[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 48.044730][ T27] kauditd_printk_skb: 7 callbacks suppressed
[ 48.044748][ T27] audit: type=1800 audit(1577791186.162:29): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[ 48.071414][ T27] audit: type=1800 audit(1577791186.162:30): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts.
2019/12/31 11:19:53 fuzzer started
2019/12/31 11:19:55 dialing manager at 10.128.0.105:41975
2019/12/31 11:19:55 syscalls: 2699
2019/12/31 11:19:55 code coverage: enabled
2019/12/31 11:19:55 comparison tracing: enabled
2019/12/31 11:19:55 extra coverage: enabled
2019/12/31 11:19:55 setuid sandbox: enabled
2019/12/31 11:19:55 namespace sandbox: enabled
2019/12/31 11:19:55 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/31 11:19:55 fault injection: enabled
2019/12/31 11:19:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/31 11:19:55 net packet injection: enabled
2019/12/31 11:19:55 net device setup: enabled
2019/12/31 11:19:55 concurrency sanitizer: enabled
2019/12/31 11:19:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [ 58.126174][ T8005] KCSAN: could not find function: 'poll_schedule_timeout'
2019/12/31 11:20:04 adding functions to KCSAN blacklist: 'blk_mq_sched_dispatch_requests' 'poll_schedule_timeout' 'add_timer' 'blk_mq_dispatch_rq_list' 'process_srcu' '__snd_rawmidi_transmit_ack' '__hrtimer_run_queues' 'iomap_dio_bio_actor' 'list_lru_count_one' '__rcu_read_unlock' 'd_delete' 'generic_file_read_iter' 'find_next_bit' '__ext4_new_inode' 'ext4_free_inodes_count' 'ext4_set_iomap' 'futex_wait_queue_me' 'run_timer_softirq' 'lruvec_lru_size' 'ext4_has_free_clusters' 'rcu_gp_fqs_loop' 'tick_sched_do_timer' 'complete_signal' 'vm_area_dup' 'ext4_nonda_switch' 'pcpu_alloc' 'mod_timer' 'do_nanosleep' 'copy_process' 'pipe_double_lock' 'blk_mq_run_hw_queue' 'audit_log_start' 'ext4_mark_iloc_dirty' 'commit_echoes' 'rcu_gp_fqs_check_wake' 'generic_fillattr' 'ext4_free_inode' 'bd_set_size' 'do_signal_stop' 'tick_nohz_idle_stop_tick' 'do_syslog' 'taskstats_exit' 'page_counter_try_charge' 'tick_do_update_jiffies64' 'tick_nohz_next_event' 'atime_needs_update' 'ext4_da_write_end' 'xas_clear_mark' 'dd_has_work' 'kauditd_thread' 'xas_find_marked' 'fasync_remove_entry' 'ep_poll' 'sit_tunnel_xmit' 'ktime_get_real_seconds' 'timer_clear_idle' 'n_tty_receive_buf_common' 'wbt_done' '__delete_from_page_cache' '__rb_insert_augmented' 'find_get_pages_range_tag' 'do_exit' 'tomoyo_supervisor' 'blk_mq_get_request' 'generic_write_end' 'ip_tunnel_xmit' '__find_get_block' 'do_try_to_free_pages' 'd_instantiate_new' '__filemap_fdatawrite_range'
[ 210.260683][ C0] ==================================================================
[ 210.268855][ C0] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_get_buf_ctx
[ 210.277177][ C0]
[ 210.279505][ C0] read to 0xffff88812a135c70 of 2 bytes by interrupt on cpu 1:
[ 210.287036][ C0] virtqueue_get_buf_ctx+0x4da/0x5c0
[ 210.292319][ C0] virtqueue_get_buf+0x29/0x40
[ 210.297604][ C0] free_old_xmit_skbs+0x9e/0x170
[ 210.302529][ C0] start_xmit+0xd3/0xbe0
[ 210.306765][ C0] dev_hard_start_xmit+0xef/0x430
[ 210.311783][ C0] sch_direct_xmit+0x2b3/0x900
[ 210.316560][ C0] __dev_queue_xmit+0x13e2/0x1ba0
[ 210.321578][ C0] dev_queue_xmit+0x21/0x30
[ 210.326101][ C0] ip_finish_output2+0x89b/0xea0
[ 210.331038][ C0] __ip_finish_output+0x23a/0x490
[ 210.336066][ C0] ip_finish_output+0x41/0x160
[ 210.340830][ C0] ip_output+0xfe/0x230
[ 210.344984][ C0] ip_local_out+0x74/0x90
[ 210.350708][ C0] __ip_queue_xmit+0x3a8/0xa40
[ 210.355490][ C0] ip_queue_xmit+0x45/0x60
[ 210.360251][ C0] __tcp_transmit_skb+0xea3/0x1df0
[ 210.365348][ C0] __tcp_send_ack+0x246/0x300
[ 210.370026][ C0] tcp_send_ack+0x34/0x40
[ 210.374356][ C0] __tcp_ack_snd_check+0xd9/0x580
[ 210.379369][ C0] tcp_rcv_established+0xce9/0xf50
[ 210.384481][ C0] tcp_v4_do_rcv+0x3b5/0x520
[ 210.389076][ C0] tcp_v4_rcv+0x1b2a/0x1d20
[ 210.393588][ C0] ip_protocol_deliver_rcu+0x4d/0x420
[ 210.398972][ C0] ip_local_deliver_finish+0x110/0x140
[ 210.404426][ C0] ip_local_deliver+0x133/0x210
[ 210.409292][ C0] ip_sublist_rcv_finish+0xf8/0x140
[ 210.414489][ C0] ip_sublist_rcv+0x418/0x550
[ 210.419165][ C0] ip_list_rcv+0x2f5/0x322
[ 210.423602][ C0] __netif_receive_skb_list_core+0x350/0x5c0
[ 210.429615][ C0] netif_receive_skb_list_internal+0x5d8/0x830
[ 210.435858][ C0] gro_normal_list.part.0+0x3a/0xb0
[ 210.441044][ C0] gro_normal_one+0x162/0x170
[ 210.445723][ C0] napi_gro_receive+0x288/0x300
[ 210.450591][ C0] receive_buf+0x284/0x30b0
[ 210.455204][ C0] virtnet_poll+0x436/0x7d0
[ 210.459969][ C0] net_rx_action+0x3ae/0xa90
[ 210.464546][ C0] __do_softirq+0x115/0x33f
[ 210.469034][ C0] irq_exit+0xbb/0xe0
[ 210.473017][ C0] do_IRQ+0x81/0x130
[ 210.477023][ C0] ret_from_intr+0x0/0x21
[ 210.481341][ C0] native_safe_halt+0xe/0x10
[ 210.485929][ C0] arch_cpu_idle+0xa/0x10
[ 210.490266][ C0] default_idle_call+0x1e/0x40
[ 210.495040][ C0] do_idle+0x1c2/0x290
[ 210.499120][ C0] cpu_startup_entry+0x1b/0x20
[ 210.503894][ C0] start_secondary+0x168/0x1b0
[ 210.508674][ C0] secondary_startup_64+0xa4/0xb0
[ 210.513685][ C0]
[ 210.516036][ C0] write to 0xffff88812a135c70 of 2 bytes by interrupt on cpu 0:
[ 210.523674][ C0] virtqueue_disable_cb+0xe9/0x130
[ 210.528795][ C0] skb_xmit_done+0x6a/0x110
[ 210.533318][ C0] vring_interrupt+0x1a1/0x1c0
[ 210.538083][ C0] __handle_irq_event_percpu+0x9a/0x430
[ 210.543748][ C0] handle_irq_event_percpu+0x4b/0xe0
[ 210.549035][ C0] handle_irq_event+0x85/0xca
[ 210.553710][ C0] handle_edge_irq+0x1a4/0x4a0
[ 210.558541][ C0] do_IRQ+0x7c/0x130
[ 210.562486][ C0] ret_from_intr+0x0/0x21
[ 210.566834][ C0] native_safe_halt+0xe/0x10
[ 210.571439][ C0] arch_cpu_idle+0xa/0x10
[ 210.575772][ C0] default_idle_call+0x1e/0x40
[ 210.580635][ C0] do_idle+0x1c2/0x290
[ 210.584702][ C0] cpu_startup_entry+0x1b/0x20
[ 210.589460][ C0] rest_init+0xec/0xf6
[ 210.593518][ C0] arch_call_rest_init+0x17/0x37
[ 210.598564][ C0] start_kernel+0x838/0x85e
[ 210.603084][ C0] x86_64_start_reservations+0x29/0x2b
[ 210.608650][ C0] x86_64_start_kernel+0x72/0x76
[ 210.613726][ C0] secondary_startup_64+0xa4/0xb0
[ 210.618742][ C0]
[ 210.621063][ C0] Reported by Kernel Concurrency Sanitizer on:
[ 210.627213][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0
[ 210.635093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 210.645151][ C0] ==================================================================
[ 210.653206][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 210.659870][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0
[ 210.667852][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 210.677925][ C0] Call Trace:
[ 210.681194][ C0]
[ 210.684044][ C0] dump_stack+0x11d/0x181
[ 210.688377][ C0] panic+0x210/0x640
[ 210.692958][ C0] ? vprintk_func+0x8d/0x140
[ 210.697542][ C0] kcsan_report.cold+0xc/0xd
[ 210.702139][ C0] kcsan_setup_watchpoint+0x3fe/0x460
[ 210.707517][ C0] __tsan_unaligned_write2+0xc7/0x110
[ 210.712886][ C0] virtqueue_disable_cb+0xe9/0x130
[ 210.718004][ C0] skb_xmit_done+0x6a/0x110
[ 210.722776][ C0] ? virtnet_poll_tx+0x1d0/0x1d0
[ 210.727713][ C0] vring_interrupt+0x1a1/0x1c0
[ 210.732478][ C0] ? virtqueue_enable_cb+0x40/0x40
[ 210.737598][ C0] __handle_irq_event_percpu+0x9a/0x430
[ 210.743180][ C0] handle_irq_event_percpu+0x4b/0xe0
[ 210.748504][ C0] handle_irq_event+0x85/0xca
[ 210.753221][ C0] handle_edge_irq+0x1a4/0x4a0
[ 210.758017][ C0] do_IRQ+0x7c/0x130
[ 210.761935][ C0] common_interrupt+0xf/0xf
[ 210.766418][ C0]
[ 210.769355][ C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 210.774713][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c b6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c b6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 22 2b 91 fc e8 3d ae ab fd 0f
[ 210.794631][ C0] RSP: 0018:ffffffff85c03df8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd6
[ 210.803690][ C0] RAX: 0000000000000000 RBX: ffffffff85c2b780 RCX: ffffffff82546f95
[ 210.812114][ C0] RDX: 0000000000000000 RSI: ffffffff82546f9e RDI: 0000000000000005
[ 210.821083][ C0] RBP: ffffffff85c03e18 R08: ffffffff85c2b780 R09: 0000ffff85a2f160
[ 210.829076][ C0] R10: 0000ffff85c03e08 R11: 0000ffff85a2f167 R12: 0000000000000000
[ 210.838353][ C0] R13: ffffffff85c2b780 R14: 0000000000000000 R15: 0000000000000000
[ 210.847259][ C0] ? debug_smp_processor_id+0x35/0x137
[ 210.853196][ C0] ? debug_smp_processor_id+0x3e/0x137
[ 210.858665][ C0] ? default_idle+0x26/0x180
[ 210.863247][ C0] arch_cpu_idle+0xa/0x10
[ 210.867586][ C0] default_idle_call+0x1e/0x40
[ 210.872360][ C0] do_idle+0x1c2/0x290
[ 210.876576][ C0] cpu_startup_entry+0x1b/0x20
[ 210.881403][ C0] rest_init+0xec/0xf6
[ 210.885657][ C0] ? trace_event_define_fields_vector_free_moved+0xb4/0xb4
[ 210.893033][ C0] arch_call_rest_init+0x17/0x37
[ 210.898069][ C0] start_kernel+0x838/0x85e
[ 210.902611][ C0] x86_64_start_reservations+0x29/0x2b
[ 210.908091][ C0] x86_64_start_kernel+0x72/0x76
[ 210.913172][ C0] secondary_startup_64+0xa4/0xb0
[ 210.919589][ C0] Kernel Offset: disabled
[ 210.923939][ C0] Rebooting in 86400 seconds..