[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 50.232663][ T27] kauditd_printk_skb: 7 callbacks suppressed
[ 50.232681][ T27] audit: type=1800 audit(1580585866.519:29): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[ 50.258897][ T27] audit: type=1800 audit(1580585866.519:30): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts.
2020/02/01 19:37:57 fuzzer started
2020/02/01 19:37:59 dialing manager at 10.128.0.105:40209
2020/02/01 19:37:59 syscalls: 2904
2020/02/01 19:37:59 code coverage: enabled
2020/02/01 19:37:59 comparison tracing: enabled
2020/02/01 19:37:59 extra coverage: enabled
2020/02/01 19:37:59 setuid sandbox: enabled
2020/02/01 19:37:59 namespace sandbox: enabled
2020/02/01 19:37:59 Android sandbox: /sys/fs/selinux/policy does not exist
2020/02/01 19:37:59 fault injection: enabled
2020/02/01 19:37:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/02/01 19:37:59 net packet injection: enabled
2020/02/01 19:37:59 net device setup: enabled
2020/02/01 19:37:59 concurrency sanitizer: enabled
2020/02/01 19:37:59 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [ 63.653305][ T8022] KCSAN: could not find function: 'poll_schedule_timeout'
2020/02/01 19:38:14 adding functions to KCSAN blacklist: 'poll_schedule_timeout' 'inode_sync_complete' 'ep_poll' 'run_timer_softirq' 'padata_find_next' 'dd_has_work' '__filemap_fdatawrite_range' 'find_next_bit' 'xas_clear_mark' 'mod_timer' 'kcm_rcv_strparser' '__mark_inode_dirty' 'exit_signals' 'blk_mq_run_hw_queue' 'ktime_get_real_seconds' 'find_get_pages_range_tag' 'snd_seq_prioq_cell_out' 'vm_area_dup' 'blk_mq_get_request' 'pcpu_alloc' 'tick_nohz_idle_stop_tick' 'n_tty_receive_buf_common' 'futex_wait_queue_me' 'ext4_free_inodes_count' 'ext4_writepages' 'ext4_ext_insert_extent' 'ext4_free_inode' 'ext4_nonda_switch' 'clear_inode' 'wbt_wait' '__ext4_new_inode' '__skb_try_recv_from_queue' 'process_srcu' 'pid_update_inode' 'rcu_gp_fqs_loop' 'sit_tunnel_xmit' '__perf_event_overflow' 'tomoyo_supervisor' '__hrtimer_run_queues' 'alloc_pid' 'virtqueue_disable_cb' 'schedule_hrtimeout_range_clock' '__delete_from_page_cache' 'blk_mq_sched_dispatch_requests' 'mm_update_next_owner' 'taskstats_exit' '__snd_rawmidi_transmit_ack' 'commit_echoes' '__d_lookup_done' 'generic_write_end' 'purge_fragmented_blocks_allcpus' 'xas_find_marked' 'generic_permission' 'shmem_add_to_page_cache' 'generic_fillattr' 'echo_char' 'lruvec_lru_size' 'do_syslog' 'ext4_has_free_clusters' 'tick_do_update_jiffies64' 'snd_seq_check_queue' 'd_instantiate_new' '__process_echoes' 'wbt_done' '__writeback_single_inode' 'virtnet_poll_tx' 'fsnotify' 'rcu_gp_fqs_check_wake' 'timer_clear_idle' 'audit_log_start' 'queue_access_lock' 'get_cpu_iowait_time_us' 'snd_timer_pause' 'skb_dequeue' 'file_update_time' 'copy_process' 'wbt_issue' 'blk_mq_dispatch_rq_list' 'blk_stat_add' 'iput' 'del_timer' 'tick_sched_do_timer' '__do_munmap' 'kauditd_thread' '__get_user_pages' 'free_pid' 'blk_mq_unfreeze_queue' 'do_nanosleep' 'ext4_mb_good_group' 'deadline_remove_request'
[ 299.999508][ C1] ==================================================================
[ 300.007675][ C1] BUG: KCSAN: data-race in virtqueue_enable_cb_delayed / virtqueue_enable_cb_prepare
[ 300.017346][ C1]
[ 300.019677][ C1] read to 0xffff88821ab3f8b0 of 2 bytes by interrupt on cpu 0:
[ 300.027370][ C1] virtqueue_enable_cb_delayed+0x1dc/0x4d0
[ 300.033169][ C1] start_xmit+0xb0f/0xbe0
[ 300.037498][ C1] dev_hard_start_xmit+0xef/0x430
[ 300.042526][ C1] sch_direct_xmit+0x2b3/0x900
[ 300.047286][ C1] __dev_queue_xmit+0x13e2/0x1ba0
[ 300.052305][ C1] dev_queue_xmit+0x21/0x30
[ 300.056807][ C1] ip_finish_output2+0x89b/0xea0
[ 300.061752][ C1] __ip_finish_output+0x23a/0x490
[ 300.066790][ C1] ip_finish_output+0x41/0x160
[ 300.071656][ C1] ip_output+0xfe/0x230
[ 300.075831][ C1] ip_local_out+0x74/0x90
[ 300.080182][ C1] __ip_queue_xmit+0x3a8/0xa40
[ 300.084935][ C1] ip_queue_xmit+0x45/0x60
[ 300.089357][ C1] __tcp_transmit_skb+0xea3/0x1df0
[ 300.094464][ C1] __tcp_send_ack+0x246/0x300
[ 300.099226][ C1] tcp_send_ack+0x34/0x40
[ 300.103586][ C1] __tcp_ack_snd_check+0xd9/0x580
[ 300.108617][ C1] tcp_rcv_established+0xce9/0xf50
[ 300.113734][ C1] tcp_v4_do_rcv+0x3b5/0x520
[ 300.118443][ C1] tcp_v4_rcv+0x1b2a/0x1d20
[ 300.122937][ C1] ip_protocol_deliver_rcu+0x4d/0x420
[ 300.128304][ C1] ip_local_deliver_finish+0x110/0x140
[ 300.133760][ C1] ip_local_deliver+0x133/0x210
[ 300.138610][ C1] ip_sublist_rcv_finish+0xf8/0x140
[ 300.143800][ C1] ip_sublist_rcv+0x418/0x550
[ 300.148484][ C1] ip_list_rcv+0x2f5/0x322
[ 300.152895][ C1] __netif_receive_skb_list_core+0x350/0x5c0
[ 300.158873][ C1] netif_receive_skb_list_internal+0x5d8/0x830
[ 300.165111][ C1] gro_normal_list.part.0+0x3a/0xb0
[ 300.170294][ C1] gro_normal_one+0x162/0x170
[ 300.175089][ C1] napi_gro_receive+0x288/0x300
[ 300.179942][ C1] receive_buf+0x284/0x30b0
[ 300.184431][ C1] virtnet_poll+0x436/0x7d0
[ 300.188932][ C1] net_rx_action+0x3ae/0xa90
[ 300.193516][ C1] __do_softirq+0x115/0x33f
[ 300.198050][ C1] irq_exit+0xbb/0xe0
[ 300.202036][ C1] do_IRQ+0x81/0x130
[ 300.205919][ C1] ret_from_intr+0x0/0x21
[ 300.210368][ C1] native_safe_halt+0xe/0x10
[ 300.214972][ C1] arch_cpu_idle+0xa/0x10
[ 300.219387][ C1] default_idle_call+0x1e/0x40
[ 300.224145][ C1] do_idle+0x1c2/0x290
[ 300.228203][ C1] cpu_startup_entry+0x1b/0x20
[ 300.232950][ C1] rest_init+0xec/0xf6
[ 300.237076][ C1] arch_call_rest_init+0x17/0x37
[ 300.242009][ C1] start_kernel+0x838/0x85e
[ 300.246519][ C1] x86_64_start_reservations+0x29/0x2b
[ 300.252080][ C1] x86_64_start_kernel+0x72/0x76
[ 300.257006][ C1] secondary_startup_64+0xa4/0xb0
[ 300.262011][ C1]
[ 300.264340][ C1] write to 0xffff88821ab3f8b0 of 2 bytes by interrupt on cpu 1:
[ 300.272027][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0
[ 300.277833][ C1] virtqueue_napi_complete+0x2c/0xa0
[ 300.283122][ C1] virtnet_poll_tx+0x15f/0x1d0
[ 300.288023][ C1] net_rx_action+0x3ae/0xa90
[ 300.292606][ C1] __do_softirq+0x115/0x33f
[ 300.297112][ C1] irq_exit+0xbb/0xe0
[ 300.301096][ C1] do_IRQ+0x81/0x130
[ 300.305110][ C1] ret_from_intr+0x0/0x21
[ 300.309447][ C1] native_safe_halt+0xe/0x10
[ 300.314035][ C1] arch_cpu_idle+0xa/0x10
[ 300.318355][ C1] default_idle_call+0x1e/0x40
[ 300.323248][ C1] do_idle+0x1c2/0x290
[ 300.327317][ C1] cpu_startup_entry+0x1b/0x20
[ 300.332082][ C1] start_secondary+0x168/0x1b0
[ 300.336855][ C1] secondary_startup_64+0xa4/0xb0
[ 300.341869][ C1]
[ 300.344179][ C1] Reported by Kernel Concurrency Sanitizer on:
[ 300.350329][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0
[ 300.358199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 300.368345][ C1] ==================================================================
[ 300.376393][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 300.383010][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0
[ 300.390898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 300.400951][ C1] Call Trace:
[ 300.404231][ C1]
[ 300.407081][ C1] dump_stack+0x11d/0x181
[ 300.411412][ C1] panic+0x210/0x640
[ 300.415304][ C1] ? vprintk_func+0x8d/0x140
[ 300.419888][ C1] kcsan_report.cold+0xc/0xd
[ 300.424612][ C1] kcsan_setup_watchpoint+0x3fe/0x460
[ 300.429990][ C1] __tsan_unaligned_write2+0xc7/0x110
[ 300.435440][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0
[ 300.441244][ C1] virtqueue_napi_complete+0x2c/0xa0
[ 300.446662][ C1] virtnet_poll_tx+0x15f/0x1d0
[ 300.451429][ C1] net_rx_action+0x3ae/0xa90
[ 300.456061][ C1] __do_softirq+0x115/0x33f
[ 300.461173][ C1] irq_exit+0xbb/0xe0
[ 300.465162][ C1] do_IRQ+0x81/0x130
[ 300.469075][ C1] common_interrupt+0xf/0xf
[ 300.473568][ C1]
[ 300.476501][ C1] RIP: 0010:native_safe_halt+0xe/0x10
[ 300.481937][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c e6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c e6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 d2 57 91 fc e8 fd da ab fd 0f
[ 300.501527][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9
[ 300.510065][ C1] RAX: 0000000000000001 RBX: ffff88812b785040 RCX: ffffffff82546c55
[ 300.518037][ C1] RDX: 0000000000000000 RSI: ffffffff82546c5e RDI: 0000000000000005
[ 300.526082][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b785040 R09: 0000ffff85a2d168
[ 300.534041][ C1] R10: 0000c90000cd3e80 R11: 0000ffff85a2d16f R12: 0000000000000001
[ 300.542176][ C1] R13: ffff88812b785040 R14: 0000000000000000 R15: 0000000000000000
[ 300.550275][ C1] ? debug_smp_processor_id+0x35/0x137
[ 300.555772][ C1] ? debug_smp_processor_id+0x3e/0x137
[ 300.561287][ C1] ? default_idle+0x26/0x180
[ 300.565886][ C1] arch_cpu_idle+0xa/0x10
[ 300.570229][ C1] default_idle_call+0x1e/0x40
[ 300.575013][ C1] do_idle+0x1c2/0x290
[ 300.579093][ C1] ? debug_smp_processor_id+0x3e/0x137
[ 300.584570][ C1] cpu_startup_entry+0x1b/0x20
[ 300.589401][ C1] start_secondary+0x168/0x1b0
[ 300.594169][ C1] secondary_startup_64+0xa4/0xb0
[ 300.599830][ C1] Kernel Offset: disabled
[ 300.604175][ C1] Rebooting in 86400 seconds..