[ 35.653257][ T26] audit: type=1800 audit(1571133140.450:24): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.039480][ T26] audit: type=1800 audit(1571133140.930:25): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.059713][ T26] audit: type=1800 audit(1571133140.930:26): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.244' (ECDSA) to the list of known hosts. 2019/10/15 09:52:31 fuzzer started 2019/10/15 09:52:32 dialing manager at 10.128.0.105:33637 2019/10/15 09:52:32 syscalls: 2523 2019/10/15 09:52:32 code coverage: enabled 2019/10/15 09:52:32 comparison tracing: enabled 2019/10/15 09:52:32 extra coverage: extra coverage is not supported by the kernel 2019/10/15 09:52:32 setuid sandbox: enabled 2019/10/15 09:52:32 namespace sandbox: enabled 2019/10/15 09:52:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/15 09:52:32 fault injection: enabled 2019/10/15 09:52:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/15 09:52:32 net packet injection: enabled 2019/10/15 09:52:32 net device setup: enabled 2019/10/15 09:52:32 concurrency sanitizer: enabled syzkaller login: [ 47.732538][ T7377] ================================================================== [ 47.740698][ T7377] BUG: KCSAN: data-race in __zone_watermark_ok / free_one_page [ 47.748231][ T7377] [ 47.750561][ T7377] read to 0xffff88812fffcf58 of 8 bytes by interrupt on cpu 1: [ 47.758105][ T7377] __zone_watermark_ok+0x106/0x240 [ 47.763204][ T7377] get_page_from_freelist+0x629/0x2300 [ 47.768647][ T7377] __alloc_pages_nodemask+0x255/0x4d0 [ 47.774018][ T7377] alloc_pages_current+0xd1/0x170 [ 47.779031][ T7377] skb_page_frag_refill+0x16f/0x260 [ 47.784302][ T7377] try_fill_recv+0x51f/0xdc0 [ 47.788875][ T7377] virtnet_poll+0x64c/0x7d0 [ 47.793369][ T7377] net_rx_action+0x3ae/0xa50 [ 47.797944][ T7377] __do_softirq+0x115/0x33f [ 47.802431][ T7377] irq_exit+0xbb/0xe0 [ 47.806399][ T7377] do_IRQ+0xdf/0x150 [ 47.810276][ T7377] ret_from_intr+0x0/0x19 [ 47.814609][ T7377] native_safe_halt+0xe/0x10 [ 47.819188][ T7377] arch_cpu_idle+0x1f/0x30 [ 47.823595][ T7377] [ 47.825913][ T7377] write to 0xffff88812fffcf58 of 8 bytes by task 7377 on cpu 0: [ 47.833529][ T7377] free_one_page+0x214/0x840 [ 47.838111][ T7377] __free_pages_ok+0x370/0x640 [ 47.842889][ T7377] free_compound_page+0x3d/0x50 [ 47.847724][ T7377] __put_compound_page+0x4e/0x70 [ 47.852645][ T7377] __put_page+0x54/0xd0 [ 47.856790][ T7377] skb_release_data+0x1ba/0x3a0 [ 47.861622][ T7377] skb_release_all+0x44/0x60 [ 47.866211][ T7377] __kfree_skb+0x1f/0x30 [ 47.870448][ T7377] tcp_recvmsg+0xf59/0x1a30 [ 47.874961][ T7377] inet_recvmsg+0xbb/0x250 [ 47.879359][ T7377] sock_recvmsg+0x92/0xb0 [ 47.883670][ T7377] sock_read_iter+0x15f/0x1e0 [ 47.888330][ T7377] new_sync_read+0x389/0x4f0 [ 47.892896][ T7377] [ 47.895204][ T7377] Reported by Kernel Concurrency Sanitizer on: [ 47.901343][ T7377] CPU: 0 PID: 7377 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 47.908453][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.918493][ T7377] ================================================================== [ 47.926828][ T7377] Kernel panic - not syncing: panic_on_warn set ... [ 47.933684][ T7377] CPU: 0 PID: 7377 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 47.940769][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.950804][ T7377] Call Trace: [ 47.954090][ T7377] dump_stack+0xf5/0x159 [ 47.958332][ T7377] panic+0x209/0x639 [ 47.962227][ T7377] ? tcp_recvmsg+0xf59/0x1a30 [ 47.966892][ T7377] ? vprintk_func+0x8d/0x140 [ 47.971497][ T7377] kcsan_report.cold+0xc/0x1b [ 47.976171][ T7377] __kcsan_setup_watchpoint+0x3ee/0x510 [ 47.981703][ T7377] __tsan_write8+0x32/0x40 [ 47.986107][ T7377] free_one_page+0x214/0x840 [ 47.990708][ T7377] __free_pages_ok+0x370/0x640 [ 47.995464][ T7377] free_compound_page+0x3d/0x50 [ 48.000308][ T7377] __put_compound_page+0x4e/0x70 [ 48.005233][ T7377] __put_page+0x54/0xd0 [ 48.009376][ T7377] skb_release_data+0x1ba/0x3a0 [ 48.014213][ T7377] skb_release_all+0x44/0x60 [ 48.018788][ T7377] __kfree_skb+0x1f/0x30 [ 48.023014][ T7377] tcp_recvmsg+0xf59/0x1a30 [ 48.027534][ T7377] inet_recvmsg+0xbb/0x250 [ 48.031950][ T7377] ? __tsan_read8+0x2c/0x30 [ 48.036444][ T7377] ? inet_sendpage+0x100/0x100 [ 48.041211][ T7377] sock_recvmsg+0x92/0xb0 [ 48.045550][ T7377] sock_read_iter+0x15f/0x1e0 [ 48.050236][ T7377] new_sync_read+0x389/0x4f0 [ 48.054934][ T7377] __vfs_read+0xb1/0xc0 [ 48.059091][ T7377] vfs_read+0x143/0x2c0 [ 48.063248][ T7377] ksys_read+0xd5/0x1b0 [ 48.067418][ T7377] __x64_sys_read+0x4c/0x60 [ 48.071911][ T7377] do_syscall_64+0xcf/0x2f0 [ 48.076419][ T7377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.082296][ T7377] RIP: 0033:0x47c530 [ 48.086199][ T7377] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 48.105814][ T7377] RSP: 002b:000000c4203937d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 48.114210][ T7377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 48.122178][ T7377] RDX: 0000000000001000 RSI: 000000c4203b6000 RDI: 0000000000000003 [ 48.130132][ T7377] RBP: 000000c420393830 R08: 0000000000000000 R09: 0000000000000000 [ 48.138085][ T7377] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000010 [ 48.146048][ T7377] R13: ffffffffffffffff R14: 0000000000000004 R15: ffffffffffffffff [ 49.278561][ T7377] Shutting down cpus with NMI [ 49.284689][ T7377] Kernel Offset: disabled [ 49.289084][ T7377] Rebooting in 86400 seconds..