[ 35.405234][ T25] audit: type=1800 audit(1570966138.220:26): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 35.436377][ T25] audit: type=1800 audit(1570966138.220:27): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 35.864477][ T7096] sshd (7096) used greatest stack depth: 10032 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. 2019/10/13 11:29:05 fuzzer started 2019/10/13 11:29:06 dialing manager at 10.128.0.105:40973 2019/10/13 11:29:06 syscalls: 2523 2019/10/13 11:29:06 code coverage: enabled 2019/10/13 11:29:06 comparison tracing: enabled 2019/10/13 11:29:06 extra coverage: extra coverage is not supported by the kernel 2019/10/13 11:29:06 setuid sandbox: enabled 2019/10/13 11:29:06 namespace sandbox: enabled 2019/10/13 11:29:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/13 11:29:06 fault injection: enabled 2019/10/13 11:29:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/13 11:29:06 net packet injection: enabled 2019/10/13 11:29:06 net device setup: enabled 2019/10/13 11:29:06 concurrency sanitizer: enabled syzkaller login: [ 43.709209][ C0] ================================================================== [ 43.717323][ C0] BUG: KCSAN: data-race in __remove_hrtimer / hrtimer_active [ 43.724663][ C0] [ 43.726974][ C0] read to 0xffffc9000163fc88 of 1 bytes by task 7189 on cpu 1: [ 43.734498][ C0] hrtimer_active+0x5e/0x1a0 [ 43.739071][ C0] hrtimer_try_to_cancel+0x3c/0x260 [ 43.744249][ C0] hrtimer_cancel+0x29/0x50 [ 43.748738][ C0] futex_wait+0x38b/0x400 [ 43.753049][ C0] do_futex+0xe9/0x18b0 [ 43.757188][ C0] __x64_sys_futex+0x2cd/0x3f0 [ 43.761937][ C0] do_syscall_64+0xcf/0x2f0 [ 43.766421][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.772285][ C0] [ 43.774598][ C0] write to 0xffffc9000163fc88 of 1 bytes by interrupt on cpu 0: [ 43.782207][ C0] __remove_hrtimer+0x52/0x130 [ 43.786967][ C0] __hrtimer_run_queues+0x250/0x600 [ 43.792150][ C0] hrtimer_interrupt+0x22a/0x480 [ 43.797068][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 43.802505][ C0] apic_timer_interrupt+0xf/0x20 [ 43.807414][ C0] [ 43.809724][ C0] Reported by Kernel Concurrency Sanitizer on: [ 43.815861][ C0] CPU: 0 PID: 7204 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 43.822942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.832983][ C0] ================================================================== [ 43.841023][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 43.847590][ C0] CPU: 0 PID: 7204 Comm: syz-fuzzer Not tainted 5.3.0+ #0 [ 43.854680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.864709][ C0] Call Trace: [ 43.867971][ C0] [ 43.870809][ C0] dump_stack+0xf5/0x159 [ 43.875038][ C0] panic+0x209/0x639 [ 43.878918][ C0] ? vprintk_func+0x8d/0x140 [ 43.883490][ C0] kcsan_report.cold+0xc/0x1b [ 43.888151][ C0] __kcsan_setup_watchpoint+0x3ee/0x510 [ 43.893681][ C0] __tsan_write1+0x32/0x40 [ 43.898084][ C0] __remove_hrtimer+0x52/0x130 [ 43.902836][ C0] __hrtimer_run_queues+0x250/0x600 [ 43.908016][ C0] ? __kcsan_setup_watchpoint+0x96/0x510 [ 43.913634][ C0] hrtimer_interrupt+0x22a/0x480 [ 43.918560][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 43.924002][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 43.929630][ C0] apic_timer_interrupt+0xf/0x20 [ 43.934544][ C0] [ 43.937462][ C0] RIP: 0033:0x40ac38 [ 43.941342][ C0] Code: 4d 89 c8 eb de 49 89 d2 4a 8d 54 8a 08 8b 12 44 8b 5c 24 58 44 39 da 74 05 4c 89 d2 eb c5 0f b6 46 52 4c 0f af c8 0f b6 43 08 <4b> 8d 4c 11 28 a8 04 0f 84 da 01 00 00 83 e0 fb 88 43 08 48 89 4c [ 43.960926][ C0] RSP: 002b:000000c4204e18d8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 43.969330][ C0] RAX: 0000000000000004 RBX: 000000c42098d200 RCX: 000000c4209db6f0 [ 43.977285][ C0] RDX: 00000000a8d1a69e RSI: 00000000008630e0 RDI: 0000000000000100 [ 43.985236][ C0] RBP: 000000c4204e1910 R08: 0000000000000000 R09: 0000000000000000 [ 43.993199][ C0] R10: 000000c4209db6e8 R11: 0000000000000680 R12: 0000000000000180 [ 44.001153][ C0] R13: 0000000000000018 R14: 0000000000000057 R15: 0000000000000100 [ 45.117119][ C0] Shutting down cpus with NMI [ 45.123246][ C0] Kernel Offset: disabled [ 45.127621][ C0] Rebooting in 86400 seconds..