[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.510919][ T25] audit: type=1800 audit(1570192088.442:25): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 35.561666][ T25] audit: type=1800 audit(1570192088.452:26): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 35.586702][ T25] audit: type=1800 audit(1570192088.452:27): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. 2019/10/04 12:28:18 fuzzer started 2019/10/04 12:28:20 dialing manager at 10.128.0.105:38119 2019/10/04 12:28:20 syscalls: 2523 2019/10/04 12:28:20 code coverage: enabled 2019/10/04 12:28:20 comparison tracing: enabled 2019/10/04 12:28:20 extra coverage: extra coverage is not supported by the kernel 2019/10/04 12:28:20 setuid sandbox: enabled 2019/10/04 12:28:20 namespace sandbox: enabled 2019/10/04 12:28:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 12:28:20 fault injection: enabled 2019/10/04 12:28:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 12:28:20 net packet injection: enabled 2019/10/04 12:28:20 net device setup: enabled 2019/10/04 12:28:20 concurrency sanitizer: enabled syzkaller login: [ 47.444267][ C0] ================================================================== [ 47.452444][ C0] BUG: KCSAN: data-race in __nf_conntrack_find_get+0x284/0x870 and __nf_ct_refresh_acct+0xfb/0x1b0 [ 47.463091][ C0] [ 47.465398][ C0] write to 0xffff888123291a08 of 4 bytes by task 7238 on cpu 1: [ 47.473004][ C0] __nf_ct_refresh_acct+0xfb/0x1b0 [ 47.478092][ C0] nf_conntrack_tcp_packet+0xd40/0x3390 [ 47.483615][ C0] nf_conntrack_in+0x410/0xaa0 [ 47.488355][ C0] ipv4_conntrack_local+0xbe/0x130 [ 47.493441][ C0] nf_hook_slow+0x83/0x160 [ 47.497872][ C0] __ip_local_out+0x1f7/0x2b0 [ 47.502524][ C0] ip_local_out+0x31/0x90 [ 47.506855][ C0] __ip_queue_xmit+0x3a8/0xa40 [ 47.511607][ C0] ip_queue_xmit+0x45/0x60 [ 47.516006][ C0] __tcp_transmit_skb+0xdeb/0x1cd0 [ 47.521102][ C0] __tcp_send_ack+0x246/0x300 [ 47.525799][ C0] tcp_send_ack+0x34/0x40 [ 47.530106][ C0] tcp_cleanup_rbuf+0x130/0x360 [ 47.534934][ C0] tcp_recvmsg+0x633/0x1a30 [ 47.539426][ C0] [ 47.541733][ C0] read to 0xffff888123291a08 of 4 bytes by interrupt on cpu 0: [ 47.549253][ C0] __nf_conntrack_find_get+0x284/0x870 [ 47.554686][ C0] nf_conntrack_in+0x2ef/0xaa0 [ 47.559426][ C0] ipv4_conntrack_in+0x27/0x40 [ 47.564168][ C0] nf_hook_slow+0x83/0x160 [ 47.568561][ C0] ip_rcv+0x12f/0x1a0 [ 47.572522][ C0] __netif_receive_skb_one_core+0xa7/0xe0 [ 47.578217][ C0] __netif_receive_skb+0x37/0xf0 [ 47.583157][ C0] netif_receive_skb_internal+0x59/0x190 [ 47.588761][ C0] napi_gro_receive+0x28f/0x330 [ 47.593586][ C0] receive_buf+0x284/0x30b0 [ 47.598089][ C0] virtnet_poll+0x436/0x7d0 [ 47.602581][ C0] net_rx_action+0x3ae/0xa50 [ 47.607146][ C0] __do_softirq+0x115/0x33f [ 47.611616][ C0] [ 47.613924][ C0] Reported by Kernel Concurrency Sanitizer on: [ 47.620053][ C0] CPU: 0 PID: 7234 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 47.627130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.637159][ C0] ================================================================== [ 47.645278][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 47.651840][ C0] CPU: 0 PID: 7234 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 47.658927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.668968][ C0] Call Trace: [ 47.672224][ C0] [ 47.675072][ C0] dump_stack+0xf5/0x159 [ 47.679293][ C0] panic+0x209/0x639 [ 47.683165][ C0] ? vprintk_func+0x8d/0x140 [ 47.687733][ C0] kcsan_report.cold+0x57/0xeb [ 47.692483][ C0] __kcsan_setup_watchpoint+0x342/0x500 [ 47.698027][ C0] __tsan_read4+0x2c/0x30 [ 47.702333][ C0] __nf_conntrack_find_get+0x284/0x870 [ 47.707765][ C0] ? __tsan_write2+0x32/0x40 [ 47.712330][ C0] ? nf_ct_get_tuple+0x325/0x490 [ 47.717250][ C0] nf_conntrack_in+0x2ef/0xaa0 [ 47.721993][ C0] ipv4_conntrack_in+0x27/0x40 [ 47.726747][ C0] nf_hook_slow+0x83/0x160 [ 47.731148][ C0] ? nf_ct_l4proto_find+0xd0/0xd0 [ 47.736153][ C0] ip_rcv+0x12f/0x1a0 [ 47.740112][ C0] ? ip_sublist_rcv+0x5e0/0x5e0 [ 47.744940][ C0] ? ip_local_deliver+0x210/0x210 [ 47.749956][ C0] __netif_receive_skb_one_core+0xa7/0xe0 [ 47.755670][ C0] __netif_receive_skb+0x37/0xf0 [ 47.760581][ C0] netif_receive_skb_internal+0x59/0x190 [ 47.766192][ C0] napi_gro_receive+0x28f/0x330 [ 47.771039][ C0] receive_buf+0x284/0x30b0 [ 47.775520][ C0] ? __tsan_write8+0x32/0x40 [ 47.780093][ C0] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 47.785528][ C0] ? virtqueue_get_buf+0x31/0x40 [ 47.790441][ C0] virtnet_poll+0x436/0x7d0 [ 47.795022][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 47.801241][ C0] net_rx_action+0x3ae/0xa50 [ 47.805837][ C0] __do_softirq+0x115/0x33f [ 47.810331][ C0] irq_exit+0xbb/0xe0 [ 47.814290][ C0] do_IRQ+0xdf/0x150 [ 47.818160][ C0] common_interrupt+0xf/0xf [ 47.822633][ C0] [ 47.825554][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x51/0x80 [ 47.831944][ C0] Code: 11 01 00 74 49 48 89 df c6 07 00 0f 1f 40 00 48 c7 c7 10 5a a5 85 e8 6e 31 bf fc 48 83 3d 76 b8 11 01 00 74 2b 4c 89 e7 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 00 6f a0 fc 65 8b 05 51 ca 6d 7b [ 47.851699][ C0] RSP: 0018:ffffc900016ef780 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffda [ 47.860087][ C0] RAX: 00000000000008dc RBX: ffff88812be1d7c0 RCX: 000000000000000b [ 47.868034][ C0] RDX: 000000000007b0c0 RSI: 020c49ba5e353f7d RDI: 0000000000000282 [ 47.875982][ C0] RBP: ffffc900016ef790 R08: 0000000000000000 R09: 0000ffff85a55a17 [ 47.883931][ C0] R10: 00000000aaaaaaab R11: ffffffff86042cc0 R12: 0000000000000282 [ 47.891879][ C0] R13: ffff88812be1d7c0 R14: ffff88812be1d800 R15: ffffc900016ef870 [ 47.899841][ C0] hrtimer_start_range_ns+0x44a/0x670 [ 47.905196][ C0] schedule_hrtimeout_range_clock+0x158/0x330 [ 47.911241][ C0] ? hrtimer_active+0x1a0/0x1a0 [ 47.916073][ C0] schedule_hrtimeout_range+0x34/0x50 [ 47.921421][ C0] poll_schedule_timeout.constprop.0+0x75/0xc0 [ 47.927550][ C0] do_select+0xd7f/0x1020 [ 47.931855][ C0] ? __tsan_read1+0x2c/0x30 [ 47.936340][ C0] ? __tsan_write8+0x32/0x40 [ 47.940904][ C0] ? rb_erase+0x2aa/0x990 [ 47.945214][ C0] ? __tsan_read8+0x2c/0x30 [ 47.949695][ C0] ? _raw_spin_unlock_irqrestore+0x70/0x80 [ 47.955476][ C0] ? hrtimer_try_to_cancel+0x57/0x260 [ 47.960836][ C0] ? common_interrupt+0xa/0xf [ 47.965493][ C0] ? debug_smp_processor_id+0x47/0x172 [ 47.970937][ C0] ? __tsan_write4+0x32/0x40 [ 47.975509][ C0] core_sys_select+0x38b/0x520 [ 47.980258][ C0] ? __tsan_read8+0x2c/0x30 [ 47.984750][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 47.990443][ C0] ? _copy_to_user+0x84/0xb0 [ 47.995011][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 48.000879][ C0] ? __tsan_write8+0x32/0x40 [ 48.005444][ C0] ? ktime_get_ts64+0x286/0x2b0 [ 48.010281][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 48.015989][ C0] ? timespec64_add_safe+0xae/0xd0 [ 48.021080][ C0] __x64_sys_pselect6+0x22a/0x280 [ 48.026087][ C0] do_syscall_64+0xcf/0x2f0 [ 48.030569][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.036434][ C0] RIP: 0033:0x45ac23 [ 48.040310][ C0] Code: 48 89 44 24 08 bf 00 00 00 00 be 00 00 00 00 ba 00 00 00 00 41 ba 00 00 00 00 49 89 e0 41 b9 00 00 00 00 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc b8 ba 00 00 00 0f 05 89 44 [ 48.059888][ C0] RSP: 002b:000000c42004ff08 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 48.068270][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac23 [ 48.076214][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.084163][ C0] RBP: 000000c42004ff18 R08: 000000c42004ff08 R09: 0000000000000000 [ 48.092108][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000042f0a0 [ 48.100052][ C0] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 48.109366][ C0] Kernel Offset: disabled [ 48.113683][ C0] Rebooting in 86400 seconds..