[ 35.801158][ T26] audit: type=1800 audit(1570757624.241:22): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 35.820852][ T26] audit: type=1800 audit(1570757624.251:23): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 35.841600][ T26] audit: type=1800 audit(1570757624.251:24): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. 2019/10/11 01:33:54 fuzzer started 2019/10/11 01:33:56 dialing manager at 10.128.0.105:37331 2019/10/11 01:33:56 syscalls: 2523 2019/10/11 01:33:56 code coverage: enabled 2019/10/11 01:33:56 comparison tracing: enabled 2019/10/11 01:33:56 extra coverage: extra coverage is not supported by the kernel 2019/10/11 01:33:56 setuid sandbox: enabled 2019/10/11 01:33:56 namespace sandbox: enabled 2019/10/11 01:33:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/11 01:33:56 fault injection: enabled 2019/10/11 01:33:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/11 01:33:56 net packet injection: enabled 2019/10/11 01:33:56 net device setup: enabled 2019/10/11 01:33:56 concurrency sanitizer: enabled syzkaller login: [ 48.162348][ T7365] ================================================================== [ 48.170677][ T7365] BUG: KCSAN: data-race in tcp_poll / tcp_recvmsg [ 48.177078][ T7365] [ 48.179511][ T7365] write to 0xffff888122a8c5f4 of 4 bytes by task 7377 on cpu 1: [ 48.187167][ T7365] tcp_recvmsg+0xd86/0x1a30 [ 48.191659][ T7365] inet_recvmsg+0xbb/0x250 [ 48.196061][ T7365] sock_recvmsg+0x92/0xb0 [ 48.200376][ T7365] sock_read_iter+0x15f/0x1e0 [ 48.205076][ T7365] new_sync_read+0x389/0x4f0 [ 48.209657][ T7365] __vfs_read+0xb1/0xc0 [ 48.213802][ T7365] vfs_read+0x143/0x2c0 [ 48.217945][ T7365] ksys_read+0xd5/0x1b0 [ 48.222093][ T7365] __x64_sys_read+0x4c/0x60 [ 48.226589][ T7365] do_syscall_64+0xcf/0x2f0 [ 48.231092][ T7365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.236968][ T7365] [ 48.239383][ T7365] read to 0xffff888122a8c5f4 of 4 bytes by task 7365 on cpu 0: [ 48.247890][ T7365] tcp_poll+0x1cc/0x6b0 [ 48.252341][ T7365] sock_poll+0xed/0x250 [ 48.259165][ T7365] ep_item_poll.isra.0+0x90/0x190 [ 48.264186][ T7365] ep_send_events_proc+0x113/0x5c0 [ 48.269293][ T7365] ep_scan_ready_list.constprop.0+0x189/0x500 [ 48.275347][ T7365] ep_poll+0xe3/0x900 [ 48.279316][ T7365] do_epoll_wait+0x162/0x180 [ 48.284045][ T7365] __x64_sys_epoll_pwait+0xcd/0x170 [ 48.289499][ T7365] do_syscall_64+0xcf/0x2f0 [ 48.293997][ T7365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.299994][ T7365] [ 48.302635][ T7365] Reported by Kernel Concurrency Sanitizer on: [ 48.308900][ T7365] CPU: 0 PID: 7365 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 48.316033][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.326076][ T7365] ================================================================== [ 48.334238][ T7365] Kernel panic - not syncing: panic_on_warn set ... [ 48.340813][ T7365] CPU: 0 PID: 7365 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 48.347906][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.357946][ T7365] Call Trace: [ 48.361231][ T7365] dump_stack+0xf5/0x159 [ 48.365609][ T7365] panic+0x209/0x639 [ 48.369496][ T7365] ? do_syscall_64+0xcf/0x2f0 [ 48.374164][ T7365] ? vprintk_func+0x8d/0x140 [ 48.378804][ T7365] kcsan_report.cold+0xc/0x1b [ 48.383475][ T7365] __kcsan_setup_watchpoint+0x3ee/0x510 [ 48.389010][ T7365] __tsan_read4+0x2c/0x30 [ 48.393333][ T7365] tcp_poll+0x1cc/0x6b0 [ 48.397480][ T7365] ? tcp_alloc_md5sig_pool+0x320/0x320 [ 48.402975][ T7365] sock_poll+0xed/0x250 [ 48.407131][ T7365] ? sock_read_iter+0x1e0/0x1e0 [ 48.411971][ T7365] ep_item_poll.isra.0+0x90/0x190 [ 48.417036][ T7365] ep_send_events_proc+0x113/0x5c0 [ 48.422139][ T7365] ? __kcsan_setup_watchpoint+0x96/0x510 [ 48.427765][ T7365] ep_scan_ready_list.constprop.0+0x189/0x500 [ 48.433822][ T7365] ? ep_loop_check_proc+0x2f0/0x2f0 [ 48.439009][ T7365] ep_poll+0xe3/0x900 [ 48.442986][ T7365] ? wake_up_q+0x70/0x70 [ 48.447254][ T7365] do_epoll_wait+0x162/0x180 [ 48.451924][ T7365] __x64_sys_epoll_pwait+0xcd/0x170 [ 48.457112][ T7365] do_syscall_64+0xcf/0x2f0 [ 48.461660][ T7365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.467538][ T7365] RIP: 0033:0x45b300 [ 48.471424][ T7365] Code: 0f 05 89 44 24 20 c3 cc cc cc 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 44 8b 54 24 1c 49 c7 c0 00 00 00 00 b8 19 01 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 7c 24 08 48 c7 [ 48.491027][ T7365] RSP: 002b:000000c42004d860 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 48.499566][ T7365] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000045b300 [ 48.507540][ T7365] RDX: 0000000000000080 RSI: 000000c42004d8a0 RDI: 0000000000000004 [ 48.515645][ T7365] RBP: 000000c42004dea0 R08: 0000000000000000 R09: 000000c420000d80 [ 48.523653][ T7365] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000a598c8 [ 48.531924][ T7365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.541736][ T7365] Kernel Offset: disabled [ 48.546076][ T7365] Rebooting in 86400 seconds..