Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2020/04/24 12:01:44 fuzzer started syzkaller login: [ 45.104997][ T6721] as (6721) used greatest stack depth: 10440 bytes left 2020/04/24 12:01:47 dialing manager at 10.128.0.105:36925 2020/04/24 12:01:47 syscalls: 2960 2020/04/24 12:01:47 code coverage: enabled 2020/04/24 12:01:47 comparison tracing: enabled 2020/04/24 12:01:47 extra coverage: enabled 2020/04/24 12:01:47 setuid sandbox: enabled 2020/04/24 12:01:47 namespace sandbox: enabled 2020/04/24 12:01:47 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/24 12:01:47 fault injection: enabled 2020/04/24 12:01:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/24 12:01:47 net packet injection: enabled 2020/04/24 12:01:47 net device setup: enabled 2020/04/24 12:01:47 concurrency sanitizer: enabled 2020/04/24 12:01:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/24 12:01:47 USB emulation: /dev/raw-gadget does not exist [ 47.671869][ T6731] KCSAN: could not find function: '_find_next_bit' [ 49.875733][ T6731] KCSAN: could not find function: 'poll_schedule_timeout' 2020/04/24 12:01:51 adding functions to KCSAN blacklist: 'copy_process' 'wbt_issue' 'shmem_file_read_iter' 'n_tty_receive_buf_common' 'ktime_get_seconds' 'mod_timer' '__ext4_new_inode' 'echo_char' 'run_timer_softirq' 'kauditd_thread' 'timer_clear_idle' 'generic_file_read_iter' 'do_wait' 'page_counter_charge' 'blk_mq_dispatch_rq_list' 'alloc_pid' 'generic_fillattr' '_find_next_bit' 'ext4_setattr' 'ep_poll' 'blk_mq_get_request' 'tick_nohz_idle_stop_tick' 'ext4_free_inodes_count' 'audit_log_start' 'shmem_getpage_gfp' 'fsnotify' 'dd_has_work' 'add_timer' '__filemap_fdatawrite_range' '__find_get_block' 'do_exit' 'pipe_double_lock' '__add_to_page_cache_locked' 'exit_signals' 'generic_write_end' 'blk_mq_sched_dispatch_requests' '__delete_from_page_cache' '__mark_inode_dirty' 'xas_clear_mark' 'vm_area_dup' 'ext4_mb_good_group' 'tick_sched_do_timer' '__x64_sys_ptrace' 'poll_schedule_timeout' 'pcpu_alloc' 'do_nanosleep' 'ktime_get_real_seconds' 'ext4_mark_iloc_dirty' 'find_get_pages_range_tag' 'do_syslog' 'do_signal_stop' '__alloc_fd' 12:05:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.054591][ T6713] ================================================================== [ 257.062750][ T6713] BUG: KCSAN: data-race in atime_needs_update / propagate_one [ 257.070211][ T6713] [ 257.072540][ T6713] write to 0xffff888217c071f0 of 4 bytes by task 6733 on cpu 1: [ 257.080172][ T6713] propagate_one+0x3b3/0x550 [ 257.081718][ T6733] IPVS: ftp: loaded support on port[0] = 21 [ 257.084762][ T6713] propagate_mnt+0x22e/0x270 [ 257.095214][ T6713] attach_recursive_mnt+0x66d/0x8a0 [ 257.100412][ T6713] graft_tree+0x107/0x160 [ 257.104747][ T6713] do_add_mount.isra.0+0x102/0x190 [ 257.109862][ T6713] do_mount+0x12d5/0x1590 [ 257.114191][ T6713] __x64_sys_mount+0x12b/0x1a0 [ 257.118955][ T6713] do_syscall_64+0xc7/0x3b0 [ 257.123584][ T6713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 257.129466][ T6713] [ 257.131798][ T6713] read to 0xffff888217c071f0 of 4 bytes by task 6713 on cpu 0: [ 257.139349][ T6713] atime_needs_update+0x13e/0x360 [ 257.144379][ T6713] touch_atime+0x63/0x150 [ 257.148713][ T6713] generic_file_read_iter+0x11b0/0x14e0 [ 257.154259][ T6713] ext4_file_read_iter+0x103/0x360 [ 257.159367][ T6713] new_sync_read+0x306/0x450 [ 257.163954][ T6713] __vfs_read+0x9e/0xb0 [ 257.165475][ T6733] chnl_net:caif_netlink_parms(): no params data found [ 257.168105][ T6713] integrity_kernel_read+0x97/0xe0 [ 257.168121][ T6713] ima_calc_file_hash_tfm+0x18f/0x240 [ 257.168147][ T6713] ima_calc_file_hash+0x147/0xeb0 [ 257.190336][ T6713] ima_collect_measurement+0x385/0x3b0 [ 257.195792][ T6713] process_measurement+0x91a/0x1000 [ 257.200986][ T6713] ima_file_check+0x7e/0xb0 [ 257.205495][ T6713] path_openat+0x176e/0x23d0 [ 257.210121][ T6713] do_filp_open+0x11e/0x1b0 [ 257.214627][ T6713] do_sys_openat2+0x52e/0x680 [ 257.219307][ T6713] do_sys_open+0xa2/0x110 [ 257.223639][ T6713] __x64_sys_openat+0x5d/0x70 [ 257.228320][ T6713] do_syscall_64+0xc7/0x3b0 [ 257.233024][ T6713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 257.238906][ T6713] [ 257.241225][ T6713] Reported by Kernel Concurrency Sanitizer on: [ 257.247373][ T6713] CPU: 0 PID: 6713 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 257.250705][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.255607][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.262734][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.272655][ T6713] ================================================================== [ 257.272663][ T6713] Kernel panic - not syncing: panic_on_warn set ... [ 257.272679][ T6713] CPU: 0 PID: 6713 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0 [ 257.272696][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.284469][ T6733] device bridge_slave_0 entered promiscuous mode [ 257.287751][ T6713] Call Trace: [ 257.287775][ T6713] dump_stack+0x11d/0x187 [ 257.287792][ T6713] panic+0x210/0x640 [ 257.287816][ T6713] ? vprintk_func+0x89/0x13a [ 257.298192][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.302608][ T6713] kcsan_report.cold+0xc/0x1a [ 257.312720][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.318957][ T6713] kcsan_setup_watchpoint+0x3fb/0x440 [ 257.318979][ T6713] atime_needs_update+0x13e/0x360 [ 257.319004][ T6713] touch_atime+0x63/0x150 [ 257.325229][ T6733] device bridge_slave_1 entered promiscuous mode [ 257.326598][ T6713] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 257.343672][ T6733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.346714][ T6713] generic_file_read_iter+0x11b0/0x14e0 [ 257.355790][ T6733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.359076][ T6713] ext4_file_read_iter+0x103/0x360 [ 257.359098][ T6713] new_sync_read+0x306/0x450 [ 257.377466][ T6733] team0: Port device team_slave_0 added [ 257.380649][ T6713] __vfs_read+0x9e/0xb0 [ 257.391495][ T6733] team0: Port device team_slave_1 added [ 257.395176][ T6713] integrity_kernel_read+0x97/0xe0 [ 257.416770][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.419383][ T6713] ima_calc_file_hash_tfm+0x18f/0x240 [ 257.423521][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.429039][ T6713] ? should_fail+0x7c/0x2fd [ 257.429056][ T6713] ? widen_string+0x48/0x190 [ 257.429084][ T6713] ? string_nocheck+0xe1/0x100 [ 257.436909][ T6733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.441091][ T6713] ? format_decode+0x19c/0xaa0 [ 257.449124][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.472317][ T6713] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 257.472338][ T6713] ? tomoyo_profile+0x3f/0x50 [ 257.476838][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.481415][ T6713] ? __rcu_read_unlock+0x77/0x390 [ 257.486165][ T6733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.496635][ T6713] ? tomoyo_write_log2+0x64/0x580 [ 257.496656][ T6713] ? setuid_policy_lookup+0xdf/0x110 [ 257.496683][ T6713] ima_calc_file_hash+0x147/0xeb0 [ 257.576137][ T6713] ? up_read+0x42/0x90 [ 257.580212][ T6713] ? ext4_xattr_get+0x10b/0x600 [ 257.585047][ T6713] ima_collect_measurement+0x385/0x3b0 [ 257.590498][ T6713] process_measurement+0x91a/0x1000 [ 257.595696][ T6713] ? dquot_file_open+0x60/0x80 [ 257.600456][ T6713] ? ext4_file_open+0x109/0x440 [ 257.605300][ T6713] ? __rcu_read_unlock+0x77/0x390 [ 257.610366][ T6713] ? aa_get_task_label+0x1ee/0x370 [ 257.615465][ T6713] ima_file_check+0x7e/0xb0 [ 257.619952][ T6713] path_openat+0x176e/0x23d0 [ 257.624527][ T6713] ? ext4_journal_check_start+0xf8/0x160 [ 257.630142][ T6713] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 257.636017][ T6713] ? constant_test_bit+0xd/0x30 [ 257.640847][ T6713] ? wb_io_lists_populated+0x88/0xa0 [ 257.646136][ T6713] ? _raw_spin_unlock+0x38/0x60 [ 257.650967][ T6713] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 257.656857][ T6713] do_filp_open+0x11e/0x1b0 [ 257.661344][ T6713] ? _find_next_bit.constprop.0+0x126/0x160 [ 257.667217][ T6713] ? __read_once_size+0x2f/0xd0 [ 257.672061][ T6713] ? _raw_spin_unlock+0x38/0x60 [ 257.676906][ T6713] ? __alloc_fd+0x2f3/0x3b0 [ 257.681396][ T6713] do_sys_openat2+0x52e/0x680 [ 257.686074][ T6713] do_sys_open+0xa2/0x110 [ 257.690387][ T6713] __x64_sys_openat+0x5d/0x70 [ 257.695046][ T6713] do_syscall_64+0xc7/0x3b0 [ 257.699532][ T6713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 257.705415][ T6713] RIP: 0033:0x47c5aa [ 257.709295][ T6713] Code: e8 7b 6b fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 257.730332][ T6713] RSP: 002b:000000c425e8b850 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 257.739682][ T6713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047c5aa [ 257.747635][ T6713] RDX: 0000000000080002 RSI: 000000c43c9a22a0 RDI: ffffffffffffff9c [ 257.756541][ T6713] RBP: 000000c425e8b8d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.764492][ T6713] R10: 00000000000001a4 R11: 0000000000000206 R12: ffffffffffffffff [ 257.772443][ T6713] R13: 0000000000000016 R14: 0000000000000015 R15: 0000000000000100 [ 257.781743][ T6713] Kernel Offset: disabled [ 257.786140][ T6713] Rebooting in 86400 seconds..