[ 50.896859][ T25] audit: type=1800 audit(1573140270.597:30): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2019/11/07 15:24:41 fuzzer started 2019/11/07 15:24:42 dialing manager at 10.128.0.105:38105 2019/11/07 15:24:42 syscalls: 2553 2019/11/07 15:24:42 code coverage: enabled 2019/11/07 15:24:42 comparison tracing: enabled 2019/11/07 15:24:42 extra coverage: extra coverage is not supported by the kernel 2019/11/07 15:24:42 setuid sandbox: enabled 2019/11/07 15:24:42 namespace sandbox: enabled 2019/11/07 15:24:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/07 15:24:42 fault injection: enabled 2019/11/07 15:24:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/07 15:24:42 net packet injection: enabled 2019/11/07 15:24:42 net device setup: enabled 2019/11/07 15:24:42 concurrency sanitizer: enabled 2019/11/07 15:24:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2019/11/07 15:24:43 adding functions to KCSAN blacklist: 'find_next_bit' '__hrtimer_run_queues' syzkaller login: [ 63.561664][ C1] ================================================================== [ 63.569790][ C1] BUG: KCSAN: data-race in tcp_add_backlog / tcp_recvmsg [ 63.576802][ C1] [ 63.579241][ C1] read to 0xffff888125eaf2f8 of 8 bytes by task 7920 on cpu 0: [ 63.586793][ C1] tcp_recvmsg+0x46e/0x1b40 [ 63.591291][ C1] inet_recvmsg+0xbb/0x250 [ 63.595700][ C1] sock_recvmsg+0x92/0xb0 [ 63.600026][ C1] sock_read_iter+0x15f/0x1e0 [ 63.604697][ C1] new_sync_read+0x389/0x4f0 [ 63.609316][ C1] __vfs_read+0xb1/0xc0 [ 63.613482][ C1] vfs_read+0x143/0x2c0 [ 63.617651][ C1] ksys_read+0xd5/0x1b0 [ 63.621923][ C1] __x64_sys_read+0x4c/0x60 [ 63.626432][ C1] do_syscall_64+0xcc/0x370 [ 63.630954][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.636841][ C1] [ 63.639179][ C1] write to 0xffff888125eaf2f8 of 8 bytes by interrupt on cpu 1: [ 63.646807][ C1] tcp_add_backlog+0x476/0xce0 [ 63.651560][ C1] tcp_v4_rcv+0x1a70/0x1bd0 [ 63.656060][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 63.661511][ C1] ip_local_deliver_finish+0x110/0x140 [ 63.666962][ C1] ip_local_deliver+0x133/0x210 [ 63.671807][ C1] ip_rcv_finish+0x121/0x160 [ 63.676404][ C1] ip_rcv+0x18f/0x1a0 [ 63.680392][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 63.686195][ C1] __netif_receive_skb+0x37/0xf0 [ 63.691145][ C1] netif_receive_skb_internal+0x59/0x190 [ 63.696870][ C1] napi_gro_receive+0x28f/0x330 [ 63.701718][ C1] receive_buf+0x284/0x30b0 [ 63.706209][ C1] virtnet_poll+0x436/0x7d0 [ 63.710715][ C1] net_rx_action+0x3ae/0xa90 [ 63.715301][ C1] __do_softirq+0x115/0x33f [ 63.719799][ C1] irq_exit+0xbb/0xe0 [ 63.723776][ C1] do_IRQ+0xa6/0x180 [ 63.727673][ C1] ret_from_intr+0x0/0x19 [ 63.731995][ C1] native_safe_halt+0xe/0x10 [ 63.736580][ C1] arch_cpu_idle+0x1f/0x30 [ 63.740986][ C1] default_idle_call+0x1e/0x40 [ 63.745741][ C1] do_idle+0x1af/0x280 [ 63.749816][ C1] cpu_startup_entry+0x1b/0x20 [ 63.754574][ C1] start_secondary+0x208/0x260 [ 63.759331][ C1] secondary_startup_64+0xa4/0xb0 [ 63.764333][ C1] [ 63.766647][ C1] Reported by Kernel Concurrency Sanitizer on: [ 63.772794][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-rc6+ #0 [ 63.779911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.789956][ C1] ================================================================== [ 63.798009][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 63.804592][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.4.0-rc6+ #0 [ 63.811688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.821739][ C1] Call Trace: [ 63.825010][ C1] [ 63.827867][ C1] dump_stack+0xf5/0x159 [ 63.832118][ C1] panic+0x210/0x640 [ 63.836014][ C1] ? vprintk_func+0x8d/0x140 [ 63.840601][ C1] kcsan_report.cold+0xc/0xe [ 63.845190][ C1] kcsan_setup_watchpoint+0x3fe/0x410 [ 63.850563][ C1] __tsan_unaligned_write8+0x143/0x1f0 [ 63.856024][ C1] tcp_add_backlog+0x476/0xce0 [ 63.860794][ C1] tcp_v4_rcv+0x1a70/0x1bd0 [ 63.865292][ C1] ? __read_once_size+0x41/0xe0 [ 63.870155][ C1] ip_protocol_deliver_rcu+0x4d/0x420 [ 63.875541][ C1] ip_local_deliver_finish+0x110/0x140 [ 63.880997][ C1] ip_local_deliver+0x133/0x210 [ 63.885860][ C1] ? ip_protocol_deliver_rcu+0x420/0x420 [ 63.891499][ C1] ip_rcv_finish+0x121/0x160 [ 63.896091][ C1] ip_rcv+0x18f/0x1a0 [ 63.900078][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 63.905065][ C1] ? ip_local_deliver+0x210/0x210 [ 63.910106][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 63.915825][ C1] __netif_receive_skb+0x37/0xf0 [ 63.920762][ C1] netif_receive_skb_internal+0x59/0x190 [ 63.926395][ C1] napi_gro_receive+0x28f/0x330 [ 63.931241][ C1] receive_buf+0x284/0x30b0 [ 63.935741][ C1] ? common_interrupt+0xf/0xf [ 63.940409][ C1] ? common_interrupt+0xa/0xf [ 63.945096][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 63.950548][ C1] ? virtqueue_get_buf+0x31/0x40 [ 63.955489][ C1] virtnet_poll+0x436/0x7d0 [ 63.960000][ C1] net_rx_action+0x3ae/0xa90 [ 63.964595][ C1] __do_softirq+0x115/0x33f [ 63.969102][ C1] irq_exit+0xbb/0xe0 [ 63.973081][ C1] do_IRQ+0xa6/0x180 [ 63.976975][ C1] common_interrupt+0xf/0xf [ 63.981475][ C1] [ 63.984420][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 63.989811][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 6c 00 4c 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 5c 00 4c 00 fb f4 90 55 48 89 e5 41 55 41 54 53 e8 32 36 a4 fc e8 4d 82 b8 fd 0f [ 64.009421][ C1] RSP: 0018:ffffc90000cd3e48 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffde [ 64.017828][ C1] RAX: 00000000000005af RBX: ffff88812b3850c0 RCX: 0000ffffffffffff [ 64.025804][ C1] RDX: 0000000000000000 RSI: 0000000000000016 RDI: ffffffff85a56378 [ 64.033779][ C1] RBP: ffffc90000cd3e80 R08: 0000ffff85a56378 R09: 00000000aaaaaaab [ 64.041743][ C1] R10: 0000ffff85a5637f R11: 0000000000000000 R12: 0000000000000001 [ 64.056041][ C1] R13: ffff88812b3850c0 R14: 0000000000000000 R15: 0000000000000000 [ 64.064031][ C1] ? default_idle+0x50/0x230 [ 64.068620][ C1] arch_cpu_idle+0x1f/0x30 [ 64.073031][ C1] default_idle_call+0x1e/0x40 [ 64.077788][ C1] do_idle+0x1af/0x280 [ 64.081851][ C1] ? complete+0x44/0x50 [ 64.086015][ C1] cpu_startup_entry+0x1b/0x20 [ 64.090790][ C1] start_secondary+0x208/0x260 [ 64.095554][ C1] secondary_startup_64+0xa4/0xb0 [ 64.101864][ C1] Kernel Offset: disabled [ 64.106188][ C1] Rebooting in 86400 seconds..