[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.084208][ T23] audit: type=1800 audit(1570192597.687:25): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 37.112948][ T23] audit: type=1800 audit(1570192597.687:26): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 37.145348][ T23] audit: type=1800 audit(1570192597.687:27): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.36' (ECDSA) to the list of known hosts. 2019/10/04 12:36:47 fuzzer started 2019/10/04 12:36:49 dialing manager at 10.128.0.105:38119 2019/10/04 12:36:49 syscalls: 2523 2019/10/04 12:36:49 code coverage: enabled 2019/10/04 12:36:49 comparison tracing: enabled 2019/10/04 12:36:49 extra coverage: extra coverage is not supported by the kernel 2019/10/04 12:36:49 setuid sandbox: enabled 2019/10/04 12:36:49 namespace sandbox: enabled 2019/10/04 12:36:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 12:36:49 fault injection: enabled 2019/10/04 12:36:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 12:36:49 net packet injection: enabled 2019/10/04 12:36:49 net device setup: enabled 2019/10/04 12:36:49 concurrency sanitizer: enabled syzkaller login: [ 49.231676][ C1] ================================================================== [ 49.240059][ C1] BUG: KCSAN: data-race in __nf_conntrack_find_get+0x284/0x870 and __nf_ct_refresh_acct+0xfb/0x1b0 [ 49.250716][ C1] [ 49.253113][ C1] write to 0xffff888126803108 of 4 bytes by task 7223 on cpu 0: [ 49.260724][ C1] __nf_ct_refresh_acct+0xfb/0x1b0 [ 49.265814][ C1] nf_conntrack_tcp_packet+0xd40/0x3390 [ 49.271365][ C1] nf_conntrack_in+0x410/0xaa0 [ 49.276120][ C1] ipv4_conntrack_local+0xbe/0x130 [ 49.281214][ C1] nf_hook_slow+0x83/0x160 [ 49.285614][ C1] __ip_local_out+0x1f7/0x2b0 [ 49.290271][ C1] ip_local_out+0x31/0x90 [ 49.294736][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 49.299499][ C1] ip_queue_xmit+0x45/0x60 [ 49.304447][ C1] __tcp_transmit_skb+0xdeb/0x1cd0 [ 49.309540][ C1] __tcp_send_ack+0x246/0x300 [ 49.314198][ C1] tcp_send_ack+0x34/0x40 [ 49.318549][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 49.323383][ C1] tcp_recvmsg+0x633/0x1a30 [ 49.327858][ C1] [ 49.330344][ C1] read to 0xffff888126803108 of 4 bytes by interrupt on cpu 1: [ 49.337880][ C1] __nf_conntrack_find_get+0x284/0x870 [ 49.343328][ C1] nf_conntrack_in+0x2ef/0xaa0 [ 49.348079][ C1] ipv4_conntrack_in+0x27/0x40 [ 49.353865][ C1] nf_hook_slow+0x83/0x160 [ 49.358257][ C1] ip_rcv+0x12f/0x1a0 [ 49.362228][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 49.367954][ C1] __netif_receive_skb+0x37/0xf0 [ 49.372981][ C1] netif_receive_skb_internal+0x59/0x190 [ 49.378726][ C1] napi_gro_receive+0x28f/0x330 [ 49.383993][ C1] receive_buf+0x284/0x30b0 [ 49.388476][ C1] virtnet_poll+0x436/0x7d0 [ 49.392963][ C1] net_rx_action+0x3ae/0xa50 [ 49.397550][ C1] __do_softirq+0x115/0x33f [ 49.402041][ C1] [ 49.404345][ C1] Reported by Kernel Concurrency Sanitizer on: [ 49.410577][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0 [ 49.417322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.427362][ C1] ================================================================== [ 49.435405][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 49.441973][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0 [ 49.448804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.458860][ C1] Call Trace: [ 49.462127][ C1] [ 49.464974][ C1] dump_stack+0xf5/0x159 [ 49.469209][ C1] panic+0x209/0x639 [ 49.473086][ C1] ? vprintk_func+0x8d/0x140 [ 49.477657][ C1] kcsan_report.cold+0x57/0xeb [ 49.482403][ C1] __kcsan_setup_watchpoint+0x342/0x500 [ 49.487932][ C1] __tsan_read4+0x2c/0x30 [ 49.492254][ C1] __nf_conntrack_find_get+0x284/0x870 [ 49.497690][ C1] ? __tsan_write2+0x32/0x40 [ 49.502268][ C1] ? nf_ct_get_tuple+0x325/0x490 [ 49.507191][ C1] nf_conntrack_in+0x2ef/0xaa0 [ 49.511938][ C1] ipv4_conntrack_in+0x27/0x40 [ 49.517815][ C1] nf_hook_slow+0x83/0x160 [ 49.522213][ C1] ? nf_ct_l4proto_find+0xd0/0xd0 [ 49.527218][ C1] ip_rcv+0x12f/0x1a0 [ 49.531801][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 49.536631][ C1] ? ip_local_deliver+0x210/0x210 [ 49.541679][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 49.547477][ C1] __netif_receive_skb+0x37/0xf0 [ 49.552405][ C1] netif_receive_skb_internal+0x59/0x190 [ 49.558120][ C1] napi_gro_receive+0x28f/0x330 [ 49.562970][ C1] receive_buf+0x284/0x30b0 [ 49.567471][ C1] ? __tsan_write8+0x32/0x40 [ 49.572052][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 49.577491][ C1] ? virtqueue_get_buf+0x31/0x40 [ 49.582418][ C1] virtnet_poll+0x436/0x7d0 [ 49.586919][ C1] net_rx_action+0x3ae/0xa50 [ 49.591516][ C1] __do_softirq+0x115/0x33f [ 49.596006][ C1] irq_exit+0xbb/0xe0 [ 49.599974][ C1] do_IRQ+0xdf/0x150 [ 49.603858][ C1] common_interrupt+0xf/0xf [ 49.608353][ C1] [ 49.611287][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 49.616663][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 8c d2 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 7c d2 4e 00 fb f4 90 55 48 89 e5 41 55 41 54 53 e8 82 78 a7 fc e8 5d 4e b9 fd 0f [ 49.637470][ C1] RSP: 0018:ffffc90000cd3e48 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffde [ 49.645897][ C1] RAX: a9fbe76c8b43c368 RBX: 0000000000000001 RCX: 0000000000000531 [ 49.653870][ C1] RDX: 000000000027d350 RSI: 020c49ba5e353f7d RDI: ffffffff85a55a28 [ 49.662367][ C1] RBP: ffffc90000cd3e80 R08: 0000000000000000 R09: 0000ffff85a55a2f [ 49.670358][ C1] R10: 00000000aaaaaaab R11: ffffffff86042cc0 R12: ffff88812b38b0c0 [ 49.678317][ C1] R13: ffff88812b38b0c0 R14: 0000000000000000 R15: 0000000000000000 [ 49.686288][ C1] ? default_idle+0x50/0x230 [ 49.690877][ C1] arch_cpu_idle+0x1f/0x30 [ 49.695276][ C1] default_idle_call+0x1e/0x40 [ 49.700041][ C1] do_idle+0x1ea/0x2c0 [ 49.704159][ C1] ? complete+0x44/0x50 [ 49.708324][ C1] cpu_startup_entry+0x1b/0x20 [ 49.713077][ C1] start_secondary+0x207/0x260 [ 49.717852][ C1] secondary_startup_64+0xa4/0xb0 [ 49.724342][ C1] Kernel Offset: disabled [ 49.728674][ C1] Rebooting in 86400 seconds..