[ 57.377118][ T26] audit: type=1800 audit(1580357791.846:27): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 57.397733][ T26] audit: type=1800 audit(1580357791.846:28): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.421348][ T26] audit: type=1800 audit(1580357792.956:29): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 58.441747][ T26] audit: type=1800 audit(1580357792.956:30): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. 2020/01/30 04:16:42 fuzzer started 2020/01/30 04:16:44 dialing manager at 10.128.0.105:37077 2020/01/30 04:16:45 syscalls: 2900 2020/01/30 04:16:45 code coverage: enabled 2020/01/30 04:16:45 comparison tracing: enabled 2020/01/30 04:16:45 extra coverage: enabled 2020/01/30 04:16:45 setuid sandbox: enabled 2020/01/30 04:16:45 namespace sandbox: enabled 2020/01/30 04:16:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/30 04:16:45 fault injection: enabled 2020/01/30 04:16:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/30 04:16:45 net packet injection: enabled 2020/01/30 04:16:45 net device setup: enabled 2020/01/30 04:16:45 concurrency sanitizer: enabled 2020/01/30 04:16:45 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 82.877727][ T8087] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/30 04:16:58 adding functions to KCSAN blacklist: 'rcu_gp_fqs_loop' '__add_to_page_cache_locked' 'pcpu_alloc' 'ondemand_readahead' 'snd_timer_pause' 'xas_find_marked' 'wbt_done' 'kauditd_thread' 'ext4_writepages' 'copy_process' 'blk_mq_sched_dispatch_requests' '__fsnotify_recalc_mask' 'mark_buffer_dirty_inode' 'tick_sched_do_timer' 'blk_mq_dispatch_rq_list' '__dentry_kill' 'get_cpu_idle_time_us' 'blk_mq_get_request' 'iomap_dio_bio_actor' '__rcu_read_unlock' 'do_signal_stop' '__find_get_block' '__put_unused_fd' 'tick_do_update_jiffies64' 'fprop_fraction_percpu' 'tick_nohz_idle_stop_tick' 'xas_clear_mark' 'find_next_bit' 'ext4_free_inode' 'kcm_rfree' 'wbt_inflight_cb' 'watchdog' 'snd_seq_check_queue' 'enqueue_timer' '__hrtimer_run_queues' 'taskstats_exit' 'generic_fillattr' 'do_wait' '__snd_rawmidi_transmit_ack' 'bio_endio' '__mark_inode_dirty' 'blk_mq_run_hw_queue' 'atime_needs_update' 'tomoyo_supervisor' '__ext4_new_inode' 'vm_area_dup' 'process_srcu' 'blk_stat_add' 'perf_event_update_userpage' 'ip6_dst_gc' 'page_counter_charge' 'ep_poll' 'ext4_free_inodes_count' 'mod_timer' 'mm_update_next_owner' 'wbt_issue' 'echo_char' 'pid_update_inode' 'ext4_mark_iloc_dirty' 'do_nanosleep' 'alloc_pid' 'run_timer_softirq' 'evict' 'do_syslog' 'page_counter_try_charge' 'generic_write_end' 'fasync_remove_entry' 'ext4_es_lookup_extent' 'iput' 'common_perm_cond' 'audit_log_start' '__neigh_event_send' 'snd_pcm_oss_ioctl' 'find_get_pages_range_tag' '__filemap_fdatawrite_range' 'ext4_mb_good_group' 'rcu_gp_fqs_check_wake' 'ext4_has_free_clusters' 'ext4_nonda_switch' 'poll_schedule_timeout' 'yama_ptracer_del' 'ktime_get_real_seconds' '__perf_event_overflow' 'dd_has_work' 'timer_clear_idle' 'snd_seq_timer_get_cur_tick' 'snd_seq_prioq_cell_out' [ 321.496936][ C1] ================================================================== [ 321.505644][ C1] BUG: KCSAN: data-race in virtqueue_enable_cb_delayed / virtqueue_enable_cb_prepare [ 321.515730][ C1] [ 321.518081][ C1] read to 0xffff888129e98df0 of 2 bytes by interrupt on cpu 0: [ 321.526697][ C1] virtqueue_enable_cb_delayed+0x1dc/0x4d0 [ 321.533504][ C1] start_xmit+0xb0f/0xbe0 [ 321.538788][ C1] dev_hard_start_xmit+0xef/0x430 [ 321.545123][ C1] sch_direct_xmit+0x2b3/0x900 [ 321.550607][ C1] __dev_queue_xmit+0x13e2/0x1ba0 [ 321.556383][ C1] dev_queue_xmit+0x21/0x30 [ 321.562002][ C1] ip_finish_output2+0x89b/0xea0 [ 321.567496][ C1] __ip_finish_output+0x23a/0x490 [ 321.574169][ C1] ip_finish_output+0x41/0x160 [ 321.579882][ C1] ip_output+0xfe/0x230 [ 321.584844][ C1] ip_local_out+0x74/0x90 [ 321.590074][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 321.595414][ C1] ip_queue_xmit+0x45/0x60 [ 321.601572][ C1] __tcp_transmit_skb+0xea3/0x1df0 [ 321.606898][ C1] __tcp_send_ack+0x246/0x300 [ 321.612255][ C1] tcp_send_ack+0x34/0x40 [ 321.616700][ C1] __tcp_ack_snd_check+0xd9/0x580 [ 321.622362][ C1] tcp_rcv_established+0xce9/0xf50 [ 321.627825][ C1] tcp_v4_do_rcv+0x3b5/0x520 [ 321.633443][ C1] tcp_v4_rcv+0x1b2a/0x1d20 [ 321.638234][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 321.644146][ C1] ip_local_deliver_finish+0x110/0x140 [ 321.649793][ C1] ip_local_deliver+0x133/0x210 [ 321.654964][ C1] ip_sublist_rcv_finish+0xf8/0x140 [ 321.661323][ C1] ip_sublist_rcv+0x418/0x550 [ 321.667690][ C1] ip_list_rcv+0x2f5/0x322 [ 321.672738][ C1] __netif_receive_skb_list_core+0x350/0x5c0 [ 321.681153][ C1] netif_receive_skb_list_internal+0x5d8/0x830 [ 321.687659][ C1] gro_normal_list.part.0+0x3a/0xb0 [ 321.692899][ C1] gro_normal_one+0x162/0x170 [ 321.697707][ C1] napi_gro_receive+0x288/0x300 [ 321.702775][ C1] receive_buf+0x284/0x30b0 [ 321.707544][ C1] virtnet_poll+0x436/0x7d0 [ 321.712070][ C1] net_rx_action+0x3ae/0xa90 [ 321.716688][ C1] __do_softirq+0x115/0x33f [ 321.721218][ C1] irq_exit+0xbb/0xe0 [ 321.725227][ C1] do_IRQ+0x81/0x130 [ 321.729140][ C1] ret_from_intr+0x0/0x21 [ 321.733502][ C1] native_safe_halt+0xe/0x10 [ 321.738179][ C1] arch_cpu_idle+0xa/0x10 [ 321.742656][ C1] default_idle_call+0x1e/0x40 [ 321.747434][ C1] do_idle+0x1c2/0x290 [ 321.751519][ C1] cpu_startup_entry+0x1b/0x20 [ 321.756293][ C1] rest_init+0xec/0xf6 [ 321.760501][ C1] arch_call_rest_init+0x17/0x37 [ 321.765534][ C1] start_kernel+0x838/0x85e [ 321.770051][ C1] x86_64_start_reservations+0x29/0x2b [ 321.775646][ C1] x86_64_start_kernel+0x72/0x76 [ 321.780581][ C1] secondary_startup_64+0xa4/0xb0 [ 321.785622][ C1] [ 321.787964][ C1] write to 0xffff888129e98df0 of 2 bytes by interrupt on cpu 1: [ 321.795662][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0 [ 321.801684][ C1] virtqueue_napi_complete+0x2c/0xa0 [ 321.806979][ C1] virtnet_poll_tx+0x15f/0x1d0 [ 321.811747][ C1] net_rx_action+0x3ae/0xa90 [ 321.816329][ C1] __do_softirq+0x115/0x33f [ 321.820827][ C1] irq_exit+0xbb/0xe0 [ 321.824879][ C1] do_IRQ+0x81/0x130 [ 321.828946][ C1] ret_from_intr+0x0/0x21 [ 321.833575][ C1] native_safe_halt+0xe/0x10 [ 321.838169][ C1] arch_cpu_idle+0xa/0x10 [ 321.842509][ C1] default_idle_call+0x1e/0x40 [ 321.847289][ C1] do_idle+0x1c2/0x290 [ 321.851359][ C1] cpu_startup_entry+0x1b/0x20 [ 321.856416][ C1] start_secondary+0x168/0x1b0 [ 321.861270][ C1] secondary_startup_64+0xa4/0xb0 [ 321.866410][ C1] [ 321.868731][ C1] Reported by Kernel Concurrency Sanitizer on: [ 321.875024][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0 [ 321.883139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.893531][ C1] ================================================================== [ 321.902213][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 321.908854][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-rc1-syzkaller #0 [ 321.916869][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.927288][ C1] Call Trace: [ 321.930628][ C1] [ 321.933534][ C1] dump_stack+0x11d/0x181 [ 321.937907][ C1] panic+0x210/0x640 [ 321.941896][ C1] ? vprintk_func+0x8d/0x140 [ 321.946489][ C1] kcsan_report.cold+0xc/0xd [ 321.951204][ C1] kcsan_setup_watchpoint+0x3fe/0x460 [ 321.956774][ C1] __tsan_unaligned_write2+0xc7/0x110 [ 321.962413][ C1] virtqueue_enable_cb_prepare+0x1ce/0x2b0 [ 321.968268][ C1] virtqueue_napi_complete+0x2c/0xa0 [ 321.973842][ C1] virtnet_poll_tx+0x15f/0x1d0 [ 321.978616][ C1] net_rx_action+0x3ae/0xa90 [ 321.983659][ C1] __do_softirq+0x115/0x33f [ 321.988183][ C1] irq_exit+0xbb/0xe0 [ 321.992185][ C1] do_IRQ+0x81/0x130 [ 321.996087][ C1] common_interrupt+0xf/0xf [ 322.000576][ C1] [ 322.003535][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 322.009109][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 4c e6 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 3c e6 59 00 fb f4 cc 55 48 89 e5 41 55 41 54 53 e8 d2 57 91 fc e8 fd da ab fd 0f [ 322.029025][ C1] RSP: 0018:ffffc90000cd3e70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd9 [ 322.037662][ C1] RAX: 0000000000000001 RBX: ffff88812b785040 RCX: ffffffff82546c55 [ 322.046030][ C1] RDX: 0000000000000000 RSI: ffffffff82546c5e RDI: 0000000000000005 [ 322.055059][ C1] RBP: ffffc90000cd3e90 R08: ffff88812b785040 R09: 0000ffff85a2d168 [ 322.063180][ C1] R10: 0000c90000cd3e80 R11: 0000ffff85a2d16f R12: 0000000000000001 [ 322.071158][ C1] R13: ffff88812b785040 R14: 0000000000000000 R15: 0000000000000000 [ 322.079669][ C1] ? debug_smp_processor_id+0x35/0x137 [ 322.087067][ C1] ? debug_smp_processor_id+0x3e/0x137 [ 322.094095][ C1] ? default_idle+0x26/0x180 [ 322.099928][ C1] arch_cpu_idle+0xa/0x10 [ 322.104616][ C1] default_idle_call+0x1e/0x40 [ 322.109521][ C1] do_idle+0x1c2/0x290 [ 322.114043][ C1] ? debug_smp_processor_id+0x3e/0x137 [ 322.119512][ C1] cpu_startup_entry+0x1b/0x20 [ 322.125506][ C1] start_secondary+0x168/0x1b0 [ 322.130282][ C1] secondary_startup_64+0xa4/0xb0 [ 322.137134][ C1] Kernel Offset: disabled [ 322.141483][ C1] Rebooting in 86400 seconds..