[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. 2021/06/25 10:45:04 parsed 1 programs 2021/06/25 10:45:11 executed programs: 0 syzkaller login: [ 1081.105646][ T8443] chnl_net:caif_netlink_parms(): no params data found [ 1081.133111][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.140412][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.147839][ T8443] device bridge_slave_0 entered promiscuous mode [ 1081.155111][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.162422][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.169711][ T8443] device bridge_slave_1 entered promiscuous mode [ 1081.180375][ T8443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.191229][ T8443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.206575][ T8443] team0: Port device team_slave_0 added [ 1081.212727][ T8443] team0: Port device team_slave_1 added [ 1081.222369][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.229290][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.255493][ T8443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.266573][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.273940][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.300576][ T8443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.316390][ T8443] device hsr_slave_0 entered promiscuous mode [ 1081.322758][ T8443] device hsr_slave_1 entered promiscuous mode [ 1081.352981][ T8443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1081.361062][ T8443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1081.368602][ T8443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1081.376415][ T8443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1081.388121][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.395179][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.402445][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.409463][ T8443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.429319][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.438371][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.446481][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.453988][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.461611][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1081.470532][ T8443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.480551][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.488751][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.496783][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.504475][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.513249][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.520358][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.536438][ T8443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1081.546932][ T8443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.558567][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.566942][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.575318][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.583392][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.591491][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.598831][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.610357][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.617880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.628062][ T8443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.640064][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1081.653271][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1081.661390][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1081.668738][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1081.676943][ T8443] device veth0_vlan entered promiscuous mode [ 1081.685664][ T8443] device veth1_vlan entered promiscuous mode [ 1081.697789][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1081.705562][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1081.713441][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1081.722832][ T8443] device veth0_macvtap entered promiscuous mode [ 1081.730755][ T8443] device veth1_macvtap entered promiscuous mode [ 1081.741487][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.748716][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.758410][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.767337][ T8443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.774739][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.784174][ T8443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.792943][ T8443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.801734][ T8443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.810454][ T8443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.835542][ T1980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.846364][ T1980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.864953][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.865638][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1081.881481][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.889439][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.905267][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1081.916950][ T8686] device vlan2 entered promiscuous mode [ 1081.923355][ T8686] device bond0 entered promiscuous mode [ 1081.928925][ T8686] device bond_slave_0 entered promiscuous mode [ 1081.935790][ T8686] device bond_slave_1 entered promiscuous mode [ 1081.942975][ T8686] device bond0 left promiscuous mode [ 1081.948466][ T8686] device bond_slave_0 left promiscuous mode [ 1081.954975][ T8686] device bond_slave_1 left promiscuous mode [ 1083.120135][ T8666] Bluetooth: hci0: command 0x0409 tx timeout [ 1085.199948][ T8666] Bluetooth: hci0: command 0x041b tx timeout [ 1087.280035][ T8475] Bluetooth: hci0: command 0x040f tx timeout 2021/06/25 10:45:18 executed programs: 1 [ 1087.376479][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.386972][ T8697] device vlan2 entered promiscuous mode [ 1087.392544][ T8697] device bond0 entered promiscuous mode [ 1087.398172][ T8697] device bond_slave_0 entered promiscuous mode [ 1087.404426][ T8697] device bond_slave_1 entered promiscuous mode [ 1087.411304][ T8697] device bond0 left promiscuous mode [ 1087.416607][ T8697] device bond_slave_0 left promiscuous mode [ 1087.422604][ T8697] device bond_slave_1 left promiscuous mode [ 1087.484448][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.495596][ T8702] device vlan2 entered promiscuous mode [ 1087.501557][ T8702] device bond0 entered promiscuous mode [ 1087.507119][ T8702] device bond_slave_0 entered promiscuous mode [ 1087.513883][ T8702] device bond_slave_1 entered promiscuous mode [ 1087.521564][ T8702] device bond0 left promiscuous mode [ 1087.526883][ T8702] device bond_slave_0 left promiscuous mode [ 1087.533451][ T8702] device bond_slave_1 left promiscuous mode [ 1088.729975][ T8709] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1089.359910][ T8475] Bluetooth: hci0: command 0x0419 tx timeout [ 1095.109477][ T8709] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888118add100 (size 64): comm "syz-executor.0", pid 8686, jiffies 4295045463 (age 13.260s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 08 00 00 00 01 02 00 00 ................ backtrace: [] garp_request_join+0x138/0x220 [] vlan_gvrp_request_join+0x96/0xa0 [] vlan_dev_open+0x1f9/0x330 [] __dev_open+0x175/0x260 [] __dev_change_flags+0x2fa/0x390 [] rtnl_configure_link+0x64/0x130 [] __rtnl_newlink+0xa74/0xdb0 [] rtnl_newlink+0x49/0x70 [] rtnetlink_rcv_msg+0x1fc/0x520 [] netlink_rcv_skb+0x87/0x1d0 [] netlink_unicast+0x392/0x4c0 [] netlink_sendmsg+0x368/0x6a0 [] sock_sendmsg+0x56/0x80 [] ____sys_sendmsg+0x36c/0x390 [] ___sys_sendmsg+0x8b/0xd0 [] __sys_sendmsg+0x88/0x100 BUG: memory leak unreferenced object 0xffff888118add0c0 (size 64): comm "syz-executor.0", pid 8686, jiffies 4295045463 (age 13.260s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 01 00 00 00 01 02 00 00 ................ backtrace: [] mrp_request_join+0x153/0x260 [] vlan_mvrp_request_join+0x96/0xa0 [] vlan_dev_open+0x1e7/0x330 [] __dev_open+0x175/0x260 [] __dev_change_flags+0x2fa/0x390 [] rtnl_configure_link+0x64/0x130 [] __rtnl_newlink+0xa74/0xdb0 [] rtnl_newlink+0x49/0x70 [] rtnetlink_rcv_msg+0x1fc/0x520 [] netlink_rcv_skb+0x87/0x1d0 [] netlink_unicast+0x392/0x4c0 [] netlink_sendmsg+0x368/0x6a0 [] sock_sendmsg+0x56/0x80 [] ____sys_sendmsg+0x36c/0x390 [] ___sys_sendmsg+0x8b/0xd0 [] __sys_sendmsg+0x88/0x100 BUG: memory leak unreferenced object 0xffff888118add880 (size 64): comm "syz-executor.0", pid 8697, jiffies 4295046010 (age 7.790s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 08 00 00 00 01 02 00 00 ................ backtrace: [] garp_request_join+0x138/0x220 [] vlan_gvrp_request_join+0x96/0xa0 [] vlan_dev_open+0x1f9/0x330 [] __dev_open+0x175/0x260 [] __dev_change_flags+0x2fa/0x390 [] rtnl_configure_link+0x64/0x130 [] __rtnl_newlink+0xa74/0xdb0 [] rtnl_newlink+0x49/0x70 [] rtnetlink_rcv_msg+0x1fc/0x520 [] netlink_rcv_skb+0x87/0x1d0 [] netlink_unicast+0x392/0x4c0 [] netlink_sendmsg+0x368/0x6a0 [] sock_sendmsg+0x56/0x80 [] ____sys_sendmsg+0x36c/0x390 [] ___sys_sendmsg+0x8b/0xd0 [] __sys_sendmsg+0x88/0x100