[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. 2021/06/26 15:07:00 parsed 1 programs 2021/06/26 15:07:07 executed programs: 0 syzkaller login: [ 1079.184121][ T8435] chnl_net:caif_netlink_parms(): no params data found [ 1079.205382][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.212554][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.221358][ T8435] device bridge_slave_0 entered promiscuous mode [ 1079.228940][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.236784][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.245096][ T8435] device bridge_slave_1 entered promiscuous mode [ 1079.255794][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.266577][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.280960][ T8435] team0: Port device team_slave_0 added [ 1079.287915][ T8435] team0: Port device team_slave_1 added [ 1079.297974][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.305788][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.333004][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.344642][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.352380][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.379658][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.396700][ T8435] device hsr_slave_0 entered promiscuous mode [ 1079.404090][ T8435] device hsr_slave_1 entered promiscuous mode [ 1079.435145][ T8435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1079.444086][ T8435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1079.456313][ T8435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1079.466297][ T8435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1079.480756][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.489187][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.496830][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.503908][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.523701][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.533547][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1079.542750][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.551220][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.559142][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1079.569968][ T8435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.579558][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1079.588320][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.595399][ T8576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.604495][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1079.612984][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.620122][ T3797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.636102][ T8435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1079.647548][ T8435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1079.660165][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1079.668854][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1079.677386][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1079.685687][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1079.694179][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1079.702231][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1079.714799][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1079.723172][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1079.732202][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.744243][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1079.758438][ T8435] device veth0_vlan entered promiscuous mode [ 1079.765139][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1079.773503][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1079.781216][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1079.791470][ T8435] device veth1_vlan entered promiscuous mode [ 1079.804018][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1079.811860][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1079.819802][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1079.830386][ T8435] device veth0_macvtap entered promiscuous mode [ 1079.838823][ T8435] device veth1_macvtap entered promiscuous mode [ 1079.849355][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.857467][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1079.867372][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1079.878609][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.886989][ T8659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1079.896512][ T8435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.905378][ T8435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.914382][ T8435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.923304][ T8435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.955785][ T8477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.970717][ T8477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.980221][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1079.989462][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.998215][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.006058][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.180476][ T3797] Bluetooth: hci0: command 0x0409 tx timeout [ 1083.260300][ T3797] Bluetooth: hci0: command 0x041b tx timeout [ 1085.340264][ T35] Bluetooth: hci0: command 0x040f tx timeout 2021/06/26 15:07:14 executed programs: 1 [ 1086.657976][ T8701] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1087.420288][ T35] Bluetooth: hci0: command 0x0419 tx timeout [ 1092.930555][ T8701] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff8881197e5f00 (size 64): comm "syz-executor.0", pid 8679, jiffies 4295045268 (age 12.970s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 08 00 00 00 01 02 00 00 ................ backtrace: [] garp_request_join+0x138/0x220 [] vlan_gvrp_request_join+0x96/0xa0 [] vlan_dev_open+0x1f9/0x330 [] __dev_open+0x175/0x260 [] dev_open+0x71/0xc0 [] bond_enslave+0x3b9/0x1930 [] do_set_master+0xe3/0x100 [] __rtnl_newlink+0xc8a/0xdb0 [] rtnl_newlink+0x49/0x70 [] rtnetlink_rcv_msg+0x1fc/0x520 [] netlink_rcv_skb+0x87/0x1d0 [] netlink_unicast+0x392/0x4c0 [] netlink_sendmsg+0x368/0x6a0 [] sock_sendmsg+0x56/0x80 [] ____sys_sendmsg+0x36c/0x390 [] ___sys_sendmsg+0x8b/0xd0 BUG: memory leak unreferenced object 0xffff8881147f3e80 (size 64): comm "syz-executor.0", pid 8689, jiffies 4295045812 (age 7.530s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 08 00 00 00 01 02 00 00 ................ backtrace: [] garp_request_join+0x138/0x220 [] vlan_gvrp_request_join+0x96/0xa0 [] vlan_dev_open+0x1f9/0x330 [] __dev_open+0x175/0x260 [] dev_open+0x71/0xc0 [] bond_enslave+0x3b9/0x1930 [] do_set_master+0xe3/0x100 [] __rtnl_newlink+0xc8a/0xdb0 [] rtnl_newlink+0x49/0x70 [] rtnetlink_rcv_msg+0x1fc/0x520 [] netlink_rcv_skb+0x87/0x1d0 [] netlink_unicast+0x392/0x4c0 [] netlink_sendmsg+0x368/0x6a0 [] sock_sendmsg+0x56/0x80 [] ____sys_sendmsg+0x36c/0x390 [] ___sys_sendmsg+0x8b/0xd0 BUG: memory leak unreferenced object 0xffff888119704b00 (size 64): comm "syz-executor.0", pid 8694, jiffies 4295045817 (age 7.480s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 08 00 00 00 01 02 00 00 ................ backtrace: [] garp_request_join+0x138/0x220 [] vlan_gvrp_request_join+0x96/0xa0 [] vlan_dev_open+0x1f9/0x330 [] __dev_open+0x175/0x260 [] dev_open+0x71/0xc0 [] bond_enslave+0x3b9/0x1930 [] do_set_master+0xe3/0x100 [] __rtnl_newlink+0xc8a/0xdb0 [] rtnl_newlink+0x49/0x70 [] rtnetlink_rcv_msg+0x1fc/0x520 [] netlink_rcv_skb+0x87/0x1d0 [] netlink_unicast+0x392/0x4c0 [] netlink_sendmsg+0x368/0x6a0 [] sock_sendmsg+0x56/0x80 [] ____sys_sendmsg+0x36c/0x390 [] ___sys_sendmsg+0x8b/0xd0