[ 42.718068][ T25] audit: type=1800 audit(1571705151.133:23): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0 [ 42.737950][ T25] audit: type=1800 audit(1571705151.133:24): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.249305][ T25] audit: type=1800 audit(1571705151.743:25): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2019/10/22 00:46:02 fuzzer started 2019/10/22 00:46:04 dialing manager at 10.128.0.105:37053 2019/10/22 00:46:04 syscalls: 2524 2019/10/22 00:46:04 code coverage: enabled 2019/10/22 00:46:04 comparison tracing: enabled 2019/10/22 00:46:04 extra coverage: extra coverage is not supported by the kernel 2019/10/22 00:46:04 setuid sandbox: enabled 2019/10/22 00:46:04 namespace sandbox: enabled 2019/10/22 00:46:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/22 00:46:04 fault injection: enabled 2019/10/22 00:46:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/22 00:46:04 net packet injection: enabled 2019/10/22 00:46:04 net device setup: enabled 2019/10/22 00:46:04 concurrency sanitizer: enabled syzkaller login: [ 56.259732][ C1] ================================================================== [ 56.268021][ C1] BUG: KCSAN: data-race in __nf_conntrack_find_get / __nf_ct_refresh_acct [ 56.276498][ C1] [ 56.278814][ C1] write to 0xffff88811e394b08 of 4 bytes by task 7180 on cpu 0: [ 56.286532][ C1] __nf_ct_refresh_acct+0xfb/0x1b0 [ 56.292620][ C1] nf_conntrack_tcp_packet+0xd40/0x3390 [ 56.298154][ C1] nf_conntrack_in+0x410/0xa80 [ 56.302955][ C1] ipv4_conntrack_local+0xbe/0x130 [ 56.308053][ C1] nf_hook_slow+0x83/0x160 [ 56.312497][ C1] __ip_local_out+0x1f7/0x2b0 [ 56.317242][ C1] ip_local_out+0x31/0x90 [ 56.321558][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 56.326307][ C1] ip_queue_xmit+0x45/0x60 [ 56.330862][ C1] __tcp_transmit_skb+0xe81/0x1d60 [ 56.335957][ C1] __tcp_send_ack+0x246/0x300 [ 56.340620][ C1] tcp_send_ack+0x34/0x40 [ 56.345021][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 56.349857][ C1] tcp_recvmsg+0x633/0x1a30 [ 56.354339][ C1] [ 56.356654][ C1] read to 0xffff88811e394b08 of 4 bytes by interrupt on cpu 1: [ 56.364190][ C1] __nf_conntrack_find_get+0x284/0x880 [ 56.369632][ C1] nf_conntrack_in+0x2ef/0xa80 [ 56.374450][ C1] ipv4_conntrack_in+0x27/0x40 [ 56.379203][ C1] nf_hook_slow+0x83/0x160 [ 56.383606][ C1] ip_rcv+0x12f/0x1a0 [ 56.387693][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 56.393402][ C1] __netif_receive_skb+0x37/0xf0 [ 56.398326][ C1] netif_receive_skb_internal+0x59/0x190 [ 56.403943][ C1] napi_gro_receive+0x28f/0x330 [ 56.408780][ C1] receive_buf+0x284/0x30b0 [ 56.413274][ C1] virtnet_poll+0x436/0x7d0 [ 56.417783][ C1] net_rx_action+0x3ae/0xa90 [ 56.422361][ C1] __do_softirq+0x115/0x33f [ 56.427058][ C1] [ 56.429404][ C1] Reported by Kernel Concurrency Sanitizer on: [ 56.435579][ C1] CPU: 1 PID: 7174 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 56.443025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.453094][ C1] ================================================================== [ 56.461136][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 56.467714][ C1] CPU: 1 PID: 7174 Comm: syz-fuzzer Not tainted 5.4.0-rc3+ #0 [ 56.475249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.485289][ C1] Call Trace: [ 56.488559][ C1] [ 56.491409][ C1] dump_stack+0xf5/0x159 [ 56.495647][ C1] panic+0x210/0x640 [ 56.499653][ C1] ? napi_gro_receive+0x28f/0x330 [ 56.504742][ C1] ? vprintk_func+0x8d/0x140 [ 56.509330][ C1] kcsan_report.cold+0xc/0x10 [ 56.514000][ C1] __kcsan_setup_watchpoint+0x32e/0x4a0 [ 56.519553][ C1] __tsan_read4+0x2c/0x30 [ 56.523871][ C1] __nf_conntrack_find_get+0x284/0x880 [ 56.529319][ C1] ? __tsan_write2+0x32/0x40 [ 56.533997][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.539623][ C1] nf_conntrack_in+0x2ef/0xa80 [ 56.544595][ C1] ipv4_conntrack_in+0x27/0x40 [ 56.549376][ C1] nf_hook_slow+0x83/0x160 [ 56.553841][ C1] ? nf_ct_bridge_unregister+0x70/0x70 [ 56.559515][ C1] ip_rcv+0x12f/0x1a0 [ 56.563614][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 56.568462][ C1] ? ip_local_deliver+0x210/0x210 [ 56.573486][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 56.579201][ C1] __netif_receive_skb+0x37/0xf0 [ 56.584126][ C1] netif_receive_skb_internal+0x59/0x190 [ 56.589751][ C1] napi_gro_receive+0x28f/0x330 [ 56.594594][ C1] receive_buf+0x284/0x30b0 [ 56.599094][ C1] ? __tsan_write8+0x32/0x40 [ 56.603673][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 56.609116][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.614733][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.620352][ C1] virtnet_poll+0x436/0x7d0 [ 56.625023][ C1] net_rx_action+0x3ae/0xa90 [ 56.629777][ C1] __do_softirq+0x115/0x33f [ 56.634399][ C1] irq_exit+0xbb/0xe0 [ 56.638510][ C1] do_IRQ+0xa6/0x180 [ 56.642396][ C1] common_interrupt+0xf/0xf [ 56.646889][ C1] [ 56.649817][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x51/0x80 [ 56.656220][ C1] Code: 0e 01 00 74 49 48 89 df c6 07 00 0f 1f 40 00 48 c7 c7 a0 63 a5 85 e8 9e f5 bb fc 48 83 3d 36 92 0e 01 00 74 2b 4c 89 e7 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 10 f7 9c fc 65 8b 05 81 9a 6a 7b [ 56.675949][ C1] RSP: 0018:ffffc9000159b758 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffde [ 56.684657][ C1] RAX: 10624dd2f1aa09f8 RBX: ffff88812bf1d7c0 RCX: 0000000000000087 [ 56.692874][ C1] RDX: 00000000000c3500 RSI: 020c49ba5e353f7d RDI: 0000000000000282 [ 56.700932][ C1] RBP: ffffc9000159b768 R08: 0000000000000000 R09: 0000ffff85a563a7 [ 56.708961][ C1] R10: 00000000aaaaaaab R11: ffffffff86045cc8 R12: 0000000000000282 [ 56.716978][ C1] R13: ffff88812bf1d7c0 R14: ffff88812bf1d800 R15: ffffc9000159b838 [ 56.724959][ C1] hrtimer_start_range_ns+0x44a/0x670 [ 56.730330][ C1] schedule_hrtimeout_range_clock+0x100/0x1e0 [ 56.736389][ C1] ? hrtimer_active+0x1a0/0x1a0 [ 56.741346][ C1] schedule_hrtimeout_range+0x34/0x50 [ 56.746708][ C1] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 56.752895][ C1] do_select+0xd7f/0x1020 [ 56.757284][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.762986][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.768613][ C1] ? pvclock_clocksource_read+0x178/0x1e0 [ 56.774319][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.779943][ C1] ? __tsan_write8+0x32/0x40 [ 56.784553][ C1] ? rb_erase+0x2aa/0x990 [ 56.788877][ C1] ? __tsan_read8+0x2c/0x30 [ 56.793415][ C1] ? timerqueue_del+0xa1/0x100 [ 56.798190][ C1] ? __tsan_read8+0x2c/0x30 [ 56.802677][ C1] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 56.808508][ C1] ? hrtimer_try_to_cancel+0x57/0x260 [ 56.813867][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.820097][ C1] ? debug_smp_processor_id+0x4c/0x172 [ 56.825649][ C1] ? delay_tsc+0x8f/0xc0 [ 56.829880][ C1] ? __const_udelay+0x36/0x40 [ 56.834539][ C1] ? __udelay+0x10/0x20 [ 56.838686][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.844304][ C1] ? __rcu_read_unlock+0x66/0x3c0 [ 56.849317][ C1] core_sys_select+0x381/0x550 [ 56.854100][ C1] ? __tsan_read8+0x2c/0x30 [ 56.858596][ C1] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 56.864300][ C1] ? __kcsan_setup_watchpoint+0x6b/0x4a0 [ 56.869918][ C1] ? _copy_to_user+0x84/0xb0 [ 56.874533][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 56.880421][ C1] ? __tsan_write8+0x32/0x40 [ 56.884997][ C1] ? ktime_get_ts64+0x286/0x2c0 [ 56.889936][ C1] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 56.895663][ C1] ? timespec64_add_safe+0xae/0xd0 [ 56.900772][ C1] do_pselect.constprop.0+0x11d/0x160 [ 56.906154][ C1] __x64_sys_pselect6+0x12e/0x170 [ 56.911345][ C1] ? switch_fpu_return+0x11f/0x250 [ 56.916449][ C1] do_syscall_64+0xcc/0x370 [ 56.921022][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.926898][ C1] RIP: 0033:0x45ac23 [ 56.930781][ C1] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 56.950371][ C1] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 56.958783][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac23 [ 56.966742][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.974733][ C1] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 56.982803][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 56.990763][ C1] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 57.000239][ C1] Kernel Offset: disabled [ 57.004622][ C1] Rebooting in 86400 seconds..