[ 52.486519][ T26] audit: type=1800 audit(1573181218.613:30): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.68' (ECDSA) to the list of known hosts. 2019/11/08 02:47:08 fuzzer started 2019/11/08 02:47:10 dialing manager at 10.128.0.105:38105 2019/11/08 02:47:10 syscalls: 2553 2019/11/08 02:47:10 code coverage: enabled 2019/11/08 02:47:10 comparison tracing: enabled 2019/11/08 02:47:10 extra coverage: extra coverage is not supported by the kernel 2019/11/08 02:47:10 setuid sandbox: enabled 2019/11/08 02:47:10 namespace sandbox: enabled 2019/11/08 02:47:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/08 02:47:10 fault injection: enabled 2019/11/08 02:47:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/08 02:47:10 net packet injection: enabled 2019/11/08 02:47:10 net device setup: enabled 2019/11/08 02:47:10 concurrency sanitizer: enabled 2019/11/08 02:47:10 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 78.705298][ T8010] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/08 02:47:25 adding functions to KCSAN blacklist: 'kvm_mmu_notifier_invalidate_range_end' '__dev_queue_xmit' 'ext4_free_inode' 'blk_mq_get_request' 'tick_nohz_next_event' '__ext4_new_inode' 'process_srcu' 'mem_cgroup_select_victim_node' 'pipe_wait' 'snapshot_refaults' '__wb_update_bandwidth' 'balance_dirty_pages' 'page_counter_try_charge' 'ext4_has_free_clusters' 'do_exit' '__alloc_file' 'ext4_mb_good_group' 'vm_area_dup' 'rcu_gp_fqs_loop' 'list_lru_count_one' '__mark_inode_dirty' 'fsnotify' 'find_next_bit' 'run_timer_softirq' 'audit_log_start' 'do_syslog' '__perf_event_overflow' 'wbt_issue' 'common_perm_cond' 'pid_update_inode' '__add_to_page_cache_locked' 'snd_seq_check_queue' 'fasync_remove_entry' 'add_timer' 'ktime_get_seconds' '__dentry_kill' 'commit_echoes' 'neigh_resolve_output' 'rq_depth_scale_up' 'ext4_free_inodes_count' 'osq_lock' 'generic_fillattr' 'ep_poll' 'generic_write_end' 'shmem_file_read_iter' 'kauditd_thread' 'blk_mq_sched_dispatch_requests' '__snd_rawmidi_transmit_ack' 'atime_needs_update' 'blk_mq_run_hw_queue' 'blk_stat_add' 'n_tty_receive_buf_common' '__find_get_block' 'shmem_add_to_page_cache' 'exit_signals' 'pipe_poll' '__delete_from_page_cache' 'timer_clear_idle' '__cgroup_account_cputime' 'tcp_add_backlog' 'tomoyo_supervisor' 'generic_permission' 'ktime_get_real_seconds' 'task_dump_owner' 'dccp_rcv_reset' 'kvm_arch_vcpu_load' 'ext4_nonda_switch' 'find_get_pages_range_tag' 'xas_clear_mark' 'p9_poll_workfn' 'blk_mq_free_request' 'fuse_abort_conn' 'do_nanosleep' 'wbt_done' 'lruvec_lru_size' 'dd_has_work' 'pcpu_alloc' 'ext4_mark_iloc_dirty' '__skb_try_recv_from_queue' 'tick_sched_do_timer' 'echo_char' 'sit_tunnel_xmit' 'mm_update_next_owner' 'taskstats_exit' '__rb_insert_augmented' 'blk_mq_dispatch_rq_list' 'tick_nohz_idle_stop_tick' 'xas_find_marked' 'd_instantiate_new' 'rcu_gp_fqs_check_wake' 'mod_timer' 'copy_process' 'complete_signal' 'ext4_mb_find_by_goal' '__hrtimer_run_queues' 'poll_schedule_timeout' 'tick_do_update_jiffies64' 'sctp_assoc_migrate' 'do_signal_stop' [ 203.746288][ C1] ================================================================== [ 203.754448][ C1] BUG: KCSAN: data-race in ktime_get_with_offset / timekeeping_advance [ 203.762703][ C1] [ 203.765024][ C1] write to 0xffffffff86041b08 of 280 bytes by interrupt on cpu 0: [ 203.772847][ C1] timekeeping_advance+0x88e/0xd80 [ 203.777937][ C1] update_wall_time+0x19/0x20 [ 203.782599][ C1] tick_do_update_jiffies64+0x1a4/0x250 [ 203.788126][ C1] tick_sched_do_timer+0xd4/0xe0 [ 203.793109][ C1] tick_sched_timer+0x43/0xe0 [ 203.797883][ C1] __hrtimer_run_queues+0x274/0x5f0 [ 203.803067][ C1] hrtimer_interrupt+0x22a/0x480 [ 203.808082][ C1] smp_apic_timer_interrupt+0xdc/0x280 [ 203.813529][ C1] apic_timer_interrupt+0xf/0x20 [ 203.818474][ C1] native_safe_halt+0xe/0x10 [ 203.823058][ C1] arch_cpu_idle+0x1f/0x30 [ 203.827455][ C1] default_idle_call+0x1e/0x40 [ 203.832205][ C1] do_idle+0x1af/0x280 [ 203.836255][ C1] cpu_startup_entry+0x1b/0x20 [ 203.841001][ C1] rest_init+0xec/0xf6 [ 203.845055][ C1] arch_call_rest_init+0x17/0x37 [ 203.850060][ C1] start_kernel+0x838/0x85e [ 203.854559][ C1] x86_64_start_reservations+0x29/0x2b [ 203.860013][ C1] x86_64_start_kernel+0x72/0x76 [ 203.865067][ C1] secondary_startup_64+0xa4/0xb0 [ 203.870063][ C1] [ 203.872376][ C1] read to 0xffffffff86041b24 of 4 bytes by interrupt on cpu 1: [ 203.879900][ C1] ktime_get_with_offset+0x14d/0x230 [ 203.885189][ C1] netif_receive_skb_internal+0x13e/0x190 [ 203.890888][ C1] napi_gro_receive+0x28f/0x330 [ 203.895721][ C1] receive_buf+0x284/0x30b0 [ 203.900216][ C1] virtnet_poll+0x436/0x7d0 [ 203.904699][ C1] net_rx_action+0x3ae/0xa90 [ 203.910763][ C1] __do_softirq+0x115/0x33f [ 203.915258][ C1] run_ksoftirqd+0x46/0x60 [ 203.919666][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 203.924595][ C1] kthread+0x1d4/0x200 [ 203.928642][ C1] ret_from_fork+0x1f/0x30 [ 203.933043][ C1] [ 203.935357][ C1] Reported by Kernel Concurrency Sanitizer on: [ 203.941757][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc6+ #0 [ 203.949105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.959162][ C1] ================================================================== [ 203.967202][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 203.973772][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc6+ #0 [ 203.981127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.991248][ C1] Call Trace: [ 203.994529][ C1] dump_stack+0xf5/0x159 [ 203.998755][ C1] panic+0x210/0x640 [ 204.002637][ C1] ? vprintk_func+0x8d/0x140 [ 204.007212][ C1] kcsan_report.cold+0xc/0xe [ 204.011789][ C1] kcsan_setup_watchpoint+0x3fe/0x410 [ 204.017145][ C1] __tsan_read4+0x145/0x1f0 [ 204.021633][ C1] ktime_get_with_offset+0x14d/0x230 [ 204.026928][ C1] netif_receive_skb_internal+0x13e/0x190 [ 204.032652][ C1] napi_gro_receive+0x28f/0x330 [ 204.037498][ C1] receive_buf+0x284/0x30b0 [ 204.042004][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 204.047462][ C1] ? virtqueue_get_buf+0x31/0x40 [ 204.052384][ C1] virtnet_poll+0x436/0x7d0 [ 204.056879][ C1] net_rx_action+0x3ae/0xa90 [ 204.061460][ C1] __do_softirq+0x115/0x33f [ 204.065964][ C1] ? takeover_tasklets+0x250/0x250 [ 204.071069][ C1] run_ksoftirqd+0x46/0x60 [ 204.075470][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 204.080398][ C1] kthread+0x1d4/0x200 [ 204.084451][ C1] ? constant_test_bit.constprop.0+0x30/0x30 [ 204.090413][ C1] ? kthread_stop+0x2d0/0x2d0 [ 204.095074][ C1] ret_from_fork+0x1f/0x30 [ 204.101197][ C1] Kernel Offset: disabled [ 204.105542][ C1] Rebooting in 86400 seconds..