[info] Using makefile-style concurrent boot in runlevel 2. [ 51.850315][ T26] audit: type=1800 audit(1581442297.645:21): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 51.884973][ T26] audit: type=1800 audit(1581442297.645:22): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. 2020/02/11 17:31:50 fuzzer started 2020/02/11 17:31:52 dialing manager at 10.128.0.105:33799 2020/02/11 17:31:52 syscalls: 2904 2020/02/11 17:31:52 code coverage: enabled 2020/02/11 17:31:52 comparison tracing: enabled 2020/02/11 17:31:52 extra coverage: enabled 2020/02/11 17:31:52 setuid sandbox: enabled 2020/02/11 17:31:52 namespace sandbox: enabled 2020/02/11 17:31:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/11 17:31:52 fault injection: enabled 2020/02/11 17:31:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/11 17:31:52 net packet injection: enabled 2020/02/11 17:31:52 net device setup: enabled 2020/02/11 17:31:52 concurrency sanitizer: enabled 2020/02/11 17:31:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/02/11 17:31:53 adding functions to KCSAN blacklist: 'wbt_done' 'generic_write_end' 'ep_poll' 'pcpu_alloc' 'ext4_has_free_clusters' 'mod_timer' 'do_syslog' 'tick_do_update_jiffies64' 'tomoyo_supervisor' 'find_get_pages_range_tag' 'kauditd_thread' 'tick_nohz_next_event' syzkaller login: [ 80.452537][ T0] ================================================================== [ 80.460939][ T0] BUG: KCSAN: data-race in tick_nohz_idle_stop_tick / tick_sched_do_timer [ 80.469518][ T0] [ 80.471947][ T0] write to 0xffffffff85ebb050 of 4 bytes by interrupt on cpu 1: [ 80.479581][ T0] tick_sched_do_timer+0xc0/0xe0 [ 80.484561][ T0] tick_sched_timer+0x43/0xe0 [ 80.489922][ T0] __hrtimer_run_queues+0x274/0x5f0 [ 80.495150][ T0] hrtimer_interrupt+0x22a/0x480 [ 80.500430][ T0] smp_apic_timer_interrupt+0xdc/0x280 [ 80.508856][ T0] apic_timer_interrupt+0xf/0x20 [ 80.514161][ T0] __tsan_func_exit+0x0/0x10 [ 80.523423][ T0] sk_reset_timer+0x2d/0xd0 [ 80.528116][ T0] tcp_send_delayed_ack+0x21d/0x2b0 [ 80.533319][ T0] __tcp_ack_snd_check+0x3d8/0x580 [ 80.538441][ T0] tcp_rcv_established+0xce9/0xf50 [ 80.543552][ T0] tcp_v4_do_rcv+0x3b5/0x520 [ 80.548252][ T0] tcp_v4_rcv+0x1b2a/0x1d20 [ 80.552764][ T0] ip_protocol_deliver_rcu+0x4d/0x420 [ 80.558130][ T0] ip_local_deliver_finish+0x110/0x140 [ 80.564971][ T0] ip_local_deliver+0x133/0x210 [ 80.569833][ T0] ip_sublist_rcv_finish+0xf8/0x140 [ 80.575054][ T0] ip_sublist_rcv+0x418/0x550 [ 80.579763][ T0] ip_list_rcv+0x2f5/0x322 [ 80.584173][ T0] __netif_receive_skb_list_core+0x350/0x5c0 [ 80.590150][ T0] netif_receive_skb_list_internal+0x5d8/0x830 [ 80.596360][ T0] gro_normal_list.part.0+0x3a/0xb0 [ 80.601615][ T0] gro_normal_one+0x162/0x170 [ 80.606568][ T0] napi_gro_receive+0x288/0x300 [ 80.611958][ T0] receive_buf+0x284/0x30b0 [ 80.616564][ T0] virtnet_poll+0x436/0x7d0 [ 80.621056][ T0] net_rx_action+0x3ae/0xa90 [ 80.625686][ T0] __do_softirq+0x115/0x33f [ 80.630434][ T0] run_ksoftirqd+0x46/0x60 [ 80.634985][ T0] smpboot_thread_fn+0x37d/0x4a0 [ 80.640020][ T0] kthread+0x1d4/0x200 [ 80.644082][ T0] ret_from_fork+0x1f/0x30 [ 80.648549][ T0] [ 80.651306][ T0] read to 0xffffffff85ebb050 of 4 bytes by task 0 on cpu 0: [ 80.658588][ T0] tick_nohz_idle_stop_tick+0x193/0x670 [ 80.664824][ T0] do_idle+0x1b8/0x290 [ 80.668937][ T0] cpu_startup_entry+0x1b/0x20 [ 80.673803][ T0] rest_init+0xec/0xf6 [ 80.677860][ T0] arch_call_rest_init+0x17/0x37 [ 80.682883][ T0] start_kernel+0x838/0x85e [ 80.687381][ T0] x86_64_start_reservations+0x29/0x2b [ 80.692823][ T0] x86_64_start_kernel+0x72/0x76 [ 80.697757][ T0] secondary_startup_64+0xa4/0xb0 [ 80.702847][ T0] [ 80.705157][ T0] Reported by Kernel Concurrency Sanitizer on: [ 80.711291][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0 [ 80.720607][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.731003][ T0] ================================================================== [ 80.739068][ T0] Kernel panic - not syncing: panic_on_warn set ... [ 80.745769][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0 [ 80.753785][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.763828][ T0] Call Trace: [ 80.767114][ T0] dump_stack+0x11d/0x181 [ 80.771434][ T0] panic+0x210/0x640 [ 80.775332][ T0] ? vprintk_func+0x8d/0x140 [ 80.779974][ T0] kcsan_report.cold+0xc/0x15 [ 80.784651][ T0] kcsan_setup_watchpoint+0x2e2/0x380 [ 80.790023][ T0] __tsan_read4+0xc6/0x100 [ 80.794431][ T0] tick_nohz_idle_stop_tick+0x193/0x670 [ 80.800035][ T0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.806461][ T0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.812749][ T0] do_idle+0x1b8/0x290 [ 80.816811][ T0] ? debug_smp_processor_id+0x43/0x137 [ 80.822403][ T0] cpu_startup_entry+0x1b/0x20 [ 80.827170][ T0] rest_init+0xec/0xf6 [ 80.831241][ T0] ? trace_event_define_fields_vector_free_moved+0xb4/0xb4 [ 80.838645][ T0] arch_call_rest_init+0x17/0x37 [ 80.843582][ T0] start_kernel+0x838/0x85e [ 80.848222][ T0] x86_64_start_reservations+0x29/0x2b [ 80.853668][ T0] x86_64_start_kernel+0x72/0x76 [ 80.858709][ T0] secondary_startup_64+0xa4/0xb0 [ 80.865270][ T0] Kernel Offset: disabled [ 80.869603][ T0] Rebooting in 86400 seconds..