[info] Using makefile-style concurrent boot in runlevel 2. [ 46.635424][ T27] audit: type=1800 audit(1577110589.772:21): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 46.676902][ T27] audit: type=1800 audit(1577110589.772:22): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts. 2019/12/23 14:16:42 fuzzer started 2019/12/23 14:16:43 dialing manager at 10.128.0.105:38197 2019/12/23 14:16:52 syscalls: 2692 2019/12/23 14:16:52 code coverage: enabled 2019/12/23 14:16:52 comparison tracing: enabled 2019/12/23 14:16:52 extra coverage: enabled 2019/12/23 14:16:52 setuid sandbox: enabled 2019/12/23 14:16:52 namespace sandbox: enabled 2019/12/23 14:16:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/23 14:16:52 fault injection: enabled 2019/12/23 14:16:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/23 14:16:52 net packet injection: enabled 2019/12/23 14:16:52 net device setup: enabled 2019/12/23 14:16:52 concurrency sanitizer: enabled 2019/12/23 14:16:52 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 80.084853][ T7892] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/23 14:17:04 adding functions to KCSAN blacklist: 'add_timer' 'file_update_time' 'd_instantiate_new' 'pid_update_inode' '__mark_inode_dirty' 'blk_mq_get_request' 'process_srcu' 'page_counter_try_charge' 'do_nanosleep' 'xas_clear_mark' 'tick_do_update_jiffies64' '__dentry_kill' 'blk_stat_add' 'generic_fillattr' 'ext4_free_inodes_count' 'lruvec_lru_size' 'do_syslog' 'tick_sched_do_timer' 'alloc_empty_file' 'ext4_free_inode' 'blk_mq_sched_dispatch_requests' 'echo_char' 'do_signal_stop' 'kauditd_thread' 'mod_timer' 'generic_write_end' 'pcpu_alloc' '__rb_insert_augmented' 'tomoyo_supervisor' 'queue_access_lock' 'wbt_issue' 'audit_log_start' '__rb_rotate_set_parents' 'tick_nohz_idle_stop_tick' 'sit_tunnel_xmit' 'hsr_register_frame_out' 'wbt_done' 'do_exit' 'run_timer_softirq' 'taskstats_exit' '__ext4_new_inode' 'ext4_nonda_switch' 'mm_update_next_owner' 'kcm_rcv_strparser' 'find_get_pages_range_tag' 'rcu_gp_fqs_check_wake' '__rb_erase_color' 'ext4_mb_good_group' 'ext4_has_free_clusters' 'copy_process' 'ext4_mb_find_by_goal' 'fsnotify' 'timer_clear_idle' 'ktime_get_real_seconds' '__snd_rawmidi_transmit_ack' 'evict' 'write_cache_pages' 'dd_has_work' 'do_try_to_free_pages' 'ep_poll' 'find_next_bit' 'poll_schedule_timeout' 'blk_mq_run_hw_queue' 'vm_area_dup' 'list_lru_count_one' '__hrtimer_run_queues' 'blk_mq_dispatch_rq_list' 'ext4_mark_iloc_dirty' 'n_tty_receive_buf_common' [ 208.903151][ C1] ================================================================== [ 208.911337][ C1] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_get_buf_ctx [ 208.919644][ C1] [ 208.921968][ C1] read to 0xffff88821aa37c70 of 2 bytes by task 7882 on cpu 0: [ 208.929511][ C1] virtqueue_get_buf_ctx+0x4da/0x5c0 [ 208.934798][ C1] virtqueue_get_buf+0x29/0x40 [ 208.939549][ C1] free_old_xmit_skbs+0x9e/0x170 [ 208.944498][ C1] start_xmit+0xd3/0xbe0 [ 208.948741][ C1] dev_hard_start_xmit+0xef/0x430 [ 208.953859][ C1] sch_direct_xmit+0x2b3/0x900 [ 208.958625][ C1] __dev_queue_xmit+0x13e2/0x1ba0 [ 208.963653][ C1] dev_queue_xmit+0x21/0x30 [ 208.968145][ C1] ip_finish_output2+0x89b/0xea0 [ 208.973083][ C1] __ip_finish_output+0x23a/0x490 [ 208.978122][ C1] ip_finish_output+0x41/0x160 [ 208.982940][ C1] ip_output+0xfe/0x230 [ 208.987087][ C1] ip_local_out+0x74/0x90 [ 208.991417][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 208.996189][ C1] ip_queue_xmit+0x45/0x60 [ 209.000592][ C1] __tcp_transmit_skb+0xea3/0x1df0 [ 209.005750][ C1] __tcp_send_ack+0x246/0x300 [ 209.010440][ C1] tcp_send_ack+0x34/0x40 [ 209.014770][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 209.019667][ C1] tcp_recvmsg+0x687/0x1c90 [ 209.024183][ C1] inet_recvmsg+0xbb/0x250 [ 209.028601][ C1] sock_recvmsg+0x92/0xb0 [ 209.032944][ C1] sock_read_iter+0x15f/0x1e0 [ 209.037619][ C1] new_sync_read+0x4b1/0x4f0 [ 209.042201][ C1] __vfs_read+0xb1/0xc0 [ 209.046355][ C1] vfs_read+0x143/0x2c0 [ 209.050500][ C1] ksys_read+0x17b/0x1b0 [ 209.054740][ C1] __x64_sys_read+0x4c/0x60 [ 209.059258][ C1] do_syscall_64+0xcc/0x3a0 [ 209.063766][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.069638][ C1] [ 209.071961][ C1] write to 0xffff88821aa37c70 of 2 bytes by interrupt on cpu 1: [ 209.079579][ C1] virtqueue_disable_cb+0xe9/0x130 [ 209.084679][ C1] skb_xmit_done+0x6a/0x110 [ 209.089289][ C1] vring_interrupt+0x1a1/0x1c0 [ 209.094062][ C1] __handle_irq_event_percpu+0x9a/0x430 [ 209.099601][ C1] handle_irq_event_percpu+0x4b/0xe0 [ 209.104887][ C1] handle_irq_event+0x85/0xca [ 209.109629][ C1] handle_edge_irq+0x1a4/0x4a0 [ 209.114468][ C1] do_IRQ+0x7c/0x130 [ 209.118354][ C1] ret_from_intr+0x0/0x21 [ 209.122675][ C1] native_safe_halt+0xe/0x10 [ 209.127261][ C1] arch_cpu_idle+0xa/0x10 [ 209.131589][ C1] default_idle_call+0x1e/0x40 [ 209.136349][ C1] do_idle+0x1c2/0x290 [ 209.140530][ C1] cpu_startup_entry+0x1b/0x20 [ 209.145299][ C1] start_secondary+0x168/0x1b0 [ 209.150419][ C1] secondary_startup_64+0xa4/0xb0 [ 209.155437][ C1] [ 209.157757][ C1] Reported by Kernel Concurrency Sanitizer on: [ 209.163994][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0 [ 209.171864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.182031][ C1] ================================================================== [ 209.190095][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 209.196682][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0 [ 209.204553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.214703][ C1] Call Trace: [ 209.217984][ C1] [ 209.220834][ C1] dump_stack+0x11d/0x181 [ 209.225161][ C1] panic+0x210/0x640 [ 209.229053][ C1] ? vprintk_func+0x8d/0x140 [ 209.233639][ C1] kcsan_report.cold+0xc/0xd [ 209.238236][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 209.243687][ C1] __tsan_unaligned_write2+0xc7/0x110 [ 209.249056][ C1] virtqueue_disable_cb+0xe9/0x130 [ 209.254175][ C1] skb_xmit_done+0x6a/0x110 [ 209.258685][ C1] ? virtnet_poll_tx+0x1d0/0x1d0 [ 209.263649][ C1] vring_interrupt+0x1a1/0x1c0 [ 209.268417][ C1] ? virtqueue_enable_cb+0x40/0x40 [ 209.273521][ C1] __handle_irq_event_percpu+0x9a/0x430 [ 209.279072][ C1] handle_irq_event_percpu+0x4b/0xe0 [ 209.284362][ C1] handle_irq_event+0x85/0xca [ 209.289028][ C1] handle_edge_irq+0x1a4/0x4a0 [ 209.293817][ C1] do_IRQ+0x7c/0x130 [ 209.297855][ C1] common_interrupt+0xf/0xf [ 209.302370][ C1] [ 209.305324][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 209.310694][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c b6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c b6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 22 2b 91 fc e8 3d ae ab fd 0f [ 209.330291][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9 [ 209.338717][ C1] RAX: 0000000000000001 RBX: ffff88812b785040 RCX: ffffffff82546f95 [ 209.346687][ C1] RDX: 0000000000000000 RSI: ffffffff82546f9e RDI: 0000000000000005 [ 209.354653][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b785040 R09: 0000ffff85a2f168 [ 209.362647][ C1] R10: 0000c90000cd3e80 R11: 0000ffff85a2f16f R12: 0000000000000001 [ 209.370609][ C1] R13: ffff88812b785040 R14: 0000000000000000 R15: 0000000000000000 [ 209.378600][ C1] ? debug_smp_processor_id+0x35/0x137 [ 209.384067][ C1] ? debug_smp_processor_id+0x3e/0x137 [ 209.389527][ C1] ? default_idle+0x26/0x180 [ 209.394153][ C1] arch_cpu_idle+0xa/0x10 [ 209.398475][ C1] default_idle_call+0x1e/0x40 [ 209.403234][ C1] do_idle+0x1c2/0x290 [ 209.407303][ C1] ? debug_smp_processor_id+0x3e/0x137 [ 209.412763][ C1] cpu_startup_entry+0x1b/0x20 [ 209.417518][ C1] start_secondary+0x168/0x1b0 [ 209.422283][ C1] secondary_startup_64+0xa4/0xb0 [ 209.428719][ C1] Kernel Offset: disabled [ 209.433044][ C1] Rebooting in 86400 seconds..