[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2021/04/03 13:20:41 fuzzer started 2021/04/03 13:20:42 dialing manager at 10.128.0.163:38381 2021/04/03 13:20:42 syscalls: 3557 2021/04/03 13:20:42 code coverage: enabled 2021/04/03 13:20:42 comparison tracing: enabled 2021/04/03 13:20:42 extra coverage: enabled 2021/04/03 13:20:42 setuid sandbox: enabled 2021/04/03 13:20:42 namespace sandbox: enabled 2021/04/03 13:20:42 Android sandbox: /sys/fs/selinux/policy does not exist 2021/04/03 13:20:42 fault injection: enabled 2021/04/03 13:20:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/04/03 13:20:42 net packet injection: enabled 2021/04/03 13:20:42 net device setup: enabled 2021/04/03 13:20:42 concurrency sanitizer: enabled 2021/04/03 13:20:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/04/03 13:20:42 USB emulation: enabled 2021/04/03 13:20:42 hci packet injection: enabled 2021/04/03 13:20:42 wifi device emulation: enabled 2021/04/03 13:20:42 802.15.4 emulation: enabled 2021/04/03 13:20:43 suppressing KCSAN reports in functions: 'ext4_ext_try_to_merge_right' 'blk_mq_rq_ctx_init' 'next_uptodate_page' 'xas_clear_mark' '__xa_clear_mark' 'ext4_setattr' 'ext4_mb_regular_allocator' 'ext4_free_inode' 'ext4_free_inodes_count' 'blk_mq_dispatch_rq_list' '__delete_from_page_cache' 'shmem_file_read_iter' 'dd_has_work' 2021/04/03 13:20:43 fetching corpus: 0, signal 0/2000 (executing program) 2021/04/03 13:20:44 fetching corpus: 47, signal 22839/26473 (executing program) 2021/04/03 13:20:44 fetching corpus: 97, signal 39463/44538 (executing program) syzkaller login: [ 32.015765][ T8359] ================================================================== [ 32.024878][ T8359] BUG: KCSAN: data-race in __send_signal / futex_wait_queue_me [ 32.032502][ T8359] [ 32.034810][ T8359] write to 0xffff888105dfb02c of 4 bytes by task 8357 on cpu 1: [ 32.042654][ T8359] futex_wait_queue_me+0x186/0x250 [ 32.047889][ T8359] futex_wait+0x145/0x400 [ 32.052210][ T8359] do_futex+0x1062/0x1cd0 [ 32.056532][ T8359] __se_sys_futex+0x2a8/0x390 [ 32.061192][ T8359] __x64_sys_futex+0x74/0x80 [ 32.066200][ T8359] do_syscall_64+0x39/0x80 [ 32.070611][ T8359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 32.077723][ T8359] [ 32.080149][ T8359] read to 0xffff888105dfb02c of 4 bytes by task 8359 on cpu 0: [ 32.087851][ T8359] __send_signal+0x27f/0x790 [ 32.092679][ T8359] send_signal+0x398/0x3e0 [ 32.097087][ T8359] do_send_sig_info+0x9b/0xe0 [ 32.102045][ T8359] do_send_specific+0xc7/0x100 [ 32.106896][ T8359] __x64_sys_tgkill+0x108/0x140 [ 32.112038][ T8359] do_syscall_64+0x39/0x80 2021/04/03 13:20:44 fetching corpus: 147, signal 50472/56871 (executing program) [ 32.116651][ T8359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 32.123383][ T8359] [ 32.125763][ T8359] Reported by Kernel Concurrency Sanitizer on: [ 32.131901][ T8359] CPU: 0 PID: 8359 Comm: syz-fuzzer Not tainted 5.12.0-rc5-syzkaller #0 [ 32.140475][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.150979][ T8359] ================================================================== 2021/04/03 13:20:44 fetching corpus: 196, signal 60294/67918 (executing program) 2021/04/03 13:20:44 fetching corpus: 245, signal 66533/75308 (executing program) 2021/04/03 13:20:44 fetching corpus: 295, signal 70674/80649 (executing program) 2021/04/03 13:20:44 fetching corpus: 345, signal 77428/88391 (executing program) 2021/04/03 13:20:44 fetching corpus: 395, signal 84681/96456 (executing program) 2021/04/03 13:20:44 fetching corpus: 445, signal 90071/102771 (executing program) 2021/04/03 13:20:44 fetching corpus: 494, signal 93665/107293 (executing program) 2021/04/03 13:20:44 fetching corpus: 543, signal 96388/110979 (executing program) 2021/04/03 13:20:44 fetching corpus: 593, signal 100831/116149 (executing program) 2021/04/03 13:20:44 fetching corpus: 643, signal 105593/121501 (executing program) 2021/04/03 13:20:44 fetching corpus: 693, signal 108902/125541 (executing program) 2021/04/03 13:20:45 fetching corpus: 743, signal 112561/129828 (executing program) 2021/04/03 13:20:45 fetching corpus: 792, signal 116234/134050 (executing program) 2021/04/03 13:20:45 fetching corpus: 842, signal 120335/138618 (executing program) 2021/04/03 13:20:45 fetching corpus: 891, signal 123306/142175 (executing program) 2021/04/03 13:20:45 fetching corpus: 941, signal 125966/145425 (executing program) 2021/04/03 13:20:45 fetching corpus: 990, signal 127650/147789 (executing program) 2021/04/03 13:20:45 fetching corpus: 1040, signal 129797/150540 (executing program) 2021/04/03 13:20:45 fetching corpus: 1090, signal 132328/153562 (executing program) 2021/04/03 13:20:45 fetching corpus: 1140, signal 134528/156256 (executing program) 2021/04/03 13:20:45 fetching corpus: 1190, signal 136059/158342 (executing program) 2021/04/03 13:20:45 fetching corpus: 1240, signal 138738/161358 (executing program) 2021/04/03 13:20:45 fetching corpus: 1290, signal 141158/164141 (executing program) 2021/04/03 13:20:45 fetching corpus: 1339, signal 144241/167337 (executing program) 2021/04/03 13:20:45 fetching corpus: 1389, signal 146072/169539 (executing program) 2021/04/03 13:20:45 fetching corpus: 1439, signal 147872/171703 (executing program) 2021/04/03 13:20:45 fetching corpus: 1489, signal 150277/174284 (executing program) 2021/04/03 13:20:45 fetching corpus: 1539, signal 151775/176148 (executing program) 2021/04/03 13:20:46 fetching corpus: 1589, signal 153682/178260 (executing program) 2021/04/03 13:20:46 fetching corpus: 1639, signal 155164/180020 (executing program) 2021/04/03 13:20:46 fetching corpus: 1689, signal 156593/181734 (executing program) 2021/04/03 13:20:46 fetching corpus: 1739, signal 158024/183465 (executing program) 2021/04/03 13:20:46 fetching corpus: 1789, signal 159182/184967 (executing program) 2021/04/03 13:20:46 fetching corpus: 1838, signal 160906/186848 (executing program) 2021/04/03 13:20:46 fetching corpus: 1888, signal 162290/188499 (executing program) 2021/04/03 13:20:46 fetching corpus: 1938, signal 163396/189916 (executing program) 2021/04/03 13:20:46 fetching corpus: 1988, signal 164541/191315 (executing program) 2021/04/03 13:20:46 fetching corpus: 2038, signal 166347/193160 (executing program) 2021/04/03 13:20:46 fetching corpus: 2088, signal 167755/194742 (executing program) 2021/04/03 13:20:46 fetching corpus: 2138, signal 169208/196260 (executing program) 2021/04/03 13:20:46 fetching corpus: 2187, signal 170869/197979 (executing program) 2021/04/03 13:20:47 fetching corpus: 2237, signal 173061/199952 (executing program) 2021/04/03 13:20:47 fetching corpus: 2287, signal 174287/201315 (executing program) 2021/04/03 13:20:47 fetching corpus: 2337, signal 176490/203176 (executing program) 2021/04/03 13:20:47 fetching corpus: 2387, signal 177464/204345 (executing program) 2021/04/03 13:20:47 fetching corpus: 2437, signal 178932/205790 (executing program) 2021/04/03 13:20:47 fetching corpus: 2487, signal 180475/207248 (executing program) 2021/04/03 13:20:47 fetching corpus: 2537, signal 181755/208534 (executing program) 2021/04/03 13:20:47 fetching corpus: 2586, signal 183957/210340 (executing program) 2021/04/03 13:20:47 fetching corpus: 2636, signal 185148/211486 (executing program) 2021/04/03 13:20:47 fetching corpus: 2686, signal 186586/212769 (executing program) 2021/04/03 13:20:47 fetching corpus: 2736, signal 188431/214279 (executing program) 2021/04/03 13:20:47 fetching corpus: 2786, signal 189780/215511 (executing program) 2021/04/03 13:20:47 fetching corpus: 2836, signal 191082/216676 (executing program) 2021/04/03 13:20:48 fetching corpus: 2886, signal 192479/217855 (executing program) 2021/04/03 13:20:48 fetching corpus: 2936, signal 193309/218753 (executing program) 2021/04/03 13:20:48 fetching corpus: 2986, signal 194297/219672 (executing program) 2021/04/03 13:20:48 fetching corpus: 3036, signal 196641/221260 (executing program) 2021/04/03 13:20:48 fetching corpus: 3085, signal 197885/222278 (executing program) 2021/04/03 13:20:48 fetching corpus: 3134, signal 199321/223333 (executing program) 2021/04/03 13:20:48 fetching corpus: 3184, signal 200685/224337 (executing program) 2021/04/03 13:20:48 fetching corpus: 3234, signal 201567/225125 (executing program) 2021/04/03 13:20:48 fetching corpus: 3284, signal 202542/225950 (executing program) 2021/04/03 13:20:48 fetching corpus: 3333, signal 203309/226623 (executing program) 2021/04/03 13:20:48 fetching corpus: 3383, signal 204398/227458 (executing program) 2021/04/03 13:20:48 fetching corpus: 3433, signal 205815/228398 (executing program) 2021/04/03 13:20:48 fetching corpus: 3483, signal 206812/229136 (executing program) 2021/04/03 13:20:48 fetching corpus: 3533, signal 208237/230021 (executing program) 2021/04/03 13:20:48 fetching corpus: 3583, signal 209442/230826 (executing program) 2021/04/03 13:20:48 fetching corpus: 3632, signal 210289/231480 (executing program) 2021/04/03 13:20:49 fetching corpus: 3681, signal 211285/232181 (executing program) 2021/04/03 13:20:49 fetching corpus: 3731, signal 212577/232942 (executing program) 2021/04/03 13:20:49 fetching corpus: 3781, signal 214294/233839 (executing program) 2021/04/03 13:20:49 fetching corpus: 3831, signal 215881/234634 (executing program) 2021/04/03 13:20:49 fetching corpus: 3881, signal 216929/235238 (executing program) 2021/04/03 13:20:49 fetching corpus: 3931, signal 217783/235761 (executing program) 2021/04/03 13:20:49 fetching corpus: 3981, signal 219005/236442 (executing program) 2021/04/03 13:20:49 fetching corpus: 4030, signal 219720/236912 (executing program) 2021/04/03 13:20:49 fetching corpus: 4080, signal 220720/237458 (executing program) 2021/04/03 13:20:49 fetching corpus: 4130, signal 221441/237863 (executing program) 2021/04/03 13:20:49 fetching corpus: 4180, signal 222256/238297 (executing program) 2021/04/03 13:20:49 fetching corpus: 4230, signal 224084/238978 (executing program) 2021/04/03 13:20:49 fetching corpus: 4280, signal 225005/239407 (executing program) 2021/04/03 13:20:49 fetching corpus: 4330, signal 226606/240032 (executing program) 2021/04/03 13:20:50 fetching corpus: 4380, signal 228050/240567 (executing program) 2021/04/03 13:20:50 fetching corpus: 4430, signal 229113/240987 (executing program) 2021/04/03 13:20:50 fetching corpus: 4480, signal 229979/241389 (executing program) 2021/04/03 13:20:50 fetching corpus: 4530, signal 230796/241739 (executing program) 2021/04/03 13:20:50 fetching corpus: 4580, signal 231616/242099 (executing program) 2021/04/03 13:20:50 fetching corpus: 4630, signal 232380/242370 (executing program) 2021/04/03 13:20:50 fetching corpus: 4680, signal 233114/242646 (executing program) 2021/04/03 13:20:50 fetching corpus: 4730, signal 234200/242985 (executing program) 2021/04/03 13:20:50 fetching corpus: 4778, signal 234828/243248 (executing program) 2021/04/03 13:20:50 fetching corpus: 4828, signal 235390/243462 (executing program) 2021/04/03 13:20:50 fetching corpus: 4878, signal 235989/243651 (executing program) 2021/04/03 13:20:50 fetching corpus: 4928, signal 236797/243843 (executing program) 2021/04/03 13:20:50 fetching corpus: 4978, signal 237554/244044 (executing program) 2021/04/03 13:20:50 fetching corpus: 5028, signal 238532/244299 (executing program) 2021/04/03 13:20:51 fetching corpus: 5076, signal 239458/244495 (executing program) 2021/04/03 13:20:51 fetching corpus: 5126, signal 240263/244669 (executing program) 2021/04/03 13:20:51 fetching corpus: 5176, signal 241114/244833 (executing program) 2021/04/03 13:20:51 fetching corpus: 5226, signal 241911/244979 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245125 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245146 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245170 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245193 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245221 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245240 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245262 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245290 (executing program) 2021/04/03 13:20:51 fetching corpus: 5275, signal 242821/245316 (executing program) 2021/04/03 13:20:51 fetching corpus: 5276, signal 242849/245340 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245361 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245384 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245405 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245426 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245450 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245463 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245474 (executing program) 2021/04/03 13:20:51 fetching corpus: 5277, signal 242851/245474 (executing program) 2021/04/03 13:20:52 starting 6 fuzzer processes 13:20:53 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80) 13:20:53 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x100000000000001, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000000}) 13:20:53 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = open(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, 0x0) 13:20:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000f0ff000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) keyctl$dh_compute(0x6, 0x0, 0x0, 0x0, 0x0) 13:20:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, &(0x7f0000000080)=0x1) 13:20:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000340)=0xd4e6, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)