[ 56.442788][ T27] audit: type=1800 audit(1576346994.434:27): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 56.463133][ T27] audit: type=1800 audit(1576346994.434:28): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.127311][ T27] audit: type=1800 audit(1576346995.214:29): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 57.147319][ T27] audit: type=1800 audit(1576346995.214:30): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts. 2019/12/14 18:10:04 fuzzer started 2019/12/14 18:10:06 dialing manager at 10.128.0.105:44249 2019/12/14 18:10:06 syscalls: 2686 2019/12/14 18:10:06 code coverage: enabled 2019/12/14 18:10:06 comparison tracing: enabled 2019/12/14 18:10:06 extra coverage: enabled 2019/12/14 18:10:06 setuid sandbox: enabled 2019/12/14 18:10:06 namespace sandbox: enabled 2019/12/14 18:10:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/14 18:10:06 fault injection: enabled 2019/12/14 18:10:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/14 18:10:06 net packet injection: enabled 2019/12/14 18:10:06 net device setup: enabled 2019/12/14 18:10:06 concurrency sanitizer: enabled 2019/12/14 18:10:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/12/14 18:10:15 adding functions to KCSAN blacklist: 'n_tty_receive_buf_common' 'wbt_wait' 'do_try_to_free_pages' 'generic_write_end' 'find_next_bit' 'do_exit' 'xas_find_marked' 'do_nanosleep' 'timer_clear_idle' 'add_timer' 'ext4_free_inodes_count' 'tick_do_update_jiffies64' 'do_syslog' '__mark_inode_dirty' 'wbt_issue' 'blk_mq_get_request' 'find_get_pages_range_tag' '__ext4_new_inode' 'copy_process' 'vm_area_dup' 'ext4_sync_file' '__snd_rawmidi_transmit_ack' 'taskstats_exit' 'dd_has_work' 'mmap_region' 'common_perm_cond' 'mod_timer' 'page_counter_try_charge' 'ktime_get_real_seconds' 'xas_clear_mark' 'echo_char' 'enqueue_timer' 'commit_echoes' 'pid_update_inode' '__hrtimer_run_queues' 'ext4_mark_iloc_dirty' 'tick_sched_do_timer' 'yama_ptracer_del' 'audit_log_start' 'ext4_nonda_switch' 'pcpu_alloc' 'ext4_free_inode' 'iomap_dio_bio_actor' 'iput' 'atime_needs_update' 'generic_fillattr' 'do_signal_stop' 'ext4_has_free_clusters' 'tomoyo_supervisor' 'sit_tunnel_xmit' 'wbt_done' 'lruvec_lru_size' '__delete_from_page_cache' 'kauditd_thread' 'blk_mq_dispatch_rq_list' 'rcu_gp_fqs_check_wake' 'add_timer_on' 'kcm_rfree' 'run_timer_softirq' 'tick_nohz_idle_stop_tick' 'blk_mq_sched_dispatch_requests' '__dentry_kill' 'futex_wait_queue_me' 'ep_poll' syzkaller login: [ 94.146698][ T7717] ================================================================== [ 94.154850][ T7717] BUG: KCSAN: data-race in schedule_hrtimeout_range_clock / watchdog [ 94.162902][ T7717] [ 94.165235][ T7717] read to 0xffff88811b76c050 of 8 bytes by task 1067 on cpu 1: [ 94.172775][ T7717] watchdog+0x2b1/0x960 [ 94.176934][ T7717] kthread+0x1d4/0x200 [ 94.181006][ T7717] ret_from_fork+0x1f/0x30 [ 94.185412][ T7717] [ 94.187756][ T7717] write to 0xffff88811b76c050 of 8 bytes by task 7717 on cpu 0: [ 94.195470][ T7717] schedule_hrtimeout_range_clock+0x14e/0x1e0 [ 94.201547][ T7717] schedule_hrtimeout_range+0x34/0x50 [ 94.206925][ T7717] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 94.213077][ T7717] do_select+0xd7f/0x1020 [ 94.217405][ T7717] core_sys_select+0x312/0x650 [ 94.222169][ T7717] do_pselect.constprop.0+0x11d/0x160 [ 94.227532][ T7717] __x64_sys_pselect6+0x12e/0x170 [ 94.232535][ T7717] do_syscall_64+0xcc/0x3a0 [ 94.237018][ T7717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.242910][ T7717] [ 94.245230][ T7717] Reported by Kernel Concurrency Sanitizer on: [ 94.251382][ T7717] CPU: 0 PID: 7717 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 94.259607][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.269664][ T7717] ================================================================== [ 94.277729][ T7717] Kernel panic - not syncing: panic_on_warn set ... [ 94.284327][ T7717] CPU: 0 PID: 7717 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 94.292556][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.302603][ T7717] Call Trace: [ 94.305907][ T7717] dump_stack+0x11d/0x181 [ 94.310250][ T7717] panic+0x210/0x640 [ 94.314162][ T7717] ? vprintk_func+0x8d/0x140 [ 94.318766][ T7717] kcsan_report.cold+0xc/0xd [ 94.323386][ T7717] kcsan_setup_watchpoint+0x3fe/0x460 [ 94.328769][ T7717] __tsan_unaligned_write8+0xc7/0x110 [ 94.334150][ T7717] schedule_hrtimeout_range_clock+0x14e/0x1e0 [ 94.340228][ T7717] ? hrtimer_active+0x1a0/0x1a0 [ 94.345126][ T7717] schedule_hrtimeout_range+0x34/0x50 [ 94.350518][ T7717] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 94.356691][ T7717] do_select+0xd7f/0x1020 [ 94.361038][ T7717] ? __rcu_read_unlock+0x66/0x3d0 [ 94.366074][ T7717] ? __rcu_read_unlock+0x66/0x3d0 [ 94.371115][ T7717] ? update_load_avg+0x7b/0x5d0 [ 94.375970][ T7717] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 94.381863][ T7717] ? __read_once_size+0x41/0xe0 [ 94.386724][ T7717] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 94.392443][ T7717] ? gup_pgd_range+0x5cb/0x1990 [ 94.397310][ T7717] ? __read_once_size.constprop.0+0x12/0x20 [ 94.403208][ T7717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 94.409454][ T7717] ? should_fail+0xd4/0x45d [ 94.413964][ T7717] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 94.419863][ T7717] ? __read_once_size+0x41/0xe0 [ 94.424718][ T7717] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 94.430961][ T7717] ? get_futex_key+0x55e/0xa10 [ 94.435725][ T7717] ? __rcu_read_unlock+0x66/0x3d0 [ 94.440759][ T7717] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 94.446656][ T7717] core_sys_select+0x312/0x650 [ 94.451419][ T7717] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 94.457312][ T7717] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 94.463088][ T7717] ? _copy_to_user+0x84/0xb0 [ 94.467708][ T7717] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 94.473597][ T7717] ? __read_once_size+0x5a/0xe0 [ 94.478455][ T7717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 94.484690][ T7717] ? ktime_get_ts64+0x286/0x2c0 [ 94.489540][ T7717] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 94.495249][ T7717] ? timespec64_add_safe+0xae/0xd0 [ 94.500360][ T7717] do_pselect.constprop.0+0x11d/0x160 [ 94.505730][ T7717] __x64_sys_pselect6+0x12e/0x170 [ 94.510747][ T7717] ? switch_fpu_return+0x11e/0x250 [ 94.515853][ T7717] do_syscall_64+0xcc/0x3a0 [ 94.520352][ T7717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 94.526226][ T7717] RIP: 0033:0x45ac23 [ 94.530115][ T7717] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 94.549706][ T7717] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 94.558121][ T7717] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac23 [ 94.566085][ T7717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.574043][ T7717] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 94.582000][ T7717] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 94.589957][ T7717] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 94.599233][ T7717] Kernel Offset: disabled [ 94.603569][ T7717] Rebooting in 86400 seconds..