Warning: Permanently added '10.128.0.30' (ECDSA) to the list of known hosts. 2021/03/22 03:27:04 fuzzer started 2021/03/22 03:27:04 dialing manager at 10.128.0.163:34997 2021/03/22 03:27:06 syscalls: 3557 2021/03/22 03:27:06 code coverage: enabled 2021/03/22 03:27:06 comparison tracing: enabled 2021/03/22 03:27:06 extra coverage: enabled 2021/03/22 03:27:06 setuid sandbox: enabled 2021/03/22 03:27:06 namespace sandbox: enabled 2021/03/22 03:27:06 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/22 03:27:06 fault injection: enabled 2021/03/22 03:27:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/22 03:27:06 net packet injection: enabled 2021/03/22 03:27:06 net device setup: enabled 2021/03/22 03:27:06 concurrency sanitizer: enabled 2021/03/22 03:27:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/22 03:27:06 USB emulation: enabled 2021/03/22 03:27:06 hci packet injection: enabled 2021/03/22 03:27:06 wifi device emulation: enabled 2021/03/22 03:27:06 802.15.4 emulation: enabled 2021/03/22 03:27:07 suppressing KCSAN reports in functions: 'do_signal_stop' '_prb_read_valid' '__ext4_new_inode' 'ext4_free_inode' '__mod_timer' 'ext4_mb_good_group' 'expire_timers' 'generic_write_end' 'alloc_pid' 'ext4_mb_regular_allocator' '__xa_clear_mark' 'ext4_writepages' 'add_input_randomness' 'blk_mq_sched_dispatch_requests' 'blk_mq_dispatch_rq_list' '__mark_inode_dirty' 'ext4_free_inodes_count' 'wbt_wait' 2021/03/22 03:27:07 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/22 03:27:07 fetching corpus: 47, signal 19804/23494 (executing program) 2021/03/22 03:27:07 fetching corpus: 97, signal 38898/44000 (executing program) 2021/03/22 03:27:07 fetching corpus: 147, signal 51635/58089 (executing program) 2021/03/22 03:27:08 fetching corpus: 196, signal 57947/65809 (executing program) 2021/03/22 03:27:08 fetching corpus: 245, signal 62951/72170 (executing program) 2021/03/22 03:27:08 fetching corpus: 294, signal 70354/80714 (executing program) 2021/03/22 03:27:08 fetching corpus: 344, signal 76546/87958 (executing program) 2021/03/22 03:27:08 fetching corpus: 393, signal 83178/95546 (executing program) 2021/03/22 03:27:08 fetching corpus: 443, signal 87082/100492 (executing program) 2021/03/22 03:27:09 fetching corpus: 493, signal 90224/104716 (executing program) 2021/03/22 03:27:09 fetching corpus: 543, signal 94814/110202 (executing program) 2021/03/22 03:27:09 fetching corpus: 593, signal 97865/114201 (executing program) 2021/03/22 03:27:09 fetching corpus: 643, signal 101790/119019 (executing program) 2021/03/22 03:27:09 fetching corpus: 692, signal 108198/125935 (executing program) 2021/03/22 03:27:09 fetching corpus: 742, signal 111701/130179 (executing program) 2021/03/22 03:27:09 fetching corpus: 792, signal 115224/134412 (executing program) 2021/03/22 03:27:10 fetching corpus: 842, signal 117821/137824 (executing program) 2021/03/22 03:27:10 fetching corpus: 891, signal 120762/141397 (executing program) 2021/03/22 03:27:10 fetching corpus: 941, signal 123601/144884 (executing program) 2021/03/22 03:27:10 fetching corpus: 991, signal 127158/148939 (executing program) 2021/03/22 03:27:10 fetching corpus: 1040, signal 128821/151370 (executing program) 2021/03/22 03:27:10 fetching corpus: 1090, signal 130986/154186 (executing program) 2021/03/22 03:27:10 fetching corpus: 1140, signal 133622/157350 (executing program) 2021/03/22 03:27:10 fetching corpus: 1190, signal 136023/160284 (executing program) 2021/03/22 03:27:10 fetching corpus: 1240, signal 137723/162634 (executing program) 2021/03/22 03:27:10 fetching corpus: 1290, signal 141093/166273 (executing program) 2021/03/22 03:27:10 fetching corpus: 1340, signal 143206/168867 (executing program) 2021/03/22 03:27:11 fetching corpus: 1390, signal 145524/171621 (executing program) 2021/03/22 03:27:11 fetching corpus: 1440, signal 147644/174102 (executing program) 2021/03/22 03:27:11 fetching corpus: 1490, signal 150266/177014 (executing program) 2021/03/22 03:27:11 fetching corpus: 1540, signal 152496/179620 (executing program) 2021/03/22 03:27:11 fetching corpus: 1590, signal 154288/181865 (executing program) 2021/03/22 03:27:11 fetching corpus: 1640, signal 156502/184320 (executing program) 2021/03/22 03:27:11 fetching corpus: 1690, signal 158177/186352 (executing program) 2021/03/22 03:27:11 fetching corpus: 1740, signal 159740/188301 (executing program) 2021/03/22 03:27:12 fetching corpus: 1789, signal 161726/190465 (executing program) 2021/03/22 03:27:12 fetching corpus: 1838, signal 165467/193922 (executing program) 2021/03/22 03:27:12 fetching corpus: 1887, signal 166914/195687 (executing program) 2021/03/22 03:27:12 fetching corpus: 1937, signal 168898/197819 (executing program) 2021/03/22 03:27:12 fetching corpus: 1987, signal 170240/199518 (executing program) 2021/03/22 03:27:12 fetching corpus: 2036, signal 171755/201258 (executing program) 2021/03/22 03:27:12 fetching corpus: 2086, signal 173458/203134 (executing program) 2021/03/22 03:27:12 fetching corpus: 2136, signal 175277/205062 (executing program) 2021/03/22 03:27:13 fetching corpus: 2185, signal 176661/206668 (executing program) 2021/03/22 03:27:13 fetching corpus: 2234, signal 178467/208543 (executing program) 2021/03/22 03:27:13 fetching corpus: 2284, signal 180985/210805 (executing program) 2021/03/22 03:27:13 fetching corpus: 2334, signal 182834/212643 (executing program) 2021/03/22 03:27:13 fetching corpus: 2384, signal 184451/214297 (executing program) 2021/03/22 03:27:13 fetching corpus: 2434, signal 185605/215687 (executing program) 2021/03/22 03:27:14 fetching corpus: 2482, signal 187237/217274 (executing program) 2021/03/22 03:27:14 fetching corpus: 2532, signal 188707/218789 (executing program) 2021/03/22 03:27:14 fetching corpus: 2582, signal 190942/220724 (executing program) 2021/03/22 03:27:14 fetching corpus: 2631, signal 192821/222402 (executing program) 2021/03/22 03:27:14 fetching corpus: 2681, signal 194830/224115 (executing program) 2021/03/22 03:27:14 fetching corpus: 2731, signal 196452/225526 (executing program) 2021/03/22 03:27:14 fetching corpus: 2779, signal 198385/227200 (executing program) 2021/03/22 03:27:15 fetching corpus: 2829, signal 199562/228391 (executing program) 2021/03/22 03:27:15 fetching corpus: 2879, signal 200841/229599 (executing program) 2021/03/22 03:27:15 fetching corpus: 2929, signal 202909/231208 (executing program) 2021/03/22 03:27:15 fetching corpus: 2979, signal 204724/232641 (executing program) 2021/03/22 03:27:15 fetching corpus: 3029, signal 205791/233632 (executing program) 2021/03/22 03:27:15 fetching corpus: 3079, signal 207428/234946 (executing program) 2021/03/22 03:27:15 fetching corpus: 3128, signal 208545/235909 (executing program) 2021/03/22 03:27:16 fetching corpus: 3178, signal 210058/237122 (executing program) 2021/03/22 03:27:16 fetching corpus: 3228, signal 211258/238117 (executing program) 2021/03/22 03:27:16 fetching corpus: 3278, signal 212428/239157 (executing program) 2021/03/22 03:27:16 fetching corpus: 3327, signal 214507/240531 (executing program) 2021/03/22 03:27:16 fetching corpus: 3377, signal 215670/241475 (executing program) 2021/03/22 03:27:16 fetching corpus: 3427, signal 216901/242435 (executing program) 2021/03/22 03:27:16 fetching corpus: 3477, signal 217889/243327 (executing program) 2021/03/22 03:27:17 fetching corpus: 3526, signal 219259/244298 (executing program) 2021/03/22 03:27:17 fetching corpus: 3576, signal 219982/244951 (executing program) 2021/03/22 03:27:17 fetching corpus: 3626, signal 221038/245737 (executing program) 2021/03/22 03:27:17 fetching corpus: 3676, signal 222560/246683 (executing program) 2021/03/22 03:27:17 fetching corpus: 3726, signal 223563/247476 (executing program) [ 44.201953][ T8364] ================================================================== [ 44.210837][ T8364] BUG: KCSAN: data-race in complete_signal / futex_wait_queue_me [ 44.218917][ T8364] [ 44.221411][ T8364] write to 0xffff888105f6802c of 4 bytes by task 8369 on cpu 0: [ 44.229129][ T8364] futex_wait_queue_me+0x186/0x250 [ 44.235308][ T8364] futex_wait+0x145/0x400 [ 44.239626][ T8364] do_futex+0x1062/0x1cd0 [ 44.244094][ T8364] __se_sys_futex+0x2a8/0x390 [ 44.248766][ T8364] __x64_sys_futex+0x74/0x80 [ 44.253343][ T8364] do_syscall_64+0x39/0x80 [ 44.257741][ T8364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 44.263621][ T8364] [ 44.265940][ T8364] read to 0xffff888105f6802c of 4 bytes by task 8364 on cpu 1: [ 44.273465][ T8364] complete_signal+0x7c/0x600 [ 44.278322][ T8364] __send_signal+0x662/0x780 [ 44.283085][ T8364] send_signal+0x398/0x3e0 [ 44.287631][ T8364] do_send_sig_info+0x9b/0xe0 [ 44.293082][ T8364] do_send_specific+0xc7/0x100 2021/03/22 03:27:17 fetching corpus: 3776, signal 224468/248154 (executing program) [ 44.297998][ T8364] __x64_sys_tgkill+0x108/0x140 [ 44.303165][ T8364] do_syscall_64+0x39/0x80 [ 44.307568][ T8364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 44.313656][ T8364] [ 44.315981][ T8364] Reported by Kernel Concurrency Sanitizer on: [ 44.322395][ T8364] CPU: 1 PID: 8364 Comm: syz-fuzzer Not tainted 5.12.0-rc3-syzkaller #0 [ 44.332267][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.342691][ T8364] ================================================================== 2021/03/22 03:27:18 fetching corpus: 3826, signal 225299/248813 (executing program) 2021/03/22 03:27:18 fetching corpus: 3875, signal 226009/249404 (executing program) 2021/03/22 03:27:18 fetching corpus: 3923, signal 226947/250069 (executing program) 2021/03/22 03:27:18 fetching corpus: 3972, signal 227742/250674 (executing program) 2021/03/22 03:27:18 fetching corpus: 4022, signal 228785/251373 (executing program) 2021/03/22 03:27:18 fetching corpus: 4072, signal 230462/252237 (executing program) 2021/03/22 03:27:18 fetching corpus: 4122, signal 231721/252990 (executing program) 2021/03/22 03:27:18 fetching corpus: 4171, signal 233063/253768 (executing program) 2021/03/22 03:27:19 fetching corpus: 4221, signal 233867/254282 (executing program) 2021/03/22 03:27:19 fetching corpus: 4271, signal 235092/254991 (executing program) 2021/03/22 03:27:19 fetching corpus: 4320, signal 236233/255639 (executing program) 2021/03/22 03:27:19 fetching corpus: 4369, signal 237683/256313 (executing program) 2021/03/22 03:27:19 fetching corpus: 4414, signal 238777/256974 (executing program) 2021/03/22 03:27:19 fetching corpus: 4464, signal 239667/257439 (executing program) 2021/03/22 03:27:20 fetching corpus: 4514, signal 241991/258323 (executing program) 2021/03/22 03:27:20 fetching corpus: 4564, signal 243131/258867 (executing program) 2021/03/22 03:27:20 fetching corpus: 4611, signal 244368/259472 (executing program) 2021/03/22 03:27:20 fetching corpus: 4661, signal 245279/259883 (executing program) 2021/03/22 03:27:20 fetching corpus: 4710, signal 246250/260319 (executing program) 2021/03/22 03:27:20 fetching corpus: 4759, signal 247342/260763 (executing program) 2021/03/22 03:27:21 fetching corpus: 4807, signal 248569/261247 (executing program) 2021/03/22 03:27:21 fetching corpus: 4853, signal 249469/261626 (executing program) 2021/03/22 03:27:21 fetching corpus: 4902, signal 250213/261954 (executing program) 2021/03/22 03:27:21 fetching corpus: 4952, signal 250981/262295 (executing program) 2021/03/22 03:27:21 fetching corpus: 5002, signal 252100/262658 (executing program) 2021/03/22 03:27:21 fetching corpus: 5051, signal 252649/262901 (executing program) 2021/03/22 03:27:22 fetching corpus: 5101, signal 253334/263151 (executing program) 2021/03/22 03:27:22 fetching corpus: 5151, signal 254220/263445 (executing program) 2021/03/22 03:27:22 fetching corpus: 5201, signal 254869/263690 (executing program) 2021/03/22 03:27:22 fetching corpus: 5251, signal 255591/263922 (executing program) 2021/03/22 03:27:23 fetching corpus: 5299, signal 257017/264264 (executing program) 2021/03/22 03:27:23 fetching corpus: 5347, signal 257805/264548 (executing program) 2021/03/22 03:27:23 fetching corpus: 5396, signal 259119/264874 (executing program) 2021/03/22 03:27:23 fetching corpus: 5445, signal 260226/265157 (executing program) 2021/03/22 03:27:23 fetching corpus: 5495, signal 260940/265306 (executing program) 2021/03/22 03:27:24 fetching corpus: 5542, signal 262095/265534 (executing program) 2021/03/22 03:27:24 fetching corpus: 5592, signal 262878/265689 (executing program) 2021/03/22 03:27:24 fetching corpus: 5618, signal 263154/265775 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265829 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265852 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265875 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265897 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265923 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265954 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/265980 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/266007 (executing program) 2021/03/22 03:27:24 fetching corpus: 5619, signal 263185/266044 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263189/266065 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263189/266089 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263189/266120 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263189/266154 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263189/266179 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263191/266197 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263191/266230 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263191/266256 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263191/266287 (executing program) 2021/03/22 03:27:24 fetching corpus: 5620, signal 263191/266291 (executing program) 2021/03/22 03:27:24 fetching corpus: 5621, signal 263194/266291 (executing program) 2021/03/22 03:27:24 fetching corpus: 5621, signal 263194/266291 (executing program) 2021/03/22 03:27:26 starting 6 fuzzer processes 03:27:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 03:27:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@delsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@loopback, 0x0, 0x0, 0x33}, [@mark={0xc}]}, 0x34}, 0x8}, 0x0) 03:27:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x10620e3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x101efff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000000c0)="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"/297, 0xffffffca) ptrace(0x4206, r2) 03:27:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="02000000020219", 0x7}, {&(0x7f0000000640)='l', 0x1}], 0x2) 03:27:26 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) 03:27:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965240450c3e61887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 53.873553][ T8396] IPVS: ftp: loaded support on port[0] = 21 [ 53.956553][ T8396] chnl_net:caif_netlink_parms(): no params data found [ 53.984638][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.991972][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.000174][ T8396] device bridge_slave_0 entered promiscuous mode [ 54.008254][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.015892][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.023606][ T8396] device bridge_slave_1 entered promiscuous mode [ 54.038365][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.049055][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.064936][ T8396] team0: Port device team_slave_0 added [ 54.074643][ T8396] team0: Port device team_slave_1 added [ 54.088516][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.096310][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.122684][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.135326][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.142276][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.168976][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.184104][ T8398] IPVS: ftp: loaded support on port[0] = 21 [ 54.192900][ T8396] device hsr_slave_0 entered promiscuous mode [ 54.199536][ T8396] device hsr_slave_1 entered promiscuous mode