[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.703955][ T26] audit: type=1800 audit(1570463389.710:25): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.733580][ T26] audit: type=1800 audit(1570463389.710:26): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 37.264134][ T7279] sshd (7279) used greatest stack depth: 10032 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.215' (ECDSA) to the list of known hosts. 2019/10/07 15:50:01 fuzzer started 2019/10/07 15:50:02 dialing manager at 10.128.0.105:39369 2019/10/07 15:50:02 syscalls: 2523 2019/10/07 15:50:02 code coverage: enabled 2019/10/07 15:50:02 comparison tracing: enabled 2019/10/07 15:50:02 extra coverage: extra coverage is not supported by the kernel 2019/10/07 15:50:02 setuid sandbox: enabled 2019/10/07 15:50:02 namespace sandbox: enabled 2019/10/07 15:50:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/07 15:50:02 fault injection: enabled 2019/10/07 15:50:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/07 15:50:02 net packet injection: enabled 2019/10/07 15:50:02 net device setup: enabled 2019/10/07 15:50:02 concurrency sanitizer: enabled syzkaller login: [ 49.854069][ C1] ================================================================== [ 49.862615][ C1] BUG: KCSAN: data-race in __zone_watermark_ok / get_page_from_freelist [ 49.870958][ C1] [ 49.873316][ C1] write to 0xffff88812fffcf58 of 8 bytes by task 7352 on cpu 0: [ 49.880935][ C1] get_page_from_freelist+0x131e/0x2300 [ 49.886494][ C1] __alloc_pages_nodemask+0x255/0x4d0 [ 49.891979][ C1] alloc_pages_vma+0x15b/0x2b0 [ 49.896737][ C1] __handle_mm_fault+0x17ac/0x2d00 [ 49.901875][ C1] handle_mm_fault+0x21b/0x520 [ 49.906621][ C1] __do_page_fault+0x3fb/0x9e0 [ 49.911366][ C1] do_page_fault+0x54/0x233 [ 49.915855][ C1] page_fault+0x34/0x40 [ 49.919991][ C1] [ 49.922395][ C1] read to 0xffff88812fffcf58 of 8 bytes by interrupt on cpu 1: [ 49.929917][ C1] __zone_watermark_ok+0x106/0x240 [ 49.935017][ C1] get_page_from_freelist+0x629/0x2300 [ 49.940456][ C1] __alloc_pages_nodemask+0x255/0x4d0 [ 49.945803][ C1] alloc_pages_current+0xd1/0x170 [ 49.950835][ C1] skb_page_frag_refill+0x16f/0x260 [ 49.956045][ C1] try_fill_recv+0x51f/0xdc0 [ 49.960616][ C1] virtnet_poll+0x64c/0x7d0 [ 49.965095][ C1] net_rx_action+0x3ae/0xa50 [ 49.969673][ C1] __do_softirq+0x115/0x33f [ 49.974286][ C1] irq_exit+0xbb/0xe0 [ 49.978266][ C1] do_IRQ+0xdf/0x150 [ 49.982152][ C1] ret_from_intr+0x0/0x19 [ 49.986480][ C1] _raw_spin_unlock_irqrestore+0x51/0x80 [ 49.992127][ C1] [ 49.994441][ C1] Reported by Kernel Concurrency Sanitizer on: [ 50.000585][ C1] CPU: 1 PID: 7353 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 50.007690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.017734][ C1] ================================================================== [ 50.025768][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 50.032336][ C1] CPU: 1 PID: 7353 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 50.039677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.049721][ C1] Call Trace: [ 50.052982][ C1] [ 50.055834][ C1] dump_stack+0xf5/0x159 [ 50.060068][ C1] panic+0x209/0x639 [ 50.063958][ C1] ? vprintk_func+0x8d/0x140 [ 50.068585][ C1] kcsan_report.cold+0x57/0xeb [ 50.073329][ C1] __kcsan_setup_watchpoint+0x342/0x500 [ 50.078975][ C1] __tsan_read8+0x2c/0x30 [ 50.083331][ C1] __zone_watermark_ok+0x106/0x240 [ 50.088460][ C1] get_page_from_freelist+0x629/0x2300 [ 50.093921][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 50.098773][ C1] ? __tsan_read8+0x2c/0x30 [ 50.103260][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 50.109541][ C1] __alloc_pages_nodemask+0x255/0x4d0 [ 50.114922][ C1] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 50.121237][ C1] alloc_pages_current+0xd1/0x170 [ 50.126245][ C1] skb_page_frag_refill+0x16f/0x260 [ 50.131448][ C1] try_fill_recv+0x51f/0xdc0 [ 50.136066][ C1] virtnet_poll+0x64c/0x7d0 [ 50.140562][ C1] net_rx_action+0x3ae/0xa50 [ 50.145261][ C1] __do_softirq+0x115/0x33f [ 50.149755][ C1] irq_exit+0xbb/0xe0 [ 50.153774][ C1] do_IRQ+0xdf/0x150 [ 50.157781][ C1] common_interrupt+0xf/0xf [ 50.162305][ C1] [ 50.165251][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x51/0x80 [ 50.171664][ C1] Code: 11 01 00 74 49 48 89 df c6 07 00 0f 1f 40 00 48 c7 c7 10 5a a5 85 e8 6e 31 bf fc 48 83 3d 76 b8 11 01 00 74 2b 4c 89 e7 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 00 6f a0 fc 65 8b 05 51 ca 6d 7b [ 50.192554][ C1] RSP: 0018:ffffc90001693780 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffde [ 50.200944][ C1] RAX: 0624dd2f1a9ff318 RBX: ffff88812bf1d7c0 RCX: 0000000000000030 [ 50.208903][ C1] RDX: 00000000002daf50 RSI: 020c49ba5e353f7d RDI: 0000000000000282 [ 50.216867][ C1] RBP: ffffc90001693790 R08: 0000000000000000 R09: 0000ffff85a55a17 [ 50.224826][ C1] R10: 00000000aaaaaaab R11: ffffffff86042cc0 R12: 0000000000000282 [ 50.232779][ C1] R13: ffff88812bf1d7c0 R14: ffff88812bf1d800 R15: ffffc90001693870 [ 50.240753][ C1] hrtimer_start_range_ns+0x44a/0x670 [ 50.246109][ C1] schedule_hrtimeout_range_clock+0x158/0x330 [ 50.252177][ C1] ? hrtimer_active+0x1a0/0x1a0 [ 50.257017][ C1] schedule_hrtimeout_range+0x34/0x50 [ 50.262372][ C1] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 50.268513][ C1] do_select+0xd7f/0x1020 [ 50.272849][ C1] ? __tsan_read1+0x2c/0x30 [ 50.277348][ C1] ? __tsan_write8+0x32/0x40 [ 50.281916][ C1] ? rb_erase+0x2aa/0x990 [ 50.286325][ C1] ? __tsan_read8+0x2c/0x30 [ 50.290808][ C1] ? timerqueue_del+0x82/0xc0 [ 50.295465][ C1] ? __tsan_read8+0x2c/0x30 [ 50.299948][ C1] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 50.305741][ C1] ? hrtimer_try_to_cancel+0x57/0x260 [ 50.311109][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.317475][ C1] ? hrtimer_cancel+0x44/0x50 [ 50.322144][ C1] ? futex_wait+0x350/0x400 [ 50.326630][ C1] ? __tsan_write4+0x32/0x40 [ 50.332259][ C1] core_sys_select+0x38b/0x520 [ 50.337005][ C1] ? __tsan_read8+0x2c/0x30 [ 50.341490][ C1] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 50.347311][ C1] ? _copy_to_user+0x84/0xb0 [ 50.351888][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 50.357807][ C1] ? __tsan_write8+0x32/0x40 [ 50.362507][ C1] ? ktime_get_ts64+0x286/0x2b0 [ 50.367379][ C1] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 50.373202][ C1] ? timespec64_add_safe+0xae/0xd0 [ 50.378337][ C1] __x64_sys_pselect6+0x22a/0x280 [ 50.383354][ C1] do_syscall_64+0xcf/0x2f0 [ 50.387846][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.393716][ C1] RIP: 0033:0x45ac23 [ 50.397593][ C1] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 50.417185][ C1] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 50.425569][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac23 [ 50.433516][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.441465][ C1] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 50.449428][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 50.457376][ C1] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 50.467325][ C1] Kernel Offset: disabled [ 50.471652][ C1] Rebooting in 86400 seconds..