[ 58.104363][ T7937] cron (7937) used greatest stack depth: 10152 bytes left
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 58.551025][ T7928] sshd (7928) used greatest stack depth: 10136 bytes left
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 58.783476][ T26] audit: type=1800 audit(1579624595.703:29): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[ 58.803633][ T26] audit: type=1800 audit(1579624595.703:30): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts.
2020/01/21 16:36:44 fuzzer started
2020/01/21 16:36:46 dialing manager at 10.128.0.105:33755
2020/01/21 16:36:47 syscalls: 2861
2020/01/21 16:36:47 code coverage: enabled
2020/01/21 16:36:47 comparison tracing: enabled
2020/01/21 16:36:47 extra coverage: enabled
2020/01/21 16:36:47 setuid sandbox: enabled
2020/01/21 16:36:47 namespace sandbox: enabled
2020/01/21 16:36:47 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/21 16:36:47 fault injection: enabled
2020/01/21 16:36:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/21 16:36:47 net packet injection: enabled
2020/01/21 16:36:47 net device setup: enabled
2020/01/21 16:36:47 concurrency sanitizer: enabled
2020/01/21 16:36:47 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [ 72.560429][ T8030] KCSAN: could not find function: 'poll_schedule_timeout'
2020/01/21 16:37:00 adding functions to KCSAN blacklist: 'do_nanosleep' 'wbt_wait' 'xas_find_marked' 'del_timer' 'blk_stat_add' 'page_counter_charge' 'run_timer_softirq' 'generic_fillattr' 'poll_schedule_timeout' 'other_inode_match' 'n_tty_receive_buf_common' 'drain_all_stock' 'tomoyo_supervisor' 'ext4_nonda_switch' 'blk_mq_get_request' 'pid_update_inode' 'n_tty_write' 'kauditd_thread' 'ext4_mark_iloc_dirty' 'ext4_da_write_end' 'page_counter_try_charge' 'ext4_sync_file' 'sync_inodes_sb' 'rcu_gp_fqs_check_wake' 'ext4_has_free_clusters' 'xas_clear_mark' 'snd_seq_check_queue' 'ext4_setattr' '__add_to_page_cache_locked' 'timer_clear_idle' 'ext4_mb_good_group' '__d_lookup_done' 'n_hdlc_send_frames' 'mod_timer' 'dd_has_work' 'echo_char' 'do_signal_stop' 'fib6_ifup' 'wbc_detach_inode' 'ktime_get_real_seconds' 'copy_process' 'wbt_done' '__blk_queue_split' '__mark_inode_dirty' '__hrtimer_run_queues' 'ext4_free_inodes_count' 'ep_poll' 'tick_nohz_idle_stop_tick' 'audit_log_start' '__skb_try_recv_from_queue' 'wbt_issue' 'vm_area_dup' 'generic_write_end' 'blk_mq_run_hw_queue' 'tick_sched_do_timer' 'filemap_map_pages' 'common_perm_cond' '__filemap_fdatawrite_range' 'blk_mq_dispatch_rq_list' 'pcpu_alloc' 'do_syslog' 'sbitmap_queue_clear' 'find_next_bit' 'process_srcu' 'blk_mq_sched_dispatch_requests' 'bio_endio' 'futex_wait_queue_me' '__ext4_new_inode' 'wbc_attach_and_unlock_inode' 'do_exit' '__snd_rawmidi_transmit_ack' 'rcu_gp_fqs_loop' 'yama_ptracer_del' 'snd_rawmidi_poll' 'do_wait' 'tick_do_update_jiffies64' 'ext4_free_inode' 'find_get_pages_range_tag' 'generic_file_read_iter' 'generic_update_time' 'lruvec_lru_size' 'iomap_dio_bio_actor' 'taskstats_exit' 'add_timer' '__process_echoes' 'fasync_remove_entry' '__delete_from_page_cache' 'mm_update_next_owner' 'padata_find_next' 'atime_needs_update'
[ 317.686637][ C1] ==================================================================
[ 317.694944][ C1] BUG: KCSAN: data-race in virtqueue_enable_cb_delayed / virtqueue_enable_cb_prepare
[ 317.704757][ C1]
[ 317.707242][ C1] read to 0xffff88821aac7c70 of 2 bytes by interrupt on cpu 0:
[ 317.714795][ C1] virtqueue_enable_cb_delayed+0x1dc/0x4d0
[ 317.720726][ C1] start_xmit+0xb0f/0xbe0
[ 317.725196][ C1] dev_hard_start_xmit+0xef/0x430
[ 317.730378][ C1] sch_direct_xmit+0x2b3/0x900
[ 317.735153][ C1] __dev_queue_xmit+0x13e2/0x1ba0
[ 317.740184][ C1] dev_queue_xmit+0x21/0x30
[ 317.744839][ C1] ip_finish_output2+0x89b/0xea0
[ 317.749877][ C1] __ip_finish_output+0x23a/0x490
[ 317.755155][ C1] ip_finish_output+0x41/0x160
[ 317.759911][ C1] ip_output+0xfe/0x230
[ 317.764191][ C1] ip_local_out+0x74/0x90
[ 317.768517][ C1] __ip_queue_xmit+0x3a8/0xa40
[ 317.773282][ C1] ip_queue_xmit+0x45/0x60
[ 317.777711][ C1] __tcp_transmit_skb+0xea3/0x1df0
[ 317.782960][ C1] __tcp_send_ack+0x246/0x300
[ 317.787628][ C1] tcp_send_ack+0x34/0x40
[ 317.792115][ C1] __tcp_ack_snd_check+0xd9/0x580
[ 317.797263][ C1] tcp_rcv_established+0xce9/0xf50
[ 317.802367][ C1] tcp_v4_do_rcv+0x3b5/0x520
[ 317.806968][ C1] tcp_v4_rcv+0x1b2a/0x1d20
[ 317.811506][ C1] ip_protocol_deliver_rcu+0x4d/0x420
[ 317.816902][ C1] ip_local_deliver_finish+0x110/0x140
[ 317.822426][ C1] ip_local_deliver+0x133/0x210
[ 317.827531][ C1] ip_sublist_rcv_finish+0xf8/0x140
[ 317.832722][ C1] ip_sublist_rcv+0x418/0x550
[ 317.837625][ C1] ip_list_rcv+0x2f5/0x322
[ 317.842031][ C1] __netif_receive_skb_list_core+0x350/0x5c0
[ 317.848043][ C1] netif_receive_skb_list_internal+0x5d8/0x830
[ 317.854306][ C1] gro_normal_list.part.0+0x3a/0xb0
[ 317.859655][ C1] gro_normal_one+0x162/0x170
[ 317.864363][ C1] napi_gro_receive+0x288/0x300
[ 317.869450][ C1] receive_buf+0x284/0x30b0
[ 317.874449][ C1] virtnet_poll+0x436/0x7d0
[ 317.879147][ C1] net_rx_action+0x3ae/0xa90
[ 317.883729][ C1] __do_softirq+0x115/0x33f
[ 317.888222][ C1] irq_exit+0xbb/0xe0
[ 317.892191][ C1] do_IRQ+0x81/0x130
[ 317.896085][ C1] ret_from_intr+0x0/0x21
[ 317.900602][ C1] native_safe_halt+0xe/0x10
[ 317.905189][ C1] arch_cpu_idle+0xa/0x10
[ 317.909510][ C1] default_idle_call+0x1e/0x40
[ 317.914274][ C1] do_idle+0x1c2/0x290
[ 317.918482][ C1] cpu_startup_entry+0x1b/0x20
[ 317.923235][ C1] rest_init+0xec/0xf6
[ 317.927460][ C1] arch_call_rest_init+0x17/0x37
[ 317.932402][ C1] start_kernel+0x838/0x85e
[ 317.936900][ C1] x86_64_start_reservations+0x29/0x2b
[ 317.942346][ C1] x86_64_start_kernel+0x72/0x76
[ 317.947270][ C1] secondary_startup_64+0xa4/0xb0
[ 317.952277][ C1]
[ 317.954609][ C1] write to 0xffff88821aac7c70 of 2 bytes by interrupt on cpu 1:
[ 317.962388][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0
[ 317.968316][ C1] virtqueue_napi_complete+0x2c/0xa0
[ 317.973774][ C1] virtnet_poll_tx+0x15f/0x1d0
[ 317.978549][ C1] net_rx_action+0x3ae/0xa90
[ 317.983146][ C1] __do_softirq+0x115/0x33f
[ 317.987654][ C1] irq_exit+0xbb/0xe0
[ 317.991622][ C1] do_IRQ+0x81/0x130
[ 317.995567][ C1] ret_from_intr+0x0/0x21
[ 317.999892][ C1] native_safe_halt+0xe/0x10
[ 318.004491][ C1] arch_cpu_idle+0xa/0x10
[ 318.009037][ C1] default_idle_call+0x1e/0x40
[ 318.013940][ C1] do_idle+0x1c2/0x290
[ 318.018015][ C1] cpu_startup_entry+0x1b/0x20
[ 318.023012][ C1] start_secondary+0x168/0x1b0
[ 318.027777][ C1] secondary_startup_64+0xa4/0xb0
[ 318.032873][ C1]
[ 318.035216][ C1] Reported by Kernel Concurrency Sanitizer on:
[ 318.041378][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0
[ 318.049510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 318.059996][ C1] ==================================================================
[ 318.068235][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 318.075090][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0
[ 318.082975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 318.093223][ C1] Call Trace:
[ 318.096522][ C1]
[ 318.099387][ C1] dump_stack+0x11d/0x181
[ 318.103830][ C1] panic+0x210/0x640
[ 318.107747][ C1] ? vprintk_func+0x8d/0x140
[ 318.112473][ C1] kcsan_report.cold+0xc/0xd
[ 318.117152][ C1] kcsan_setup_watchpoint+0x3fe/0x460
[ 318.122525][ C1] __tsan_unaligned_write2+0xc7/0x110
[ 318.128410][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0
[ 318.134475][ C1] virtqueue_napi_complete+0x2c/0xa0
[ 318.139891][ C1] virtnet_poll_tx+0x15f/0x1d0
[ 318.144669][ C1] net_rx_action+0x3ae/0xa90
[ 318.149285][ C1] __do_softirq+0x115/0x33f
[ 318.153902][ C1] irq_exit+0xbb/0xe0
[ 318.157906][ C1] do_IRQ+0x81/0x130
[ 318.161820][ C1] common_interrupt+0xf/0xf
[ 318.166334][ C1]
[ 318.169330][ C1] RIP: 0010:native_safe_halt+0xe/0x10
[ 318.174836][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c e6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c e6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 d2 57 91 fc e8 fd da ab fd 0f
[ 318.194708][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9
[ 318.203242][ C1] RAX: 0000000000000001 RBX: ffff88812b785040 RCX: ffffffff82546c55
[ 318.211216][ C1] RDX: 0000000000000000 RSI: ffffffff82546c5e RDI: 0000000000000005
[ 318.219176][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b785040 R09: 0000ffff85a2d168
[ 318.227155][ C1] R10: 0000c90000cd3e80 R11: 0000ffff85a2d16f R12: 0000000000000001
[ 318.235128][ C1] R13: ffff88812b785040 R14: 0000000000000000 R15: 0000000000000000
[ 318.243127][ C1] ? debug_smp_processor_id+0x35/0x137
[ 318.248612][ C1] ? debug_smp_processor_id+0x3e/0x137
[ 318.254176][ C1] ? default_idle+0x26/0x180
[ 318.258842][ C1] arch_cpu_idle+0xa/0x10
[ 318.263434][ C1] default_idle_call+0x1e/0x40
[ 318.268415][ C1] do_idle+0x1c2/0x290
[ 318.272738][ C1] ? debug_smp_processor_id+0x3e/0x137
[ 318.278602][ C1] cpu_startup_entry+0x1b/0x20
[ 318.283765][ C1] start_secondary+0x168/0x1b0
[ 318.288676][ C1] secondary_startup_64+0xa4/0xb0
[ 318.295898][ C1] Kernel Offset: disabled
[ 318.301317][ C1] Rebooting in 86400 seconds..