[ 55.381364][ T25] audit: type=1800 audit(1574479734.490:27): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 55.381414][ T25] audit: type=1800 audit(1574479734.490:28): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.147687][ T25] audit: type=1800 audit(1574479735.310:29): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 56.176660][ T25] audit: type=1800 audit(1574479735.310:30): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. 2019/11/23 03:29:04 fuzzer started 2019/11/23 03:29:07 dialing manager at 10.128.0.105:37257 2019/11/23 03:29:07 syscalls: 2566 2019/11/23 03:29:07 code coverage: enabled 2019/11/23 03:29:07 comparison tracing: enabled 2019/11/23 03:29:07 extra coverage: extra coverage is not supported by the kernel 2019/11/23 03:29:07 setuid sandbox: enabled 2019/11/23 03:29:07 namespace sandbox: enabled 2019/11/23 03:29:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/23 03:29:07 fault injection: enabled 2019/11/23 03:29:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/23 03:29:07 net packet injection: enabled 2019/11/23 03:29:07 net device setup: enabled 2019/11/23 03:29:07 concurrency sanitizer: enabled 2019/11/23 03:29:07 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 70.813722][ T7562] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/23 03:29:22 adding functions to KCSAN blacklist: '__snd_rawmidi_transmit_ack' 'do_syslog' 'blk_mq_get_request' 'flush_workqueue' 'blk_mq_dispatch_rq_list' 'list_lru_count_one' 'sit_tunnel_xmit' 'inactive_list_is_low' 'ip_finish_output2' 'ksys_read' 'poll_schedule_timeout' 'timer_clear_idle' 'pid_update_inode' 'enqueue_timer' 'yama_ptracer_del' 'unix_release_sock' '__ext4_new_inode' 'evict' '__filemap_fdatawrite_range' 'tick_do_update_jiffies64' 'xas_find_marked' '__delete_from_page_cache' 'ext4_mark_iloc_dirty' 'ext4_free_inodes_count' 'futex_wait_queue_me' '__add_to_page_cache_locked' 'p9_poll_workfn' 'find_next_bit' 'ep_poll' 'generic_write_end' '__writeback_single_inode' 'ns_capable_common' 'netlink_getname' 'iput' 'ext4_free_inode' 'atime_needs_update' 'shmem_file_read_iter' '__process_echoes' 'ktime_get_seconds' 'run_timer_softirq' 'tcp_add_backlog' 'xas_clear_mark' 'd_instantiate_new' 'ext4_da_write_end' 'ondemand_readahead' 'snd_seq_check_queue' 'common_perm_cond' 'dd_has_work' 'mem_cgroup_select_victim_node' 'virtqueue_enable_cb_delayed' 'process_srcu' 'vm_area_dup' 'tomoyo_supervisor' 'copy_process' 'tick_nohz_idle_stop_tick' 'kauditd_thread' 'ktime_get_real_seconds' 'find_get_pages_range_tag' 'pipe_wait' 'ext4_has_free_clusters' 'do_nanosleep' 'add_timer' 'wbt_issue' 'ip6_dst_gc' 'virtqueue_disable_cb' 'generic_fillattr' 'pcpu_alloc' 'sbitmap_queue_clear' 'rcu_gp_fqs_loop' 'shmem_getpage_gfp' 'ext4_mb_good_group' 'generic_file_read_iter' 'ext4_writepages' 'snd_ctl_notify' 'echo_char' 'do_exit' 'blk_mq_sched_dispatch_requests' 'wbc_detach_inode' 'rcu_gp_fqs_check_wake' '__mark_inode_dirty' 'wbt_wait' 'generic_permission' 'n_tty_receive_buf_common' 'wbt_done' 'taskstats_exit' 'tick_sched_do_timer' 'tick_nohz_next_event' 'page_counter_try_charge' 'inet_sk_diag_fill' '__hrtimer_run_queues' '__splice_from_pipe' 'pipe_poll' 'complete_signal' 'blk_mq_run_hw_queue' 'ext4_nonda_switch' 'audit_log_start' 'wbc_attach_and_unlock_inode' 'lruvec_lru_size' 'ext4_mb_find_by_goal' 'cma_comp_exch' [ 311.725647][ T7547] ================================================================== [ 311.733958][ T7547] BUG: KCSAN: data-race in hrtimer_wakeup / schedule_hrtimeout_range_clock [ 311.742546][ T7547] [ 311.744864][ T7547] write to 0xffffc9000159b848 of 8 bytes by interrupt on cpu 1: [ 311.752568][ T7547] hrtimer_wakeup+0x32/0x60 [ 311.757097][ T7547] __hrtimer_run_queues+0x274/0x5f0 [ 311.762288][ T7547] hrtimer_interrupt+0x22a/0x480 [ 311.767221][ T7547] smp_apic_timer_interrupt+0xdc/0x280 [ 311.772793][ T7547] apic_timer_interrupt+0xf/0x20 [ 311.777842][ T7547] native_safe_halt+0xe/0x10 [ 311.782623][ T7547] arch_cpu_idle+0xa/0x10 [ 311.786999][ T7547] default_idle_call+0x1e/0x40 [ 311.791795][ T7547] do_idle+0x1af/0x280 [ 311.795863][ T7547] cpu_startup_entry+0x1b/0x20 [ 311.801142][ T7547] start_secondary+0x168/0x1b0 [ 311.805913][ T7547] secondary_startup_64+0xa4/0xb0 [ 311.810948][ T7547] [ 311.813291][ T7547] read to 0xffffc9000159b848 of 8 bytes by task 7547 on cpu 0: [ 311.820849][ T7547] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 311.826935][ T7547] schedule_hrtimeout_range+0x34/0x50 [ 311.832306][ T7547] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 311.838974][ T7547] do_select+0xd7f/0x1020 [ 311.843326][ T7547] core_sys_select+0x381/0x550 [ 311.848083][ T7547] do_pselect.constprop.0+0x11d/0x160 [ 311.853445][ T7547] __x64_sys_pselect6+0x12e/0x170 [ 311.858460][ T7547] do_syscall_64+0xcc/0x370 [ 311.862953][ T7547] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 311.868830][ T7547] [ 311.871146][ T7547] Reported by Kernel Concurrency Sanitizer on: [ 311.877291][ T7547] CPU: 0 PID: 7547 Comm: syz-fuzzer Not tainted 5.4.0-rc7+ #0 [ 311.884732][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.894791][ T7547] ================================================================== [ 311.902864][ T7547] Kernel panic - not syncing: panic_on_warn set ... [ 311.909665][ T7547] CPU: 0 PID: 7547 Comm: syz-fuzzer Not tainted 5.4.0-rc7+ #0 [ 311.917109][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.927152][ T7547] Call Trace: [ 311.930438][ T7547] dump_stack+0x11d/0x181 [ 311.934764][ T7547] panic+0x210/0x640 [ 311.938660][ T7547] ? vprintk_func+0x8d/0x140 [ 311.943248][ T7547] kcsan_report.cold+0xc/0xd [ 311.947861][ T7547] kcsan_setup_watchpoint+0x3fe/0x460 [ 311.953241][ T7547] __tsan_read8+0xc6/0x100 [ 311.957672][ T7547] schedule_hrtimeout_range_clock+0x109/0x1e0 [ 311.963762][ T7547] ? hrtimer_active+0x1a0/0x1a0 [ 311.968631][ T7547] schedule_hrtimeout_range+0x34/0x50 [ 311.974022][ T7547] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 311.980212][ T7547] do_select+0xd7f/0x1020 [ 311.984583][ T7547] ? put_prev_entity+0x56/0xb0 [ 311.989362][ T7547] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 311.995080][ T7547] ? gup_pgd_range+0x5cb/0x1990 [ 311.999930][ T7547] ? __rcu_read_unlock+0x66/0x3c0 [ 312.004967][ T7547] ? __rcu_read_unlock+0x66/0x3c0 [ 312.010007][ T7547] ? rb_erase+0x2aa/0x990 [ 312.015666][ T7547] ? __read_once_size.constprop.0+0x12/0x20 [ 312.021581][ T7547] ? timerqueue_del+0xa1/0x100 [ 312.026368][ T7547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.032611][ T7547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.039036][ T7547] ? debug_smp_processor_id+0x4c/0x172 [ 312.044509][ T7547] ? delay_tsc+0x8f/0xc0 [ 312.048744][ T7547] ? __const_udelay+0x36/0x40 [ 312.054815][ T7547] ? __udelay+0x10/0x20 [ 312.058971][ T7547] ? __tsan_unaligned_write4+0xc4/0x100 [ 312.064521][ T7547] ? __rcu_read_unlock+0x66/0x3c0 [ 312.069537][ T7547] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 312.075566][ T7547] core_sys_select+0x381/0x550 [ 312.080352][ T7547] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 312.086259][ T7547] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 312.091986][ T7547] ? _copy_to_user+0x84/0xb0 [ 312.096585][ T7547] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 312.102473][ T7547] ? __read_once_size+0x5a/0xe0 [ 312.107352][ T7547] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.113582][ T7547] ? ktime_get_ts64+0x286/0x2c0 [ 312.118426][ T7547] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 312.124147][ T7547] ? timespec64_add_safe+0xae/0xd0 [ 312.129257][ T7547] do_pselect.constprop.0+0x11d/0x160 [ 312.134627][ T7547] __x64_sys_pselect6+0x12e/0x170 [ 312.139662][ T7547] ? switch_fpu_return+0x11f/0x250 [ 312.144860][ T7547] do_syscall_64+0xcc/0x370 [ 312.149359][ T7547] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 312.155253][ T7547] RIP: 0033:0x45ac23 [ 312.159147][ T7547] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 312.178755][ T7547] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 312.187494][ T7547] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045ac23 [ 312.195479][ T7547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.203449][ T7547] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 312.211438][ T7547] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 312.219437][ T7547] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 312.228840][ T7547] Kernel Offset: disabled [ 312.233463][ T7547] Rebooting in 86400 seconds..