[ 38.353784][ T26] audit: type=1800 audit(1571155932.284:25): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 38.400371][ T26] audit: type=1800 audit(1571155932.284:26): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 38.422277][ T26] audit: type=1800 audit(1571155932.284:27): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 38.862988][ T7228] sshd (7228) used greatest stack depth: 10032 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. 2019/10/15 16:12:23 fuzzer started 2019/10/15 16:12:26 dialing manager at 10.128.0.105:38903 2019/10/15 16:12:26 syscalls: 2523 2019/10/15 16:12:26 code coverage: enabled 2019/10/15 16:12:26 comparison tracing: enabled 2019/10/15 16:12:26 extra coverage: extra coverage is not supported by the kernel 2019/10/15 16:12:26 setuid sandbox: enabled 2019/10/15 16:12:26 namespace sandbox: enabled 2019/10/15 16:12:26 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/15 16:12:26 fault injection: enabled 2019/10/15 16:12:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/15 16:12:26 net packet injection: enabled 2019/10/15 16:12:26 net device setup: enabled 2019/10/15 16:12:26 concurrency sanitizer: enabled syzkaller login: [ 52.271508][ T7317] ================================================================== [ 52.279661][ T7317] BUG: KCSAN: data-race in __zone_watermark_ok / free_one_page [ 52.287184][ T7317] [ 52.289591][ T7317] read to 0xffff88812fffcf58 of 8 bytes by interrupt on cpu 0: [ 52.297388][ T7317] __zone_watermark_ok+0x106/0x240 [ 52.302642][ T7317] get_page_from_freelist+0x629/0x2300 [ 52.308092][ T7317] __alloc_pages_nodemask+0x255/0x4d0 [ 52.313450][ T7317] alloc_pages_current+0xd1/0x170 [ 52.318481][ T7317] skb_page_frag_refill+0x16f/0x260 [ 52.323672][ T7317] try_fill_recv+0x51f/0xdc0 [ 52.328267][ T7317] virtnet_poll+0x64c/0x7d0 [ 52.332764][ T7317] net_rx_action+0x3ae/0xa50 [ 52.337363][ T7317] __do_softirq+0x115/0x33f [ 52.342470][ T7317] irq_exit+0xbb/0xe0 [ 52.346554][ T7317] do_IRQ+0xdf/0x150 [ 52.350450][ T7317] ret_from_intr+0x0/0x19 [ 52.354778][ T7317] native_safe_halt+0xe/0x10 [ 52.359375][ T7317] arch_cpu_idle+0x1f/0x30 [ 52.363776][ T7317] [ 52.366101][ T7317] write to 0xffff88812fffcf58 of 8 bytes by task 7317 on cpu 1: [ 52.374344][ T7317] free_one_page+0x214/0x840 [ 52.378924][ T7317] __free_pages_ok+0x370/0x640 [ 52.383675][ T7317] free_compound_page+0x3d/0x50 [ 52.388522][ T7317] __put_compound_page+0x4e/0x70 [ 52.394058][ T7317] __put_page+0x54/0xd0 [ 52.398203][ T7317] skb_release_data+0x1ba/0x3a0 [ 52.403066][ T7317] skb_release_all+0x44/0x60 [ 52.407643][ T7317] __kfree_skb+0x1f/0x30 [ 52.411889][ T7317] tcp_recvmsg+0xf59/0x1a30 [ 52.416384][ T7317] inet_recvmsg+0xbb/0x250 [ 52.420898][ T7317] sock_recvmsg+0x92/0xb0 [ 52.425238][ T7317] sock_read_iter+0x15f/0x1e0 [ 52.429914][ T7317] new_sync_read+0x389/0x4f0 [ 52.434486][ T7317] [ 52.436841][ T7317] Reported by Kernel Concurrency Sanitizer on: [ 52.442989][ T7317] CPU: 1 PID: 7317 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 52.450088][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.460139][ T7317] ================================================================== [ 52.468201][ T7317] Kernel panic - not syncing: panic_on_warn set ... [ 52.474801][ T7317] CPU: 1 PID: 7317 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 52.481889][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.491926][ T7317] Call Trace: [ 52.495220][ T7317] dump_stack+0xf5/0x159 [ 52.499602][ T7317] panic+0x209/0x639 [ 52.503508][ T7317] ? tcp_recvmsg+0xf59/0x1a30 [ 52.508353][ T7317] ? vprintk_func+0x8d/0x140 [ 52.512937][ T7317] kcsan_report.cold+0xc/0x1b [ 52.517734][ T7317] __kcsan_setup_watchpoint+0x3ee/0x510 [ 52.523363][ T7317] __tsan_write8+0x32/0x40 [ 52.527774][ T7317] free_one_page+0x214/0x840 [ 52.532451][ T7317] __free_pages_ok+0x370/0x640 [ 52.537228][ T7317] free_compound_page+0x3d/0x50 [ 52.542065][ T7317] __put_compound_page+0x4e/0x70 [ 52.546992][ T7317] __put_page+0x54/0xd0 [ 52.551247][ T7317] skb_release_data+0x1ba/0x3a0 [ 52.556088][ T7317] skb_release_all+0x44/0x60 [ 52.560664][ T7317] __kfree_skb+0x1f/0x30 [ 52.564895][ T7317] tcp_recvmsg+0xf59/0x1a30 [ 52.569414][ T7317] inet_recvmsg+0xbb/0x250 [ 52.573819][ T7317] ? __tsan_read8+0x2c/0x30 [ 52.578316][ T7317] ? inet_sendpage+0x100/0x100 [ 52.583086][ T7317] sock_recvmsg+0x92/0xb0 [ 52.587402][ T7317] sock_read_iter+0x15f/0x1e0 [ 52.592071][ T7317] new_sync_read+0x389/0x4f0 [ 52.596673][ T7317] __vfs_read+0xb1/0xc0 [ 52.600820][ T7317] vfs_read+0x143/0x2c0 [ 52.604968][ T7317] ksys_read+0xd5/0x1b0 [ 52.609137][ T7317] __x64_sys_read+0x4c/0x60 [ 52.613636][ T7317] do_syscall_64+0xcf/0x2f0 [ 52.618218][ T7317] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.625660][ T7317] RIP: 0033:0x47c530 [ 52.629549][ T7317] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 52.649495][ T7317] RSP: 002b:000000c4202d57d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 52.657891][ T7317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c530 [ 52.666212][ T7317] RDX: 0000000000001000 RSI: 000000c420304000 RDI: 0000000000000003 [ 52.674174][ T7317] RBP: 000000c4202d5830 R08: 0000000000000000 R09: 0000000000000000 [ 52.682219][ T7317] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000008 [ 52.690181][ T7317] R13: ffffffffffffffff R14: 0000000000000002 R15: ffffffffffffffff [ 53.831874][ T7317] Shutting down cpus with NMI [ 53.838557][ T7317] Kernel Offset: disabled [ 53.843028][ T7317] Rebooting in 86400 seconds..