[info] Using makefile-style concurrent boot in runlevel 2. [ 52.090980][ T27] audit: type=1800 audit(1578774363.872:21): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 52.132728][ T27] audit: type=1800 audit(1578774363.882:22): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. 2020/01/11 20:26:12 fuzzer started 2020/01/11 20:26:14 dialing manager at 10.128.0.105:37275 2020/01/11 20:26:14 syscalls: 2812 2020/01/11 20:26:14 code coverage: enabled 2020/01/11 20:26:14 comparison tracing: enabled 2020/01/11 20:26:14 extra coverage: enabled 2020/01/11 20:26:14 setuid sandbox: enabled 2020/01/11 20:26:14 namespace sandbox: enabled 2020/01/11 20:26:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/11 20:26:14 fault injection: enabled 2020/01/11 20:26:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/11 20:26:14 net packet injection: enabled 2020/01/11 20:26:14 net device setup: enabled 2020/01/11 20:26:14 concurrency sanitizer: enabled 2020/01/11 20:26:14 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 67.572331][ T7986] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/11 20:26:28 adding functions to KCSAN blacklist: 'page_counter_charge' 'do_mpage_readpage' 'do_readlinkat' 'blk_mq_run_hw_queue' 'snd_seq_check_queue' 'ext4_mark_iloc_dirty' 'unix_release_sock' 'ktime_get_real_seconds' 'do_signal_stop' 'blk_stat_add' '__delete_from_page_cache' '__rb_insert_augmented' 'xas_clear_mark' 'find_next_bit' 'taskstats_exit' '__fsnotify_parent' 'do_try_to_free_pages' 'ext4_free_inodes_count' 'ext4_setattr' 'file_update_time' 'atime_needs_update' 'iput' 'lruvec_lru_size' 'inode_sync_complete' 'shmem_add_to_page_cache' 'tick_nohz_idle_stop_tick' 'ext4_nonda_switch' 'poll_schedule_timeout' '__lru_cache_add' 'shmem_file_read_iter' 'futex_wait_queue_me' 'watchdog' 'common_perm_cond' 'dd_has_work' 'pid_update_inode' 'copy_process' 'fasync_remove_entry' '__snd_rawmidi_transmit_ack' 'activate_page' 'mm_update_next_owner' 'run_timer_softirq' 'generic_write_end' '__rb_rotate_set_parents' 'do_syslog' 'blk_mq_free_request' '__find_get_block' 'commit_echoes' 'kernfs_refresh_inode' 'find_get_pages_range_tag' 'mod_timer' 'rcu_gp_fqs_loop' 'tick_sched_do_timer' 'do_exit' 'pipe_wait' 'lookup_fast' '__add_to_page_cache_locked' '__writeback_single_inode' 'blk_mq_sched_dispatch_requests' 'queue_access_lock' 'add_timer' 'iptunnel_xmit' 'ep_poll' 'ext4_free_inode' 'ext4_has_free_clusters' 'echo_char' 'evict' 'find_group_orlov' 'wbt_done' 'audit_log_start' 'generic_fillattr' 'generic_permission' 'pcpu_alloc' 'process_srcu' 'ext4_da_write_end' 'file_remove_privs' 'wbc_detach_inode' 'iomap_dio_bio_actor' 'do_nanosleep' '__mark_inode_dirty' 'n_tty_receive_buf_common' 'timer_clear_idle' 'blk_mq_dispatch_rq_list' 'rcu_gp_fqs_check_wake' '__dentry_kill' '__dev_queue_xmit' 'wbt_issue' 'vm_area_dup' 'pipe_double_lock' 'ext4_mb_good_group' '__d_instantiate' 'ext4_sync_file' 'enqueue_timer' 'tick_do_update_jiffies64' 'tomoyo_supervisor' '__ext4_new_inode' 'kauditd_thread' '__hrtimer_run_queues' 'blk_mq_get_request' 'page_counter_try_charge' 'xas_find_marked' [ 253.585936][ C1] ================================================================== [ 253.594097][ C1] BUG: KCSAN: data-race in virtqueue_enable_cb_delayed / virtqueue_enable_cb_prepare [ 253.603628][ C1] [ 253.606054][ C1] read to 0xffff8881292148b0 of 2 bytes by interrupt on cpu 0: [ 253.614299][ C1] virtqueue_enable_cb_delayed+0x1dc/0x4d0 [ 253.620120][ C1] start_xmit+0xb0f/0xbe0 [ 253.624448][ C1] dev_hard_start_xmit+0xef/0x430 [ 253.629467][ C1] sch_direct_xmit+0x2b3/0x900 [ 253.634267][ C1] __dev_queue_xmit+0x13e2/0x1ba0 [ 253.639300][ C1] dev_queue_xmit+0x21/0x30 [ 253.643805][ C1] ip_finish_output2+0x89b/0xea0 [ 253.648753][ C1] __ip_finish_output+0x23a/0x490 [ 253.653781][ C1] ip_finish_output+0x41/0x160 [ 253.658628][ C1] ip_output+0xfe/0x230 [ 253.662809][ C1] ip_local_out+0x74/0x90 [ 253.667138][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 253.671911][ C1] ip_queue_xmit+0x45/0x60 [ 253.676340][ C1] __tcp_transmit_skb+0xea3/0x1df0 [ 253.681454][ C1] __tcp_send_ack+0x246/0x300 [ 253.686143][ C1] tcp_send_ack+0x34/0x40 [ 253.690483][ C1] __tcp_ack_snd_check+0xd9/0x580 [ 253.695545][ C1] tcp_rcv_established+0xce9/0xf50 [ 253.700659][ C1] tcp_v4_do_rcv+0x3b5/0x520 [ 253.705235][ C1] tcp_v4_rcv+0x1b2a/0x1d20 [ 253.709730][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 253.715180][ C1] ip_local_deliver_finish+0x110/0x140 [ 253.720661][ C1] ip_local_deliver+0x133/0x210 [ 253.725539][ C1] ip_sublist_rcv_finish+0xf8/0x140 [ 253.730738][ C1] ip_sublist_rcv+0x418/0x550 [ 253.735415][ C1] ip_list_rcv+0x2f5/0x322 [ 253.739827][ C1] __netif_receive_skb_list_core+0x350/0x5c0 [ 253.745811][ C1] netif_receive_skb_list_internal+0x5d8/0x830 [ 253.751962][ C1] gro_normal_list.part.0+0x3a/0xb0 [ 253.757165][ C1] gro_normal_one+0x162/0x170 [ 253.762059][ C1] napi_gro_receive+0x288/0x300 [ 253.767885][ C1] receive_buf+0x284/0x30b0 [ 253.772399][ C1] virtnet_poll+0x436/0x7d0 [ 253.776903][ C1] net_rx_action+0x3ae/0xa90 [ 253.781571][ C1] __do_softirq+0x115/0x33f [ 253.786081][ C1] irq_exit+0xbb/0xe0 [ 253.790058][ C1] do_IRQ+0x81/0x130 [ 253.793943][ C1] ret_from_intr+0x0/0x21 [ 253.798259][ C1] native_safe_halt+0xe/0x10 [ 253.803050][ C1] arch_cpu_idle+0xa/0x10 [ 253.807400][ C1] default_idle_call+0x1e/0x40 [ 253.812247][ C1] do_idle+0x1c2/0x290 [ 253.816306][ C1] cpu_startup_entry+0x1b/0x20 [ 253.821064][ C1] rest_init+0xec/0xf6 [ 253.825143][ C1] arch_call_rest_init+0x17/0x37 [ 253.830086][ C1] start_kernel+0x838/0x85e [ 253.834604][ C1] x86_64_start_reservations+0x29/0x2b [ 253.840150][ C1] x86_64_start_kernel+0x72/0x76 [ 253.845298][ C1] secondary_startup_64+0xa4/0xb0 [ 253.851290][ C1] [ 253.853616][ C1] write to 0xffff8881292148b0 of 2 bytes by interrupt on cpu 1: [ 253.861256][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0 [ 253.867062][ C1] virtqueue_napi_complete+0x2c/0xa0 [ 253.872351][ C1] virtnet_poll_tx+0x15f/0x1d0 [ 253.877106][ C1] net_rx_action+0x3ae/0xa90 [ 253.881685][ C1] __do_softirq+0x115/0x33f [ 253.886184][ C1] irq_exit+0xbb/0xe0 [ 253.890174][ C1] do_IRQ+0x81/0x130 [ 253.894075][ C1] ret_from_intr+0x0/0x21 [ 253.898407][ C1] native_safe_halt+0xe/0x10 [ 253.902988][ C1] arch_cpu_idle+0xa/0x10 [ 253.907306][ C1] default_idle_call+0x1e/0x40 [ 253.912068][ C1] do_idle+0x1c2/0x290 [ 253.916129][ C1] cpu_startup_entry+0x1b/0x20 [ 253.920885][ C1] start_secondary+0x168/0x1b0 [ 253.925655][ C1] secondary_startup_64+0xa4/0xb0 [ 253.930661][ C1] [ 253.933001][ C1] Reported by Kernel Concurrency Sanitizer on: [ 253.939155][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0 [ 253.947061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.957112][ C1] ================================================================== [ 253.965179][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 253.971776][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0 [ 253.979674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.989719][ C1] Call Trace: [ 253.992996][ C1] [ 253.995849][ C1] dump_stack+0x11d/0x181 [ 254.000419][ C1] panic+0x210/0x640 [ 254.004313][ C1] ? vprintk_func+0x8d/0x140 [ 254.008903][ C1] kcsan_report.cold+0xc/0xd [ 254.013611][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 254.019692][ C1] __tsan_unaligned_write2+0xc7/0x110 [ 254.025075][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0 [ 254.030986][ C1] virtqueue_napi_complete+0x2c/0xa0 [ 254.036268][ C1] virtnet_poll_tx+0x15f/0x1d0 [ 254.041029][ C1] net_rx_action+0x3ae/0xa90 [ 254.045623][ C1] __do_softirq+0x115/0x33f [ 254.050137][ C1] irq_exit+0xbb/0xe0 [ 254.054139][ C1] do_IRQ+0x81/0x130 [ 254.058056][ C1] common_interrupt+0xf/0xf [ 254.062558][ C1] [ 254.065499][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 254.070874][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c e6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c e6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 d2 57 91 fc e8 fd da ab fd 0f [ 254.090997][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9 [ 254.099424][ C1] RAX: 0000000000000001 RBX: ffff88812b785040 RCX: ffffffff82546c55 [ 254.107403][ C1] RDX: 0000000000000000 RSI: ffffffff82546c5e RDI: 0000000000000005 [ 254.115382][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b785040 R09: 0000ffff85a2d168 [ 254.123352][ C1] R10: 0000c90000cd3e80 R11: 0000ffff85a2d16f R12: 0000000000000001 [ 254.131800][ C1] R13: ffff88812b785040 R14: 0000000000000000 R15: 0000000000000000 [ 254.139788][ C1] ? debug_smp_processor_id+0x35/0x137 [ 254.145246][ C1] ? debug_smp_processor_id+0x3e/0x137 [ 254.150692][ C1] ? default_idle+0x26/0x180 [ 254.155289][ C1] arch_cpu_idle+0xa/0x10 [ 254.159632][ C1] default_idle_call+0x1e/0x40 [ 254.164395][ C1] do_idle+0x1c2/0x290 [ 254.168457][ C1] ? debug_smp_processor_id+0x3e/0x137 [ 254.173946][ C1] cpu_startup_entry+0x1b/0x20 [ 254.178738][ C1] start_secondary+0x168/0x1b0 [ 254.183514][ C1] secondary_startup_64+0xa4/0xb0 [ 254.189988][ C1] Kernel Offset: disabled [ 254.194318][ C1] Rebooting in 86400 seconds..