[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 46.473284][ T26] kauditd_printk_skb: 6 callbacks suppressed
[ 46.473298][ T26] audit: type=1800 audit(1576235153.195:29): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[ 46.499588][ T26] audit: type=1800 audit(1576235153.195:30): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.1.6' (ECDSA) to the list of known hosts.
2019/12/13 11:06:01 fuzzer started
2019/12/13 11:06:03 dialing manager at 10.128.0.105:44831
2019/12/13 11:06:03 syscalls: 2686
2019/12/13 11:06:03 code coverage: enabled
2019/12/13 11:06:03 comparison tracing: enabled
2019/12/13 11:06:03 extra coverage: enabled
2019/12/13 11:06:03 setuid sandbox: enabled
2019/12/13 11:06:03 namespace sandbox: enabled
2019/12/13 11:06:03 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/13 11:06:03 fault injection: enabled
2019/12/13 11:06:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/13 11:06:03 net packet injection: enabled
2019/12/13 11:06:03 net device setup: enabled
2019/12/13 11:06:03 concurrency sanitizer: enabled
2019/12/13 11:06:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [ 58.284593][ T7723] KCSAN: could not find function: 'poll_schedule_timeout'
2019/12/13 11:06:12 adding functions to KCSAN blacklist: 'ext4_free_inodes_count' 'find_get_pages_range_tag' 'add_timer' 'dd_has_work' 'fasync_remove_entry' 'blk_mq_dispatch_rq_list' '__snd_rawmidi_transmit_ack' 'tick_nohz_idle_stop_tick' 'poll_schedule_timeout' 'find_next_bit' 'mm_update_next_owner' 'rcu_gp_fqs_check_wake' 'common_perm_cond' 'timer_clear_idle' 'kcm_rfree' 'xas_find_marked' 'ext4_mb_good_group' 'wbt_done' 'wbt_issue' 'do_nanosleep' 'kauditd_thread' 'ext4_has_free_clusters' 'pcpu_alloc' 'do_try_to_free_pages' 'pid_update_inode' 'lruvec_lru_size' 'generic_fillattr' 'del_timer' 'xas_clear_mark' 'mod_timer' 'run_timer_softirq' 'tick_sched_do_timer' 'blk_mq_sched_dispatch_requests' 'virtqueue_enable_cb_delayed' '__rb_erase_color' 'tick_do_update_jiffies64' 'echo_char' 'ep_poll' 'tomoyo_supervisor' 'taskstats_exit' 'generic_file_read_iter' 'audit_log_start' 'blk_mq_get_request' 'sit_tunnel_xmit' '__hrtimer_run_queues' 'generic_write_end' 'ext4_nonda_switch' 'iomap_dio_bio_actor' '__ext4_new_inode' '__rb_insert_augmented' 'ext4_free_inode' 'smpboot_thread_fn'
[ 156.703724][ C0] ==================================================================
[ 156.712964][ C0] BUG: KCSAN: data-race in virtnet_poll_tx / virtqueue_add
[ 156.720134][ C0]
[ 156.722508][ C0] write to 0xffff88821aadf32c of 4 bytes by interrupt on cpu 1:
[ 156.730248][ C0] virtqueue_add+0x958/0x1a80
[ 156.734907][ C0] virtqueue_add_outbuf+0x4b/0x70
[ 156.740009][ C0] start_xmit+0x5b3/0xbe0
[ 156.744321][ C0] dev_hard_start_xmit+0xef/0x430
[ 156.749330][ C0] sch_direct_xmit+0x2b3/0x900
[ 156.754092][ C0] __dev_queue_xmit+0x13e2/0x1ba0
[ 156.759130][ C0] dev_queue_xmit+0x21/0x30
[ 156.763752][ C0] ip_finish_output2+0x89b/0xea0
[ 156.768800][ C0] __ip_finish_output+0x23a/0x490
[ 156.773920][ C0] ip_finish_output+0x41/0x160
[ 156.779252][ C0] ip_output+0xfe/0x230
[ 156.783950][ C0] ip_local_out+0x74/0x90
[ 156.788285][ C0] __ip_queue_xmit+0x3a8/0xa40
[ 156.793240][ C0] ip_queue_xmit+0x45/0x60
[ 156.797650][ C0] __tcp_transmit_skb+0xea3/0x1df0
[ 156.802849][ C0] __tcp_send_ack+0x246/0x300
[ 156.807536][ C0] tcp_send_ack+0x34/0x40
[ 156.811865][ C0] __tcp_ack_snd_check+0xd9/0x580
[ 156.817094][ C0] tcp_rcv_established+0xce9/0xf50
[ 156.822648][ C0] tcp_v4_do_rcv+0x3b5/0x520
[ 156.827350][ C0] tcp_v4_rcv+0x1b2a/0x1d20
[ 156.831843][ C0] ip_protocol_deliver_rcu+0x4d/0x420
[ 156.837193][ C0] ip_local_deliver_finish+0x110/0x140
[ 156.842666][ C0] ip_local_deliver+0x133/0x210
[ 156.847602][ C0] ip_sublist_rcv_finish+0xf8/0x140
[ 156.852835][ C0] ip_sublist_rcv+0x418/0x550
[ 156.857596][ C0] ip_list_rcv+0x2f5/0x322
[ 156.862003][ C0] __netif_receive_skb_list_core+0x350/0x5c0
[ 156.867990][ C0] netif_receive_skb_list_internal+0x5d8/0x830
[ 156.874147][ C0] gro_normal_list.part.0+0x3a/0xb0
[ 156.879353][ C0] gro_normal_one+0x162/0x170
[ 156.884030][ C0] napi_gro_receive+0x288/0x300
[ 156.889069][ C0] receive_buf+0x284/0x30b0
[ 156.893574][ C0] virtnet_poll+0x436/0x7d0
[ 156.898182][ C0] net_rx_action+0x3ae/0xa90
[ 156.902806][ C0] __do_softirq+0x115/0x33f
[ 156.908070][ C0] irq_exit+0xbb/0xe0
[ 156.912128][ C0] do_IRQ+0x81/0x130
[ 156.916033][ C0] ret_from_intr+0x0/0x21
[ 156.920400][ C0] native_safe_halt+0xe/0x10
[ 156.925347][ C0] arch_cpu_idle+0xa/0x10
[ 156.929668][ C0] default_idle_call+0x1e/0x40
[ 156.934714][ C0] do_idle+0x1c2/0x290
[ 156.938894][ C0] cpu_startup_entry+0x1b/0x20
[ 156.943657][ C0] start_secondary+0x168/0x1b0
[ 156.948424][ C0] secondary_startup_64+0xa4/0xb0
[ 156.954594][ C0]
[ 156.956916][ C0] read to 0xffff88821aadf32c of 4 bytes by interrupt on cpu 0:
[ 156.964446][ C0] virtnet_poll_tx+0x177/0x1d0
[ 156.969217][ C0] net_rx_action+0x3ae/0xa90
[ 156.973800][ C0] __do_softirq+0x115/0x33f
[ 156.978475][ C0] irq_exit+0xbb/0xe0
[ 156.982457][ C0] do_IRQ+0x81/0x130
[ 156.986430][ C0] ret_from_intr+0x0/0x21
[ 156.990759][ C0] native_safe_halt+0xe/0x10
[ 156.995359][ C0] arch_cpu_idle+0xa/0x10
[ 156.999969][ C0] default_idle_call+0x1e/0x40
[ 157.004748][ C0] do_idle+0x1c2/0x290
[ 157.008812][ C0] cpu_startup_entry+0x1b/0x20
[ 157.013662][ C0] rest_init+0xec/0xf6
[ 157.017719][ C0] arch_call_rest_init+0x17/0x37
[ 157.022700][ C0] start_kernel+0x838/0x85e
[ 157.027303][ C0] x86_64_start_reservations+0x29/0x2b
[ 157.032892][ C0] x86_64_start_kernel+0x72/0x76
[ 157.037936][ C0] secondary_startup_64+0xa4/0xb0
[ 157.042985][ C0]
[ 157.045297][ C0] Reported by Kernel Concurrency Sanitizer on:
[ 157.051554][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0
[ 157.059551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 157.069901][ C0] ==================================================================
[ 157.078045][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 157.084623][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0
[ 157.092501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 157.102542][ C0] Call Trace:
[ 157.105812][ C0]
[ 157.108670][ C0] dump_stack+0x11d/0x181
[ 157.113451][ C0] panic+0x210/0x640
[ 157.117366][ C0] ? vprintk_func+0x8d/0x140
[ 157.122088][ C0] kcsan_report.cold+0xc/0xd
[ 157.126776][ C0] kcsan_setup_watchpoint+0x3fe/0x460
[ 157.132568][ C0] __tsan_read4+0xc6/0x100
[ 157.137281][ C0] virtnet_poll_tx+0x177/0x1d0
[ 157.142184][ C0] net_rx_action+0x3ae/0xa90
[ 157.147296][ C0] __do_softirq+0x115/0x33f
[ 157.151868][ C0] irq_exit+0xbb/0xe0
[ 157.156155][ C0] do_IRQ+0x81/0x130
[ 157.160214][ C0] common_interrupt+0xf/0xf
[ 157.164716][ C0]
[ 157.167704][ C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 157.173341][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c b6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c b6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 22 2b 91 fc e8 3d ae ab fd 0f
[ 157.194026][ C0] RSP: 0018:ffffffff85c03df8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd6
[ 157.202603][ C0] RAX: 0000000000000000 RBX: ffffffff85c2b780 RCX: ffffffff82546f95
[ 157.211714][ C0] RDX: 0000000000000000 RSI: ffffffff82546f9e RDI: 0000000000000005
[ 157.219778][ C0] RBP: ffffffff85c03e18 R08: ffffffff85c2b780 R09: 0000ffff85a2f160
[ 157.227865][ C0] R10: 0000ffff85c03e08 R11: 0000ffff85a2f167 R12: 0000000000000000
[ 157.236434][ C0] R13: ffffffff85c2b780 R14: 0000000000000000 R15: 0000000000000000
[ 157.244682][ C0] ? debug_smp_processor_id+0x35/0x137
[ 157.250226][ C0] ? debug_smp_processor_id+0x3e/0x137
[ 157.255793][ C0] ? default_idle+0x26/0x180
[ 157.260843][ C0] arch_cpu_idle+0xa/0x10
[ 157.265196][ C0] default_idle_call+0x1e/0x40
[ 157.270049][ C0] do_idle+0x1c2/0x290
[ 157.275179][ C0] cpu_startup_entry+0x1b/0x20
[ 157.280418][ C0] rest_init+0xec/0xf6
[ 157.285101][ C0] ? trace_event_define_fields_vector_free_moved+0xb4/0xb4
[ 157.292432][ C0] arch_call_rest_init+0x17/0x37
[ 157.300528][ C0] start_kernel+0x838/0x85e
[ 157.305170][ C0] x86_64_start_reservations+0x29/0x2b
[ 157.310857][ C0] x86_64_start_kernel+0x72/0x76
[ 157.315955][ C0] secondary_startup_64+0xa4/0xb0
[ 157.323277][ C0] Kernel Offset: disabled
[ 157.327890][ C0] Rebooting in 86400 seconds..