[ 35.224658][ T25] audit: type=1800 audit(1571786643.445:25): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 35.280484][ T25] audit: type=1800 audit(1571786643.455:26): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 35.302826][ T25] audit: type=1800 audit(1571786643.455:27): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 35.627711][ T7124] sshd (7124) used greatest stack depth: 10136 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. 2019/10/22 23:24:10 fuzzer started 2019/10/22 23:24:12 dialing manager at 10.128.0.105:33369 2019/10/22 23:24:12 syscalls: 2524 2019/10/22 23:24:12 code coverage: enabled 2019/10/22 23:24:12 comparison tracing: enabled 2019/10/22 23:24:12 extra coverage: extra coverage is not supported by the kernel 2019/10/22 23:24:12 setuid sandbox: enabled 2019/10/22 23:24:12 namespace sandbox: enabled 2019/10/22 23:24:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 23:24:12 fault injection: enabled 2019/10/22 23:24:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 23:24:12 net packet injection: enabled 2019/10/22 23:24:12 net device setup: enabled 2019/10/22 23:24:12 concurrency sanitizer: enabled syzkaller login: [ 44.462220][ C1] ================================================================== [ 44.470347][ C1] BUG: KCSAN: data-race in __tcp_select_window / tcp_add_backlog [ 44.478048][ C1] [ 44.480368][ C1] read to 0xffff888126f9332c of 4 bytes by task 7213 on cpu 0: [ 44.487895][ C1] __tcp_select_window+0x6b/0x4d0 [ 44.492902][ C1] __tcp_transmit_skb+0x700/0x1d60 [ 44.497994][ C1] __tcp_send_ack+0x246/0x300 [ 44.502654][ C1] tcp_send_ack+0x34/0x40 [ 44.506967][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 44.511808][ C1] tcp_recvmsg+0x633/0x1a30 [ 44.516296][ C1] inet_recvmsg+0xbb/0x250 [ 44.520784][ C1] sock_recvmsg+0x92/0xb0 [ 44.525097][ C1] sock_read_iter+0x15f/0x1e0 [ 44.529759][ C1] new_sync_read+0x389/0x4f0 [ 44.534339][ C1] __vfs_read+0xb1/0xc0 [ 44.538476][ C1] vfs_read+0x143/0x2c0 [ 44.542612][ C1] ksys_read+0xd5/0x1b0 [ 44.546752][ C1] __x64_sys_read+0x4c/0x60 [ 44.551227][ C1] [ 44.553542][ C1] write to 0xffff888126f9332c of 4 bytes by interrupt on cpu 1: [ 44.561164][ C1] tcp_add_backlog+0x4a0/0xcc0 [ 44.565911][ C1] tcp_v4_rcv+0x1a60/0x1bb0 [ 44.570406][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 44.575770][ C1] ip_local_deliver_finish+0x110/0x140 [ 44.581209][ C1] ip_local_deliver+0x133/0x210 [ 44.586040][ C1] ip_rcv_finish+0x121/0x160 [ 44.590612][ C1] ip_rcv+0x18f/0x1a0 [ 44.594577][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 44.600279][ C1] __netif_receive_skb+0x37/0xf0 [ 44.605200][ C1] netif_receive_skb_internal+0x59/0x190 [ 44.610823][ C1] napi_gro_receive+0x28f/0x330 [ 44.615655][ C1] receive_buf+0x284/0x30b0 [ 44.620147][ C1] virtnet_poll+0x436/0x7d0 [ 44.624633][ C1] [ 44.626939][ C1] Reported by Kernel Concurrency Sanitizer on: [ 44.633091][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc3+ #0 [ 44.640436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.650772][ C1] ================================================================== [ 44.658816][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 44.665388][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc3+ #0 [ 44.672745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.682778][ C1] Call Trace: [ 44.686069][ C1] dump_stack+0xf5/0x159 [ 44.690307][ C1] panic+0x210/0x640 [ 44.694187][ C1] ? __netif_receive_skb+0x37/0xf0 [ 44.699295][ C1] ? vprintk_func+0x8d/0x140 [ 44.703871][ C1] kcsan_report.cold+0xc/0x10 [ 44.708534][ C1] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 44.714070][ C1] __tsan_write4+0x32/0x40 [ 44.718733][ C1] tcp_add_backlog+0x4a0/0xcc0 [ 44.723488][ C1] tcp_v4_rcv+0x1a60/0x1bb0 [ 44.727974][ C1] ? __tsan_read8+0x2c/0x30 [ 44.732470][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 44.737831][ C1] ip_local_deliver_finish+0x110/0x140 [ 44.743275][ C1] ip_local_deliver+0x133/0x210 [ 44.748113][ C1] ? ip_protocol_deliver_rcu+0x420/0x420 [ 44.753740][ C1] ip_rcv_finish+0x121/0x160 [ 44.758490][ C1] ip_rcv+0x18f/0x1a0 [ 44.762457][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 44.767299][ C1] ? ip_local_deliver+0x210/0x210 [ 44.772312][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 44.778019][ C1] __netif_receive_skb+0x37/0xf0 [ 44.782946][ C1] netif_receive_skb_internal+0x59/0x190 [ 44.788567][ C1] napi_gro_receive+0x28f/0x330 [ 44.793407][ C1] receive_buf+0x284/0x30b0 [ 44.797895][ C1] ? __tsan_write8+0x32/0x40 [ 44.802491][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 44.807934][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 44.813566][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 44.819186][ C1] virtnet_poll+0x436/0x7d0 [ 44.823681][ C1] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 44.829399][ C1] net_rx_action+0x3ae/0xa90 [ 44.833980][ C1] __do_softirq+0x115/0x33f [ 44.838488][ C1] ? takeover_tasklets+0x250/0x250 [ 44.843583][ C1] run_ksoftirqd+0x46/0x60 [ 44.847985][ C1] smpboot_thread_fn+0x37d/0x4a0 [ 44.852912][ C1] kthread+0x1d4/0x200 [ 44.856984][ C1] ? constant_test_bit.constprop.0+0x30/0x30 [ 44.862964][ C1] ? kthread_stop+0x2d0/0x2d0 [ 44.867628][ C1] ret_from_fork+0x1f/0x30 [ 44.873393][ C1] Kernel Offset: disabled [ 44.877833][ C1] Rebooting in 86400 seconds..