[info] Using makefile-style concurrent boot in runlevel 2. [ 43.297581][ T26] audit: type=1800 audit(1574843408.505:21): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 43.347989][ T26] audit: type=1800 audit(1574843408.505:22): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. 2019/11/27 08:30:20 fuzzer started 2019/11/27 08:30:21 dialing manager at 10.128.0.105:46511 2019/11/27 08:30:22 syscalls: 2566 2019/11/27 08:30:22 code coverage: enabled 2019/11/27 08:30:22 comparison tracing: enabled 2019/11/27 08:30:22 extra coverage: extra coverage is not supported by the kernel 2019/11/27 08:30:22 setuid sandbox: enabled 2019/11/27 08:30:22 namespace sandbox: enabled 2019/11/27 08:30:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/27 08:30:22 fault injection: enabled 2019/11/27 08:30:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/27 08:30:22 net packet injection: enabled 2019/11/27 08:30:22 net device setup: enabled 2019/11/27 08:30:22 concurrency sanitizer: enabled 2019/11/27 08:30:22 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 59.577532][ T7723] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/27 08:30:35 adding functions to KCSAN blacklist: 'wbt_wait' 'inactive_list_is_low' '__hrtimer_run_queues' 'find_next_bit' '__ext4_new_inode' 'generic_fillattr' 'pipe_poll' 'do_signal_stop' '__dentry_kill' 'vti_tunnel_xmit' 'mem_cgroup_select_victim_node' 'ext4_mb_good_group' 'tcp_add_backlog' 'find_get_pages_range_tag' 'poll_schedule_timeout' 'page_counter_try_charge' 'lruvec_lru_size' 'tick_nohz_idle_stop_tick' 'blk_mq_sched_dispatch_requests' '__mark_inode_dirty' 'ext4_has_free_clusters' 'blk_mq_run_hw_queue' 'n_tty_receive_buf_common' '__writeback_single_inode' 'do_syslog' '__filemap_fdatawrite_range' 'mod_timer' 'commit_echoes' 'do_exit' '__find_get_block' '__delete_from_page_cache' 'list_lru_count_one' 'shmem_add_to_page_cache' 'tomoyo_supervisor' 'echo_char' 'alloc_pid' 'do_readlinkat' 'rcu_gp_fqs_loop' 'tomoyo_domain_quota_is_ok' 'rcu_gp_fqs_check_wake' 'blk_mq_get_request' 'xas_find_marked' 'wbt_done' 'snd_seq_prioq_cell_out' 'balance_dirty_pages' 'pcpu_alloc' '__acct_update_integrals' 'add_timer' '__splice_from_pipe' 'vm_area_dup' 'ktime_get_real_seconds' 'p9_poll_workfn' 'hrtimer_wakeup' 'blk_mq_dispatch_rq_list' 'wbt_issue' 'audit_log_start' 'kauditd_thread' 'snd_rawmidi_poll' 'sit_tunnel_xmit' 'tick_sched_do_timer' 'pid_update_inode' 'ext4_mark_iloc_dirty' 'virtqueue_enable_cb_delayed' 'ext4_free_inode' 'd_delete' 'blk_mq_free_request' 'fasync_remove_entry' 'ep_poll' 'ext4_free_inodes_count' 'dd_has_work' 'pipe_wait' 'copy_process' 'dput' 'generic_write_end' 'bio_endio' 'l2tp_tunnel_del_work' 'run_timer_softirq' '__skb_try_recv_from_queue' 'tick_do_update_jiffies64' '__rcu_read_unlock' 'timer_clear_idle' '__snd_rawmidi_transmit_ack' 'process_srcu' 'snd_seq_timer_get_cur_tick' 'ext4_nonda_switch' 'taskstats_exit' 'do_nanosleep' 'sbitmap_queue_clear' 'do_wait' 'futex_wait_queue_me' [ 313.233437][ C1] ================================================================== [ 313.241578][ C1] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_get_buf_ctx [ 313.249970][ C1] [ 313.252290][ C1] read to 0xffff88812939b670 of 2 bytes by interrupt on cpu 0: [ 313.259823][ C1] virtqueue_get_buf_ctx+0x4da/0x5c0 [ 313.265095][ C1] virtqueue_get_buf+0x29/0x40 [ 313.269847][ C1] free_old_xmit_skbs+0x9e/0x170 [ 313.274776][ C1] start_xmit+0xd3/0xbe0 [ 313.279021][ C1] dev_hard_start_xmit+0xef/0x430 [ 313.284039][ C1] sch_direct_xmit+0x2b3/0x900 [ 313.288788][ C1] __dev_queue_xmit+0x19a3/0x1b40 [ 313.293802][ C1] dev_queue_xmit+0x21/0x30 [ 313.298313][ C1] ip_finish_output2+0x836/0xe40 [ 313.303246][ C1] __ip_finish_output+0x23a/0x490 [ 313.308284][ C1] ip_finish_output+0x41/0x160 [ 313.313043][ C1] ip_output+0xdf/0x210 [ 313.317199][ C1] ip_local_out+0x74/0x90 [ 313.322307][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 313.327072][ C1] ip_queue_xmit+0x45/0x60 [ 313.331582][ C1] __tcp_transmit_skb+0xe81/0x1d60 [ 313.336795][ C1] __tcp_send_ack+0x246/0x300 [ 313.341456][ C1] tcp_send_ack+0x34/0x40 [ 313.345776][ C1] __tcp_ack_snd_check+0xd9/0x4f0 [ 313.350816][ C1] tcp_rcv_established+0xce9/0xf50 [ 313.355924][ C1] tcp_v4_do_rcv+0x3b5/0x520 [ 313.360509][ C1] tcp_v4_rcv+0x19ec/0x1bd0 [ 313.365001][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 313.370365][ C1] ip_local_deliver_finish+0x110/0x140 [ 313.375822][ C1] ip_local_deliver+0x133/0x210 [ 313.380661][ C1] ip_rcv_finish+0x121/0x160 [ 313.385233][ C1] ip_rcv+0x18f/0x1a0 [ 313.389214][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 313.394921][ C1] __netif_receive_skb+0x37/0xf0 [ 313.399843][ C1] netif_receive_skb_internal+0x59/0x190 [ 313.405457][ C1] napi_gro_receive+0x28f/0x330 [ 313.410299][ C1] receive_buf+0x284/0x30b0 [ 313.414803][ C1] virtnet_poll+0x436/0x7d0 [ 313.419303][ C1] net_rx_action+0x3ae/0xa90 [ 313.423915][ C1] __do_softirq+0x115/0x33f [ 313.428491][ C1] irq_exit+0xbb/0xe0 [ 313.432468][ C1] do_IRQ+0x81/0x130 [ 313.436381][ C1] ret_from_intr+0x0/0x19 [ 313.440710][ C1] native_safe_halt+0xe/0x10 [ 313.445293][ C1] arch_cpu_idle+0xa/0x10 [ 313.449825][ C1] default_idle_call+0x1e/0x40 [ 313.454577][ C1] do_idle+0x1af/0x280 [ 313.458649][ C1] cpu_startup_entry+0x1b/0x20 [ 313.463407][ C1] rest_init+0xec/0xf6 [ 313.467475][ C1] arch_call_rest_init+0x17/0x37 [ 313.472406][ C1] start_kernel+0x838/0x85e [ 313.476903][ C1] x86_64_start_reservations+0x29/0x2b [ 313.482349][ C1] x86_64_start_kernel+0x72/0x76 [ 313.487275][ C1] secondary_startup_64+0xa4/0xb0 [ 313.492295][ C1] [ 313.494618][ C1] write to 0xffff88812939b670 of 2 bytes by interrupt on cpu 1: [ 313.502238][ C1] virtqueue_disable_cb+0xe9/0x130 [ 313.507337][ C1] skb_xmit_done+0x6a/0x110 [ 313.511831][ C1] vring_interrupt+0x1a1/0x1c0 [ 313.516615][ C1] __handle_irq_event_percpu+0x9a/0x430 [ 313.522181][ C1] handle_irq_event_percpu+0x4b/0xe0 [ 313.527464][ C1] handle_irq_event+0x85/0xca [ 313.532134][ C1] handle_edge_irq+0x1a4/0x4a0 [ 313.536904][ C1] do_IRQ+0x7c/0x130 [ 313.540782][ C1] ret_from_intr+0x0/0x19 [ 313.545183][ C1] native_safe_halt+0xe/0x10 [ 313.549765][ C1] arch_cpu_idle+0xa/0x10 [ 313.554078][ C1] default_idle_call+0x1e/0x40 [ 313.559172][ C1] do_idle+0x1af/0x280 [ 313.563226][ C1] cpu_startup_entry+0x1b/0x20 [ 313.568003][ C1] start_secondary+0x168/0x1b0 [ 313.572753][ C1] secondary_startup_64+0xa4/0xb0 [ 313.577746][ C1] [ 313.580076][ C1] Reported by Kernel Concurrency Sanitizer on: [ 313.586218][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-syzkaller #0 [ 313.593757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.603833][ C1] ================================================================== [ 313.611909][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 313.618498][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-syzkaller #0 [ 313.626024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.636063][ C1] Call Trace: [ 313.639339][ C1] [ 313.642195][ C1] dump_stack+0x11d/0x181 [ 313.646531][ C1] panic+0x210/0x640 [ 313.650419][ C1] ? vprintk_func+0x8d/0x140 [ 313.655024][ C1] kcsan_report.cold+0xc/0xd [ 313.659609][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 313.664984][ C1] __tsan_unaligned_write2+0xc4/0x100 [ 313.670348][ C1] virtqueue_disable_cb+0xe9/0x130 [ 313.675447][ C1] skb_xmit_done+0x6a/0x110 [ 313.679944][ C1] ? virtnet_poll_tx+0x1d0/0x1d0 [ 313.684869][ C1] vring_interrupt+0x1a1/0x1c0 [ 313.689621][ C1] ? virtqueue_enable_cb+0x40/0x40 [ 313.694723][ C1] __handle_irq_event_percpu+0x9a/0x430 [ 313.700297][ C1] handle_irq_event_percpu+0x4b/0xe0 [ 313.705596][ C1] handle_irq_event+0x85/0xca [ 313.710292][ C1] handle_edge_irq+0x1a4/0x4a0 [ 313.715043][ C1] do_IRQ+0x7c/0x130 [ 313.718991][ C1] common_interrupt+0xf/0xf [ 313.723522][ C1] [ 313.726453][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 313.731857][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 7c ad 48 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 6c ad 48 00 fb f4 90 55 48 89 e5 41 55 41 54 53 e8 42 6d 9f fc e8 bd 1a b5 fd 0f [ 313.751465][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9 [ 313.759884][ C1] RAX: 0000000000000001 RBX: ffff88812b38b0c0 RCX: ffffffff824ee349 [ 313.767862][ C1] RDX: 0000000000000000 RSI: ffffffff824ee357 RDI: 0000000000000005 [ 313.775829][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b38b0c0 R09: 0000ffff857d2168 [ 313.783814][ C1] R10: 0000000000000000 R11: 0000ffff857d216f R12: 0000000000000001 [ 313.791776][ C1] R13: ffff88812b38b0c0 R14: 0000000000000000 R15: 0000000000000000 [ 313.799759][ C1] ? debug_smp_processor_id+0x39/0x172 [ 313.805220][ C1] ? debug_smp_processor_id+0x47/0x172 [ 313.810677][ C1] ? default_idle+0x26/0x180 [ 313.815275][ C1] arch_cpu_idle+0xa/0x10 [ 313.819610][ C1] default_idle_call+0x1e/0x40 [ 313.824380][ C1] do_idle+0x1af/0x280 [ 313.828462][ C1] ? debug_smp_processor_id+0x47/0x172 [ 313.833929][ C1] cpu_startup_entry+0x1b/0x20 [ 313.838707][ C1] start_secondary+0x168/0x1b0 [ 313.843452][ C1] secondary_startup_64+0xa4/0xb0 [ 313.849869][ C1] Kernel Offset: disabled [ 313.854206][ C1] Rebooting in 86400 seconds..