[ OK ] Started Getty on tty1. [ OK ] Found device /dev/ttyS0. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. 2021/01/13 23:40:26 fuzzer started 2021/01/13 23:40:27 dialing manager at 10.128.0.26:43403 2021/01/13 23:40:27 syscalls: 3495 2021/01/13 23:40:27 code coverage: enabled 2021/01/13 23:40:27 comparison tracing: enabled 2021/01/13 23:40:27 extra coverage: enabled 2021/01/13 23:40:27 setuid sandbox: enabled 2021/01/13 23:40:27 namespace sandbox: enabled 2021/01/13 23:40:27 Android sandbox: /sys/fs/selinux/policy does not exist 2021/01/13 23:40:27 fault injection: enabled 2021/01/13 23:40:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/01/13 23:40:27 net packet injection: enabled 2021/01/13 23:40:27 net device setup: enabled 2021/01/13 23:40:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/01/13 23:40:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/01/13 23:40:27 USB emulation: enabled 2021/01/13 23:40:27 hci packet injection: enabled 2021/01/13 23:40:27 wifi device emulation: enabled 2021/01/13 23:40:27 fetching corpus: 0, signal 0/0 (executing program) 2021/01/13 23:40:27 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 23:40:27 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 23:40:29 starting 6 fuzzer processes 23:40:29 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 23:40:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x16, 0x0, 0x0) 23:40:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') 23:40:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340), 0x8) 23:40:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) 23:40:30 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140), 0x10) syzkaller login: [ 53.970953][ T8477] IPVS: ftp: loaded support on port[0] = 21 [ 54.195221][ T8479] IPVS: ftp: loaded support on port[0] = 21 [ 54.264379][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 54.358227][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.366022][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.389187][ T8477] device bridge_slave_0 entered promiscuous mode [ 54.399674][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.407747][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.416370][ T8477] device bridge_slave_1 entered promiscuous mode [ 54.438554][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.452055][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.510437][ T8477] team0: Port device team_slave_0 added [ 54.538165][ T8477] team0: Port device team_slave_1 added [ 54.540883][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 54.616665][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.624391][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.685892][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.702966][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.710118][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.738630][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.782637][ T8477] device hsr_slave_0 entered promiscuous mode [ 54.789792][ T8477] device hsr_slave_1 entered promiscuous mode [ 54.798430][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 54.858073][ T8483] IPVS: ftp: loaded support on port[0] = 21 [ 54.981249][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 55.042028][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.050826][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.060343][ T8479] device bridge_slave_0 entered promiscuous mode [ 55.073281][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.081844][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.090576][ T8479] device bridge_slave_1 entered promiscuous mode [ 55.147686][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.187149][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.261353][ T8479] team0: Port device team_slave_0 added [ 55.313285][ T8479] team0: Port device team_slave_1 added [ 55.370659][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 55.473156][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.481853][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.508004][ T8479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.531872][ T8568] IPVS: ftp: loaded support on port[0] = 21 [ 55.590118][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.601973][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.630109][ T8479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.682058][ T8477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.704866][ T8477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.762131][ T8479] device hsr_slave_0 entered promiscuous mode [ 55.769555][ T8479] device hsr_slave_1 entered promiscuous mode [ 55.777976][ T8479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.786875][ T8479] Cannot create hsr debugfs directory [ 55.793319][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 55.805815][ T8477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.823740][ T8477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.956483][ T3122] Bluetooth: hci0: command 0x0409 tx timeout [ 55.959379][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 56.003142][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.017795][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.028841][ T8481] device bridge_slave_0 entered promiscuous mode [ 56.077383][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.084461][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.093169][ T8481] device bridge_slave_1 entered promiscuous mode [ 56.180918][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.201062][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.205066][ T3122] Bluetooth: hci1: command 0x0409 tx timeout [ 56.214000][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.226825][ T8483] device bridge_slave_0 entered promiscuous mode [ 56.236117][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.243171][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.251675][ T8483] device bridge_slave_1 entered promiscuous mode [ 56.260782][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.268199][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.276734][ T8485] device bridge_slave_0 entered promiscuous mode [ 56.286467][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.321081][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.328699][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.338370][ T8485] device bridge_slave_1 entered promiscuous mode [ 56.371830][ T8481] team0: Port device team_slave_0 added [ 56.408734][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.422710][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.433923][ T8481] team0: Port device team_slave_1 added [ 56.445223][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 56.449252][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.504874][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.542057][ T8485] team0: Port device team_slave_0 added [ 56.577907][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.584872][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.612882][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.655639][ T8485] team0: Port device team_slave_1 added [ 56.663611][ T8483] team0: Port device team_slave_0 added [ 56.671688][ T8483] team0: Port device team_slave_1 added [ 56.687779][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 56.695659][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.702639][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.729918][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.790854][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.805704][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.833233][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.848794][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.860638][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.868822][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.896358][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.915169][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 56.936086][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.942969][ T8479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.952652][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.960849][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.987247][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.003426][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.010763][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.037907][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.054601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.064046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.075929][ T8481] device hsr_slave_0 entered promiscuous mode [ 57.082800][ T8481] device hsr_slave_1 entered promiscuous mode [ 57.089916][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.097819][ T8481] Cannot create hsr debugfs directory [ 57.106893][ T8479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.116782][ T8479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.130045][ T8568] chnl_net:caif_netlink_parms(): no params data found [ 57.160700][ T8479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.191439][ T8485] device hsr_slave_0 entered promiscuous mode [ 57.199230][ T8485] device hsr_slave_1 entered promiscuous mode [ 57.207478][ T8485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.216782][ T8485] Cannot create hsr debugfs directory [ 57.250164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.259351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.269917][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.277269][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.287900][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.297315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.306215][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.313282][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.321414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.358667][ T8483] device hsr_slave_0 entered promiscuous mode [ 57.367225][ T8483] device hsr_slave_1 entered promiscuous mode [ 57.374431][ T8483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.382995][ T8483] Cannot create hsr debugfs directory [ 57.394929][ T3122] Bluetooth: hci5: command 0x0409 tx timeout [ 57.445712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.460264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.469411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.480351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.492955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.538553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.548917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.562776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.571205][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.642276][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.650422][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.659916][ T8568] device bridge_slave_0 entered promiscuous mode [ 57.672364][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.681118][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.689987][ T8568] device bridge_slave_1 entered promiscuous mode [ 57.717654][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.730527][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.760252][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.792666][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.807919][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.923736][ T8568] team0: Port device team_slave_0 added [ 57.953071][ T8568] team0: Port device team_slave_1 added [ 57.970942][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.978643][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.006632][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.033484][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.041176][ T4062] Bluetooth: hci0: command 0x041b tx timeout [ 58.049954][ T8481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.087797][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.095140][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.121837][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.137730][ T8481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.159165][ T8479] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.169037][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.178211][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.205675][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.231679][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.242145][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.251458][ T8481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.264997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.276580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.285220][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.292281][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.305114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.317646][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 58.329726][ T8568] device hsr_slave_0 entered promiscuous mode [ 58.336653][ T8568] device hsr_slave_1 entered promiscuous mode [ 58.343233][ T8568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.351294][ T8568] Cannot create hsr debugfs directory [ 58.375165][ T8481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.383676][ T8485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.407424][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.420762][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.431099][ T3122] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.438286][ T3122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.446854][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.455674][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.464172][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.473004][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.513785][ T8485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.514869][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 58.553962][ T9350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.567291][ T9350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.580644][ T9350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.591204][ T9350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.603945][ T9350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.620485][ T8485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.651142][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.660645][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.670486][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.679918][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.695850][ T8477] device veth0_vlan entered promiscuous mode [ 58.713679][ T8485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.729611][ T8483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.746176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.753985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.763218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.772193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.783108][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.790384][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 58.808398][ T8483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.857337][ T8483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.871212][ T8477] device veth1_vlan entered promiscuous mode [ 58.896257][ T8483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.975361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.983436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.996189][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.003649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.011904][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.020711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.035116][ T8479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.044615][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 59.069483][ T8477] device veth0_macvtap entered promiscuous mode [ 59.113568][ T8477] device veth1_macvtap entered promiscuous mode [ 59.140188][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.161480][ T8568] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.193236][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.203692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.214200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.223467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.232673][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.242246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.250592][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.259348][ T8568] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.270941][ T8568] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.305278][ T8479] device veth0_vlan entered promiscuous mode [ 59.311670][ T8568] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.341313][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.349885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.360668][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.369614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.379345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.389559][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.396712][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.405404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.413842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.422996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.431283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.439194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.453622][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.473772][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.487733][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.495304][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 59.499977][ T8477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.511301][ T8477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.523868][ T8477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.533116][ T8477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.546761][ T8479] device veth1_vlan entered promiscuous mode [ 59.573681][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.585508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.594099][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.607683][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.614810][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.625029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.633523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.643112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.651253][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.665486][ T4062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.707082][ T9350] ================================================================================ [ 59.716582][ T9350] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2021:28 [ 59.724453][ T9350] member access within address 000000009161fb93 with insufficient space [ 59.732776][ T9350] for an object of type 'struct sk_buff' [ 59.738478][ T9350] CPU: 1 PID: 9350 Comm: kworker/1:3 Not tainted 5.10.0-syzkaller #0 [ 59.746534][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.756615][ T9350] Workqueue: ipv6_addrconf addrconf_dad_work [ 59.762615][ T9350] Call Trace: [ 59.765898][ T9350] dump_stack+0x137/0x1be [ 59.770230][ T9350] ? wake_up_klogd+0xb2/0xf0 [ 59.774824][ T9350] ubsan_type_mismatch_common+0x1e2/0x390 [ 59.780547][ T9350] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 59.786527][ T9350] wg_xmit+0x45d/0xdf0 [ 59.790607][ T9350] netdev_start_xmit+0x7b/0x140 [ 59.795456][ T9350] dev_hard_start_xmit+0x182/0x2e0 [ 59.800584][ T9350] __dev_queue_xmit+0x1229/0x1e60 [ 59.805643][ T9350] ip6_finish_output2+0xe8d/0x11e0 [ 59.810769][ T9350] ? __ip6_finish_output+0x26b/0x390 [ 59.816074][ T9350] ndisc_send_skb+0x85b/0xc70 [ 59.820771][ T9350] addrconf_dad_completed+0x5ef/0x990 [ 59.826169][ T9350] addrconf_dad_work+0xb92/0x1480 [ 59.831224][ T9350] ? rcu_read_lock_sched_held+0x62/0x100 [ 59.836868][ T9350] process_one_work+0x471/0x830 [ 59.841751][ T9350] worker_thread+0x757/0xb10 [ 59.846366][ T9350] ? __kthread_parkme+0x148/0x190 [ 59.851388][ T9350] ? pr_cont_work+0x100/0x100 [ 59.856062][ T9350] kthread+0x39a/0x3c0 [ 59.860131][ T9350] ? pr_cont_work+0x100/0x100 [ 59.864803][ T9350] ? __list_add+0xc0/0xc0 [ 59.869128][ T9350] ret_from_fork+0x1f/0x30 [ 59.873671][ T9350] ================================================================================ [ 59.883004][ T9350] Kernel panic - not syncing: panic_on_warn set ... [ 59.890198][ T9350] CPU: 1 PID: 9350 Comm: kworker/1:3 Not tainted 5.10.0-syzkaller #0 [ 59.898258][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.908319][ T9350] Workqueue: ipv6_addrconf addrconf_dad_work [ 59.914296][ T9350] Call Trace: [ 59.917612][ T9350] dump_stack+0x137/0x1be [ 59.921975][ T9350] ? panic+0x226/0x830 [ 59.926049][ T9350] panic+0x2e3/0x830 [ 59.929953][ T9350] ? ubsan_type_mismatch_common+0x206/0x390 [ 59.935852][ T9350] ubsan_type_mismatch_common+0x388/0x390 [ 59.941579][ T9350] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 59.947647][ T9350] wg_xmit+0x45d/0xdf0 [ 59.951730][ T9350] netdev_start_xmit+0x7b/0x140 [ 59.956582][ T9350] dev_hard_start_xmit+0x182/0x2e0 [ 59.961704][ T9350] __dev_queue_xmit+0x1229/0x1e60 [ 59.966747][ T9350] ip6_finish_output2+0xe8d/0x11e0 [ 59.971853][ T9350] ? __ip6_finish_output+0x26b/0x390 [ 59.977138][ T9350] ndisc_send_skb+0x85b/0xc70 [ 59.981843][ T9350] addrconf_dad_completed+0x5ef/0x990 [ 59.987227][ T9350] addrconf_dad_work+0xb92/0x1480 [ 59.992249][ T9350] ? rcu_read_lock_sched_held+0x62/0x100 [ 59.997886][ T9350] process_one_work+0x471/0x830 [ 60.002749][ T9350] worker_thread+0x757/0xb10 [ 60.007349][ T9350] ? __kthread_parkme+0x148/0x190 [ 60.012387][ T9350] ? pr_cont_work+0x100/0x100 [ 60.017057][ T9350] kthread+0x39a/0x3c0 [ 60.021121][ T9350] ? pr_cont_work+0x100/0x100 [ 60.025789][ T9350] ? __list_add+0xc0/0xc0 [ 60.030109][ T9350] ret_from_fork+0x1f/0x30 [ 60.035369][ T9350] Kernel Offset: disabled [ 60.039783][ T9350] Rebooting in 86400 seconds..