[info] Using makefile-style concurrent boot in runlevel 2. [ 49.914226][ T26] audit: type=1800 audit(1575250666.582:21): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 50.969872][ T7490] sshd (7490) used greatest stack depth: 10128 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. 2019/12/02 01:37:59 fuzzer started 2019/12/02 01:38:00 dialing manager at 10.128.0.105:42079 2019/12/02 01:38:10 syscalls: 2671 2019/12/02 01:38:10 code coverage: enabled 2019/12/02 01:38:10 comparison tracing: enabled 2019/12/02 01:38:10 extra coverage: extra coverage is not supported by the kernel 2019/12/02 01:38:10 setuid sandbox: enabled 2019/12/02 01:38:10 namespace sandbox: enabled 2019/12/02 01:38:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 01:38:10 fault injection: enabled 2019/12/02 01:38:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 01:38:10 net packet injection: enabled 2019/12/02 01:38:10 net device setup: enabled 2019/12/02 01:38:10 concurrency sanitizer: enabled 2019/12/02 01:38:10 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 83.498102][ T7593] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/02 01:38:20 adding functions to KCSAN blacklist: 'inactive_list_is_low' 'process_srcu' 'hrtimer_wakeup' 'copy_process' 'futex_wait_queue_me' 'kauditd_thread' 'ext4_mark_iloc_dirty' 'install_new_memslots' 'ext4_free_inodes_count' 'find_next_bit' '__mark_inode_dirty' 'mem_cgroup_select_victim_node' 'find_get_pages_range_tag' 'vm_area_dup' '__dentry_kill' 'tcp_add_backlog' 'smpboot_thread_fn' '__hrtimer_run_queues' 'pid_update_inode' 'dd_has_work' 'sbitmap_queue_clear' 'yama_ptracer_del' '__perf_event_overflow' 'tomoyo_supervisor' 'generic_write_end' 'audit_log_start' 'generic_fillattr' 'lruvec_lru_size' 'xas_find_marked' 'sit_tunnel_xmit' 'pipe_wait' '__snd_rawmidi_transmit_ack' 'blk_mq_get_request' 'atime_needs_update' 'xas_clear_mark' 'ep_poll' 'wbt_issue' 'echo_char' 'blk_mq_sched_dispatch_requests' 'p9_poll_workfn' 'add_timer' 'taskstats_exit' 'timer_clear_idle' '__add_to_page_cache_locked' 'ext4_has_free_clusters' 'pipe_poll' 'blk_mq_dispatch_rq_list' 'do_exit' 'list_lru_count_one' 'wbt_done' 'run_timer_softirq' 'ext4_nonda_switch' 'enqueue_timer' 'tick_nohz_idle_stop_tick' 'rcu_gp_fqs_check_wake' 'do_nanosleep' 'n_tty_receive_buf_common' '__delete_from_page_cache' 'do_syslog' '__dev_queue_xmit' 'mod_timer' 'poll_schedule_timeout' 'ext4_free_inode' 'tick_do_update_jiffies64' '__ext4_new_inode' '__splice_from_pipe' 'tick_sched_do_timer' [ 254.693153][ C1] ================================================================== [ 254.701472][ C1] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_get_buf_ctx [ 254.709794][ C1] [ 254.712114][ C1] read to 0xffff8881292be8b0 of 2 bytes by interrupt on cpu 0: [ 254.719659][ C1] virtqueue_get_buf_ctx+0x4da/0x5c0 [ 254.724939][ C1] virtqueue_get_buf+0x29/0x40 [ 254.729697][ C1] free_old_xmit_skbs+0x9e/0x170 [ 254.734623][ C1] start_xmit+0xd3/0xbe0 [ 254.738862][ C1] dev_hard_start_xmit+0xef/0x430 [ 254.743887][ C1] sch_direct_xmit+0x2b3/0x900 [ 254.748640][ C1] __dev_queue_xmit+0x19a3/0x1b40 [ 254.753656][ C1] dev_queue_xmit+0x21/0x30 [ 254.758169][ C1] ip_finish_output2+0x836/0xe40 [ 254.763108][ C1] __ip_finish_output+0x23a/0x490 [ 254.768246][ C1] ip_finish_output+0x41/0x160 [ 254.773009][ C1] ip_output+0xdf/0x210 [ 254.777176][ C1] ip_local_out+0x74/0x90 [ 254.781519][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 254.786295][ C1] ip_queue_xmit+0x45/0x60 [ 254.790840][ C1] __tcp_transmit_skb+0xe81/0x1d60 [ 254.795940][ C1] __tcp_send_ack+0x246/0x300 [ 254.800761][ C1] tcp_send_ack+0x34/0x40 [ 254.805096][ C1] __tcp_ack_snd_check+0xd9/0x4f0 [ 254.810124][ C1] tcp_rcv_established+0xce9/0xf50 [ 254.815330][ C1] tcp_v4_do_rcv+0x3b5/0x520 [ 254.819916][ C1] tcp_v4_rcv+0x19ec/0x1bd0 [ 254.824428][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 254.829938][ C1] ip_local_deliver_finish+0x110/0x140 [ 254.835391][ C1] ip_local_deliver+0x133/0x210 [ 254.840237][ C1] ip_rcv_finish+0x121/0x160 [ 254.844931][ C1] ip_rcv+0x18f/0x1a0 [ 254.848898][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 254.854611][ C1] __netif_receive_skb+0x37/0xf0 [ 254.859722][ C1] netif_receive_skb_internal+0x59/0x190 [ 254.865345][ C1] napi_gro_receive+0x28f/0x330 [ 254.870281][ C1] receive_buf+0x284/0x30b0 [ 254.874903][ C1] virtnet_poll+0x436/0x7d0 [ 254.879393][ C1] net_rx_action+0x3ae/0xa90 [ 254.883975][ C1] __do_softirq+0x115/0x33f [ 254.888481][ C1] irq_exit+0xbb/0xe0 [ 254.892590][ C1] do_IRQ+0x81/0x130 [ 254.896482][ C1] ret_from_intr+0x0/0x19 [ 254.900824][ C1] native_safe_halt+0xe/0x10 [ 254.905417][ C1] arch_cpu_idle+0xa/0x10 [ 254.909742][ C1] default_idle_call+0x1e/0x40 [ 254.919027][ C1] do_idle+0x1af/0x280 [ 254.923095][ C1] cpu_startup_entry+0x1b/0x20 [ 254.927978][ C1] rest_init+0xec/0xf6 [ 254.932047][ C1] arch_call_rest_init+0x17/0x37 [ 254.936977][ C1] start_kernel+0x838/0x85e [ 254.941482][ C1] x86_64_start_reservations+0x29/0x2b [ 254.946937][ C1] x86_64_start_kernel+0x72/0x76 [ 254.951865][ C1] secondary_startup_64+0xa4/0xb0 [ 254.956868][ C1] [ 254.959191][ C1] write to 0xffff8881292be8b0 of 2 bytes by interrupt on cpu 1: [ 254.966810][ C1] virtqueue_disable_cb+0xe9/0x130 [ 254.971915][ C1] skb_xmit_done+0x6a/0x110 [ 254.976413][ C1] vring_interrupt+0x1a1/0x1c0 [ 254.981163][ C1] __handle_irq_event_percpu+0x9a/0x430 [ 254.986701][ C1] handle_irq_event_percpu+0x4b/0xe0 [ 254.991968][ C1] handle_irq_event+0x85/0xca [ 254.996634][ C1] handle_edge_irq+0x1a4/0x4a0 [ 255.001403][ C1] do_IRQ+0x7c/0x130 [ 255.005298][ C1] ret_from_intr+0x0/0x19 [ 255.009638][ C1] native_safe_halt+0xe/0x10 [ 255.014230][ C1] arch_cpu_idle+0xa/0x10 [ 255.018678][ C1] default_idle_call+0x1e/0x40 [ 255.023436][ C1] do_idle+0x1af/0x280 [ 255.027694][ C1] cpu_startup_entry+0x1b/0x20 [ 255.032471][ C1] start_secondary+0x168/0x1b0 [ 255.037235][ C1] secondary_startup_64+0xa4/0xb0 [ 255.042236][ C1] [ 255.044548][ C1] Reported by Kernel Concurrency Sanitizer on: [ 255.050690][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-syzkaller #0 [ 255.058308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.068617][ C1] ================================================================== [ 255.076759][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 255.083351][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-syzkaller #0 [ 255.091170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.101226][ C1] Call Trace: [ 255.104509][ C1] [ 255.107383][ C1] dump_stack+0x11d/0x181 [ 255.111716][ C1] panic+0x210/0x640 [ 255.115631][ C1] ? vprintk_func+0x8d/0x140 [ 255.120236][ C1] kcsan_report.cold+0xc/0xd [ 255.124937][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 255.130303][ C1] __tsan_unaligned_write2+0xc4/0x100 [ 255.135678][ C1] virtqueue_disable_cb+0xe9/0x130 [ 255.140795][ C1] skb_xmit_done+0x6a/0x110 [ 255.145294][ C1] ? virtnet_poll_tx+0x1d0/0x1d0 [ 255.150229][ C1] vring_interrupt+0x1a1/0x1c0 [ 255.154992][ C1] ? virtqueue_enable_cb+0x40/0x40 [ 255.160097][ C1] __handle_irq_event_percpu+0x9a/0x430 [ 255.165690][ C1] handle_irq_event_percpu+0x4b/0xe0 [ 255.171126][ C1] handle_irq_event+0x85/0xca [ 255.176113][ C1] handle_edge_irq+0x1a4/0x4a0 [ 255.180886][ C1] do_IRQ+0x7c/0x130 [ 255.184788][ C1] common_interrupt+0xf/0xf [ 255.189285][ C1] [ 255.192222][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 255.197599][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 7c ad 48 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 6c ad 48 00 fb f4 90 55 48 89 e5 41 55 41 54 53 e8 42 6d 9f fc e8 7d 1a b5 fd 0f [ 255.217307][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9 [ 255.225720][ C1] RAX: 0000000000000001 RBX: ffff88812b38b0c0 RCX: ffffffff824ee309 [ 255.233693][ C1] RDX: 0000000000000000 RSI: ffffffff824ee317 RDI: 0000000000000005 [ 255.241670][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b38b0c0 R09: 0000ffff857d2168 [ 255.249630][ C1] R10: 0000000000097800 R11: 0000ffff857d216f R12: 0000000000000001 [ 255.257710][ C1] R13: ffff88812b38b0c0 R14: 0000000000000000 R15: 0000000000000000 [ 255.265798][ C1] ? debug_smp_processor_id+0x39/0x172 [ 255.271264][ C1] ? debug_smp_processor_id+0x47/0x172 [ 255.276884][ C1] ? default_idle+0x26/0x180 [ 255.281489][ C1] arch_cpu_idle+0xa/0x10 [ 255.285953][ C1] default_idle_call+0x1e/0x40 [ 255.290723][ C1] do_idle+0x1af/0x280 [ 255.294786][ C1] cpu_startup_entry+0x1b/0x20 [ 255.299548][ C1] start_secondary+0x168/0x1b0 [ 255.304315][ C1] secondary_startup_64+0xa4/0xb0 [ 255.310844][ C1] Kernel Offset: disabled [ 255.315171][ C1] Rebooting in 86400 seconds..