I0813 23:17:49.784968 3123 x:0] *************************** I0813 23:17:49.785189 3123 x:0] Args: [/syzkaller/managers/ptrace-proxy-sandbox-race/current/image -root /syzkaller/managers/ptrace-proxy-sandbox-race/workdir/gvisor_root -watchdog-action=panic -network=none -platform=ptrace -file-access=proxy -network=sandbox exec -user=0:0 -cap CAP_CHOWN -cap CAP_DAC_OVERRIDE -cap CAP_DAC_READ_SEARCH -cap CAP_FOWNER -cap CAP_FSETID -cap CAP_KILL -cap CAP_SETGID -cap CAP_SETUID -cap CAP_SETPCAP -cap CAP_LINUX_IMMUTABLE -cap CAP_NET_BIND_SERVICE -cap CAP_NET_BROADCAST -cap CAP_NET_ADMIN -cap CAP_NET_RAW -cap CAP_IPC_LOCK -cap CAP_IPC_OWNER -cap CAP_SYS_MODULE -cap CAP_SYS_RAWIO -cap CAP_SYS_CHROOT -cap CAP_SYS_PTRACE -cap CAP_SYS_PACCT -cap CAP_SYS_ADMIN -cap CAP_SYS_BOOT -cap CAP_SYS_NICE -cap CAP_SYS_RESOURCE -cap CAP_SYS_TIME -cap CAP_SYS_TTY_CONFIG -cap CAP_MKNOD -cap CAP_LEASE -cap CAP_AUDIT_WRITE -cap CAP_AUDIT_CONTROL -cap CAP_SETFCAP -cap CAP_MAC_OVERRIDE -cap CAP_MAC_ADMIN -cap CAP_SYSLOG -cap CAP_WAKE_ALARM -cap CAP_BLOCK_SUSPEND -cap CAP_AUDIT_READ ci-gvisor-ptrace-proxy-sandbox-race-3 /syz-fuzzer -executor=/syz-executor -name=vm-3 -arch=amd64 -manager=stdin -sandbox=none -procs=4 -v=0 -cover=false -debug=false -test=false -runtest=false] I0813 23:17:49.785641 3123 x:0] Git Revision: e4ce26c8b9b168294179f1873e710123bd7e7827 I0813 23:17:49.785769 3123 x:0] PID: 3123 I0813 23:17:49.786270 3123 x:0] UID: 0, GID: 0 I0813 23:17:49.786375 3123 x:0] Configuration: I0813 23:17:49.787264 3123 x:0] RootDir: /syzkaller/managers/ptrace-proxy-sandbox-race/workdir/gvisor_root I0813 23:17:49.787376 3123 x:0] Platform: ptrace I0813 23:17:49.787499 3123 x:0] FileAccess: proxy, overlay: false I0813 23:17:49.787612 3123 x:0] Network: sandbox, logging: false I0813 23:17:49.787787 3123 x:0] Strace: false, max size: 1024, syscalls: [] I0813 23:17:49.787896 3123 x:0] *************************** I0813 23:17:49.834625 2913 x:0] EXEC: [/syz-fuzzer -executor=/syz-executor -name=vm-3 -arch=amd64 -manager=stdin -sandbox=none -procs=4 -v=0 -cover=false -debug=false -test=false -runtest=false] I0813 23:17:49.775109 2913 x:0] CalibratedClock(Monotonic): ready I0813 23:17:49.847764 2913 x:0] CalibratedClock(Realtime): ready 2018/08/13 23:17:50 fuzzer started 2018/08/13 23:17:52 dialing manager at stdin 2018/08/13 23:17:54 syscalls: 1 2018/08/13 23:17:54 code coverage: debugfs is not enabled or not mounted 2018/08/13 23:17:54 comparison tracing: debugfs is not enabled or not mounted 2018/08/13 23:17:54 setuid sandbox: enabled 2018/08/13 23:17:54 namespace sandbox: enabled 2018/08/13 23:17:54 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/13 23:17:54 leak checking: debugfs is not enabled or not mounted 2018/08/13 23:17:54 net packed injection: /dev/net/tun does not exist 2018/08/13 23:17:54 net device setup: ip command is not found I0813 23:18:33.939435 2913 x:0] Watchdog starting loop, tasks: 85, discount: 0s 23:19:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8, 0xfffffffffffff000}]}}}]}, 0x3c}}, 0x0) 23:19:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1, 0x7a) 23:19:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "bcd254f02e0eadcd42"}, 0x14) 23:19:10 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) 23:19:11 executing program 0: 23:19:11 executing program 0: 23:19:11 executing program 2: 23:19:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000840)=0x5, 0x4) 23:19:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/210, 0xd2) 23:19:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1, 0x400) 23:19:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) 23:19:12 executing program 3: io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000240)}]) 23:19:12 executing program 0: 23:19:12 executing program 2: ================== WARNING: DATA RACE Read at 0x00c4207feee8 by goroutine 476: gvisor.googlesource.com/gvisor/pkg/waiter.(*Entry).Prev() bazel-out/k8-fastbuild/bin/pkg/ilist/interface_list.go:159 +0x4c gvisor.googlesource.com/gvisor/pkg/ilist.(*List).Remove() bazel-out/k8-fastbuild/bin/pkg/ilist/interface_list.go:126 +0x42 gvisor.googlesource.com/gvisor/pkg/waiter.(*Queue).EventUnregister() pkg/waiter/waiter.go:179 +0x67 gvisor.googlesource.com/gvisor/pkg/sentry/fs/tty.(*slaveFileOperations).EventUnregister() pkg/sentry/fs/tty/slave.go:118 +0x96 gvisor.googlesource.com/gvisor/pkg/sentry/fs.(*File).EventUnregister() pkg/sentry/fs/file.go:182 +0x60 gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.readv() pkg/sentry/syscalls/linux/sys_read.go:223 +0x5e1 gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.Read() pkg/sentry/syscalls/linux/sys_read.go:67 +0x295 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).executeSyscall() pkg/sentry/kernel/task_syscall.go:162 +0x14e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke() pkg/sentry/kernel/task_syscall.go:280 +0x7d gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter() pkg/sentry/kernel/task_syscall.go:241 +0xc3 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscall() pkg/sentry/kernel/task_syscall.go:216 +0x19e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*runApp).execute() pkg/sentry/kernel/task_run.go:219 +0x1501 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).run() pkg/sentry/kernel/task_run.go:95 +0x264 Previous write at 0x00c4207feee8 by goroutine 429: gvisor.googlesource.com/gvisor/pkg/waiter.(*Entry).SetPrev() bazel-out/k8-fastbuild/bin/pkg/ilist/interface_list.go:169 +0x50 gvisor.googlesource.com/gvisor/pkg/ilist.(*List).Remove() bazel-out/k8-fastbuild/bin/pkg/ilist/interface_list.go:136 +0xc8 gvisor.googlesource.com/gvisor/pkg/waiter.(*Queue).EventUnregister() pkg/waiter/waiter.go:179 +0x67 gvisor.googlesource.com/gvisor/pkg/sentry/fs/tty.(*slaveFileOperations).EventUnregister() pkg/sentry/fs/tty/slave.go:119 +0xfb gvisor.googlesource.com/gvisor/pkg/sentry/fs.(*File).EventUnregister() pkg/sentry/fs/file.go:182 +0x60 gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.readv() pkg/sentry/syscalls/linux/sys_read.go:223 +0x5e1 gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.Read() pkg/sentry/syscalls/linux/sys_read.go:67 +0x295 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).executeSyscall() pkg/sentry/kernel/task_syscall.go:162 +0x14e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke() pkg/sentry/kernel/task_syscall.go:280 +0x7d gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter() pkg/sentry/kernel/task_syscall.go:241 +0xc3 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscall() pkg/sentry/kernel/task_syscall.go:216 +0x19e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*runApp).execute() pkg/sentry/kernel/task_run.go:219 +0x1501 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).run() pkg/sentry/kernel/task_run.go:95 +0x264 Goroutine 476 (running) created at: gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).Start() pkg/sentry/kernel/task_start.go:258 +0x193 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).Clone() pkg/sentry/kernel/task_clone.go:319 +0x10f1 gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.clone() pkg/sentry/syscalls/linux/sys_thread.go:157 +0x22e gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.Clone() pkg/sentry/syscalls/linux/sys_thread.go:171 +0x80 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).executeSyscall() pkg/sentry/kernel/task_syscall.go:162 +0x14e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke() pkg/sentry/kernel/task_syscall.go:280 +0x7d gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter() pkg/sentry/kernel/task_syscall.go:241 +0xc3 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscall() pkg/sentry/kernel/task_syscall.go:216 +0x19e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*runApp).execute() pkg/sentry/kernel/task_run.go:219 +0x1501 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).run() pkg/sentry/kernel/task_run.go:95 +0x264 Goroutine 429 (running) created at: gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).Start() pkg/sentry/kernel/task_start.go:258 +0x193 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).Clone() pkg/sentry/kernel/task_clone.go:319 +0x10f1 gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.clone() pkg/sentry/syscalls/linux/sys_thread.go:157 +0x22e gvisor.googlesource.com/gvisor/pkg/sentry/syscalls/linux.Clone() pkg/sentry/syscalls/linux/sys_thread.go:171 +0x80 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).executeSyscall() pkg/sentry/kernel/task_syscall.go:162 +0x14e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke() pkg/sentry/kernel/task_syscall.go:280 +0x7d gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter() pkg/sentry/kernel/task_syscall.go:241 +0xc3 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).doSyscall() pkg/sentry/kernel/task_syscall.go:216 +0x19e gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*runApp).execute() pkg/sentry/kernel/task_run.go:219 +0x1501 gvisor.googlesource.com/gvisor/pkg/sentry/kernel.(*Task).run() pkg/sentry/kernel/task_run.go:95 +0x264 ================== W0813 23:19:12.797881 3123 x:0] FATAL ERROR: error getting processes for container: error executing in sandbox: urpc method "containerManager.Execute" failed: EOF error getting processes for container: error executing in sandbox: urpc method "containerManager.Execute" failed: EOF W0813 23:19:12.801067 2877 x:0] FATAL ERROR: error running container: error waiting on container "ci-gvisor-ptrace-proxy-sandbox-race-3": urpc method "containerManager.Wait" failed: EOF error running container: error waiting on container "ci-gvisor-ptrace-proxy-sandbox-race-3": urpc method "containerManager.Wait" failed: EOF