[ 47.105468][ T27] audit: type=1800 audit(1586290986.457:21): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 47.149240][ T27] audit: type=1800 audit(1586290986.457:22): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 48.243463][ T7695] sshd (7695) used greatest stack depth: 10384 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.157' (ECDSA) to the list of known hosts. 2020/04/07 20:23:14 fuzzer started 2020/04/07 20:23:16 dialing manager at 10.128.0.105:38669 2020/04/07 20:23:16 syscalls: 2955 2020/04/07 20:23:16 code coverage: enabled 2020/04/07 20:23:16 comparison tracing: enabled 2020/04/07 20:23:16 extra coverage: enabled 2020/04/07 20:23:16 setuid sandbox: enabled 2020/04/07 20:23:16 namespace sandbox: enabled 2020/04/07 20:23:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/07 20:23:16 fault injection: enabled 2020/04/07 20:23:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/07 20:23:16 net packet injection: enabled 2020/04/07 20:23:16 net device setup: enabled 2020/04/07 20:23:16 concurrency sanitizer: enabled 2020/04/07 20:23:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/07 20:23:16 USB emulation: /dev/raw-gadget does not exist syzkaller login: [ 57.577815][ T7799] KCSAN: could not find function: 'poll_schedule_timeout' [ 60.406085][ T7799] KCSAN: could not find function: '_find_next_bit' 2020/04/07 20:23:21 adding functions to KCSAN blacklist: 'poll_schedule_timeout' '__fsnotify_parent' 'ep_poll' 'xas_clear_mark' '__delete_from_page_cache' 'pcpu_alloc' 'tick_nohz_idle_stop_tick' 'mod_timer' 'kcm_rcv_strparser' 'blk_mq_sched_dispatch_requests' 'blk_mq_get_request' 'inode_sync_complete' 'tick_sched_do_timer' 'dd_has_work' 'copy_process' '__snd_rawmidi_transmit_ack' 'futex_wait_queue_me' 'run_timer_softirq' 'shmem_file_read_iter' 'blk_mq_free_request' 'ext4_writepages' '_find_next_bit' 'do_nanosleep' 'alloc_empty_file' 'blk_mq_dispatch_rq_list' 'kauditd_thread' 'audit_log_start' 'do_syslog' 'wbt_done' '__ext4_new_inode' 'ext4_free_inodes_count' 'add_timer' 'lruvec_lru_size' 'ktime_get_real_seconds' 'find_get_pages_range_tag' 'generic_write_end' '__perf_event_overflow' 'ext4_nonda_switch' 'blk_stat_add' [ 106.069869][ C0] ================================================================== [ 106.078322][ C0] BUG: KCSAN: data-race in timer_clear_idle / trigger_dyntick_cpu.isra.0 [ 106.086824][ C0] [ 106.089151][ C0] write to 0xffff88812c11dbe4 of 1 bytes by task 0 on cpu 1: [ 106.096628][ C0] timer_clear_idle+0x3d/0x50 [ 106.101326][ C0] __tick_nohz_idle_restart_tick+0x32/0x1a0 [ 106.107209][ C0] tick_nohz_idle_exit+0x19c/0x1d0 [ 106.112318][ C0] do_idle+0xac/0x290 [ 106.116289][ C0] cpu_startup_entry+0x14/0x20 [ 106.121085][ C0] start_secondary+0x164/0x1b0 [ 106.125856][ C0] secondary_startup_64+0xa4/0xb0 [ 106.130868][ C0] [ 106.133184][ C0] read to 0xffff88812c11dbe4 of 1 bytes by interrupt on cpu 0: [ 106.140715][ C0] trigger_dyntick_cpu.isra.0+0x6d/0xf0 [ 106.146259][ C0] mod_timer+0x3d7/0x830 [ 106.150500][ C0] sk_reset_timer+0x29/0xc0 [ 106.154993][ C0] tcp_send_delayed_ack+0x1fd/0x280 [ 106.160185][ C0] __tcp_ack_snd_check+0x3bb/0x550 [ 106.165281][ C0] tcp_rcv_established+0x72b/0xee0 [ 106.170384][ C0] tcp_v4_do_rcv+0x396/0x4f0 [ 106.174960][ C0] tcp_v4_rcv+0x1bbf/0x1d80 [ 106.179447][ C0] ip_protocol_deliver_rcu+0x4b/0x410 [ 106.184797][ C0] ip_local_deliver_finish+0xf3/0x120 [ 106.190162][ C0] ip_local_deliver+0x135/0x220 [ 106.194994][ C0] ip_sublist_rcv_finish+0xf0/0x140 [ 106.200196][ C0] ip_sublist_rcv+0x3f8/0x530 [ 106.204866][ C0] ip_list_rcv+0x2f3/0x321 [ 106.209272][ C0] __netif_receive_skb_list_core+0x368/0x5c0 [ 106.215240][ C0] netif_receive_skb_list_internal+0x5c7/0x810 [ 106.221387][ C0] gro_normal_list.part.0+0x37/0xa0 [ 106.226576][ C0] gro_normal_one+0x14c/0x160 [ 106.231348][ C0] napi_gro_receive+0x27d/0x2f0 [ 106.236187][ C0] receive_buf+0x24e/0x2e20 [ 106.240766][ C0] virtnet_poll+0x343/0x790 [ 106.245266][ C0] net_rx_action+0x3ad/0xac0 [ 106.249843][ C0] __do_softirq+0x118/0x34a [ 106.254330][ C0] irq_exit+0xb5/0xd0 [ 106.258289][ C0] do_IRQ+0x7b/0x120 [ 106.262167][ C0] ret_from_intr+0x0/0x21 [ 106.266496][ C0] native_safe_halt+0xe/0x10 [ 106.271089][ C0] default_idle+0x21/0x170 [ 106.275511][ C0] do_idle+0x1b7/0x290 [ 106.279587][ C0] cpu_startup_entry+0x14/0x20 [ 106.284348][ C0] rest_init+0xe4/0xeb [ 106.288399][ C0] arch_call_rest_init+0x13/0x2b [ 106.293315][ C0] start_kernel+0xcc2/0xceb [ 106.297810][ C0] secondary_startup_64+0xa4/0xb0 [ 106.302806][ C0] [ 106.305108][ C0] Reported by Kernel Concurrency Sanitizer on: [ 106.311241][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.6.0-rc1-syzkaller #0 [ 106.319110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.329142][ C0] ================================================================== [ 106.337187][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 106.343753][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.6.0-rc1-syzkaller #0 [ 106.351688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.361750][ C0] Call Trace: [ 106.365026][ C0] [ 106.367994][ C0] dump_stack+0x11d/0x187 [ 106.372312][ C0] panic+0x210/0x640 [ 106.376194][ C0] ? vprintk_func+0x89/0x13a [ 106.380795][ C0] kcsan_report.cold+0xc/0xf [ 106.385406][ C0] kcsan_setup_watchpoint+0x3fb/0x440 [ 106.390773][ C0] trigger_dyntick_cpu.isra.0+0x6d/0xf0 [ 106.396312][ C0] mod_timer+0x3d7/0x830 [ 106.400560][ C0] sk_reset_timer+0x29/0xc0 [ 106.405053][ C0] tcp_send_delayed_ack+0x1fd/0x280 [ 106.410240][ C0] __tcp_ack_snd_check+0x3bb/0x550 [ 106.415334][ C0] ? constant_test_bit+0xd/0x30 [ 106.420180][ C0] tcp_rcv_established+0x72b/0xee0 [ 106.425279][ C0] tcp_v4_do_rcv+0x396/0x4f0 [ 106.430148][ C0] tcp_v4_rcv+0x1bbf/0x1d80 [ 106.434649][ C0] ip_protocol_deliver_rcu+0x4b/0x410 [ 106.440010][ C0] ip_local_deliver_finish+0xf3/0x120 [ 106.445367][ C0] ip_local_deliver+0x135/0x220 [ 106.450215][ C0] ? ip_protocol_deliver_rcu+0x410/0x410 [ 106.455843][ C0] ip_sublist_rcv_finish+0xf0/0x140 [ 106.461028][ C0] ip_sublist_rcv+0x3f8/0x530 [ 106.465695][ C0] ? ip_sublist_rcv+0x530/0x530 [ 106.470538][ C0] ip_list_rcv+0x2f3/0x321 [ 106.475199][ C0] ? ip_rcv+0x1b0/0x1b0 [ 106.479338][ C0] __netif_receive_skb_list_core+0x368/0x5c0 [ 106.485304][ C0] ? ktime_get_with_offset+0x1e6/0x230 [ 106.490753][ C0] netif_receive_skb_list_internal+0x5c7/0x810 [ 106.496909][ C0] gro_normal_list.part.0+0x37/0xa0 [ 106.502092][ C0] ? __write_once_size+0x7c/0x100 [ 106.507101][ C0] gro_normal_one+0x14c/0x160 [ 106.511854][ C0] napi_gro_receive+0x27d/0x2f0 [ 106.516700][ C0] receive_buf+0x24e/0x2e20 [ 106.521198][ C0] ? virtqueue_get_buf_ctx+0x4db/0x5c0 [ 106.526642][ C0] virtnet_poll+0x343/0x790 [ 106.531133][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0x70/0xa0 [ 106.537018][ C0] net_rx_action+0x3ad/0xac0 [ 106.541610][ C0] __do_softirq+0x118/0x34a [ 106.546110][ C0] irq_exit+0xb5/0xd0 [ 106.550076][ C0] do_IRQ+0x7b/0x120 [ 106.553960][ C0] common_interrupt+0xf/0xf [ 106.558436][ C0] [ 106.561359][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 106.566725][ C0] Code: ff cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d fc f8 43 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d ec f8 43 00 fb f4 cc 41 54 55 53 e8 37 fc 9a fc e8 12 ae b3 fd 0f 1f 44 00 00 48 [ 106.586314][ C0] RSP: 0018:ffffffff85a03e50 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffda [ 106.594708][ C0] RAX: 0000000000000000 RBX: ffffffff85a2b840 RCX: ffffffff82522f51 [ 106.602734][ C0] RDX: 0000000000000000 RSI: ffffffff82522f5a RDI: 0000000000000005 [ 106.610706][ C0] RBP: 0000000000000000 R08: ffffffff85a2b840 R09: 0000ffff8584b160 [ 106.618671][ C0] R10: 0000ffff85a03e38 R11: 0000ffff8584b167 R12: ffffffff85a2b840 [ 106.626634][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85a2b840 [ 106.634606][ C0] ? debug_smp_processor_id+0x31/0x129 [ 106.640059][ C0] ? debug_smp_processor_id+0x3a/0x129 [ 106.645503][ C0] default_idle+0x21/0x170 [ 106.649915][ C0] do_idle+0x1b7/0x290 [ 106.654069][ C0] ? debug_smp_processor_id+0x3f/0x129 [ 106.659508][ C0] cpu_startup_entry+0x14/0x20 [ 106.664254][ C0] rest_init+0xe4/0xeb [ 106.668351][ C0] arch_call_rest_init+0x13/0x2b [ 106.673308][ C0] start_kernel+0xcc2/0xceb [ 106.677800][ C0] secondary_startup_64+0xa4/0xb0 [ 106.684325][ C0] Kernel Offset: disabled [ 106.688666][ C0] Rebooting in 86400 seconds..