[ 52.618415][ T26] audit: type=1800 audit(1573019400.982:26): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 52.664352][ T26] audit: type=1800 audit(1573019400.982:27): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 52.693552][ T26] audit: type=1800 audit(1573019400.982:28): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.764219][ T26] audit: type=1800 audit(1573019402.172:29): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.18' (ECDSA) to the list of known hosts. 2019/11/06 05:50:09 fuzzer started 2019/11/06 05:50:11 dialing manager at 10.128.0.105:39303 2019/11/06 05:50:19 syscalls: 2553 2019/11/06 05:50:19 code coverage: enabled 2019/11/06 05:50:19 comparison tracing: enabled 2019/11/06 05:50:19 extra coverage: extra coverage is not supported by the kernel 2019/11/06 05:50:19 setuid sandbox: enabled 2019/11/06 05:50:19 namespace sandbox: enabled 2019/11/06 05:50:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/06 05:50:19 fault injection: enabled 2019/11/06 05:50:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/06 05:50:19 net packet injection: enabled 2019/11/06 05:50:19 net device setup: enabled 2019/11/06 05:50:19 concurrency sanitizer: enabled 2019/11/06 05:50:19 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 76.170246][ T8072] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/06 05:50:29 adding functions to KCSAN blacklist: 'vm_area_dup' 'generic_fillattr' 'ktime_get_seconds' '__perf_event_overflow' '__delete_from_page_cache' 'run_timer_softirq' 'ext4_has_free_clusters' 'get_wchan' 'blk_mq_get_request' 'tick_nohz_idle_stop_tick' 'audit_log_start' 'ext4_nonda_switch' 'tick_do_update_jiffies64' 'xas_clear_mark' 'pipe_poll' 'ktime_get_real_seconds' 'tomoyo_supervisor' 'process_srcu' 'alloc_empty_file' 'ext4_free_inodes_count' 'sit_tunnel_xmit' '__splice_from_pipe' 'tick_nohz_next_event' 'kauditd_thread' '__alloc_file' 'pid_update_inode' 'fanotify_handle_event' 'generic_permission' 'rcu_gp_fqs_check_wake' 'blk_mq_dispatch_rq_list' 'lruvec_lru_size' 'ext4_free_inode' 'taskstats_exit' 'p9_poll_workfn' 'add_timer' 'tcp_add_backlog' 'find_get_pages_range_tag' 'poll_schedule_timeout' 'do_syslog' 'task_dump_owner' 'ep_poll' 'do_exit' 'wbt_issue' 'pcpu_alloc' 'mod_timer' '__ext4_new_inode' 'dd_has_work' 'atime_needs_update' 'echo_char' '__hrtimer_run_queues' 'do_nanosleep' 'tick_sched_do_timer' 'blk_mq_sched_dispatch_requests' 'inet_putpeer' 'xas_find_marked' '__dev_queue_xmit' 'generic_write_end' 'page_counter_try_charge' 'ktime_get_with_offset' 'ext4_mb_good_group' 'wbt_done' 'find_next_bit' '__snd_rawmidi_transmit_ack' 'kvm_mmu_notifier_invalidate_range_end' 'ext4_mark_iloc_dirty' [ 217.926608][ T8056] ================================================================== [ 217.935431][ T8056] BUG: KCSAN: data-race in hrtimer_wakeup / schedule_hrtimeout_range_clock [ 217.944007][ T8056] [ 217.946327][ T8056] write to 0xffffc90001643848 of 8 bytes by interrupt on cpu 0: [ 217.953955][ T8056] hrtimer_wakeup+0x32/0x60 [ 217.958445][ T8056] __hrtimer_run_queues+0x274/0x5f0 [ 217.963630][ T8056] hrtimer_interrupt+0x22a/0x480 [ 217.968559][ T8056] smp_apic_timer_interrupt+0xdc/0x280 [ 217.975976][ T8056] apic_timer_interrupt+0xf/0x20 [ 217.981108][ T8056] native_safe_halt+0xe/0x10 [ 217.985710][ T8056] arch_cpu_idle+0x1f/0x30 [ 217.990650][ T8056] default_idle_call+0x1e/0x40 [ 217.995417][ T8056] do_idle+0x1af/0x280 [ 217.999916][ T8056] cpu_startup_entry+0x1b/0x20 [ 218.004683][ T8056] rest_init+0xec/0xf6 [ 218.008858][ T8056] arch_call_rest_init+0x17/0x37 [ 218.014245][ T8056] start_kernel+0x838/0x85e [ 218.018751][ T8056] x86_64_start_reservations+0x29/0x2b [ 218.024210][ T8056] x86_64_start_kernel+0x72/0x76 [ 218.029145][ T8056] secondary_startup_64+0xa4/0xb0 [ 218.034154][ T8056] [ 218.036620][ T8056] read to 0xffffc90001643848 of 8 bytes by task 8056 on cpu 1: [ 218.044163][ T8056] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 218.050456][ T8056] schedule_hrtimeout_range+0x34/0x50 [ 218.055932][ T8056] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 218.062099][ T8056] do_select+0xd7f/0x1020 [ 218.066521][ T8056] core_sys_select+0x381/0x550 [ 218.071308][ T8056] do_pselect.constprop.0+0x11d/0x160 [ 218.076678][ T8056] __x64_sys_pselect6+0x12e/0x170 [ 218.081827][ T8056] do_syscall_64+0xcc/0x370 [ 218.086339][ T8056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 218.092246][ T8056] [ 218.094618][ T8056] Reported by Kernel Concurrency Sanitizer on: [ 218.100823][ T8056] CPU: 1 PID: 8056 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 218.108281][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.118461][ T8056] ================================================================== [ 218.126543][ T8056] Kernel panic - not syncing: panic_on_warn set ... [ 218.133160][ T8056] CPU: 1 PID: 8056 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 218.140615][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.150673][ T8056] Call Trace: [ 218.153990][ T8056] dump_stack+0xf5/0x159 [ 218.158229][ T8056] panic+0x210/0x640 [ 218.162145][ T8056] ? vprintk_func+0x8d/0x140 [ 218.166832][ T8056] kcsan_report.cold+0xc/0xe [ 218.171443][ T8056] kcsan_setup_watchpoint+0x3fe/0x410 [ 218.176856][ T8056] __tsan_read8+0x145/0x1f0 [ 218.181531][ T8056] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 218.188220][ T8056] ? hrtimer_active+0x1a0/0x1a0 [ 218.193112][ T8056] schedule_hrtimeout_range+0x34/0x50 [ 218.198613][ T8056] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 218.204774][ T8056] do_select+0xd7f/0x1020 [ 218.209132][ T8056] ? __rcu_read_unlock+0x66/0x3c0 [ 218.214174][ T8056] ? __rcu_read_unlock+0x66/0x3c0 [ 218.219837][ T8056] ? rb_erase+0x2aa/0x990 [ 218.224201][ T8056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.230475][ T8056] ? __read_once_size.constprop.0+0x12/0x20 [ 218.236413][ T8056] ? timerqueue_del+0xa1/0x100 [ 218.241184][ T8056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.247585][ T8056] ? __remove_hrtimer+0x7a/0x130 [ 218.252777][ T8056] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 218.258685][ T8056] ? hrtimer_try_to_cancel+0x57/0x260 [ 218.264153][ T8056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.270428][ T8056] ? hrtimer_cancel+0x3b/0x50 [ 218.275122][ T8056] ? futex_wait+0x33f/0x3f0 [ 218.279639][ T8056] ? __rcu_read_unlock+0x66/0x3c0 [ 218.284692][ T8056] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 218.290605][ T8056] core_sys_select+0x381/0x550 [ 218.295397][ T8056] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 218.301324][ T8056] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 218.307082][ T8056] ? _copy_to_user+0x84/0xb0 [ 218.311799][ T8056] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 218.317720][ T8056] ? __read_once_size+0x5a/0xe0 [ 218.322581][ T8056] ? ktime_get_ts64+0x286/0x2c0 [ 218.327800][ T8056] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 218.333694][ T8056] ? timespec64_add_safe+0xae/0xd0 [ 218.338807][ T8056] do_pselect.constprop.0+0x11d/0x160 [ 218.344178][ T8056] __x64_sys_pselect6+0x12e/0x170 [ 218.349274][ T8056] ? switch_fpu_return+0x11f/0x250 [ 218.354388][ T8056] do_syscall_64+0xcc/0x370 [ 218.358894][ T8056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 218.364788][ T8056] RIP: 0033:0x45ac23 [ 218.368718][ T8056] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 218.388698][ T8056] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 218.397114][ T8056] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045ac23 [ 218.405119][ T8056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.413107][ T8056] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 218.421077][ T8056] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 218.429243][ T8056] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 218.438818][ T8056] Kernel Offset: disabled [ 218.443171][ T8056] Rebooting in 86400 seconds..