[ 41.474394][ T25] audit: type=1800 audit(1571736329.924:25): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 41.509982][ T25] audit: type=1800 audit(1571736329.924:26): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 41.532947][ T25] audit: type=1800 audit(1571736329.924:27): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 42.275233][ T7182] sshd (7182) used greatest stack depth: 10152 bytes left [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. 2019/10/22 09:25:38 fuzzer started 2019/10/22 09:25:40 dialing manager at 10.128.0.105:37053 2019/10/22 09:25:40 syscalls: 2524 2019/10/22 09:25:40 code coverage: enabled 2019/10/22 09:25:40 comparison tracing: enabled 2019/10/22 09:25:40 extra coverage: extra coverage is not supported by the kernel 2019/10/22 09:25:40 setuid sandbox: enabled 2019/10/22 09:25:40 namespace sandbox: enabled 2019/10/22 09:25:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 09:25:40 fault injection: enabled 2019/10/22 09:25:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 09:25:40 net packet injection: enabled 2019/10/22 09:25:40 net device setup: enabled 2019/10/22 09:25:40 concurrency sanitizer: enabled syzkaller login: [ 52.494750][ T7239] ================================================================== [ 52.503232][ T7239] BUG: KCSAN: data-race in tcp_add_backlog / tcp_recvmsg [ 52.510237][ T7239] [ 52.512545][ T7239] write to 0xffff8881268db2f8 of 8 bytes by interrupt on cpu 0: [ 52.520154][ T7239] tcp_add_backlog+0x45a/0xcc0 [ 52.524895][ T7239] tcp_v4_rcv+0x1a60/0x1bb0 [ 52.529372][ T7239] ip_protocol_deliver_rcu+0x4d/0x420 [ 52.534729][ T7239] ip_local_deliver_finish+0x110/0x140 [ 52.540173][ T7239] ip_local_deliver+0x133/0x210 [ 52.545015][ T7239] ip_rcv_finish+0x121/0x160 [ 52.549583][ T7239] ip_rcv+0x18f/0x1a0 [ 52.553557][ T7239] __netif_receive_skb_one_core+0xa7/0xe0 [ 52.559253][ T7239] __netif_receive_skb+0x37/0xf0 [ 52.564203][ T7239] netif_receive_skb_internal+0x59/0x190 [ 52.569838][ T7239] napi_gro_receive+0x28f/0x330 [ 52.574675][ T7239] receive_buf+0x284/0x30b0 [ 52.579155][ T7239] virtnet_poll+0x436/0x7d0 [ 52.583631][ T7239] net_rx_action+0x3ae/0xa90 [ 52.588883][ T7239] [ 52.591191][ T7239] read to 0xffff8881268db2f8 of 8 bytes by task 7239 on cpu 1: [ 52.598708][ T7239] tcp_recvmsg+0x470/0x1a30 [ 52.603183][ T7239] inet_recvmsg+0xbb/0x250 [ 52.607575][ T7239] sock_recvmsg+0x92/0xb0 [ 52.611877][ T7239] sock_read_iter+0x15f/0x1e0 [ 52.616526][ T7239] new_sync_read+0x389/0x4f0 [ 52.621088][ T7239] __vfs_read+0xb1/0xc0 [ 52.625216][ T7239] vfs_read+0x143/0x2c0 [ 52.629364][ T7239] ksys_read+0xd5/0x1b0 [ 52.633496][ T7239] __x64_sys_read+0x4c/0x60 [ 52.637984][ T7239] do_syscall_64+0xcc/0x370 [ 52.642461][ T7239] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.648323][ T7239] [ 52.650629][ T7239] Reported by Kernel Concurrency Sanitizer on: [ 52.656756][ T7239] CPU: 1 PID: 7239 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 52.664194][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.674238][ T7239] ================================================================== [ 52.682272][ T7239] Kernel panic - not syncing: panic_on_warn set ... [ 52.688844][ T7239] CPU: 1 PID: 7239 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 52.696281][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.706371][ T7239] Call Trace: [ 52.709650][ T7239] dump_stack+0xf5/0x159 [ 52.713871][ T7239] panic+0x210/0x640 [ 52.717758][ T7239] ? __x64_sys_read+0x4c/0x60 [ 52.722415][ T7239] ? vprintk_func+0x8d/0x140 [ 52.727043][ T7239] kcsan_report.cold+0xc/0x10 [ 52.731714][ T7239] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 52.737249][ T7239] __tsan_read8+0x2c/0x30 [ 52.741563][ T7239] tcp_recvmsg+0x470/0x1a30 [ 52.746056][ T7239] inet_recvmsg+0xbb/0x250 [ 52.750455][ T7239] ? __tsan_read8+0x2c/0x30 [ 52.754939][ T7239] ? inet_sendpage+0x100/0x100 [ 52.759707][ T7239] sock_recvmsg+0x92/0xb0 [ 52.764017][ T7239] sock_read_iter+0x15f/0x1e0 [ 52.768674][ T7239] new_sync_read+0x389/0x4f0 [ 52.773245][ T7239] __vfs_read+0xb1/0xc0 [ 52.777384][ T7239] vfs_read+0x143/0x2c0 [ 52.781515][ T7239] ksys_read+0xd5/0x1b0 [ 52.785648][ T7239] __x64_sys_read+0x4c/0x60 [ 52.790127][ T7239] do_syscall_64+0xcc/0x370 [ 52.794609][ T7239] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.800475][ T7239] RIP: 0033:0x47c530 [ 52.804346][ T7239] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 52.823922][ T7239] RSP: 002b:000000c4203bb7d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 52.832318][ T7239] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 52.840262][ T7239] RDX: 0000000000001000 RSI: 000000c42039e000 RDI: 0000000000000003 [ 52.848209][ T7239] RBP: 000000c4203bb830 R08: 0000000000000000 R09: 0000000000000000 [ 52.856153][ T7239] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000080 [ 52.864099][ T7239] R13: ffffffffffffffff R14: 0000000000000020 R15: ffffffffffffffff [ 52.873471][ T7239] Kernel Offset: disabled [ 52.877793][ T7239] Rebooting in 86400 seconds..