Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. 2021/04/28 21:09:33 fuzzer started 2021/04/28 21:09:33 dialing manager at 10.128.0.163:46869 2021/04/28 21:09:33 syscalls: 1982 2021/04/28 21:09:33 code coverage: enabled 2021/04/28 21:09:33 comparison tracing: enabled 2021/04/28 21:09:33 extra coverage: enabled 2021/04/28 21:09:33 setuid sandbox: enabled 2021/04/28 21:09:33 namespace sandbox: enabled 2021/04/28 21:09:33 Android sandbox: enabled 2021/04/28 21:09:33 fault injection: enabled 2021/04/28 21:09:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/04/28 21:09:33 net packet injection: /dev/net/tun does not exist 2021/04/28 21:09:33 net device setup: enabled 2021/04/28 21:09:33 concurrency sanitizer: enabled 2021/04/28 21:09:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/04/28 21:09:33 USB emulation: /dev/raw-gadget does not exist 2021/04/28 21:09:33 hci packet injection: /dev/vhci does not exist 2021/04/28 21:09:33 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/04/28 21:09:33 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/04/28 21:09:34 suppressing KCSAN reports in functions: 'step_into' 'ext4_free_inode' 'do_readlinkat' 'ext4_free_inodes_count' 'dd_has_work' 'generic_write_end' '__ext4_new_inode' 'do_sys_poll' 'do_nanosleep' 'blk_mq_dispatch_rq_list' 'lookup_fast' 'ext4_writepages' '__xa_clear_mark' 'kauditd_thread' 'xas_clear_mark' 2021/04/28 21:09:34 fetching corpus: 0, signal 0/2000 (executing program) 2021/04/28 21:09:34 fetching corpus: 49, signal 11962/15627 (executing program) [ 18.249582][ T1732] ================================================================== [ 18.250901][ T1732] BUG: KCSAN: data-race in complete_signal / futex_wait_queue_me [ 18.255163][ T1732] [ 18.255530][ T1732] write to 0xffff888102e050ec of 4 bytes by task 1727 on cpu 1: [ 18.256603][ T1732] futex_wait_queue_me+0x198/0x260 [ 18.257324][ T1732] futex_wait+0x143/0x430 [ 18.257961][ T1732] do_futex+0x9e8/0x1e10 [ 18.258661][ T1732] __se_sys_futex+0x2a8/0x390 [ 18.259349][ T1732] __x64_sys_futex+0x74/0x80 [ 18.260069][ T1732] do_syscall_64+0x4a/0x90 [ 18.260716][ T1732] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 18.261563][ T1732] [ 18.262000][ T1732] read to 0xffff888102e050ec of 4 bytes by task 1732 on cpu 0: [ 18.263563][ T1732] complete_signal+0x7c/0x600 [ 18.264249][ T1732] __send_signal+0x680/0x760 [ 18.265044][ T1732] send_signal+0x38e/0x3d0 [ 18.265810][ T1732] do_send_specific+0x13d/0x1c0 [ 18.266805][ T1732] __x64_sys_tgkill+0x108/0x140 [ 18.267593][ T1732] do_syscall_64+0x4a/0x90 [ 18.268216][ T1732] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 18.269050][ T1732] [ 18.269440][ T1732] Reported by Kernel Concurrency Sanitizer on: [ 18.274035][ T1732] CPU: 0 PID: 1732 Comm: syz-fuzzer Not tainted 5.12.0-syzkaller #0 [ 18.281992][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2021/04/28 21:09:34 fetching corpus: 99, signal 16839/22152 (executing program) [ 18.292034][ T1732] ================================================================== 2021/04/28 21:09:34 fetching corpus: 149, signal 24860/31526 (executing program) 2021/04/28 21:09:34 fetching corpus: 199, signal 28575/36654 (executing program) 2021/04/28 21:09:34 fetching corpus: 249, signal 38090/46986 (executing program) 2021/04/28 21:09:34 fetching corpus: 299, signal 42447/52378 (executing program) 2021/04/28 21:09:34 fetching corpus: 348, signal 44800/55882 (executing program) 2021/04/28 21:09:35 fetching corpus: 398, signal 48856/60874 (executing program) 2021/04/28 21:09:35 fetching corpus: 448, signal 50601/63796 (executing program) 2021/04/28 21:09:35 fetching corpus: 497, signal 55263/69045 (executing program) 2021/04/28 21:09:35 fetching corpus: 547, signal 57848/72467 (executing program) 2021/04/28 21:09:35 fetching corpus: 596, signal 61796/76924 (executing program) 2021/04/28 21:09:35 fetching corpus: 646, signal 63347/79338 (executing program) 2021/04/28 21:09:35 fetching corpus: 696, signal 65231/81974 (executing program) 2021/04/28 21:09:35 fetching corpus: 746, signal 67813/85113 (executing program) 2021/04/28 21:09:35 fetching corpus: 796, signal 71129/88738 (executing program) 2021/04/28 21:09:35 fetching corpus: 845, signal 73251/91374 (executing program) 2021/04/28 21:09:35 fetching corpus: 895, signal 75429/93968 (executing program) 2021/04/28 21:09:36 fetching corpus: 945, signal 76688/95897 (executing program) 2021/04/28 21:09:36 fetching corpus: 995, signal 78575/98178 (executing program) 2021/04/28 21:09:36 fetching corpus: 1044, signal 79470/99735 (executing program) 2021/04/28 21:09:36 fetching corpus: 1094, signal 80911/101659 (executing program) 2021/04/28 21:09:36 fetching corpus: 1144, signal 81697/103105 (executing program) 2021/04/28 21:09:36 fetching corpus: 1194, signal 83138/104978 (executing program) 2021/04/28 21:09:36 fetching corpus: 1244, signal 84216/106583 (executing program) 2021/04/28 21:09:36 fetching corpus: 1294, signal 85494/108254 (executing program) 2021/04/28 21:09:36 fetching corpus: 1344, signal 87763/110524 (executing program) 2021/04/28 21:09:36 fetching corpus: 1394, signal 88756/111939 (executing program) 2021/04/28 21:09:36 fetching corpus: 1442, signal 90497/113738 (executing program) 2021/04/28 21:09:36 fetching corpus: 1492, signal 91864/115312 (executing program) 2021/04/28 21:09:36 fetching corpus: 1541, signal 93455/116909 (executing program) 2021/04/28 21:09:37 fetching corpus: 1590, signal 94945/118455 (executing program) 2021/04/28 21:09:37 fetching corpus: 1640, signal 96770/120155 (executing program) 2021/04/28 21:09:37 fetching corpus: 1690, signal 98558/121773 (executing program) 2021/04/28 21:09:37 fetching corpus: 1740, signal 99365/122881 (executing program) 2021/04/28 21:09:37 fetching corpus: 1790, signal 100634/124163 (executing program) 2021/04/28 21:09:37 fetching corpus: 1840, signal 101782/125347 (executing program) 2021/04/28 21:09:37 fetching corpus: 1890, signal 102977/126510 (executing program) 2021/04/28 21:09:37 fetching corpus: 1939, signal 103766/127517 (executing program) 2021/04/28 21:09:37 fetching corpus: 1989, signal 104556/128448 (executing program) 2021/04/28 21:09:37 fetching corpus: 2039, signal 105650/129517 (executing program) 2021/04/28 21:09:37 fetching corpus: 2089, signal 106271/130365 (executing program) 2021/04/28 21:09:37 fetching corpus: 2139, signal 107804/131521 (executing program) 2021/04/28 21:09:37 fetching corpus: 2188, signal 108748/132418 (executing program) 2021/04/28 21:09:38 fetching corpus: 2238, signal 109691/133280 (executing program) 2021/04/28 21:09:38 fetching corpus: 2288, signal 110636/134109 (executing program) 2021/04/28 21:09:38 fetching corpus: 2338, signal 111313/134848 (executing program) 2021/04/28 21:09:38 fetching corpus: 2388, signal 111778/135499 (executing program) 2021/04/28 21:09:38 fetching corpus: 2438, signal 112613/136254 (executing program) 2021/04/28 21:09:38 fetching corpus: 2488, signal 113770/137120 (executing program) 2021/04/28 21:09:38 fetching corpus: 2536, signal 114494/137777 (executing program) 2021/04/28 21:09:38 fetching corpus: 2586, signal 115229/138449 (executing program) 2021/04/28 21:09:38 fetching corpus: 2636, signal 116630/139257 (executing program) 2021/04/28 21:09:38 fetching corpus: 2686, signal 117245/139838 (executing program) 2021/04/28 21:09:38 fetching corpus: 2736, signal 118103/140479 (executing program) 2021/04/28 21:09:38 fetching corpus: 2786, signal 119201/141153 (executing program) 2021/04/28 21:09:38 fetching corpus: 2836, signal 120287/141748 (executing program) 2021/04/28 21:09:38 fetching corpus: 2886, signal 120789/142235 (executing program) 2021/04/28 21:09:39 fetching corpus: 2936, signal 121811/142854 (executing program) 2021/04/28 21:09:39 fetching corpus: 2985, signal 122787/143379 (executing program) 2021/04/28 21:09:39 fetching corpus: 3034, signal 123396/143870 (executing program) 2021/04/28 21:09:39 fetching corpus: 3084, signal 124027/144274 (executing program) 2021/04/28 21:09:39 fetching corpus: 3134, signal 124816/144702 (executing program) 2021/04/28 21:09:39 fetching corpus: 3184, signal 125655/145123 (executing program) 2021/04/28 21:09:39 fetching corpus: 3234, signal 126037/145478 (executing program) 2021/04/28 21:09:39 fetching corpus: 3284, signal 126763/145839 (executing program) 2021/04/28 21:09:39 fetching corpus: 3334, signal 127704/146219 (executing program) 2021/04/28 21:09:39 fetching corpus: 3384, signal 128270/146550 (executing program) 2021/04/28 21:09:39 fetching corpus: 3433, signal 129091/146852 (executing program) 2021/04/28 21:09:39 fetching corpus: 3483, signal 129494/147095 (executing program) 2021/04/28 21:09:39 fetching corpus: 3533, signal 130187/147368 (executing program) 2021/04/28 21:09:39 fetching corpus: 3583, signal 130907/147607 (executing program) 2021/04/28 21:09:39 fetching corpus: 3633, signal 131296/147750 (executing program) 2021/04/28 21:09:40 fetching corpus: 3683, signal 132580/147754 (executing program) 2021/04/28 21:09:40 fetching corpus: 3733, signal 133246/147754 (executing program) 2021/04/28 21:09:40 fetching corpus: 3782, signal 133809/147793 (executing program) 2021/04/28 21:09:40 fetching corpus: 3832, signal 135375/147839 (executing program) 2021/04/28 21:09:40 fetching corpus: 3881, signal 135877/147839 (executing program) 2021/04/28 21:09:40 fetching corpus: 3931, signal 137003/147839 (executing program) 2021/04/28 21:09:40 fetching corpus: 3980, signal 137553/147853 (executing program) 2021/04/28 21:09:40 fetching corpus: 4028, signal 138128/147867 (executing program) 2021/04/28 21:09:40 fetching corpus: 4076, signal 138794/147872 (executing program) 2021/04/28 21:09:40 fetching corpus: 4126, signal 139242/147872 (executing program) 2021/04/28 21:09:40 fetching corpus: 4176, signal 139921/147872 (executing program) 2021/04/28 21:09:40 fetching corpus: 4225, signal 140793/147872 (executing program) 2021/04/28 21:09:40 fetching corpus: 4275, signal 141276/147872 (executing program) 2021/04/28 21:09:40 fetching corpus: 4325, signal 141868/147872 (executing program) 2021/04/28 21:09:40 fetching corpus: 4375, signal 142376/147872 (executing program) 2021/04/28 21:09:41 fetching corpus: 4425, signal 142802/147872 (executing program) 2021/04/28 21:09:41 fetching corpus: 4475, signal 143693/147872 (executing program) 2021/04/28 21:09:41 fetching corpus: 4525, signal 144047/147872 (executing program) 2021/04/28 21:09:41 fetching corpus: 4575, signal 144609/147872 (executing program) 2021/04/28 21:09:41 fetching corpus: 4625, signal 145039/147872 (executing program) 2021/04/28 21:09:41 fetching corpus: 4675, signal 145575/147914 (executing program) 2021/04/28 21:09:41 fetching corpus: 4725, signal 146011/147914 (executing program) 2021/04/28 21:09:41 fetching corpus: 4754, signal 146496/147923 (executing program) 2021/04/28 21:09:41 fetching corpus: 4754, signal 146496/147932 (executing program) 2021/04/28 21:09:41 fetching corpus: 4754, signal 146496/147932 (executing program) 2021/04/28 21:09:42 starting 6 fuzzer processes 21:09:42 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) open_by_handle_at(r2, &(0x7f00000001c0)=@ceph_nfs_confh={0x10, 0x2, {0xc}}, 0x600) 21:09:42 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x4) r1 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r0, 0x0, 0x0, 0x5) 21:09:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 21:09:42 executing program 2: r0 = io_uring_setup(0x43da, &(0x7f0000001680)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {}], 0x2) 21:09:42 executing program 3: unshare(0x8000400) unshare(0x400) 21:09:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x7fffffffffffffff}]) [ 26.708607][ T25] audit: type=1400 audit(1619644182.951:8): avc: denied { execmem } for pid=1742 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 26.954545][ T1748] cgroup: Unknown subsys name 'perf_event' [ 26.955721][ T1749] cgroup: Unknown subsys name 'perf_event' [ 26.969314][ T1748] cgroup: Unknown subsys name 'net_cls' [ 26.975928][ T1750] cgroup: Unknown subsys name 'perf_event' [ 26.981056][ T1751] cgroup: Unknown subsys name 'perf_event' [ 26.981890][ T1750] cgroup: Unknown subsys name 'net_cls' [ 26.991450][ T1753] cgroup: Unknown subsys name 'perf_event' [ 26.994591][ T1752] cgroup: Unknown subsys name 'perf_event' [ 26.999251][ T1751] cgroup: Unknown subsys name 'net_cls' [ 27.005409][ T1749] cgroup: Unknown subsys name 'net_cls' [ 27.010665][ T1753] cgroup: Unknown subsys name 'net_cls' [ 27.018103][ T1752] cgroup: Unknown subsys name 'net_cls'