Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2021/05/06 10:44:55 fuzzer started 2021/05/06 10:44:56 dialing manager at 10.128.0.163:33525 2021/05/06 10:44:56 syscalls: 1982 2021/05/06 10:44:56 code coverage: enabled 2021/05/06 10:44:56 comparison tracing: enabled 2021/05/06 10:44:56 extra coverage: enabled 2021/05/06 10:44:56 setuid sandbox: enabled 2021/05/06 10:44:56 namespace sandbox: enabled 2021/05/06 10:44:56 Android sandbox: enabled 2021/05/06 10:44:56 fault injection: enabled 2021/05/06 10:44:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/06 10:44:56 net packet injection: /dev/net/tun does not exist 2021/05/06 10:44:56 net device setup: enabled 2021/05/06 10:44:56 concurrency sanitizer: enabled 2021/05/06 10:44:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/06 10:44:56 USB emulation: /dev/raw-gadget does not exist 2021/05/06 10:44:56 hci packet injection: /dev/vhci does not exist 2021/05/06 10:44:56 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/05/06 10:44:56 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/05/06 10:44:57 suppressing KCSAN reports in functions: 'tick_sched_timer' '__xa_clear_mark' 'generic_write_end' 'alloc_pid' 'dd_has_work' '__ext4_new_inode' '__fsnotify_parent' 'ext4_free_inode' 'do_signal_stop' 'blk_mq_sched_dispatch_requests' 'step_into' 'complete_signal' 'ext4_free_inodes_count' 'shmem_unlink' '__add_to_page_cache_locked' 'do_nanosleep' 'do_readlinkat' 2021/05/06 10:44:57 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/06 10:44:57 fetching corpus: 48, signal 11855/15542 (executing program) 2021/05/06 10:44:57 fetching corpus: 98, signal 25593/30543 (executing program) 2021/05/06 10:44:57 fetching corpus: 148, signal 36825/42830 (executing program) 2021/05/06 10:44:57 fetching corpus: 198, signal 42727/49839 (executing program) 2021/05/06 10:44:57 fetching corpus: 248, signal 46735/54940 (executing program) 2021/05/06 10:44:57 fetching corpus: 298, signal 49807/59059 (executing program) syzkaller login: [ 20.376723][ T1746] ================================================================== [ 20.379998][ T1746] BUG: KCSAN: data-race in __send_signal / futex_wait_queue_me [ 20.383386][ T1746] [ 20.384534][ T1746] write to 0xffff8881002ee02c of 4 bytes by task 1744 on cpu 0: [ 20.387058][ T1746] futex_wait_queue_me+0x198/0x260 [ 20.388729][ T1746] futex_wait+0x143/0x430 [ 20.390682][ T1746] do_futex+0x9e8/0x1ee0 [ 20.391957][ T1746] __se_sys_futex+0x2a8/0x390 [ 20.393913][ T1746] __x64_sys_futex+0x74/0x80 [ 20.396189][ T1746] do_syscall_64+0x4a/0x90 [ 20.400448][ T1746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 20.406341][ T1746] [ 20.408654][ T1746] read to 0xffff8881002ee02c of 4 bytes by task 1746 on cpu 1: [ 20.416288][ T1746] __send_signal+0x282/0x760 [ 20.421282][ T1746] send_signal+0x281/0x390 [ 20.425706][ T1746] do_send_specific+0x13d/0x1c0 [ 20.430772][ T1746] __x64_sys_tgkill+0x108/0x140 [ 20.435618][ T1746] do_syscall_64+0x4a/0x90 [ 20.440157][ T1746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 20.446253][ T1746] [ 20.448656][ T1746] Reported by Kernel Concurrency Sanitizer on: [ 20.455228][ T1746] CPU: 1 PID: 1746 Comm: syz-fuzzer Not tainted 5.12.0-syzkaller #0 [ 20.463889][ T1746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2021/05/06 10:44:57 fetching corpus: 348, signal 53629/63811 (executing program) 2021/05/06 10:44:57 fetching corpus: 398, signal 56351/67491 (executing program) [ 20.474380][ T1746] ================================================================== 2021/05/06 10:44:57 fetching corpus: 448, signal 58697/70750 (executing program) 2021/05/06 10:44:57 fetching corpus: 498, signal 61103/73988 (executing program) 2021/05/06 10:44:57 fetching corpus: 548, signal 63068/76790 (executing program) 2021/05/06 10:44:57 fetching corpus: 597, signal 65307/79740 (executing program) 2021/05/06 10:44:57 fetching corpus: 647, signal 68059/83011 (executing program) 2021/05/06 10:44:57 fetching corpus: 697, signal 71560/86901 (executing program) 2021/05/06 10:44:57 fetching corpus: 747, signal 73626/89571 (executing program) 2021/05/06 10:44:57 fetching corpus: 797, signal 75427/91999 (executing program) 2021/05/06 10:44:57 fetching corpus: 847, signal 77170/94282 (executing program) 2021/05/06 10:44:57 fetching corpus: 897, signal 78270/96057 (executing program) 2021/05/06 10:44:58 fetching corpus: 947, signal 80166/98369 (executing program) 2021/05/06 10:44:58 fetching corpus: 997, signal 81894/100501 (executing program) 2021/05/06 10:44:58 fetching corpus: 1047, signal 83103/102206 (executing program) 2021/05/06 10:44:58 fetching corpus: 1097, signal 84981/104334 (executing program) 2021/05/06 10:44:58 fetching corpus: 1147, signal 86487/106227 (executing program) 2021/05/06 10:44:58 fetching corpus: 1197, signal 87815/107915 (executing program) 2021/05/06 10:44:58 fetching corpus: 1247, signal 89347/109721 (executing program) 2021/05/06 10:44:58 fetching corpus: 1297, signal 90429/111200 (executing program) 2021/05/06 10:44:58 fetching corpus: 1347, signal 91914/112884 (executing program) 2021/05/06 10:44:58 fetching corpus: 1397, signal 93051/114314 (executing program) 2021/05/06 10:44:58 fetching corpus: 1447, signal 93884/115527 (executing program) 2021/05/06 10:44:58 fetching corpus: 1496, signal 96001/117432 (executing program) 2021/05/06 10:44:58 fetching corpus: 1546, signal 97459/118959 (executing program) 2021/05/06 10:44:58 fetching corpus: 1596, signal 98322/120114 (executing program) 2021/05/06 10:44:58 fetching corpus: 1646, signal 99300/121320 (executing program) 2021/05/06 10:44:58 fetching corpus: 1696, signal 101004/122836 (executing program) 2021/05/06 10:44:58 fetching corpus: 1746, signal 101788/123854 (executing program) 2021/05/06 10:44:58 fetching corpus: 1796, signal 102995/125063 (executing program) 2021/05/06 10:44:58 fetching corpus: 1846, signal 103764/126037 (executing program) 2021/05/06 10:44:58 fetching corpus: 1896, signal 104512/126959 (executing program) 2021/05/06 10:44:58 fetching corpus: 1946, signal 106707/128572 (executing program) 2021/05/06 10:44:58 fetching corpus: 1996, signal 107838/129620 (executing program) 2021/05/06 10:44:58 fetching corpus: 2046, signal 108936/130595 (executing program) 2021/05/06 10:44:58 fetching corpus: 2096, signal 110347/131680 (executing program) 2021/05/06 10:44:58 fetching corpus: 2146, signal 111274/132515 (executing program) 2021/05/06 10:44:58 fetching corpus: 2196, signal 112072/133245 (executing program) 2021/05/06 10:44:59 fetching corpus: 2246, signal 112924/134013 (executing program) 2021/05/06 10:44:59 fetching corpus: 2296, signal 113609/134726 (executing program) 2021/05/06 10:44:59 fetching corpus: 2346, signal 114497/135473 (executing program) 2021/05/06 10:44:59 fetching corpus: 2396, signal 115309/136199 (executing program) 2021/05/06 10:44:59 fetching corpus: 2446, signal 115993/136843 (executing program) 2021/05/06 10:44:59 fetching corpus: 2496, signal 116936/137546 (executing program) 2021/05/06 10:44:59 fetching corpus: 2546, signal 117769/138185 (executing program) 2021/05/06 10:44:59 fetching corpus: 2596, signal 118805/138872 (executing program) 2021/05/06 10:44:59 fetching corpus: 2646, signal 119541/139472 (executing program) 2021/05/06 10:44:59 fetching corpus: 2696, signal 120462/140103 (executing program) 2021/05/06 10:44:59 fetching corpus: 2746, signal 121064/140627 (executing program) 2021/05/06 10:44:59 fetching corpus: 2796, signal 121830/141163 (executing program) 2021/05/06 10:44:59 fetching corpus: 2846, signal 122419/141637 (executing program) 2021/05/06 10:44:59 fetching corpus: 2895, signal 123094/142086 (executing program) 2021/05/06 10:44:59 fetching corpus: 2944, signal 123869/142576 (executing program) 2021/05/06 10:44:59 fetching corpus: 2994, signal 124310/142977 (executing program) 2021/05/06 10:44:59 fetching corpus: 3044, signal 125231/143443 (executing program) 2021/05/06 10:44:59 fetching corpus: 3094, signal 126318/143882 (executing program) 2021/05/06 10:44:59 fetching corpus: 3144, signal 127100/144241 (executing program) 2021/05/06 10:44:59 fetching corpus: 3194, signal 127766/144547 (executing program) 2021/05/06 10:44:59 fetching corpus: 3244, signal 128506/144892 (executing program) 2021/05/06 10:44:59 fetching corpus: 3294, signal 129175/145222 (executing program) 2021/05/06 10:44:59 fetching corpus: 3344, signal 129849/145509 (executing program) 2021/05/06 10:44:59 fetching corpus: 3393, signal 130307/145767 (executing program) 2021/05/06 10:45:00 fetching corpus: 3443, signal 130908/145996 (executing program) 2021/05/06 10:45:00 fetching corpus: 3493, signal 131577/146237 (executing program) 2021/05/06 10:45:00 fetching corpus: 3543, signal 132164/146450 (executing program) 2021/05/06 10:45:00 fetching corpus: 3593, signal 133010/146634 (executing program) 2021/05/06 10:45:00 fetching corpus: 3643, signal 133700/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3693, signal 134304/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3743, signal 135061/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3793, signal 135992/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3843, signal 136431/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3893, signal 137091/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3943, signal 137497/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 3993, signal 138040/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4043, signal 138546/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4093, signal 139249/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4143, signal 139628/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4193, signal 140099/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4243, signal 140607/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4293, signal 141254/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4343, signal 141626/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4393, signal 142099/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4443, signal 142482/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4493, signal 143196/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4543, signal 143650/146702 (executing program) 2021/05/06 10:45:00 fetching corpus: 4593, signal 144111/146702 (executing program) 2021/05/06 10:45:01 fetching corpus: 4643, signal 144599/146702 (executing program) 2021/05/06 10:45:01 fetching corpus: 4693, signal 145191/146702 (executing program) 2021/05/06 10:45:01 fetching corpus: 4721, signal 145407/146702 (executing program) 2021/05/06 10:45:01 fetching corpus: 4721, signal 145407/146702 (executing program) 2021/05/06 10:45:02 starting 6 fuzzer processes 10:45:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x0) 10:45:02 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff", 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040300000047cd00000000000000000500010001"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:45:02 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000440), 0x20, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x1, 0x80, 0x0, 0x0, 0x8001, 0x20, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000002c0), 0xd}, 0x3, 0x0, 0xf050, 0x7, 0x5, 0x7, 0xfa62, 0x0, 0x9, 0x0, 0x538555e3}, r2, 0x10, r0, 0x2) r3 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x7, 0x1, &(0x7f0000000400)=[{&(0x7f0000000440)}], 0x0, &(0x7f00000004c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x2d]}}], [{@permit_directio}]}) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) 10:45:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0xfd06) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x56) 10:45:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) 10:45:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) [ 25.445204][ T25] audit: type=1400 audit(1620297902.491:8): avc: denied { execmem } for pid=1758 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 25.591255][ T1765] cgroup: Unknown subsys name 'perf_event' [ 25.591319][ T1764] cgroup: Unknown subsys name 'perf_event' [ 25.597572][ T1765] cgroup: Unknown subsys name 'net_cls' [ 25.620035][ T1766] cgroup: Unknown subsys name 'perf_event' [ 25.623470][ T1764] cgroup: Unknown subsys name 'net_cls' [ 25.626168][ T1766] cgroup: Unknown subsys name 'net_cls' [ 25.640450][ T1768] cgroup: Unknown subsys name 'perf_event' [ 25.643533][ T1767] cgroup: Unknown subsys name 'perf_event' [ 25.648256][ T1770] cgroup: Unknown subsys name 'perf_event' [ 25.655797][ T1767] cgroup: Unknown subsys name 'net_cls' [ 25.658645][ T1768] cgroup: Unknown subsys name 'net_cls' [ 25.666504][ T1770] cgroup: Unknown subsys name 'net_cls' 10:45:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) 10:45:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) 10:45:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) 10:45:07 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x406000) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ftruncate(r1, 0x2008001) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 29.973172][ T4482] loop4: detected capacity change from 0 to 1 10:45:07 executing program 5: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000004}) [ 30.038807][ T4482] loop4: p2 < > p4 [ 30.044038][ T4482] loop4: p2 size 2 extends beyond EOD, truncated [ 30.058616][ T4482] loop4: p4 size 2097152 extends beyond EOD, truncated [ 30.071453][ T4521] loop2: detected capacity change from 0 to 4096 10:45:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}}], 0x1, 0x0) 10:45:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) [ 30.120549][ T4540] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 30.145139][ T25] audit: type=1400 audit(1620297907.194:9): avc: denied { block_suspend } for pid=4533 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 30.155293][ T4521] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.202079][ T4540] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 30.222041][ T4547] loop4: detected capacity change from 0 to 1 [ 30.280215][ T4547] loop4: p2 < > p4 [ 30.292284][ T4547] loop4: p2 size 2 extends beyond EOD, truncated [ 30.317436][ T4547] loop4: p4 size 2097152 extends beyond EOD, truncated