[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[   22.023362][    C1] random: crng init done
[   22.027627][    C1] random: 7 urandom warning(s) missed due to ratelimiting


Debian GNU/Linux 9 syzkaller ttyS0

syzkaller login: [   23.431450][ T8402] sshd (8402) used greatest stack depth: 9992 bytes left
Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts.
2020/06/30 19:15:04 fuzzer started
2020/06/30 19:15:04 dialing manager at 10.128.0.105:33235
2020/06/30 19:15:04 syscalls: 3106
2020/06/30 19:15:04 code coverage: enabled
2020/06/30 19:15:04 comparison tracing: enabled
2020/06/30 19:15:04 extra coverage: enabled
2020/06/30 19:15:04 setuid sandbox: enabled
2020/06/30 19:15:04 namespace sandbox: enabled
2020/06/30 19:15:04 Android sandbox: /sys/fs/selinux/policy does not exist
2020/06/30 19:15:04 fault injection: enabled
2020/06/30 19:15:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/06/30 19:15:04 net packet injection: enabled
2020/06/30 19:15:04 net device setup: enabled
2020/06/30 19:15:04 concurrency sanitizer: enabled
2020/06/30 19:15:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/06/30 19:15:04 USB emulation: enabled
2020/06/30 19:15:05 suppressing KCSAN reports in functions: 'find_get_pages_range_tag' '__add_to_page_cache_locked' '__xa_clear_mark' '__ext4_new_inode' 
19:15:08 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f00000000c0))

[   34.096929][ T8654] IPVS: ftp: loaded support on port[0] = 21
[   34.150286][ T8654] chnl_net:caif_netlink_parms(): no params data found
[   34.190447][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state
19:15:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x14}, 0x0)

[   34.197798][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.205182][ T8654] device bridge_slave_0 entered promiscuous mode
[   34.212880][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.220280][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.228069][ T8654] device bridge_slave_1 entered promiscuous mode
[   34.246964][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.269396][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.309773][ T8654] team0: Port device team_slave_0 added
[   34.327608][ T8654] team0: Port device team_slave_1 added
[   34.342274][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.349292][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.375760][ T8654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.398140][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_1
19:15:08 executing program 2:
r0 = memfd_create(&(0x7f0000000500)='I\x00=c\x99a\x87\xd3\x00\x15bu\x9c\xe7\x1e\xe4\b\x1f\xc0\x99\"2\t\xa0\xaba\x82\xdf\xc5,\x14\xd8c\x9b$\x1b\x13\xb9\xe0W\xe1\x8f\xad\xcd\x9d\xb0U\xf8^\xf2\xddh\x16g\x92}`%\xaf\x02tl\x96\xfc\xf2KJ\xb4\xc1`F\x9f\xa2\xe9\xe6Q\xa5\n\x9f\x02\x1a\x99\x87\xb9\x9b\xb4\xdbAec\x17X\xc9\a\x1d:\x89\x84\xe9#I0_\xbf\xb5\x93{\b\xae\x9a>\xb1U\x93=@k\xb6\xd7R{N\xa2@\xc3\xfc\x85\x9a\xb0\xc9H\x18\xb2\xc8L*\xa0q\x1c^\x86\xdbb\xfb,\"\xa6\xde\x02\xd5\x9e\x9a\x18v\x93\xe0\xf3\xfcU\xaat9\xa5O\xeb}\x81\xa9<R\xeb\n+\xeb\x06a\x05\x95\xefBr\xd5\xfa4l.\x82\xe0\x93M\xb3N\x10\xde\x13\xb9?\x05\xc3\xc5\x93\x9fn!\x96%\'4\xf0b\xfbb\x81\xf6\x1c\xc2d5$\xe8;!?P\"\xd5\x86\xb1\x80\xf3q1Z\xd0\x93\xe2\xb5(\x96\xb0\xf13\xfcq\xe7\xd9:~r4B\xeb3JO\xd8_\x15\xe1\xec\xaf\x14\a\xc3\xd9RX\xbf\x85\xaa=\x1f<', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

[   34.398249][ T8808] IPVS: ftp: loaded support on port[0] = 21
[   34.405094][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.476651][ T8654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.558488][ T8654] device hsr_slave_0 entered promiscuous mode
19:15:08 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x3)

[   34.617210][ T8654] device hsr_slave_1 entered promiscuous mode
[   34.722798][ T8830] IPVS: ftp: loaded support on port[0] = 21
[   34.739479][ T8846] IPVS: ftp: loaded support on port[0] = 21
19:15:09 executing program 4:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x8001})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xa0002014})
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0)

[   34.840554][ T8808] chnl_net:caif_netlink_parms(): no params data found
[   34.862377][ T8654] netdevsim netdevsim0 netdevsim0: renamed from eth0
19:15:09 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000))

[   35.028716][ T8654] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   35.088890][ T8654] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   35.096172][ T9010] IPVS: ftp: loaded support on port[0] = 21
[   35.138899][ T8654] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   35.178893][ T9062] IPVS: ftp: loaded support on port[0] = 21
[   35.200664][    T2] ==================================================================
[   35.208762][    T2] BUG: KCSAN: data-race in copy_process / copy_process
[   35.215576][    T2] 
[   35.217898][    T2] write to 0xffffffff8927a410 of 4 bytes by task 610 on cpu 0:
[   35.225422][    T2]  copy_process+0x2e84/0x3300
[   35.230083][    T2]  _do_fork+0xf1/0x660
[   35.234128][    T2]  kernel_thread+0x85/0xb0
[   35.238520][    T2]  call_usermodehelper_exec_work+0x4f/0x1b0
[   35.244385][    T2]  process_one_work+0x3e1/0x9a0
[   35.249208][    T2]  worker_thread+0x665/0xbe0
[   35.253767][    T2]  kthread+0x20d/0x230
[   35.257809][    T2]  ret_from_fork+0x1f/0x30
[   35.262190][    T2] 
[   35.264492][    T2] read to 0xffffffff8927a410 of 4 bytes by task 2 on cpu 1:
[   35.271746][    T2]  copy_process+0xac4/0x3300
[   35.276307][    T2]  _do_fork+0xf1/0x660
[   35.280349][    T2]  kernel_thread+0x85/0xb0
[   35.284737][    T2]  kthreadd+0x317/0x3d0
[   35.288866][    T2]  ret_from_fork+0x1f/0x30
[   35.293249][    T2] 
[   35.295598][    T2] Reported by Kernel Concurrency Sanitizer on:
[   35.301725][    T2] CPU: 1 PID: 2 Comm: kthreadd Not tainted 5.8.0-rc3-syzkaller #0
[   35.309495][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   35.319520][    T2] ==================================================================
[   35.327551][    T2] Kernel panic - not syncing: panic_on_warn set ...
[   35.334125][    T2] CPU: 1 PID: 2 Comm: kthreadd Not tainted 5.8.0-rc3-syzkaller #0
[   35.341916][    T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   35.351944][    T2] Call Trace:
[   35.355216][    T2]  dump_stack+0x10f/0x19d
[   35.359533][    T2]  panic+0x207/0x64a
[   35.363403][    T2]  ? vprintk_emit+0x44a/0x4f0
[   35.368051][    T2]  kcsan_report+0x684/0x690
[   35.372527][    T2]  ? kcsan_setup_watchpoint+0x453/0x4d0
[   35.378045][    T2]  ? copy_process+0xac4/0x3300
[   35.382779][    T2]  ? _do_fork+0xf1/0x660
[   35.386992][    T2]  ? kernel_thread+0x85/0xb0
[   35.391555][    T2]  ? kthreadd+0x317/0x3d0
[   35.395867][    T2]  ? ret_from_fork+0x1f/0x30
[   35.400448][    T2]  ? debug_smp_processor_id+0x18/0x20
[   35.405852][    T2]  ? copy_creds+0x280/0x350
[   35.410358][    T2]  ? copy_creds+0x280/0x350
[   35.414834][    T2]  kcsan_setup_watchpoint+0x453/0x4d0
[   35.420212][    T2]  ? copy_creds+0x280/0x350
[   35.424690][    T2]  copy_process+0xac4/0x3300
[   35.429269][    T2]  ? kthread_blkcg+0x80/0x80
[   35.433838][    T2]  _do_fork+0xf1/0x660
[   35.437898][    T2]  ? psi_group_change+0x1bd/0x280
[   35.442893][    T2]  ? kthread_blkcg+0x80/0x80
[   35.447455][    T2]  kernel_thread+0x85/0xb0
[   35.451842][    T2]  ? kthread_blkcg+0x80/0x80
[   35.456408][    T2]  kthreadd+0x317/0x3d0
[   35.460550][    T2]  ? kthread_stop+0x310/0x310
[   35.465250][    T2]  ret_from_fork+0x1f/0x30
[   35.470854][    T2] Kernel Offset: disabled
[   35.475167][    T2] Rebooting in 86400 seconds..