[ 51.387980][ T26] audit: type=1800 audit(1573095052.398:27): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 51.502885][ T26] audit: type=1800 audit(1573095052.538:28): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.455010][ T26] audit: type=1800 audit(1573095053.498:29): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 52.477934][ T26] audit: type=1800 audit(1573095053.498:30): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. 2019/11/07 02:51:03 fuzzer started 2019/11/07 02:51:05 dialing manager at 10.128.0.105:34849 2019/11/07 02:51:05 syscalls: 2553 2019/11/07 02:51:05 code coverage: enabled 2019/11/07 02:51:05 comparison tracing: enabled 2019/11/07 02:51:05 extra coverage: extra coverage is not supported by the kernel 2019/11/07 02:51:05 setuid sandbox: enabled 2019/11/07 02:51:05 namespace sandbox: enabled 2019/11/07 02:51:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/07 02:51:05 fault injection: enabled 2019/11/07 02:51:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/07 02:51:05 net packet injection: enabled 2019/11/07 02:51:05 net device setup: enabled 2019/11/07 02:51:05 concurrency sanitizer: enabled 2019/11/07 02:51:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/07 02:51:05 adding functions to KCSAN blacklist: 'run_timer_softirq' 'tick_do_update_jiffies64' '__hrtimer_run_queues' 'tomoyo_supervisor' syzkaller login: [ 65.394162][ T7939] ================================================================== [ 65.402326][ T7939] BUG: KCSAN: data-race in tcp_add_backlog / tcp_recvmsg [ 65.409343][ T7939] [ 65.411685][ T7939] write to 0xffff8881232a2138 of 8 bytes by interrupt on cpu 1: [ 65.419317][ T7939] tcp_add_backlog+0x476/0xce0 [ 65.424063][ T7939] tcp_v4_rcv+0x1a70/0x1bd0 [ 65.428549][ T7939] ip_protocol_deliver_rcu+0x4d/0x420 [ 65.433904][ T7939] ip_local_deliver_finish+0x110/0x140 [ 65.439355][ T7939] ip_local_deliver+0x133/0x210 [ 65.444186][ T7939] ip_rcv_finish+0x121/0x160 [ 65.448756][ T7939] ip_rcv+0x18f/0x1a0 [ 65.452720][ T7939] __netif_receive_skb_one_core+0xa7/0xe0 [ 65.458421][ T7939] __netif_receive_skb+0x37/0xf0 [ 65.463341][ T7939] netif_receive_skb_internal+0x59/0x190 [ 65.468954][ T7939] napi_gro_receive+0x28f/0x330 [ 65.473789][ T7939] receive_buf+0x284/0x30b0 [ 65.478269][ T7939] virtnet_poll+0x436/0x7d0 [ 65.482751][ T7939] net_rx_action+0x3ae/0xa90 [ 65.487324][ T7939] __do_softirq+0x115/0x33f [ 65.491810][ T7939] run_ksoftirqd+0x46/0x60 [ 65.496230][ T7939] smpboot_thread_fn+0x37d/0x4a0 [ 65.501146][ T7939] kthread+0x1d4/0x200 [ 65.505204][ T7939] ret_from_fork+0x1f/0x30 [ 65.509596][ T7939] [ 65.511908][ T7939] read to 0xffff8881232a2138 of 8 bytes by task 7939 on cpu 0: [ 65.519430][ T7939] tcp_recvmsg+0x46e/0x1b40 [ 65.523918][ T7939] inet_recvmsg+0xbb/0x250 [ 65.528319][ T7939] sock_recvmsg+0x92/0xb0 [ 65.532633][ T7939] sock_read_iter+0x15f/0x1e0 [ 65.537293][ T7939] new_sync_read+0x389/0x4f0 [ 65.541873][ T7939] __vfs_read+0xb1/0xc0 [ 65.546009][ T7939] vfs_read+0x143/0x2c0 [ 65.550159][ T7939] ksys_read+0xd5/0x1b0 [ 65.554310][ T7939] __x64_sys_read+0x4c/0x60 [ 65.558809][ T7939] do_syscall_64+0xcc/0x370 [ 65.563305][ T7939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.569173][ T7939] [ 65.571476][ T7939] Reported by Kernel Concurrency Sanitizer on: [ 65.577610][ T7939] CPU: 0 PID: 7939 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 65.585050][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.595084][ T7939] ================================================================== [ 65.603127][ T7939] Kernel panic - not syncing: panic_on_warn set ... [ 65.609699][ T7939] CPU: 0 PID: 7939 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 65.617127][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.627158][ T7939] Call Trace: [ 65.630435][ T7939] dump_stack+0xf5/0x159 [ 65.634661][ T7939] panic+0x210/0x640 [ 65.638541][ T7939] ? vprintk_func+0x8d/0x140 [ 65.643115][ T7939] kcsan_report.cold+0xc/0xe [ 65.647697][ T7939] kcsan_setup_watchpoint+0x3fe/0x410 [ 65.653053][ T7939] __tsan_read8+0x145/0x1f0 [ 65.657553][ T7939] tcp_recvmsg+0x46e/0x1b40 [ 65.662052][ T7939] inet_recvmsg+0xbb/0x250 [ 65.666451][ T7939] ? apparmor_socket_recvmsg+0x3b/0x50 [ 65.671908][ T7939] ? security_socket_recvmsg+0x92/0xb0 [ 65.677359][ T7939] ? inet_sendpage+0x100/0x100 [ 65.682113][ T7939] sock_recvmsg+0x92/0xb0 [ 65.686438][ T7939] sock_read_iter+0x15f/0x1e0 [ 65.691105][ T7939] new_sync_read+0x389/0x4f0 [ 65.695696][ T7939] __vfs_read+0xb1/0xc0 [ 65.699931][ T7939] vfs_read+0x143/0x2c0 [ 65.704070][ T7939] ksys_read+0xd5/0x1b0 [ 65.708209][ T7939] __x64_sys_read+0x4c/0x60 [ 65.712707][ T7939] do_syscall_64+0xcc/0x370 [ 65.717201][ T7939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.723333][ T7939] RIP: 0033:0x47c530 [ 65.727219][ T7939] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 65.746810][ T7939] RSP: 002b:000000c4204f5810 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 65.755201][ T7939] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 65.763159][ T7939] RDX: 0000000000001000 RSI: 000000c420314000 RDI: 0000000000000003 [ 65.771111][ T7939] RBP: 000000c4204f5868 R08: 0000000000000000 R09: 0000000000000000 [ 65.779075][ T7939] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 [ 65.787025][ T7939] R13: ffffffffffffffff R14: 0000000000000002 R15: ffffffffffffffff [ 65.796328][ T7939] Kernel Offset: disabled [ 65.800664][ T7939] Rebooting in 86400 seconds..