[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.215012][ T26] audit: type=1800 audit(1570192881.773:25): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 36.234900][ T26] audit: type=1800 audit(1570192881.773:26): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 36.254928][ T26] audit: type=1800 audit(1570192881.773:27): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. 2019/10/04 12:41:28 fuzzer started 2019/10/04 12:41:30 dialing manager at 10.128.0.105:38119 2019/10/04 12:41:30 syscalls: 2523 2019/10/04 12:41:30 code coverage: enabled 2019/10/04 12:41:30 comparison tracing: enabled 2019/10/04 12:41:30 extra coverage: extra coverage is not supported by the kernel 2019/10/04 12:41:30 setuid sandbox: enabled 2019/10/04 12:41:30 namespace sandbox: enabled 2019/10/04 12:41:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 12:41:30 fault injection: enabled 2019/10/04 12:41:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 12:41:30 net packet injection: enabled 2019/10/04 12:41:30 net device setup: enabled 2019/10/04 12:41:30 concurrency sanitizer: enabled syzkaller login: [ 44.927976][ C1] ================================================================== [ 44.936201][ C1] BUG: KCSAN: data-race in __nf_conntrack_find_get+0x284/0x870 and __nf_ct_refresh_acct+0xfb/0x1b0 [ 44.946868][ C1] [ 44.949193][ C1] write to 0xffff88812aea4808 of 4 bytes by task 7225 on cpu 0: [ 44.957862][ C1] __nf_ct_refresh_acct+0xfb/0x1b0 [ 44.963117][ C1] nf_conntrack_tcp_packet+0xd40/0x3390 [ 44.969969][ C1] nf_conntrack_in+0x410/0xaa0 [ 44.976179][ C1] ipv4_conntrack_local+0xbe/0x130 [ 44.981286][ C1] nf_hook_slow+0x83/0x160 [ 44.985689][ C1] __ip_local_out+0x1f7/0x2b0 [ 44.990360][ C1] ip_local_out+0x31/0x90 [ 44.994667][ C1] __ip_queue_xmit+0x3a8/0xa40 [ 44.999405][ C1] ip_queue_xmit+0x45/0x60 [ 45.003807][ C1] __tcp_transmit_skb+0xdeb/0x1cd0 [ 45.008893][ C1] __tcp_send_ack+0x246/0x300 [ 45.013546][ C1] tcp_send_ack+0x34/0x40 [ 45.017863][ C1] tcp_cleanup_rbuf+0x130/0x360 [ 45.022687][ C1] tcp_recvmsg+0x633/0x1a30 [ 45.027161][ C1] [ 45.029468][ C1] read to 0xffff88812aea4808 of 4 bytes by interrupt on cpu 1: [ 45.037010][ C1] __nf_conntrack_find_get+0x284/0x870 [ 45.042446][ C1] nf_conntrack_in+0x2ef/0xaa0 [ 45.047197][ C1] ipv4_conntrack_in+0x27/0x40 [ 45.052045][ C1] nf_hook_slow+0x83/0x160 [ 45.056456][ C1] ip_rcv+0x12f/0x1a0 [ 45.060425][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 45.066122][ C1] __netif_receive_skb+0x37/0xf0 [ 45.071515][ C1] netif_receive_skb_internal+0x59/0x190 [ 45.077129][ C1] napi_gro_receive+0x28f/0x330 [ 45.081957][ C1] receive_buf+0x284/0x30b0 [ 45.086435][ C1] virtnet_poll+0x436/0x7d0 [ 45.090913][ C1] net_rx_action+0x3ae/0xa50 [ 45.095480][ C1] __do_softirq+0x115/0x33f [ 45.099949][ C1] [ 45.102252][ C1] Reported by Kernel Concurrency Sanitizer on: [ 45.108383][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0 [ 45.115115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.125143][ C1] ================================================================== [ 45.133192][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 45.139761][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0 [ 45.146766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.156796][ C1] Call Trace: [ 45.160061][ C1] [ 45.162903][ C1] dump_stack+0xf5/0x159 [ 45.167124][ C1] panic+0x209/0x639 [ 45.171417][ C1] ? vprintk_func+0x8d/0x140 [ 45.175988][ C1] kcsan_report.cold+0x57/0xeb [ 45.180834][ C1] __kcsan_setup_watchpoint+0x342/0x500 [ 45.186357][ C1] __tsan_read4+0x2c/0x30 [ 45.190696][ C1] __nf_conntrack_find_get+0x284/0x870 [ 45.196141][ C1] ? __tsan_write2+0x32/0x40 [ 45.200725][ C1] ? nf_ct_get_tuple+0x325/0x490 [ 45.205646][ C1] nf_conntrack_in+0x2ef/0xaa0 [ 45.211350][ C1] ipv4_conntrack_in+0x27/0x40 [ 45.216093][ C1] nf_hook_slow+0x83/0x160 [ 45.220483][ C1] ? nf_ct_l4proto_find+0xd0/0xd0 [ 45.225506][ C1] ip_rcv+0x12f/0x1a0 [ 45.229573][ C1] ? ip_sublist_rcv+0x5e0/0x5e0 [ 45.234863][ C1] ? ip_local_deliver+0x210/0x210 [ 45.240068][ C1] __netif_receive_skb_one_core+0xa7/0xe0 [ 45.246116][ C1] __netif_receive_skb+0x37/0xf0 [ 45.251040][ C1] netif_receive_skb_internal+0x59/0x190 [ 45.256657][ C1] napi_gro_receive+0x28f/0x330 [ 45.261496][ C1] receive_buf+0x284/0x30b0 [ 45.265982][ C1] ? __tsan_write8+0x32/0x40 [ 45.270559][ C1] ? virtqueue_get_buf_ctx+0x4fd/0x5c0 [ 45.276162][ C1] virtnet_poll+0x436/0x7d0 [ 45.280675][ C1] net_rx_action+0x3ae/0xa50 [ 45.285252][ C1] __do_softirq+0x115/0x33f [ 45.289867][ C1] irq_exit+0xbb/0xe0 [ 45.293924][ C1] do_IRQ+0xdf/0x150 [ 45.297811][ C1] common_interrupt+0xf/0xf [ 45.302291][ C1] [ 45.305257][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 45.310624][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 8c d2 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 7c d2 4e 00 fb f4 90 55 48 89 e5 41 55 41 54 53 e8 82 78 a7 fc e8 5d 4e b9 fd 0f [ 45.330212][ C1] RSP: 0018:ffffc90000cd3e48 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffde [ 45.338779][ C1] RAX: db22d0e56041a178 RBX: 0000000000000001 RCX: 00000000000006bc [ 45.346816][ C1] RDX: 00000000001506d0 RSI: 020c49ba5e353f7d RDI: ffffffff85a55a28 [ 45.354825][ C1] RBP: ffffc90000cd3e80 R08: 0000000000000000 R09: 0000ffff85a55a2f [ 45.362780][ C1] R10: 00000000aaaaaaab R11: ffffffff86042cc0 R12: ffff88812b38b0c0 [ 45.370735][ C1] R13: ffff88812b38b0c0 R14: 0000000000000000 R15: 0000000000000000 [ 45.378725][ C1] ? default_idle+0x50/0x230 [ 45.383308][ C1] arch_cpu_idle+0x1f/0x30 [ 45.387710][ C1] default_idle_call+0x1e/0x40 [ 45.392455][ C1] do_idle+0x1ea/0x2c0 [ 45.396508][ C1] ? complete+0x44/0x50 [ 45.400656][ C1] cpu_startup_entry+0x1b/0x20 [ 45.405425][ C1] start_secondary+0x207/0x260 [ 45.410208][ C1] secondary_startup_64+0xa4/0xb0 [ 45.416658][ C1] Kernel Offset: disabled [ 45.421005][ C1] Rebooting in 86400 seconds..