[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2020/05/18 12:08:58 fuzzer started 2020/05/18 12:08:58 dialing manager at 10.128.0.105:46597 2020/05/18 12:08:58 syscalls: 3055 2020/05/18 12:08:58 code coverage: enabled 2020/05/18 12:08:58 comparison tracing: enabled 2020/05/18 12:08:58 extra coverage: enabled 2020/05/18 12:08:58 setuid sandbox: enabled 2020/05/18 12:08:58 namespace sandbox: enabled 2020/05/18 12:08:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/18 12:08:58 fault injection: enabled 2020/05/18 12:08:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/18 12:08:58 net packet injection: enabled 2020/05/18 12:08:58 net device setup: enabled 2020/05/18 12:08:58 concurrency sanitizer: enabled 2020/05/18 12:08:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/18 12:08:58 USB emulation: enabled syzkaller login: [ 52.721031][ T8921] KCSAN: could not find function: '_find_next_bit' 2020/05/18 12:09:02 adding functions to KCSAN blacklist: 'find_get_pages_range_tag' 'ep_poll' 'do_signal_stop' 'generic_write_end' 'ext4_free_inodes_count' '__ext4_new_inode' '_find_next_bit' 'blk_mq_get_request' 'ext4_mark_iloc_dirty' '__snd_rawmidi_transmit_ack' 'pcpu_alloc' 'mod_timer' 'n_tty_receive_buf_common' 'add_timer' 'fasync_remove_entry' 'xas_clear_mark' 'copy_process' 'echo_char' 'kauditd_thread' 'generic_fillattr' 'tick_sched_do_timer' 'tick_nohz_idle_stop_tick' 'shmem_file_read_iter' 'run_timer_softirq' 'ktime_get_real_seconds' 'decrypt_packet' 'do_nanosleep' 12:10:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88bf259659a927b1928b9ba4ede63a447592f2d7922018418901fa42fddd618edb6818d0a7fe375671b8206eac7437da69f924999c01625a77006543cfc56c83e1e8f5460d62abd8ae69496a0fc78f284d1343ed64a835c967b9fc7735aeaad6717c226fe345498aa7197a32aa114c13dbc2ffc03d11fef924ec36080001000000000000e35876adf33b408694a803cf484a8c1daead95121cb613694b051e7dae395ae2b576eadfcfb9460f476ac5bc0e61c6"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='W', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008"], 0x3}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 167.475668][ T8910] ================================================================== [ 167.483985][ T8910] BUG: KCSAN: data-race in atime_needs_update / propagate_one [ 167.491430][ T8910] [ 167.493150][ T8925] IPVS: ftp: loaded support on port[0] = 21 [ 167.493772][ T8910] write to 0xffff88812afd6970 of 4 bytes by task 8925 on cpu 1: [ 167.507456][ T8910] propagate_one+0x3b3/0x550 [ 167.512052][ T8910] propagate_mnt+0x22e/0x270 [ 167.516642][ T8910] attach_recursive_mnt+0x66d/0x8a0 [ 167.521836][ T8910] graft_tree+0x107/0x160 [ 167.526195][ T8910] do_add_mount.isra.0+0x102/0x190 [ 167.531328][ T8910] do_mount+0x12d5/0x1590 [ 167.536157][ T8910] __x64_sys_mount+0x12b/0x1a0 [ 167.540923][ T8910] do_syscall_64+0xc7/0x3b0 [ 167.545428][ T8910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 167.551304][ T8910] [ 167.553629][ T8910] read to 0xffff88812afd6970 of 4 bytes by task 8910 on cpu 0: [ 167.561360][ T8910] atime_needs_update+0x1c0/0x360 [ 167.566390][ T8910] touch_atime+0x63/0x150 [ 167.568045][ T8925] chnl_net:caif_netlink_parms(): no params data found [ 167.570714][ T8910] generic_file_read_iter+0x12fa/0x18c0 [ 167.570736][ T8910] ext4_file_read_iter+0x103/0x360 [ 167.588195][ T8910] new_sync_read+0x306/0x450 [ 167.592816][ T8910] __vfs_read+0x9e/0xb0 [ 167.596972][ T8910] integrity_kernel_read+0x97/0xe0 [ 167.602088][ T8910] ima_calc_file_hash_tfm+0x18f/0x240 [ 167.607453][ T8910] ima_calc_file_hash+0x147/0xeb0 [ 167.612465][ T8910] ima_collect_measurement+0x385/0x3b0 [ 167.618010][ T8910] process_measurement+0x91a/0x1000 [ 167.623233][ T8910] ima_file_check+0x7e/0xb0 [ 167.627727][ T8910] path_openat+0x176e/0x23d0 [ 167.632310][ T8910] do_filp_open+0x11e/0x1b0 [ 167.634377][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.636805][ T8910] do_sys_openat2+0x52e/0x680 [ 167.636820][ T8910] do_sys_open+0xa2/0x110 [ 167.636835][ T8910] __x64_sys_openat+0x5d/0x70 [ 167.636861][ T8910] do_syscall_64+0xc7/0x3b0 [ 167.643909][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.648524][ T8910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 167.658232][ T8925] device bridge_slave_0 entered promiscuous mode [ 167.662072][ T8910] [ 167.670824][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.674954][ T8910] Reported by Kernel Concurrency Sanitizer on: [ 167.674972][ T8910] CPU: 0 PID: 8910 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 167.674980][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.674985][ T8910] ================================================================== [ 167.675032][ T8910] Kernel panic - not syncing: panic_on_warn set ... [ 167.684399][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.690655][ T8910] CPU: 0 PID: 8910 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 167.698392][ T8925] device bridge_slave_1 entered promiscuous mode [ 167.704989][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.704994][ T8910] Call Trace: [ 167.705020][ T8910] dump_stack+0x11d/0x187 [ 167.705039][ T8910] panic+0x210/0x640 [ 167.705067][ T8910] ? vprintk_func+0x89/0x13a [ 167.728312][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.729727][ T8910] kcsan_report.cold+0xc/0x1a [ 167.738797][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.744965][ T8910] kcsan_setup_watchpoint+0x3fb/0x440 [ 167.744995][ T8910] atime_needs_update+0x1c0/0x360 [ 167.765533][ T8925] team0: Port device team_slave_0 added [ 167.768943][ T8910] touch_atime+0x63/0x150 [ 167.775967][ T8925] team0: Port device team_slave_1 added [ 167.777392][ T8910] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 167.799665][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.800297][ T8910] generic_file_read_iter+0x12fa/0x18c0 [ 167.805758][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.811207][ T8910] ext4_file_read_iter+0x103/0x360 [ 167.818190][ T8925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.821045][ T8910] new_sync_read+0x306/0x450 [ 167.828796][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.832590][ T8910] __vfs_read+0x9e/0xb0 [ 167.840251][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.845032][ T8910] integrity_kernel_read+0x97/0xe0 [ 167.845058][ T8910] ima_calc_file_hash_tfm+0x18f/0x240 [ 167.872200][ T8925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.876306][ T8910] ? should_fail+0x7c/0x2fd [ 167.876334][ T8910] ? widen_string+0x48/0x190 [ 167.959389][ T8910] ? string_nocheck+0xe1/0x100 [ 167.964169][ T8910] ? format_decode+0x19c/0xaa0 [ 167.968928][ T8910] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 167.974812][ T8910] ? tomoyo_profile+0x3f/0x50 [ 167.979472][ T8910] ? __rcu_read_unlock+0x77/0x390 [ 167.984488][ T8910] ? tomoyo_write_log2+0x64/0x580 [ 167.990299][ T8910] ? setuid_policy_lookup+0xdf/0x110 [ 167.995688][ T8910] ima_calc_file_hash+0x147/0xeb0 [ 168.000831][ T8910] ? debug_smp_processor_id+0x3f/0x129 [ 168.006281][ T8910] ? up_read+0x42/0x90 [ 168.010529][ T8910] ? ext4_xattr_get+0x10b/0x600 [ 168.015585][ T8910] ima_collect_measurement+0x385/0x3b0 [ 168.021141][ T8910] process_measurement+0x91a/0x1000 [ 168.026324][ T8910] ? dquot_file_open+0x60/0x80 [ 168.031156][ T8910] ? ext4_file_open+0x109/0x440 [ 168.036005][ T8910] ? __rcu_read_unlock+0x77/0x390 [ 168.041023][ T8910] ? aa_get_task_label+0x1ee/0x370 [ 168.046149][ T8910] ima_file_check+0x7e/0xb0 [ 168.050659][ T8910] path_openat+0x176e/0x23d0 [ 168.055311][ T8910] ? ext4_journal_check_start+0xf8/0x160 [ 168.061209][ T8910] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 168.067100][ T8910] ? constant_test_bit+0xd/0x30 [ 168.071935][ T8910] ? wb_io_lists_populated+0x88/0xa0 [ 168.077254][ T8910] ? _raw_spin_unlock+0x38/0x60 [ 168.082114][ T8910] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 168.088019][ T8910] do_filp_open+0x11e/0x1b0 [ 168.092509][ T8910] ? _find_next_bit.constprop.0+0x126/0x160 [ 168.098387][ T8910] ? __read_once_size+0x2f/0xd0 [ 168.103306][ T8910] ? _raw_spin_unlock+0x38/0x60 [ 168.108187][ T8910] ? __alloc_fd+0x2f3/0x3b0 [ 168.112711][ T8910] do_sys_openat2+0x52e/0x680 [ 168.117400][ T8910] do_sys_open+0xa2/0x110 [ 168.121714][ T8910] __x64_sys_openat+0x5d/0x70 [ 168.126386][ T8910] do_syscall_64+0xc7/0x3b0 [ 168.131013][ T8910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 168.136887][ T8910] RIP: 0033:0x47c5aa [ 168.140768][ T8910] Code: e8 7b 6b fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 168.160546][ T8910] RSP: 002b:000000c4223477d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 168.169136][ T8910] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c5aa [ 168.177104][ T8910] RDX: 0000000000080002 RSI: 000000c42d05e400 RDI: ffffffffffffff9c [ 168.185091][ T8910] RBP: 000000c422347850 R08: 0000000000000000 R09: 0000000000000000 [ 168.193562][ T8910] R10: 00000000000001a4 R11: 0000000000000202 R12: ffffffffffffffff [ 168.201529][ T8910] R13: 0000000000000021 R14: 0000000000000020 R15: 0000000000000100 [ 168.210699][ T8910] Kernel Offset: disabled [ 168.215035][ T8910] Rebooting in 86400 seconds..