[info] Using makefile-style concurrent boot in runlevel 2. [ 42.604088][ T26] audit: type=1800 audit(1575742043.248:21): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.653010][ T26] audit: type=1800 audit(1575742043.248:22): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. 2019/12/07 18:07:34 fuzzer started 2019/12/07 18:07:36 dialing manager at 10.128.0.105:42203 2019/12/07 18:07:36 syscalls: 2684 2019/12/07 18:07:36 code coverage: enabled 2019/12/07 18:07:36 comparison tracing: enabled 2019/12/07 18:07:36 extra coverage: extra coverage is not supported by the kernel 2019/12/07 18:07:36 setuid sandbox: enabled 2019/12/07 18:07:36 namespace sandbox: enabled 2019/12/07 18:07:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/07 18:07:36 fault injection: enabled 2019/12/07 18:07:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/07 18:07:36 net packet injection: enabled 2019/12/07 18:07:36 net device setup: enabled 2019/12/07 18:07:36 concurrency sanitizer: enabled 2019/12/07 18:07:36 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 62.110983][ T7656] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/07 18:07:50 adding functions to KCSAN blacklist: 'unix_release_sock' 'process_srcu' 'padata_find_next' 'get_signal' 'tick_sched_do_timer' 'generic_write_end' 'find_alive_thread' '__add_to_page_cache_locked' 'evict' '__hrtimer_run_queues' 'tcp_add_backlog' 'vm_area_dup' '__filemap_fdatawrite_range' 'wbt_done' 'generic_fillattr' 'add_timer' 'attach_to_pi_owner' 'generic_file_read_iter' '__dev_queue_xmit' 'blk_mq_dispatch_rq_list' 'tick_nohz_idle_stop_tick' 'atime_needs_update' 'mm_update_next_owner' '__lru_cache_add' 'do_nanosleep' 'xas_find_marked' 'wbt_issue' 'ext4_nonda_switch' 'bio_endio' 'lruvec_lru_size' 'blk_mq_get_request' 'pipe_wait' 'run_timer_softirq' 'tick_do_update_jiffies64' 'rcu_gp_fqs_check_wake' 'blk_mq_run_hw_queue' '__skb_try_recv_from_queue' 'do_exit' 'enqueue_timer' 'poll_schedule_timeout' 'rcu_gp_fqs_loop' 'ext4_mb_good_group' 'find_get_pages_range_tag' 'has_bh_in_lru' 'do_signal_stop' 'blk_mq_sched_dispatch_requests' 'n_tty_receive_buf_common' 'copy_process' 'inactive_list_is_low' 'taskstats_exit' 'mod_timer' '__find_get_block' 'dd_has_work' 'kauditd_thread' 'alloc_empty_file' 'futex_wait_queue_me' 'mem_cgroup_select_victim_node' '__writeback_single_inode' 'handle_userfault' 'common_perm_cond' 'ext4_free_inodes_count' 'tomoyo_supervisor' '__ext4_new_inode' 'do_syslog' '__delete_from_page_cache' 'audit_log_start' 'ktime_get_seconds' 'clear_inode' 'ep_poll' 'pid_update_inode' 'timer_clear_idle' '__snd_rawmidi_transmit_ack' 'ext4_free_inode' 'd_lru_del' 'echo_char' 'ext4_da_write_end' 'shmem_add_to_page_cache' '__handle_mm_fault' 'ipip_tunnel_xmit' 'find_next_bit' 'list_lru_count_one' '__perf_event_overflow' 'balance_dirty_pages' 'ktime_get_real_seconds' 'sit_tunnel_xmit' 'dccp_v4_rcv' '__mark_inode_dirty' 'pcpu_alloc' 'snd_seq_check_queue' 'snd_seq_prioq_cell_out' 'page_counter_try_charge' 'ext4_has_free_clusters' 'pipe_poll' 'blk_mq_free_request' 'pty_flush_buffer' 'ext4_mark_iloc_dirty' [ 303.573089][ T7640] ================================================================== [ 303.581305][ T7640] BUG: KCSAN: data-race in hrtimer_wakeup / schedule_hrtimeout_range_clock [ 303.589885][ T7640] [ 303.592215][ T7640] write to 0xffffc900014e7848 of 8 bytes by interrupt on cpu 1: [ 303.599860][ T7640] hrtimer_wakeup+0x32/0x60 [ 303.604673][ T7640] __hrtimer_run_queues+0x274/0x5f0 [ 303.610611][ T7640] hrtimer_interrupt+0x22a/0x480 [ 303.615645][ T7640] smp_apic_timer_interrupt+0xdc/0x280 [ 303.621128][ T7640] apic_timer_interrupt+0xf/0x20 [ 303.626063][ T7640] native_safe_halt+0xe/0x10 [ 303.630758][ T7640] arch_cpu_idle+0xa/0x10 [ 303.635097][ T7640] default_idle_call+0x1e/0x40 [ 303.639886][ T7640] do_idle+0x1af/0x280 [ 303.643977][ T7640] cpu_startup_entry+0x1b/0x20 [ 303.648745][ T7640] start_secondary+0x168/0x1b0 [ 303.653512][ T7640] secondary_startup_64+0xa4/0xb0 [ 303.658535][ T7640] [ 303.660949][ T7640] read to 0xffffc900014e7848 of 8 bytes by task 7640 on cpu 0: [ 303.668503][ T7640] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 303.674574][ T7640] schedule_hrtimeout_range+0x34/0x50 [ 303.679952][ T7640] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 303.686123][ T7640] do_select+0xd7f/0x1020 [ 303.690562][ T7640] core_sys_select+0x381/0x550 [ 303.695348][ T7640] do_pselect.constprop.0+0x11d/0x160 [ 303.700823][ T7640] __x64_sys_pselect6+0x12e/0x170 [ 303.705989][ T7640] do_syscall_64+0xcc/0x370 [ 303.711207][ T7640] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 303.717102][ T7640] [ 303.719452][ T7640] Reported by Kernel Concurrency Sanitizer on: [ 303.725704][ T7640] CPU: 0 PID: 7640 Comm: syz-fuzzer Not tainted 5.4.0-syzkaller #0 [ 303.733597][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.744282][ T7640] ================================================================== [ 303.752341][ T7640] Kernel panic - not syncing: panic_on_warn set ... [ 303.758940][ T7640] CPU: 0 PID: 7640 Comm: syz-fuzzer Not tainted 5.4.0-syzkaller #0 [ 303.767015][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.778024][ T7640] Call Trace: [ 303.781332][ T7640] dump_stack+0x11d/0x181 [ 303.785682][ T7640] panic+0x210/0x640 [ 303.789586][ T7640] ? vprintk_func+0x8d/0x140 [ 303.794236][ T7640] kcsan_report.cold+0xc/0xd [ 303.798971][ T7640] kcsan_setup_watchpoint+0x3fe/0x460 [ 303.804367][ T7640] __tsan_read8+0xc6/0x100 [ 303.808799][ T7640] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 303.814893][ T7640] ? hrtimer_active+0x1a0/0x1a0 [ 303.819776][ T7640] schedule_hrtimeout_range+0x34/0x50 [ 303.825154][ T7640] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 303.831610][ T7640] do_select+0xd7f/0x1020 [ 303.836159][ T7640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 303.841923][ T7640] ? gup_pgd_range+0x5cb/0x1990 [ 303.846790][ T7640] ? __rcu_read_unlock+0x66/0x3c0 [ 303.851844][ T7640] ? __rcu_read_unlock+0x66/0x3c0 [ 303.856919][ T7640] ? rb_erase+0x2aa/0x990 [ 303.862031][ T7640] ? __read_once_size.constprop.0+0x12/0x20 [ 303.868152][ T7640] ? timerqueue_del+0xa1/0x100 [ 303.873109][ T7640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.879377][ T7640] ? __remove_hrtimer+0x7a/0x130 [ 303.884321][ T7640] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 303.890268][ T7640] ? hrtimer_try_to_cancel+0x57/0x260 [ 303.895690][ T7640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.901966][ T7640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.908222][ T7640] ? hrtimer_cancel+0x3b/0x50 [ 303.912911][ T7640] ? futex_wait+0x33f/0x3f0 [ 303.917434][ T7640] ? __rcu_read_unlock+0x66/0x3c0 [ 303.922480][ T7640] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 303.928398][ T7640] core_sys_select+0x381/0x550 [ 303.933169][ T7640] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 303.939067][ T7640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 303.944808][ T7640] ? _copy_to_user+0x84/0xb0 [ 303.949510][ T7640] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 303.955440][ T7640] ? __read_once_size+0x5a/0xe0 [ 303.960324][ T7640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 303.966589][ T7640] ? ktime_get_ts64+0x286/0x2c0 [ 303.971442][ T7640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 303.977177][ T7640] ? timespec64_add_safe+0xae/0xd0 [ 303.982294][ T7640] do_pselect.constprop.0+0x11d/0x160 [ 303.987687][ T7640] __x64_sys_pselect6+0x12e/0x170 [ 303.992753][ T7640] ? switch_fpu_return+0x11f/0x250 [ 303.997907][ T7640] do_syscall_64+0xcc/0x370 [ 304.002610][ T7640] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 304.008512][ T7640] RIP: 0033:0x45ac23 [ 304.012423][ T7640] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 304.032861][ T7640] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 304.041481][ T7640] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045ac23 [ 304.049547][ T7640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.057520][ T7640] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 304.065778][ T7640] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 304.073764][ T7640] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 304.082568][ T7640] Kernel Offset: disabled [ 304.086911][ T7640] Rebooting in 86400 seconds..