[ 52.593428][ T26] audit: type=1800 audit(1572955762.581:30): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.250' (ECDSA) to the list of known hosts. 2019/11/05 12:09:33 fuzzer started 2019/11/05 12:09:34 dialing manager at 10.128.0.105:39277 2019/11/05 12:09:34 syscalls: 2553 2019/11/05 12:09:34 code coverage: enabled 2019/11/05 12:09:34 comparison tracing: enabled 2019/11/05 12:09:34 extra coverage: extra coverage is not supported by the kernel 2019/11/05 12:09:34 setuid sandbox: enabled 2019/11/05 12:09:34 namespace sandbox: enabled 2019/11/05 12:09:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 12:09:34 fault injection: enabled 2019/11/05 12:09:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 12:09:34 net packet injection: enabled 2019/11/05 12:09:34 net device setup: enabled 2019/11/05 12:09:34 concurrency sanitizer: enabled 2019/11/05 12:09:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/05 12:09:34 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'find_next_bit' 'ep_insert' 'ep_poll' '__ext4_new_inode' syzkaller login: [ 64.892848][ T8150] ================================================================== [ 64.901209][ T8150] BUG: KCSAN: data-race in tcp_add_backlog / tcp_recvmsg [ 64.909004][ T8150] [ 64.911423][ T8150] write to 0xffff888122db52f8 of 8 bytes by interrupt on cpu 0: [ 64.919419][ T8150] tcp_add_backlog+0x476/0xce0 [ 64.924209][ T8150] tcp_v4_rcv+0x1a70/0x1bd0 [ 64.928915][ T8150] ip_protocol_deliver_rcu+0x4d/0x420 [ 64.934424][ T8150] ip_local_deliver_finish+0x110/0x140 [ 64.940558][ T8150] ip_local_deliver+0x133/0x210 [ 64.946195][ T8150] ip_rcv_finish+0x121/0x160 [ 64.950784][ T8150] ip_rcv+0x18f/0x1a0 [ 64.954806][ T8150] __netif_receive_skb_one_core+0xa7/0xe0 [ 64.960526][ T8150] __netif_receive_skb+0x37/0xf0 [ 64.965463][ T8150] netif_receive_skb_internal+0x59/0x190 [ 64.971095][ T8150] napi_gro_receive+0x28f/0x330 [ 64.976177][ T8150] receive_buf+0x284/0x30b0 [ 64.980833][ T8150] virtnet_poll+0x436/0x7d0 [ 64.987618][ T8150] net_rx_action+0x3ae/0xa90 [ 64.992352][ T8150] __do_softirq+0x115/0x33f [ 64.997652][ T8150] irq_exit+0xbb/0xe0 [ 65.002851][ T8150] do_IRQ+0xa6/0x180 [ 65.007997][ T8150] ret_from_intr+0x0/0x19 [ 65.014368][ T8150] native_safe_halt+0xe/0x10 [ 65.020271][ T8150] arch_cpu_idle+0x1f/0x30 [ 65.025323][ T8150] default_idle_call+0x1e/0x40 [ 65.030514][ T8150] do_idle+0x1af/0x280 [ 65.034766][ T8150] cpu_startup_entry+0x1b/0x20 [ 65.040005][ T8150] rest_init+0xec/0xf6 [ 65.044256][ T8150] arch_call_rest_init+0x17/0x37 [ 65.049461][ T8150] start_kernel+0x838/0x85e [ 65.054382][ T8150] x86_64_start_reservations+0x29/0x2b [ 65.060097][ T8150] x86_64_start_kernel+0x72/0x76 [ 65.065040][ T8150] secondary_startup_64+0xa4/0xb0 [ 65.070328][ T8150] [ 65.073411][ T8150] read to 0xffff888122db52f8 of 8 bytes by task 8150 on cpu 1: [ 65.081831][ T8150] tcp_recvmsg+0x46e/0x1b40 [ 65.087153][ T8150] inet_recvmsg+0xbb/0x250 [ 65.091786][ T8150] sock_recvmsg+0x92/0xb0 [ 65.096135][ T8150] sock_read_iter+0x15f/0x1e0 [ 65.101331][ T8150] new_sync_read+0x389/0x4f0 [ 65.107020][ T8150] __vfs_read+0xb1/0xc0 [ 65.111602][ T8150] vfs_read+0x143/0x2c0 [ 65.118024][ T8150] ksys_read+0xd5/0x1b0 [ 65.122830][ T8150] __x64_sys_read+0x4c/0x60 [ 65.127727][ T8150] do_syscall_64+0xcc/0x370 [ 65.132728][ T8150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.139149][ T8150] [ 65.141774][ T8150] Reported by Kernel Concurrency Sanitizer on: [ 65.149574][ T8150] CPU: 1 PID: 8150 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 65.158215][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.170488][ T8150] ================================================================== [ 65.180048][ T8150] Kernel panic - not syncing: panic_on_warn set ... [ 65.187412][ T8150] CPU: 1 PID: 8150 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0 [ 65.195428][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.206993][ T8150] Call Trace: [ 65.210974][ T8150] dump_stack+0xf5/0x159 [ 65.215266][ T8150] panic+0x210/0x640 [ 65.220075][ T8150] ? vprintk_func+0x8d/0x140 [ 65.228560][ T8150] kcsan_report.cold+0xc/0xe [ 65.233253][ T8150] kcsan_setup_watchpoint+0x3fe/0x410 [ 65.239367][ T8150] __tsan_read8+0x145/0x1f0 [ 65.244776][ T8150] tcp_recvmsg+0x46e/0x1b40 [ 65.249649][ T8150] inet_recvmsg+0xbb/0x250 [ 65.255175][ T8150] ? apparmor_socket_recvmsg+0x3b/0x50 [ 65.261236][ T8150] ? security_socket_recvmsg+0x92/0xb0 [ 65.267196][ T8150] ? inet_sendpage+0x100/0x100 [ 65.272783][ T8150] sock_recvmsg+0x92/0xb0 [ 65.277691][ T8150] sock_read_iter+0x15f/0x1e0 [ 65.282999][ T8150] new_sync_read+0x389/0x4f0 [ 65.288564][ T8150] __vfs_read+0xb1/0xc0 [ 65.294388][ T8150] vfs_read+0x143/0x2c0 [ 65.298969][ T8150] ksys_read+0xd5/0x1b0 [ 65.303236][ T8150] __x64_sys_read+0x4c/0x60 [ 65.308786][ T8150] do_syscall_64+0xcc/0x370 [ 65.313959][ T8150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.320567][ T8150] RIP: 0033:0x47c530 [ 65.326075][ T8150] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 65.347866][ T8150] RSP: 002b:000000c4201cb8b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 65.356722][ T8150] RAX: ffffffffffffffda RBX: 000000c420309400 RCX: 000000000047c530 [ 65.365537][ T8150] RDX: 0000000000001000 RSI: 000000c4202de000 RDI: 0000000000000003 [ 65.377639][ T8150] RBP: 000000c4201cb910 R08: 0000000000000000 R09: 0000000000000000 [ 65.386488][ T8150] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000a00 [ 65.398287][ T8150] R13: 0000000000000077 R14: 00007feea092f000 R15: 0000000000000010 [ 65.409493][ T8150] Kernel Offset: disabled [ 65.414390][ T8150] Rebooting in 86400 seconds..