[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 43.741922][ T8877] sshd (8877) used greatest stack depth: 10864 bytes left Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts. 2020/06/03 21:43:48 fuzzer started 2020/06/03 21:43:48 dialing manager at 10.128.0.105:40391 2020/06/03 21:43:49 syscalls: 3055 2020/06/03 21:43:49 code coverage: enabled 2020/06/03 21:43:49 comparison tracing: enabled 2020/06/03 21:43:49 extra coverage: enabled 2020/06/03 21:43:49 setuid sandbox: enabled 2020/06/03 21:43:49 namespace sandbox: enabled 2020/06/03 21:43:49 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/03 21:43:49 fault injection: enabled 2020/06/03 21:43:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/03 21:43:49 net packet injection: enabled 2020/06/03 21:43:49 net device setup: enabled 2020/06/03 21:43:49 concurrency sanitizer: enabled 2020/06/03 21:43:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/03 21:43:49 USB emulation: enabled [ 53.349308][ T8920] KCSAN: could not find function: '_find_next_bit' [ 55.043400][ T8920] KCSAN: could not find function: 'poll_schedule_timeout' 2020/06/03 21:43:54 adding functions to KCSAN blacklist: 'ep_poll' 'ext4_free_inodes_count' 'tick_nohz_idle_stop_tick' 'generic_fillattr' '__process_echoes' 'file_update_time' 'ktime_get_real_seconds' 'do_settimeofday64' 'run_timer_softirq' 'mnt_clone_write' 'ext4_mb_good_group' 'pcpu_alloc' 'decrypt_packet' 'copy_process' '_find_next_bit' 'shmem_file_read_iter' 'audit_log_start' 'n_tty_receive_buf_common' 'mod_timer' 'do_signal_stop' '__add_to_page_cache_locked' 'blk_mq_get_request' 'futex_wait_queue_me' 'add_timer' 'blk_mq_dispatch_rq_list' 'page_counter_charge' 'alloc_pid' 'ext4_writepages' 'do_syslog' 'poll_schedule_timeout' 'kauditd_thread' 'do_nanosleep' 'generic_write_end' 'wbt_issue' 'blk_mq_sched_dispatch_requests' 'ext4_mark_iloc_dirty' 'echo_char' 'find_get_pages_range_tag' 'generic_file_read_iter' '__ext4_new_inode' 'xas_clear_mark' 'tick_nohz_next_event' 'tick_sched_do_timer' 21:47:15 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x10000032, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}, {&(0x7f0000001400)="72f40315e164a4d5057f274a818ea6b677a93189ca144ba2b675b28427981b14d1b2ed6bdbe832f4156275f0db5f414aac10b16542132b16864f098e1f977e", 0x3f}, {0x0}], 0x4}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000180)={0x2, 0x83000}) [ 258.062851][ T8907] ================================================================== [ 258.071120][ T8907] BUG: KCSAN: data-race in atime_needs_update / propagate_one [ 258.078498][ T8922] IPVS: ftp: loaded support on port[0] = 21 [ 258.078918][ T8907] [ 258.087725][ T8907] write to 0xffff88812b73f2f0 of 4 bytes by task 8922 on cpu 1: [ 258.095492][ T8907] propagate_one+0x3b3/0x550 [ 258.100082][ T8907] propagate_mnt+0x22e/0x270 [ 258.104670][ T8907] attach_recursive_mnt+0x66d/0x8a0 [ 258.110013][ T8907] graft_tree+0x107/0x160 [ 258.114371][ T8907] do_add_mount.isra.0+0x102/0x190 [ 258.119483][ T8907] do_mount+0x12d5/0x1590 [ 258.123845][ T8907] __x64_sys_mount+0x12b/0x1a0 [ 258.128612][ T8907] do_syscall_64+0xc7/0x3b0 [ 258.133122][ T8907] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.138995][ T8907] [ 258.141323][ T8907] read to 0xffff88812b73f2f0 of 4 bytes by task 8907 on cpu 0: [ 258.148960][ T8907] atime_needs_update+0x13e/0x360 [ 258.153992][ T8907] touch_atime+0x63/0x150 [ 258.154148][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 258.158313][ T8907] generic_file_read_iter+0x12fa/0x18c0 [ 258.158328][ T8907] ext4_file_read_iter+0x103/0x360 [ 258.158353][ T8907] new_sync_read+0x306/0x450 [ 258.180300][ T8907] __vfs_read+0x9e/0xb0 [ 258.184459][ T8907] integrity_kernel_read+0x97/0xe0 [ 258.189658][ T8907] ima_calc_file_hash_tfm+0x18f/0x240 [ 258.195176][ T8907] ima_calc_file_hash+0x147/0xeb0 [ 258.200195][ T8907] ima_collect_measurement+0x385/0x3b0 [ 258.205678][ T8907] process_measurement+0x91a/0x1000 [ 258.211918][ T8907] ima_file_check+0x7e/0xb0 [ 258.216420][ T8907] path_openat+0x176e/0x23d0 [ 258.217147][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.221186][ T8907] do_filp_open+0x11e/0x1b0 [ 258.228231][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.232672][ T8907] do_sys_openat2+0x52e/0x680 [ 258.244028][ T8922] device bridge_slave_0 entered promiscuous mode [ 258.244640][ T8907] do_sys_open+0xa2/0x110 [ 258.253647][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.255500][ T8907] __x64_sys_openat+0x5d/0x70 [ 258.263418][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.267147][ T8907] do_syscall_64+0xc7/0x3b0 [ 258.267164][ T8907] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.267175][ T8907] [ 258.275820][ T8922] device bridge_slave_1 entered promiscuous mode [ 258.278677][ T8907] Reported by Kernel Concurrency Sanitizer on: [ 258.278694][ T8907] CPU: 0 PID: 8907 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 258.278703][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.278717][ T8907] ================================================================== [ 258.298943][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.299381][ T8907] Kernel panic - not syncing: panic_on_warn set ... [ 258.309538][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.317649][ T8907] CPU: 0 PID: 8907 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 258.317658][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.317662][ T8907] Call Trace: [ 258.317685][ T8907] dump_stack+0x11d/0x187 [ 258.317712][ T8907] panic+0x210/0x640 [ 258.341442][ T8922] team0: Port device team_slave_0 added [ 258.341901][ T8907] ? vprintk_func+0x89/0x13a [ 258.353246][ T8922] team0: Port device team_slave_1 added [ 258.359199][ T8907] kcsan_report.cold+0xc/0x1a [ 258.359222][ T8907] kcsan_setup_watchpoint+0x3fb/0x440 [ 258.359245][ T8907] atime_needs_update+0x13e/0x360 [ 258.359263][ T8907] touch_atime+0x63/0x150 [ 258.359298][ T8907] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 258.386207][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.389643][ T8907] generic_file_read_iter+0x12fa/0x18c0 [ 258.394220][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.399764][ T8907] ext4_file_read_iter+0x103/0x360 [ 258.399786][ T8907] new_sync_read+0x306/0x450 [ 258.399818][ T8907] __vfs_read+0x9e/0xb0 [ 258.407221][ T8922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.410050][ T8907] integrity_kernel_read+0x97/0xe0 [ 258.417508][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.419804][ T8907] ima_calc_file_hash_tfm+0x18f/0x240 [ 258.426251][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.433224][ T8907] ? should_fail+0x7c/0x2fd [ 258.440060][ T8922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.464689][ T8907] ? widen_string+0x48/0x190 [ 258.464709][ T8907] ? string_nocheck+0xe1/0x100 [ 258.464726][ T8907] ? format_decode+0x19c/0xaa0 [ 258.464748][ T8907] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 258.464771][ T8907] ? tomoyo_profile+0x3f/0x50 [ 258.573087][ T8907] ? __rcu_read_unlock+0x77/0x390 [ 258.578262][ T8907] ? tomoyo_write_log2+0x64/0x580 [ 258.583283][ T8907] ? setuid_policy_lookup+0xdf/0x110 [ 258.588565][ T8907] ima_calc_file_hash+0x147/0xeb0 [ 258.593598][ T8907] ? up_read+0x42/0x90 [ 258.597839][ T8907] ? ext4_xattr_get+0x10b/0x600 [ 258.602867][ T8907] ima_collect_measurement+0x385/0x3b0 [ 258.608430][ T8907] process_measurement+0x91a/0x1000 [ 258.613703][ T8907] ? dquot_file_open+0x60/0x80 [ 258.618447][ T8907] ? ext4_file_open+0x109/0x440 [ 258.624418][ T8907] ? __rcu_read_unlock+0x77/0x390 [ 258.629442][ T8907] ? aa_get_task_label+0x1ee/0x370 [ 258.634550][ T8907] ima_file_check+0x7e/0xb0 [ 258.639051][ T8907] path_openat+0x176e/0x23d0 [ 258.643766][ T8907] ? ext4_journal_check_start+0xf8/0x160 [ 258.649580][ T8907] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 258.655475][ T8907] ? constant_test_bit+0xd/0x30 [ 258.660591][ T8907] ? __this_cpu_preempt_check+0x3c/0x130 [ 258.666376][ T8907] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 258.672347][ T8907] do_filp_open+0x11e/0x1b0 [ 258.676959][ T8907] ? _find_next_bit.constprop.0+0x126/0x160 [ 258.682962][ T8907] ? __read_once_size+0x2f/0xd0 [ 258.687809][ T8907] ? _raw_spin_unlock+0x38/0x60 [ 258.692842][ T8907] ? __alloc_fd+0x2f3/0x3b0 [ 258.697343][ T8907] do_sys_openat2+0x52e/0x680 [ 258.702042][ T8907] do_sys_open+0xa2/0x110 [ 258.706360][ T8907] __x64_sys_openat+0x5d/0x70 [ 258.711110][ T8907] do_syscall_64+0xc7/0x3b0 [ 258.715598][ T8907] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.721471][ T8907] RIP: 0033:0x4b3d4a [ 258.725594][ T8907] Code: e8 5b a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 258.745890][ T8907] RSP: 002b:000000c018ec5830 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 258.754416][ T8907] RAX: ffffffffffffffda RBX: 000000c00002e800 RCX: 00000000004b3d4a [ 258.762726][ T8907] RDX: 0000000000080002 RSI: 000000c019252520 RDI: ffffffffffffff9c [ 258.770699][ T8907] RBP: 000000c018ec58a8 R08: 0000000000000000 R09: 0000000000000000 [ 258.778907][ T8907] R10: 00000000000001a4 R11: 0000000000000206 R12: ffffffffffffffff [ 258.786874][ T8907] R13: 000000000000002a R14: 0000000000000029 R15: 0000000000000100 [ 258.796584][ T8907] Kernel Offset: disabled [ 258.801001][ T8907] Rebooting in 86400 seconds..