[ 58.566423][ T27] audit: type=1800 audit(1585307996.069:22): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 58.603778][ T27] audit: type=1800 audit(1585307996.079:23): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 58.635487][ T27] audit: type=1800 audit(1585307996.079:24): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2020/03/27 11:20:07 fuzzer started 2020/03/27 11:20:08 dialing manager at 10.128.0.105:39433 2020/03/27 11:20:24 syscalls: 2955 2020/03/27 11:20:24 code coverage: enabled 2020/03/27 11:20:24 comparison tracing: enabled 2020/03/27 11:20:24 extra coverage: enabled 2020/03/27 11:20:24 setuid sandbox: enabled 2020/03/27 11:20:24 namespace sandbox: enabled 2020/03/27 11:20:24 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/27 11:20:24 fault injection: enabled 2020/03/27 11:20:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/27 11:20:24 net packet injection: enabled 2020/03/27 11:20:24 net device setup: enabled 2020/03/27 11:20:24 concurrency sanitizer: enabled 2020/03/27 11:20:24 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 87.636761][ T7811] KCSAN: could not find function: '_find_next_bit' [ 89.100636][ T7811] KCSAN: could not find function: 'poll_schedule_timeout' 2020/03/27 11:20:28 adding functions to KCSAN blacklist: '_find_next_bit' 'xas_clear_mark' 'ext4_has_free_clusters' 'generic_write_end' 'mod_timer' 'echo_char' 'do_syslog' 'blk_mq_get_request' 'tick_nohz_idle_stop_tick' 'poll_schedule_timeout' 'wbt_done' 'kauditd_thread' 'tick_sched_do_timer' 'shmem_getpage_gfp' 'add_timer' '__mark_inode_dirty' 'ep_poll' 'kcm_rfree' 'lruvec_lru_size' 'atime_needs_update' 'ext4_mark_iloc_dirty' 'blk_mq_dispatch_rq_list' 'do_signal_stop' 'audit_log_start' 'generic_fillattr' 'n_tty_receive_buf_common' '__ext4_new_inode' 'wbt_wait' 'run_timer_softirq' 'ext4_free_inodes_count' 'alloc_pid' [ 167.945170][ C0] ================================================================== [ 167.953301][ C0] BUG: KCSAN: data-race in timer_clear_idle / trigger_dyntick_cpu.isra.0 [ 167.961686][ C0] [ 167.964004][ C0] write to 0xffff88812c11dbe4 of 1 bytes by task 0 on cpu 1: [ 167.971355][ C0] timer_clear_idle+0x3d/0x50 [ 167.976011][ C0] __tick_nohz_idle_restart_tick+0x32/0x1a0 [ 167.981881][ C0] tick_nohz_idle_exit+0x19c/0x1d0 [ 167.986992][ C0] do_idle+0xac/0x290 [ 167.990972][ C0] cpu_startup_entry+0x14/0x20 [ 167.995722][ C0] start_secondary+0x164/0x1b0 [ 168.000467][ C0] secondary_startup_64+0xa4/0xb0 [ 168.005461][ C0] [ 168.007772][ C0] read to 0xffff88812c11dbe4 of 1 bytes by interrupt on cpu 0: [ 168.015308][ C0] trigger_dyntick_cpu.isra.0+0x6d/0xf0 [ 168.020842][ C0] mod_timer+0x50e/0x830 [ 168.025068][ C0] sk_reset_timer+0x29/0xc0 [ 168.029575][ C0] tcp_send_delayed_ack+0x1fd/0x280 [ 168.034766][ C0] __tcp_ack_snd_check+0x3bb/0x550 [ 168.039859][ C0] tcp_rcv_established+0x72b/0xee0 [ 168.044950][ C0] tcp_v4_do_rcv+0x396/0x4f0 [ 168.049531][ C0] tcp_v4_rcv+0x1bbf/0x1d80 [ 168.054111][ C0] ip_protocol_deliver_rcu+0x4b/0x410 [ 168.059463][ C0] ip_local_deliver_finish+0xf3/0x120 [ 168.064816][ C0] ip_local_deliver+0x135/0x220 [ 168.069648][ C0] ip_sublist_rcv_finish+0xf0/0x140 [ 168.074828][ C0] ip_sublist_rcv+0x3f8/0x530 [ 168.079484][ C0] ip_list_rcv+0x2f3/0x321 [ 168.083895][ C0] __netif_receive_skb_list_core+0x368/0x5c0 [ 168.089854][ C0] netif_receive_skb_list_internal+0x5c7/0x810 [ 168.095996][ C0] gro_normal_list.part.0+0x37/0xa0 [ 168.101183][ C0] gro_normal_one+0x14c/0x160 [ 168.105851][ C0] napi_gro_receive+0x27d/0x2f0 [ 168.110688][ C0] receive_buf+0x24e/0x2e20 [ 168.115169][ C0] virtnet_poll+0x343/0x790 [ 168.119691][ C0] net_rx_action+0x3ad/0xac0 [ 168.124265][ C0] __do_softirq+0x118/0x34a [ 168.128756][ C0] irq_exit+0xb5/0xd0 [ 168.132725][ C0] do_IRQ+0x7b/0x120 [ 168.136605][ C0] ret_from_intr+0x0/0x21 [ 168.140913][ C0] native_safe_halt+0xe/0x10 [ 168.145495][ C0] default_idle+0x21/0x170 [ 168.149892][ C0] do_idle+0x1b7/0x290 [ 168.153942][ C0] cpu_startup_entry+0x14/0x20 [ 168.158688][ C0] rest_init+0xe4/0xeb [ 168.162741][ C0] arch_call_rest_init+0x13/0x2b [ 168.167664][ C0] start_kernel+0xcc2/0xceb [ 168.172151][ C0] secondary_startup_64+0xa4/0xb0 [ 168.177276][ C0] [ 168.179581][ C0] Reported by Kernel Concurrency Sanitizer on: [ 168.185762][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.6.0-rc1-syzkaller #0 [ 168.193628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.203667][ C0] ================================================================== [ 168.211715][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 168.218297][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.6.0-rc1-syzkaller #0 [ 168.226172][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.236206][ C0] Call Trace: [ 168.239466][ C0] [ 168.243442][ C0] dump_stack+0x11d/0x187 [ 168.247798][ C0] panic+0x210/0x640 [ 168.251680][ C0] ? vprintk_func+0x89/0x13a [ 168.256257][ C0] kcsan_report.cold+0xc/0xf [ 168.260848][ C0] kcsan_setup_watchpoint+0x3fb/0x440 [ 168.266254][ C0] trigger_dyntick_cpu.isra.0+0x6d/0xf0 [ 168.271785][ C0] mod_timer+0x50e/0x830 [ 168.276022][ C0] sk_reset_timer+0x29/0xc0 [ 168.280512][ C0] tcp_send_delayed_ack+0x1fd/0x280 [ 168.285735][ C0] __tcp_ack_snd_check+0x3bb/0x550 [ 168.290826][ C0] ? constant_test_bit+0xd/0x30 [ 168.295744][ C0] tcp_rcv_established+0x72b/0xee0 [ 168.300845][ C0] tcp_v4_do_rcv+0x396/0x4f0 [ 168.305415][ C0] tcp_v4_rcv+0x1bbf/0x1d80 [ 168.309909][ C0] ip_protocol_deliver_rcu+0x4b/0x410 [ 168.315307][ C0] ip_local_deliver_finish+0xf3/0x120 [ 168.320663][ C0] ip_local_deliver+0x135/0x220 [ 168.325498][ C0] ? ip_protocol_deliver_rcu+0x410/0x410 [ 168.331113][ C0] ip_sublist_rcv_finish+0xf0/0x140 [ 168.336295][ C0] ip_sublist_rcv+0x3f8/0x530 [ 168.340956][ C0] ? ip_sublist_rcv+0x530/0x530 [ 168.345792][ C0] ip_list_rcv+0x2f3/0x321 [ 168.350190][ C0] ? ip_rcv+0x1b0/0x1b0 [ 168.354347][ C0] __netif_receive_skb_list_core+0x368/0x5c0 [ 168.360450][ C0] ? ktime_get_with_offset+0x1e6/0x230 [ 168.365898][ C0] netif_receive_skb_list_internal+0x5c7/0x810 [ 168.372043][ C0] gro_normal_list.part.0+0x37/0xa0 [ 168.377226][ C0] ? __write_once_size+0x7c/0x100 [ 168.382236][ C0] gro_normal_one+0x14c/0x160 [ 168.386911][ C0] napi_gro_receive+0x27d/0x2f0 [ 168.391744][ C0] receive_buf+0x24e/0x2e20 [ 168.396245][ C0] ? virtqueue_get_buf_ctx+0x4db/0x5c0 [ 168.401684][ C0] virtnet_poll+0x343/0x790 [ 168.406175][ C0] net_rx_action+0x3ad/0xac0 [ 168.410752][ C0] __do_softirq+0x118/0x34a [ 168.415248][ C0] irq_exit+0xb5/0xd0 [ 168.419211][ C0] do_IRQ+0x7b/0x120 [ 168.423095][ C0] common_interrupt+0xf/0xf [ 168.427577][ C0] [ 168.430498][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 168.435858][ C0] Code: ff cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d fc f8 43 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d ec f8 43 00 fb f4 cc 41 54 55 53 e8 37 fc 9a fc e8 12 ae b3 fd 0f 1f 44 00 00 48 [ 168.455441][ C0] RSP: 0018:ffffffff85a03e50 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffda [ 168.463839][ C0] RAX: 0000000000000000 RBX: ffffffff85a2b840 RCX: ffffffff82522f51 [ 168.471800][ C0] RDX: 0000000000000000 RSI: ffffffff82522f5a RDI: 0000000000000005 [ 168.479765][ C0] RBP: 0000000000000000 R08: ffffffff85a2b840 R09: 0000ffff8584b160 [ 168.488061][ C0] R10: 0000ffff85a03e38 R11: 0000ffff8584b167 R12: ffffffff85a2b840 [ 168.496024][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85a2b840 [ 168.504002][ C0] ? debug_smp_processor_id+0x31/0x129 [ 168.509448][ C0] ? debug_smp_processor_id+0x3a/0x129 [ 168.514897][ C0] default_idle+0x21/0x170 [ 168.519401][ C0] do_idle+0x1b7/0x290 [ 168.523460][ C0] ? debug_smp_processor_id+0x3f/0x129 [ 168.528910][ C0] cpu_startup_entry+0x14/0x20 [ 168.533707][ C0] rest_init+0xe4/0xeb [ 168.537804][ C0] arch_call_rest_init+0x13/0x2b [ 168.542740][ C0] start_kernel+0xcc2/0xceb [ 168.547262][ C0] secondary_startup_64+0xa4/0xb0 [ 168.553506][ C0] Kernel Offset: disabled [ 168.557829][ C0] Rebooting in 86400 seconds..