[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. syzkaller login: [ 289.840017][ T8456] IPVS: ftp: loaded support on port[0] = 21 [ 289.908079][ T8456] chnl_net:caif_netlink_parms(): no params data found [ 289.927213][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.934470][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.942036][ T8456] device bridge_slave_0 entered promiscuous mode [ 289.948915][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.955985][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.963358][ T8456] device bridge_slave_1 entered promiscuous mode [ 289.974127][ T8456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.984013][ T8456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.996883][ T8456] team0: Port device team_slave_0 added [ 290.003046][ T8456] team0: Port device team_slave_1 added [ 290.012078][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.019027][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.045100][ T8456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.056216][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.063278][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.089238][ T8456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.104461][ T8456] device hsr_slave_0 entered promiscuous mode [ 290.110668][ T8456] device hsr_slave_1 entered promiscuous mode [ 290.138699][ T8456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.146281][ T8456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.154049][ T8456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.161422][ T8456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.173222][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.180295][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.187571][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.194636][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.213387][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.222548][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.230091][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.237723][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.245636][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 290.254601][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.262980][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.271248][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.278313][ T8126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.287058][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.295474][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.302539][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.314134][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.322413][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.331817][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.343012][ T8456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.353851][ T8456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.365709][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.374170][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.382331][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.394652][ T8456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.401814][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.409149][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.421654][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.434300][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.442759][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.450122][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.459068][ T8456] device veth0_vlan entered promiscuous mode [ 290.467431][ T8456] device veth1_vlan entered promiscuous mode [ 290.478994][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.486825][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.494708][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.503991][ T8456] device veth0_macvtap entered promiscuous mode [ 290.511579][ T8456] device veth1_macvtap entered promiscuous mode [ 290.522165][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.529377][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.538163][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.547859][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.555477][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.564835][ T8456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.573989][ T8456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.582827][ T8456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 290.591714][ T8456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.612879][ T8674] netlink: 'syz-executor496': attribute type 4 has an invalid length. [ 291.901566][ T35] Bluetooth: hci0: command 0x0409 tx timeout [ 293.981289][ T3782] Bluetooth: hci0: command 0x041b tx timeout executing program [ 295.936070][ T8676] netlink: 'syz-executor496': attribute type 4 has an invalid length. [ 296.061240][ T3782] Bluetooth: hci0: command 0x040f tx timeout [ 297.007764][ T8456] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 298.140881][ T3782] Bluetooth: hci0: command 0x0419 tx timeout BUG: memory leak unreferenced object 0xffff8881142318a0 (size 32): comm "syz-executor496", pid 8674, jiffies 4294966335 (age 12.680s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................ backtrace: [<00000000dfde2466>] ip_mc_add_src+0x348/0x450 [<000000001500f0b5>] ip_mc_source+0x3d4/0x610 [<00000000249e19a1>] ip_setsockopt+0x15d8/0x1f70 [<0000000033aa0705>] tcp_setsockopt+0x70/0x13f0 [<000000008f06fdea>] __sys_setsockopt+0x1b0/0x360 [<000000004e537db5>] __x64_sys_setsockopt+0x22/0x30 [<00000000ea9d98fb>] do_syscall_64+0x2d/0x70 [<000000001713cafe>] entry_SYSCALL_64_after_hwframe+0x44/0xa9