[ 42.913353][ T26] audit: type=1800 audit(1570503467.288:21): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 42.961802][ T26] audit: type=1800 audit(1570503467.288:22): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [ 42.985226][ T26] audit: type=1800 audit(1570503467.288:23): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.146' (ECDSA) to the list of known hosts. 2019/10/08 02:57:57 fuzzer started 2019/10/08 02:57:59 dialing manager at 10.128.0.105:39369 2019/10/08 02:57:59 syscalls: 2523 2019/10/08 02:57:59 code coverage: enabled 2019/10/08 02:57:59 comparison tracing: enabled 2019/10/08 02:57:59 extra coverage: extra coverage is not supported by the kernel 2019/10/08 02:57:59 setuid sandbox: enabled 2019/10/08 02:57:59 namespace sandbox: enabled 2019/10/08 02:57:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/08 02:57:59 fault injection: enabled 2019/10/08 02:57:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/08 02:57:59 net packet injection: enabled 2019/10/08 02:57:59 net device setup: enabled 2019/10/08 02:57:59 concurrency sanitizer: enabled syzkaller login: [ 55.203714][ T7271] ================================================================== [ 55.212239][ T7271] BUG: KCSAN: data-race in tcp_add_backlog / tcp_rcv_space_adjust [ 55.220015][ T7271] [ 55.222469][ T7271] read to 0xffff888125ef730c of 4 bytes by interrupt on cpu 1: [ 55.230285][ T7271] tcp_add_backlog+0x43/0xcc0 [ 55.234954][ T7271] tcp_v4_rcv+0x1aba/0x1bf0 [ 55.239435][ T7271] ip_protocol_deliver_rcu+0x51/0x470 [ 55.244791][ T7271] ip_local_deliver_finish+0x110/0x140 [ 55.250868][ T7271] ip_local_deliver+0x133/0x210 [ 55.255728][ T7271] ip_rcv_finish+0x121/0x160 [ 55.260565][ T7271] ip_rcv+0x18f/0x1a0 [ 55.264636][ T7271] __netif_receive_skb_one_core+0xa7/0xe0 [ 55.270345][ T7271] __netif_receive_skb+0x37/0xf0 [ 55.275706][ T7271] netif_receive_skb_internal+0x59/0x190 [ 55.281312][ T7271] napi_gro_receive+0x28f/0x330 [ 55.286162][ T7271] receive_buf+0x284/0x30b0 [ 55.290691][ T7271] virtnet_poll+0x436/0x7d0 [ 55.295185][ T7271] net_rx_action+0x3ae/0xa50 [ 55.299777][ T7271] [ 55.302102][ T7271] write to 0xffff888125ef730c of 4 bytes by task 7271 on cpu 0: [ 55.309709][ T7271] tcp_rcv_space_adjust+0x40f/0x4c0 [ 55.315784][ T7271] tcp_recvmsg+0xdaa/0x1a30 [ 55.320281][ T7271] inet_recvmsg+0xbb/0x250 [ 55.324685][ T7271] sock_recvmsg+0x92/0xb0 [ 55.328996][ T7271] sock_read_iter+0x15f/0x1e0 [ 55.335647][ T7271] new_sync_read+0x389/0x4f0 [ 55.340214][ T7271] __vfs_read+0xb1/0xc0 [ 55.344347][ T7271] vfs_read+0x143/0x2c0 [ 55.348495][ T7271] ksys_read+0xd5/0x1b0 [ 55.352713][ T7271] __x64_sys_read+0x4c/0x60 [ 55.357208][ T7271] do_syscall_64+0xcf/0x2f0 [ 55.361693][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 55.368003][ T7271] [ 55.370330][ T7271] Reported by Kernel Concurrency Sanitizer on: [ 55.376478][ T7271] CPU: 0 PID: 7271 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 55.384790][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.394922][ T7271] ================================================================== [ 55.402981][ T7271] Kernel panic - not syncing: panic_on_warn set ... [ 55.409728][ T7271] CPU: 0 PID: 7271 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 55.416809][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.426857][ T7271] Call Trace: [ 55.430171][ T7271] dump_stack+0xf5/0x159 [ 55.434403][ T7271] panic+0x209/0x639 [ 55.438317][ T7271] ? vprintk_func+0x8d/0x140 [ 55.443343][ T7271] kcsan_report.cold+0x57/0xeb [ 55.448091][ T7271] __kcsan_setup_watchpoint+0x342/0x500 [ 55.453636][ T7271] __tsan_write4+0x32/0x40 [ 55.458350][ T7271] tcp_rcv_space_adjust+0x40f/0x4c0 [ 55.463633][ T7271] tcp_recvmsg+0xdaa/0x1a30 [ 55.468130][ T7271] inet_recvmsg+0xbb/0x250 [ 55.472542][ T7271] ? __tsan_read8+0x2c/0x30 [ 55.477025][ T7271] ? inet_sendpage+0x100/0x100 [ 55.481764][ T7271] sock_recvmsg+0x92/0xb0 [ 55.486099][ T7271] sock_read_iter+0x15f/0x1e0 [ 55.490759][ T7271] new_sync_read+0x389/0x4f0 [ 55.495411][ T7271] __vfs_read+0xb1/0xc0 [ 55.499584][ T7271] vfs_read+0x143/0x2c0 [ 55.503741][ T7271] ksys_read+0xd5/0x1b0 [ 55.507885][ T7271] __x64_sys_read+0x4c/0x60 [ 55.512381][ T7271] do_syscall_64+0xcf/0x2f0 [ 55.516956][ T7271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 55.522824][ T7271] RIP: 0033:0x47c530 [ 55.526700][ T7271] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 55.546721][ T7271] RSP: 002b:000000c42014b810 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 55.555225][ T7271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 55.563181][ T7271] RDX: 0000000000001000 RSI: 000000c420370000 RDI: 0000000000000003 [ 55.571330][ T7271] RBP: 000000c42014b868 R08: 0000000000000000 R09: 0000000000000000 [ 55.579279][ T7271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 55.587246][ T7271] R13: ffffffffffffffff R14: 0000000000000004 R15: ffffffffffffffff [ 55.597046][ T7271] Kernel Offset: disabled [ 55.601715][ T7271] Rebooting in 86400 seconds..