Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. 2020/01/31 05:51:08 fuzzer started 2020/01/31 05:51:09 dialing manager at 10.128.0.105:37077 2020/01/31 05:51:10 syscalls: 2900 2020/01/31 05:51:10 code coverage: enabled 2020/01/31 05:51:10 comparison tracing: enabled 2020/01/31 05:51:10 extra coverage: enabled 2020/01/31 05:51:10 setuid sandbox: enabled 2020/01/31 05:51:10 namespace sandbox: enabled 2020/01/31 05:51:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/31 05:51:10 fault injection: enabled 2020/01/31 05:51:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/31 05:51:10 net packet injection: enabled 2020/01/31 05:51:10 net device setup: enabled 2020/01/31 05:51:10 concurrency sanitizer: enabled 2020/01/31 05:51:10 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 70.092910][ T7866] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/31 05:51:31 adding functions to KCSAN blacklist: 'kcm_rfree' 'snd_seq_check_queue' 'enqueue_timer' 'sbitmap_queue_clear' '__mark_inode_dirty' 'blk_mq_run_hw_queue' 'add_timer_on' 'padata_find_next' '__ext4_new_inode' 'vm_area_dup' 'blk_stat_add' 'page_counter_charge' '__delete_from_page_cache' 'ext4_free_inodes_count' 'lookup_fast' 'wbt_issue' 'ext4_mark_iloc_dirty' 'commit_echoes' 'wbc_detach_inode' 'xprt_connect' 'run_timer_softirq' 'evict' 'ext4_es_lookup_extent' 'shmem_add_to_page_cache' 'vfs_readlink' '__dev_queue_xmit' '__neigh_event_send' 'snd_pcm_oss_ioctl' 'ext4_mb_good_group' 'ip_tunnel_xmit' 'netlink_getname' 'rcu_gp_fqs_check_wake' 'ext4_has_free_clusters' 'ext4_nonda_switch' 'poll_schedule_timeout' '__get_user_pages' '__add_to_page_cache_locked' 'ondemand_readahead' 'fuse_abort_conn' 'xas_find_marked' 'kauditd_thread' 'ext4_writepages' 'other_inode_match' 'tick_sched_do_timer' 'd_instantiate_new' 'shmem_getpage_gfp' 'geneve_xmit' 'iomap_dio_bio_actor' 'do_signal_stop' '__put_unused_fd' 'tick_do_update_jiffies64' 'inode_sync_complete' 'futex_wait_queue_me' 'generic_permission' 'generic_file_read_iter' 'xas_clear_mark' 'find_next_bit' 'ext4_free_inode' 'wbt_inflight_cb' 'watchdog' '__hrtimer_run_queues' 'taskstats_exit' 'generic_fillattr' 'do_wait' 'can_receive' '__blkdev_get' 'exit_signals' '__writeback_single_inode' '__snd_rawmidi_transmit_ack' 'bio_endio' 'atime_needs_update' 'ipip_tunnel_xmit' 'packet_do_bind' 'lruvec_lru_size' 'shmem_file_read_iter' 'tomoyo_supervisor' 'process_srcu' 'perf_event_update_userpage' 'ip6_dst_gc' 'virtqueue_enable_cb_delayed' 'ep_poll' 'mod_timer' 'mm_update_next_owner' 'echo_char' 'pid_update_inode' 'fsnotify' 'fasync_remove_entry' 'iput' 'n_tty_receive_buf_common' 'do_nanosleep' 'alloc_pid' 'do_syslog' 'page_counter_try_charge' 'generic_write_end' 'do_try_to_free_pages' 'common_perm_cond' 'audit_log_start' 'find_get_pages_range_tag' '__filemap_fdatawrite_range' 'yama_ptracer_del' 'snd_seq_prioq_cell_out' '__lru_cache_add' 'l2tp_tunnel_del_work' 'ktime_get_real_seconds' '__perf_event_overflow' 'dd_has_work' 'timer_clear_idle' 'snd_seq_timer_get_cur_tick' '__process_echoes' 'rcu_gp_fqs_loop' 'pcpu_alloc' 'snd_timer_pause' 'filemap_map_pages' 'wbt_done' 'copy_process' 'blk_mq_sched_dispatch_requests' '__fsnotify_recalc_mask' 'mark_buffer_dirty_inode' 'blk_mq_dispatch_rq_list' '__dentry_kill' 'get_cpu_idle_time_us' 'sit_tunnel_xmit' 'blk_mq_get_request' '__rcu_read_unlock' '__find_get_block' 'vti_tunnel_xmit' 'get_cpu_iowait_time_us' 'fprop_fraction_percpu' 'tick_nohz_idle_stop_tick' 05:55:27 executing program 0: [ 321.002193][ T7855] ================================================================== [ 321.010362][ T7855] BUG: KCSAN: data-race in tomoyo_check_acl / tomoyo_update_domain [ 321.018227][ T7855] [ 321.020536][ T7855] read to 0xffff88812034c858 of 1 bytes by task 7867 on cpu 1: [ 321.028056][ T7855] tomoyo_check_acl+0x98/0x270 [ 321.032839][ T7855] tomoyo_path_number_perm+0x272/0x3c0 [ 321.038277][ T7855] tomoyo_path_chmod+0x2f/0x40 [ 321.043016][ T7855] security_path_chmod+0xac/0xe0 [ 321.047964][ T7855] chmod_common+0xe0/0x2d0 [ 321.052358][ T7855] do_fchmodat+0x7a/0x100 [ 321.056697][ T7855] __x64_sys_fchmodat+0x4d/0x60 [ 321.061526][ T7855] do_syscall_64+0xcc/0x3a0 [ 321.066048][ T7855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.071911][ T7855] [ 321.074240][ T7855] write to 0xffff88812034c858 of 1 bytes by task 7855 on cpu 0: [ 321.081855][ T7855] tomoyo_update_domain+0x32f/0x450 [ 321.087034][ T7855] tomoyo_write_file+0x34e/0x580 [ 321.091993][ T7855] tomoyo_write_domain2+0xad/0x120 [ 321.097084][ T7855] tomoyo_supervisor+0xad7/0xd20 [ 321.102011][ T7855] tomoyo_path_permission+0x121/0x160 [ 321.107368][ T7855] tomoyo_check_open_permission+0x2b9/0x320 [ 321.113285][ T7855] tomoyo_file_open+0x75/0x90 [ 321.117945][ T7855] security_file_open+0x69/0x210 [ 321.122866][ T7855] do_dentry_open+0x211/0x970 [ 321.127551][ T7855] vfs_open+0x62/0x80 [ 321.131513][ T7855] path_openat+0xf9f/0x3580 [ 321.135993][ T7855] do_filp_open+0x11e/0x1b0 [ 321.140490][ T7855] do_sys_open+0x3b3/0x4f0 [ 321.144887][ T7855] __x64_sys_openat+0x62/0x80 [ 321.149543][ T7855] do_syscall_64+0xcc/0x3a0 [ 321.154026][ T7855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.159907][ T7855] [ 321.162209][ T7855] Reported by Kernel Concurrency Sanitizer on: [ 321.168464][ T7855] CPU: 0 PID: 7855 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 321.176674][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.186711][ T7855] ================================================================== [ 321.194796][ T7855] Kernel panic - not syncing: panic_on_warn set ... [ 321.201375][ T7855] CPU: 0 PID: 7855 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0 [ 321.209590][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.219621][ T7855] Call Trace: [ 321.222898][ T7855] dump_stack+0x11d/0x181 [ 321.227247][ T7855] panic+0x210/0x640 [ 321.231124][ T7855] ? vprintk_func+0x8d/0x140 [ 321.235694][ T7855] kcsan_report.cold+0xc/0xd [ 321.240299][ T7855] kcsan_setup_watchpoint+0x3fe/0x460 [ 321.245652][ T7855] ? tomoyo_same_path_acl+0x80/0x80 [ 321.250828][ T7855] __tsan_unaligned_write1+0xc3/0x100 [ 321.256179][ T7855] tomoyo_update_domain+0x32f/0x450 [ 321.261391][ T7855] ? tomoyo_same_path_acl+0x80/0x80 [ 321.266606][ T7855] ? tomoyo_write_misc+0x190/0x190 [ 321.271710][ T7855] tomoyo_write_file+0x34e/0x580 [ 321.276629][ T7855] ? vsnprintf+0x1a7/0xb40 [ 321.281051][ T7855] ? strncmp+0x66/0x80 [ 321.285125][ T7855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.291353][ T7855] tomoyo_write_domain2+0xad/0x120 [ 321.296445][ T7855] tomoyo_supervisor+0xad7/0xd20 [ 321.301361][ T7855] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 321.307063][ T7855] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.313281][ T7855] ? __read_once_size.constprop.0+0x12/0x20 [ 321.319169][ T7855] tomoyo_path_permission+0x121/0x160 [ 321.324520][ T7855] tomoyo_check_open_permission+0x2b9/0x320 [ 321.330414][ T7855] tomoyo_file_open+0x75/0x90 [ 321.335069][ T7855] security_file_open+0x69/0x210 [ 321.339989][ T7855] do_dentry_open+0x211/0x970 [ 321.344642][ T7855] ? security_inode_permission+0xa5/0xc0 [ 321.350255][ T7855] vfs_open+0x62/0x80 [ 321.354214][ T7855] path_openat+0xf9f/0x3580 [ 321.358702][ T7855] ? __alloc_pages_nodemask+0x15f/0x310 [ 321.364225][ T7855] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 321.370096][ T7855] do_filp_open+0x11e/0x1b0 [ 321.374581][ T7855] ? _raw_spin_unlock+0x4b/0x60 [ 321.379408][ T7855] ? __alloc_fd+0x2ef/0x3b0 [ 321.383895][ T7855] ? get_unused_fd_flags+0x93/0xc0 [ 321.388982][ T7855] do_sys_open+0x3b3/0x4f0 [ 321.393379][ T7855] __x64_sys_openat+0x62/0x80 [ 321.398034][ T7855] do_syscall_64+0xcc/0x3a0 [ 321.402525][ T7855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.408390][ T7855] RIP: 0033:0x47c5aa [ 321.412266][ T7855] Code: e8 7b 6b fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 321.431858][ T7855] RSP: 002b:000000c437d9f7c0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 321.440255][ T7855] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c5aa [ 321.448212][ T7855] RDX: 00000000000800c2 RSI: 000000c444312080 RDI: ffffffffffffff9c [ 321.456177][ T7855] RBP: 000000c437d9f840 R08: 0000000000000000 R09: 0000000000000000 [ 321.464173][ T7855] R10: 0000000000000180 R11: 0000000000000206 R12: ffffffffffffffff [ 321.472121][ T7855] R13: 0000000000000005 R14: 0000000000000004 R15: 0000000000000100 [ 321.481265][ T7855] Kernel Offset: disabled [ 321.485585][ T7855] Rebooting in 86400 seconds..