[info] Using makefile-style concurrent boot in runlevel 2. [ 40.819158][ T26] audit: type=1800 audit(1576011488.110:21): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 40.854067][ T26] audit: type=1800 audit(1576011488.110:22): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. 2019/12/10 20:58:21 fuzzer started 2019/12/10 20:58:22 dialing manager at 10.128.0.105:37821 2019/12/10 20:58:22 syscalls: 2689 2019/12/10 20:58:22 code coverage: enabled 2019/12/10 20:58:22 comparison tracing: enabled 2019/12/10 20:58:22 extra coverage: extra coverage is not supported by the kernel 2019/12/10 20:58:22 setuid sandbox: enabled 2019/12/10 20:58:22 namespace sandbox: enabled 2019/12/10 20:58:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/10 20:58:22 fault injection: enabled 2019/12/10 20:58:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/10 20:58:22 net packet injection: enabled 2019/12/10 20:58:22 net device setup: enabled 2019/12/10 20:58:22 concurrency sanitizer: enabled 2019/12/10 20:58:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/12/10 20:58:23 adding functions to KCSAN blacklist: 'do_syslog' '__hrtimer_run_queues' 'tomoyo_supervisor' 'run_timer_softirq' 'find_next_bit' 'taskstats_exit' 'ext4_free_inode' syzkaller login: [ 56.314935][ T7531] ================================================================== [ 56.323090][ T7531] BUG: KCSAN: data-race in tcp_add_backlog / tcp_recvmsg [ 56.330101][ T7531] [ 56.332416][ T7531] write to 0xffff8881267ca9f8 of 8 bytes by interrupt on cpu 0: [ 56.340041][ T7531] tcp_add_backlog+0x476/0xce0 [ 56.344803][ T7531] tcp_v4_rcv+0x1a70/0x1bd0 [ 56.349304][ T7531] ip_protocol_deliver_rcu+0x4d/0x420 [ 56.354662][ T7531] ip_local_deliver_finish+0x110/0x140 [ 56.360196][ T7531] ip_local_deliver+0x133/0x210 [ 56.365046][ T7531] ip_rcv_finish+0x121/0x160 [ 56.369746][ T7531] ip_rcv+0x18f/0x1a0 [ 56.373848][ T7531] __netif_receive_skb_one_core+0xa7/0xe0 [ 56.379561][ T7531] __netif_receive_skb+0x37/0xf0 [ 56.384484][ T7531] netif_receive_skb_internal+0x59/0x190 [ 56.390106][ T7531] napi_gro_receive+0x28f/0x330 [ 56.394948][ T7531] receive_buf+0x284/0x30b0 [ 56.399441][ T7531] virtnet_poll+0x436/0x7d0 [ 56.403944][ T7531] net_rx_action+0x3ae/0xa90 [ 56.408545][ T7531] __do_softirq+0x115/0x33f [ 56.413051][ T7531] irq_exit+0xbb/0xe0 [ 56.417026][ T7531] do_IRQ+0x81/0x130 [ 56.420917][ T7531] ret_from_intr+0x0/0x19 [ 56.425238][ T7531] native_safe_halt+0xe/0x10 [ 56.429819][ T7531] arch_cpu_idle+0xa/0x10 [ 56.434131][ T7531] default_idle_call+0x1e/0x40 [ 56.438882][ T7531] do_idle+0x1af/0x280 [ 56.442944][ T7531] cpu_startup_entry+0x1b/0x20 [ 56.447833][ T7531] rest_init+0xec/0xf6 [ 56.451884][ T7531] arch_call_rest_init+0x17/0x37 [ 56.456854][ T7531] start_kernel+0x838/0x85e [ 56.461351][ T7531] x86_64_start_reservations+0x29/0x2b [ 56.467304][ T7531] x86_64_start_kernel+0x72/0x76 [ 56.472261][ T7531] secondary_startup_64+0xa4/0xb0 [ 56.477321][ T7531] [ 56.479650][ T7531] read to 0xffff8881267ca9f8 of 8 bytes by task 7531 on cpu 1: [ 56.487223][ T7531] tcp_recvmsg+0x46e/0x1b40 [ 56.491729][ T7531] inet_recvmsg+0xbb/0x250 [ 56.496147][ T7531] sock_recvmsg+0x92/0xb0 [ 56.500510][ T7531] sock_read_iter+0x15f/0x1e0 [ 56.505170][ T7531] new_sync_read+0x389/0x4f0 [ 56.509753][ T7531] __vfs_read+0xb1/0xc0 [ 56.513914][ T7531] vfs_read+0x143/0x2c0 [ 56.518060][ T7531] ksys_read+0xd5/0x1b0 [ 56.522203][ T7531] __x64_sys_read+0x4c/0x60 [ 56.526889][ T7531] do_syscall_64+0xcc/0x370 [ 56.531391][ T7531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.537261][ T7531] [ 56.539569][ T7531] Reported by Kernel Concurrency Sanitizer on: [ 56.545764][ T7531] CPU: 1 PID: 7531 Comm: syz-fuzzer Not tainted 5.4.0-syzkaller #0 [ 56.553630][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.563676][ T7531] ================================================================== [ 56.571735][ T7531] Kernel panic - not syncing: panic_on_warn set ... [ 56.578315][ T7531] CPU: 1 PID: 7531 Comm: syz-fuzzer Not tainted 5.4.0-syzkaller #0 [ 56.586190][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.596236][ T7531] Call Trace: [ 56.599521][ T7531] dump_stack+0x11d/0x181 [ 56.603846][ T7531] panic+0x210/0x640 [ 56.607736][ T7531] ? vprintk_func+0x8d/0x140 [ 56.612321][ T7531] kcsan_report.cold+0xc/0xd [ 56.616916][ T7531] kcsan_setup_watchpoint+0x3fe/0x460 [ 56.622280][ T7531] __tsan_read8+0xc6/0x100 [ 56.626691][ T7531] tcp_recvmsg+0x46e/0x1b40 [ 56.631199][ T7531] inet_recvmsg+0xbb/0x250 [ 56.635621][ T7531] ? apparmor_socket_recvmsg+0x3b/0x50 [ 56.641062][ T7531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.647287][ T7531] ? security_socket_recvmsg+0x92/0xb0 [ 56.652727][ T7531] ? inet_sendpage+0x100/0x100 [ 56.657470][ T7531] sock_recvmsg+0x92/0xb0 [ 56.661779][ T7531] sock_read_iter+0x15f/0x1e0 [ 56.666455][ T7531] new_sync_read+0x389/0x4f0 [ 56.671029][ T7531] __vfs_read+0xb1/0xc0 [ 56.675168][ T7531] vfs_read+0x143/0x2c0 [ 56.679303][ T7531] ksys_read+0xd5/0x1b0 [ 56.683438][ T7531] __x64_sys_read+0x4c/0x60 [ 56.687925][ T7531] do_syscall_64+0xcc/0x370 [ 56.692425][ T7531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.698299][ T7531] RIP: 0033:0x47c530 [ 56.702179][ T7531] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 56.721774][ T7531] RSP: 002b:000000c4203217d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 56.730176][ T7531] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 56.738137][ T7531] RDX: 0000000000001000 RSI: 000000c420318000 RDI: 0000000000000003 [ 56.746099][ T7531] RBP: 000000c420321830 R08: 0000000000000000 R09: 0000000000000000 [ 56.754065][ T7531] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000004 [ 56.762027][ T7531] R13: 000000c420082b40 R14: 0000000000000002 R15: ffffffffffffffff [ 56.771390][ T7531] Kernel Offset: disabled [ 56.775730][ T7531] Rebooting in 86400 seconds..