[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.718576][ T25] audit: type=1800 audit(1570201297.346:25): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.746061][ T25] audit: type=1800 audit(1570201297.346:26): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.773198][ T25] audit: type=1800 audit(1570201297.346:27): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. 2019/10/04 15:01:57 fuzzer started 2019/10/04 15:01:58 dialing manager at 10.128.0.105:44881 2019/10/04 15:01:58 syscalls: 2523 2019/10/04 15:01:58 code coverage: enabled 2019/10/04 15:01:58 comparison tracing: enabled 2019/10/04 15:01:58 extra coverage: extra coverage is not supported by the kernel 2019/10/04 15:01:58 setuid sandbox: enabled 2019/10/04 15:01:58 namespace sandbox: enabled 2019/10/04 15:01:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 15:01:58 fault injection: enabled 2019/10/04 15:01:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 15:01:58 net packet injection: enabled 2019/10/04 15:01:58 net device setup: enabled 2019/10/04 15:01:58 concurrency sanitizer: enabled syzkaller login: [ 58.243318][ C1] ================================================================== [ 58.251594][ C1] BUG: KCSAN: data-race in __tcp_select_window / tcp_add_backlog [ 58.259285][ C1] [ 58.261608][ C1] read to 0xffff888122a2b2ec of 4 bytes by task 7119 on cpu 0: [ 58.269134][ C1] __tcp_select_window+0x6b/0x4d0 [ 58.274149][ C1] __tcp_transmit_skb+0x679/0x1cd0 [ 58.279241][ C1] __tcp_send_ack+0x246/0x300 [ 58.283985][ C1] tcp_send_ack+0x34/0x40 [ 58.288297][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 58.293126][ C1] tcp_recvmsg+0x633/0x1a30 [ 58.297611][ C1] inet_recvmsg+0xbb/0x250 [ 58.302019][ C1] sock_recvmsg+0x92/0xb0 [ 58.306328][ C1] sock_read_iter+0x15f/0x1e0 [ 58.310986][ C1] new_sync_read+0x389/0x4f0 [ 58.315568][ C1] __vfs_read+0xb1/0xc0 [ 58.319704][ C1] vfs_read+0x143/0x2c0 [ 58.323849][ C1] ksys_read+0xd5/0x1b0 [ 58.327987][ C1] __x64_sys_read+0x4c/0x60 [ 58.332461][ C1] [ 58.334774][ C1] write to 0xffff888122a2b2ec of 4 bytes by interrupt on cpu 1: [ 58.342394][ C1] tcp_add_backlog+0x4a0/0xcc0 [ 58.347138][ C1] tcp_v4_rcv+0x1aba/0x1bf0 [ 58.351623][ C1] ip_protocol_deliver_rcu+0x51/0x470 [ 58.356980][ C1] ip_local_deliver_finish+0x110/0x140 [ 58.362419][ C1] ip_local_deliver+0x133/0x210 [ 58.367249][ C1] ip_rcv_finish+0x121/0x160 [ 58.372165][ C1] ip_rcv+0x18f/0x1a0 [ 58.376140][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 58.381843][ C1] __netif_receive_skb+0x37/0xf0 [ 58.386759][ C1] netif_receive_skb_internal+0x59/0x190 [ 58.392370][ C1] napi_gro_receive+0x28f/0x330 [ 58.397202][ C1] receive_buf+0x284/0x30b0 [ 58.401687][ C1] virtnet_poll+0x436/0x7d0 [ 58.406160][ C1] [ 58.408463][ C1] Reported by Kernel Concurrency Sanitizer on: [ 58.414608][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0 [ 58.421345][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.431387][ C1] ================================================================== [ 58.441855][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 58.448425][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0 [ 58.455163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.465196][ C1] Call Trace: [ 58.468480][ C1] [ 58.471321][ C1] dump_stack+0xf5/0x159 [ 58.475550][ C1] panic+0x209/0x639 [ 58.479431][ C1] ? vprintk_func+0x8d/0x140 [ 58.484004][ C1] kcsan_report.cold+0x57/0xeb [ 58.488754][ C1] __kcsan_setup_watchpoint+0x342/0x500 [ 58.494285][ C1] __tsan_write4+0x32/0x40 [ 58.498683][ C1] tcp_add_backlog+0x4a0/0xcc0 [ 58.503430][ C1] ? __rcu_read_unlock+0x62/0xe0 [ 58.508470][ C1] tcp_v4_rcv+0x1aba/0x1bf0 [ 58.512955][ C1] ? __tsan_read8+0x2c/0x30 [ 58.517448][ C1] ip_protocol_deliver_rcu+0x51/0x470 [ 58.522826][ C1] ip_local_deliver_finish+0x110/0x140 [ 58.528266][ C1] ip_local_deliver+0x133/0x210 [ 58.533102][ C1] ? ip_protocol_deliver_rcu+0x470/0x470 [ 58.538717][ C1] ip_rcv_finish+0x121/0x160 [ 58.543292][ C1] ip_rcv+0x18f/0x1a0 [ 58.547258][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 58.552092][ C1] ? ip_local_deliver+0x210/0x210 [ 58.557111][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 58.562834][ C1] __netif_receive_skb+0x37/0xf0 [ 58.567756][ C1] netif_receive_skb_internal+0x59/0x190 [ 58.573375][ C1] napi_gro_receive+0x28f/0x330 [ 58.578220][ C1] receive_buf+0x284/0x30b0 [ 58.582726][ C1] ? __tsan_write8+0x32/0x40 [ 58.587314][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 58.592758][ C1] ? virtqueue_get_buf+0x31/0x40 [ 58.597697][ C1] virtnet_poll+0x436/0x7d0 [ 58.602191][ C1] net_rx_action+0x3ae/0xa50 [ 58.606769][ C1] __do_softirq+0x115/0x33f [ 58.611259][ C1] irq_exit+0xbb/0xe0 [ 58.615224][ C1] do_IRQ+0xdf/0x150 [ 58.619101][ C1] common_interrupt+0xf/0xf [ 58.623583][ C1] [ 58.626509][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 58.631868][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 8c d2 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 7c d2 4e 00 fb f4 90 55 48 89 e5 41 55 41 54 53 e8 82 78 a7 fc e8 5d 4e b9 fd 0f [ 58.651453][ C1] RSP: 0018:ffffc90000cd3e48 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffde [ 58.659847][ C1] RAX: d4fdf3b645a1d0e6 RBX: 0000000000000001 RCX: 0000000000000682 [ 58.667802][ C1] RDX: 0000000000054f60 RSI: 020c49ba5e353f7d RDI: ffffffff85a55a28 [ 58.675756][ C1] RBP: ffffc90000cd3e80 R08: 0000000000000000 R09: 0000ffff85a55a2f [ 58.683723][ C1] R10: 00000000aaaaaaab R11: ffffffff86042cc0 R12: ffff88812b38b0c0 [ 58.691684][ C1] R13: ffff88812b38b0c0 R14: 0000000000000000 R15: 0000000000000000 [ 58.699672][ C1] ? default_idle+0x50/0x230 [ 58.704251][ C1] arch_cpu_idle+0x1f/0x30 [ 58.708658][ C1] default_idle_call+0x1e/0x40 [ 58.713406][ C1] do_idle+0x1ea/0x2c0 [ 58.717456][ C1] ? complete+0x44/0x50 [ 58.721596][ C1] cpu_startup_entry+0x1b/0x20 [ 58.726360][ C1] start_secondary+0x207/0x260 [ 58.731127][ C1] secondary_startup_64+0xa4/0xb0 [ 58.737457][ C1] Kernel Offset: disabled [ 58.741783][ C1] Rebooting in 86400 seconds..