do_nanosleep' '__ext4_new_inode' 'tcp_add_backlog' 'poll_schedule_timeout' 'ext4_has_free_clusters' 'pid_update_inode' 'do_wait' 'sctp_assoc_migrate' 'mem_cgroup_select_victim_node' 'snd_ctl_notify' 'tomoyo_supervisor' '__hrtimer_run_queues' 'ktime_get_real_seconds' 'ktime_get_seconds' 'get_task_cred' 'dd_has_work' 'find_next_bit' 'run_timer_softirq' 'rcu_gp_fqs_check_wake' 'pipe_poll' 'rcu_gp_fqs_loop' 'blk_mq_sched_dispatch_requests' 'blk_mq_get_request' 'kauditd_thread' 'audit_log_start' 'xas_find_marked' 'generic_permission' 'p9_poll_workfn' 'vm_area_dup' 'mod_timer' 'copy_process' 'add_timer' 'find_get_pages_range_tag' 'task_dump_owner' 'taskstats_exit' 'do_exit' [ 137.788017][ T8082] ================================================================== [ 137.796148][ T8082] BUG: KCSAN: data-race in hrtimer_wakeup / schedule_hrtimeout_range_clock [ 137.804709][ T8082] [ 137.807029][ T8082] write to 0xffffc900016ef848 of 8 bytes by interrupt on cpu 0: [ 137.814654][ T8082] hrtimer_wakeup+0x32/0x60 [ 137.819143][ T8082] __hrtimer_run_queues+0x274/0x5f0 [ 137.824321][ T8082] hrtimer_interrupt+0x22a/0x480 [ 137.829247][ T8082] smp_apic_timer_interrupt+0xdc/0x280 [ 137.834716][ T8082] apic_timer_interrupt+0xf/0x20 [ 137.839669][ T8082] native_safe_halt+0xe/0x10 [ 137.844627][ T8082] arch_cpu_idle+0x1f/0x30 [ 137.849070][ T8082] default_idle_call+0x1e/0x40 [ 137.854706][ T8082] do_idle+0x1af/0x280 [ 137.858788][ T8082] cpu_startup_entry+0x1b/0x20 [ 137.864010][ T8082] rest_init+0xec/0xf6 [ 137.868077][ T8082] arch_call_rest_init+0x17/0x37 [ 137.873119][ T8082] start_kernel+0x838/0x85e [ 137.877710][ T8082] x86_64_start_reservations+0x29/0x2b [ 137.883184][ T8082] x86_64_start_kernel+0x72/0x76 [ 137.888150][ T8082] secondary_startup_64+0xa4/0xb0 [ 137.893167][ T8082] [ 137.895519][ T8082] read to 0xffffc900016ef848 of 8 bytes by task 8082 on cpu 1: [ 137.904496][ T8082] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 137.910591][ T8082] schedule_hrtimeout_range+0x34/0x50 [ 137.915966][ T8082] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 137.922217][ T8082] do_select+0xd7f/0x1020 [ 137.926567][ T8082] core_sys_select+0x381/0x550 [ 137.931337][ T8082] do_pselect.constprop.0+0x11d/0x160 [ 137.936704][ T8082] __x64_sys_pselect6+0x12e/0x170 [ 137.941727][ T8082] do_syscall_64+0xcc/0x370 [ 137.946242][ T8082] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 137.952164][ T8082] [ 137.954525][ T8082] Reported by Kernel Concurrency Sanitizer on: [ 137.960883][ T8082] CPU: 1 PID: 8082 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 137.968333][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.978700][ T8082] ================================================================== [ 137.986882][ T8082] Kernel panic - not syncing: panic_on_warn set ... [ 137.993582][ T8082] CPU: 1 PID: 8082 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 138.001158][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.011223][ T8082] Call Trace: [ 138.014556][ T8082] dump_stack+0xf5/0x159 [ 138.018796][ T8082] panic+0x210/0x640 [ 138.022797][ T8082] ? vprintk_func+0x8d/0x140 [ 138.027399][ T8082] kcsan_report.cold+0xc/0xe [ 138.032011][ T8082] kcsan_setup_watchpoint+0x3fe/0x410 [ 138.037854][ T8082] __tsan_read8+0x145/0x1f0 [ 138.042386][ T8082] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 138.048479][ T8082] ? hrtimer_active+0x1a0/0x1a0 [ 138.053482][ T8082] schedule_hrtimeout_range+0x34/0x50 [ 138.058959][ T8082] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 138.065276][ T8082] do_select+0xd7f/0x1020 [ 138.069623][ T8082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 138.075885][ T8082] ? __this_cpu_preempt_check+0x4a/0x170 [ 138.081542][ T8082] ? update_load_avg+0x79/0x5d0 [ 138.086410][ T8082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 138.092692][ T8082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 138.099019][ T8082] ? debug_smp_processor_id+0x4c/0x172 [ 138.104525][ T8082] ? _raw_spin_unlock_irq+0x68/0x80 [ 138.109842][ T8082] ? finish_task_switch+0x7b/0x260 [ 138.115080][ T8082] ? __schedule+0x319/0x640 [ 138.119626][ T8082] ? hrtimer_try_to_cancel+0x57/0x260 [ 138.125099][ T8082] ? preempt_schedule_irq+0x72/0x90 [ 138.130306][ T8082] ? retint_kernel+0x1b/0x1b [ 138.134905][ T8082] ? __rcu_read_unlock+0x66/0x3c0 [ 138.139946][ T8082] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 138.145978][ T8082] core_sys_select+0x381/0x550 [ 138.150763][ T8082] ? delay_tsc+0x8f/0xc0 [ 138.155037][ T8082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 138.160778][ T8082] ? _copy_to_user+0x84/0xb0 [ 138.165388][ T8082] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 138.171487][ T8082] ? __read_once_size+0x5a/0xe0 [ 138.176365][ T8082] ? ktime_get_ts64+0x286/0x2c0 [ 138.181248][ T8082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 138.186998][ T8082] ? timespec64_add_safe+0xae/0xd0 [ 138.192318][ T8082] do_pselect.constprop.0+0x11d/0x160 [ 138.197984][ T8082] __x64_sys_pselect6+0x12e/0x170 [ 138.203021][ T8082] ? switch_fpu_return+0x11f/0x250 [ 138.208152][ T8082] do_syscall_64+0xcc/0x370 [ 138.212679][ T8082] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 138.218567][ T8082] RIP: 0033:0x45ac23 [ 138.222472][ T8082] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 138.242159][ T8082] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 138.251814][ T8082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac23 [ 138.259791][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.267778][ T8082] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 138.275747][ T8082] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 138.283724][ T8082] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 138.293066][ T8082] Kernel Offset: disabled [ 138.297697][ T8082] Rebooting in 86400 seconds..