Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. 2021/01/13 21:03:13 fuzzer started 2021/01/13 21:03:13 dialing manager at 10.128.0.26:43403 2021/01/13 21:03:13 syscalls: 3495 2021/01/13 21:03:13 code coverage: enabled 2021/01/13 21:03:13 comparison tracing: enabled 2021/01/13 21:03:13 extra coverage: enabled 2021/01/13 21:03:13 setuid sandbox: enabled 2021/01/13 21:03:13 namespace sandbox: enabled 2021/01/13 21:03:13 Android sandbox: /sys/fs/selinux/policy does not exist 2021/01/13 21:03:13 fault injection: enabled 2021/01/13 21:03:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/01/13 21:03:13 net packet injection: enabled 2021/01/13 21:03:13 net device setup: enabled 2021/01/13 21:03:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/01/13 21:03:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/01/13 21:03:13 USB emulation: enabled 2021/01/13 21:03:13 hci packet injection: enabled 2021/01/13 21:03:13 wifi device emulation: enabled 2021/01/13 21:03:13 fetching corpus: 0, signal 0/0 (executing program) 2021/01/13 21:03:13 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 21:03:13 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 21:03:15 starting 6 fuzzer processes 21:03:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000400)={'veth1_to_bridge\x00', {0x2, 0x0, @empty}}) 21:03:16 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x4) 21:03:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40)='IPVS\x00') 21:03:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 21:03:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x24, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006b4484"], 0x1c}}, 0x0) 21:03:17 executing program 5: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8002, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syzkaller login: [ 50.979297][ T8480] IPVS: ftp: loaded support on port[0] = 21 [ 51.123231][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 51.176165][ T8482] IPVS: ftp: loaded support on port[0] = 21 [ 51.332673][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.340074][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.349182][ T8480] device bridge_slave_0 entered promiscuous mode [ 51.358309][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.371157][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.388028][ T8480] device bridge_slave_1 entered promiscuous mode [ 51.472137][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.489219][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.506709][ T8484] IPVS: ftp: loaded support on port[0] = 21 [ 51.536163][ T8480] team0: Port device team_slave_0 added [ 51.560495][ T8480] team0: Port device team_slave_1 added [ 51.579037][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 51.652175][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.665644][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.697947][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.726035][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.732979][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.759471][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.781780][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 51.832284][ T8480] device hsr_slave_0 entered promiscuous mode [ 51.839650][ T8480] device hsr_slave_1 entered promiscuous mode [ 51.888098][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.907358][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.919213][ T8482] device bridge_slave_0 entered promiscuous mode [ 51.929618][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.937583][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.946627][ T8482] device bridge_slave_1 entered promiscuous mode [ 52.032646][ T8488] IPVS: ftp: loaded support on port[0] = 21 [ 52.040807][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.089581][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.206256][ T8482] team0: Port device team_slave_0 added [ 52.212331][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 52.266954][ T8482] team0: Port device team_slave_1 added [ 52.309629][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.317436][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.349121][ T8484] device bridge_slave_0 entered promiscuous mode [ 52.358055][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.365119][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.391150][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.470179][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.480830][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.490490][ T8484] device bridge_slave_1 entered promiscuous mode [ 52.498568][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.505691][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.531935][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.560291][ T8482] device hsr_slave_0 entered promiscuous mode [ 52.570783][ T8482] device hsr_slave_1 entered promiscuous mode [ 52.577463][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.585558][ T8482] Cannot create hsr debugfs directory [ 52.599605][ T8641] IPVS: ftp: loaded support on port[0] = 21 [ 52.646345][ T8480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.716129][ T8480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.729260][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.755333][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 52.768593][ T8480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.779583][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.808898][ T8480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.882711][ T8484] team0: Port device team_slave_0 added [ 52.898195][ T8484] team0: Port device team_slave_1 added [ 52.964182][ T3058] Bluetooth: hci0: command 0x0409 tx timeout [ 53.051774][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.059025][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.086374][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.099420][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 53.144277][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.151245][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.178216][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.206621][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 53.321387][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 53.339881][ T8484] device hsr_slave_0 entered promiscuous mode [ 53.349628][ T8484] device hsr_slave_1 entered promiscuous mode [ 53.357588][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.373319][ T8484] Cannot create hsr debugfs directory [ 53.379630][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.391361][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.399623][ T8486] device bridge_slave_0 entered promiscuous mode [ 53.410557][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.418969][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.427979][ T8486] device bridge_slave_1 entered promiscuous mode [ 53.443590][ T3058] Bluetooth: hci2: command 0x0409 tx timeout [ 53.571451][ T8482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.638653][ T8482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.668442][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.680205][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.691044][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 53.697262][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.705160][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.712765][ T8641] device bridge_slave_0 entered promiscuous mode [ 53.724625][ T8482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.741006][ T8482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.759491][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.768810][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.779299][ T8641] device bridge_slave_1 entered promiscuous mode [ 53.801011][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.811598][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.820067][ T8488] device bridge_slave_0 entered promiscuous mode [ 53.831256][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.868495][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.877209][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.886208][ T8488] device bridge_slave_1 entered promiscuous mode [ 53.898633][ T8486] team0: Port device team_slave_0 added [ 53.918112][ T8641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.933436][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.933953][ T8641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.955880][ T8486] team0: Port device team_slave_1 added [ 54.006620][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.026632][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.052156][ T8641] team0: Port device team_slave_0 added [ 54.060650][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.070315][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.078789][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.106384][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.120382][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.128023][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.154975][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.173304][ T8641] team0: Port device team_slave_1 added [ 54.181912][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.193423][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.211632][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.223776][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.251306][ T8641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.298167][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.307410][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.317237][ T3196] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.324465][ T3196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.335126][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.343638][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.350582][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.377373][ T8641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.393728][ T8486] device hsr_slave_0 entered promiscuous mode [ 54.403447][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 54.407723][ T8486] device hsr_slave_1 entered promiscuous mode [ 54.422532][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.430306][ T8486] Cannot create hsr debugfs directory [ 54.439419][ T8488] team0: Port device team_slave_0 added [ 54.447763][ T8488] team0: Port device team_slave_1 added [ 54.477944][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.487492][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.496008][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.503093][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.510719][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.526629][ T8484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.570587][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.581886][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.609445][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.624525][ T8484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.638361][ T8484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.649415][ T8484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.664613][ T8641] device hsr_slave_0 entered promiscuous mode [ 54.676519][ T8641] device hsr_slave_1 entered promiscuous mode [ 54.684826][ T8641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.692425][ T8641] Cannot create hsr debugfs directory [ 54.708041][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.715192][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.741271][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.814489][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.824230][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.834319][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.842808][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.863986][ T8488] device hsr_slave_0 entered promiscuous mode [ 54.872538][ T8488] device hsr_slave_1 entered promiscuous mode [ 54.881036][ T8488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.890080][ T8488] Cannot create hsr debugfs directory [ 54.920332][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.932020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.964523][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.976167][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.992686][ T8480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.004549][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.043842][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 55.049903][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.065013][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.105211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.112601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.149075][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.199049][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.236426][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.281403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.299607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.308048][ T17] Bluetooth: hci1: command 0x041b tx timeout [ 55.328572][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.352244][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.360963][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.371719][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.397371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.409485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.418394][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.425515][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.434465][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.443417][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.452200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.461587][ T8641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.484554][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.498053][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.507781][ T3196] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.514905][ T3196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.523262][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.531900][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.532559][ T8439] Bluetooth: hci2: command 0x041b tx timeout [ 55.544097][ T3196] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.553083][ T3196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.565232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.584434][ T8641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.599827][ T8641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.611431][ T8641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.658179][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.667355][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.677412][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.684678][ T8439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.693607][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.702038][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.711594][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.720683][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.729782][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.738529][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.747300][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.757866][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.766152][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.774464][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.782672][ T17] Bluetooth: hci3: command 0x041b tx timeout [ 55.790451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.804260][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.817956][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.826574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.840086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.848882][ T8480] device veth0_vlan entered promiscuous mode [ 55.877298][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.927873][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.937778][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.947794][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.957508][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.970819][ T8480] device veth1_vlan entered promiscuous mode [ 55.983965][ T8486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.003060][ T3196] Bluetooth: hci4: command 0x041b tx timeout [ 56.010707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.019663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.029796][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.038444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.047233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.060861][ T8482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.072697][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.096855][ T8486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.105995][ T8486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.126147][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.134818][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.173824][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.181530][ T8486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.192469][ T8488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.233844][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.245430][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.254027][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.282399][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.291629][ T8488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.305993][ T8641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.324026][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.331434][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.353778][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.362271][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.380471][ T8480] device veth0_macvtap entered promiscuous mode [ 56.389051][ T8488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.417850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.426778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.442137][ T8641] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.455519][ T8488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.466281][ T8480] device veth1_macvtap entered promiscuous mode [ 56.476209][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.483260][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 56.502424][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.510458][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.541275][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.550501][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.560440][ T3196] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.567584][ T3196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.607706][ T8482] device veth0_vlan entered promiscuous mode [ 56.620847][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.630800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.645808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.658954][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.666058][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.678944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.687797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.701218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.710207][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.719252][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.728051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.748417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.756948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.765436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.775034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.784237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.792601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.805555][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.818090][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.839953][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.848367][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.857710][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.868853][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.877778][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.887841][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.896983][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.919083][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.929045][ T8480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.941943][ T8480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.951180][ T8480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.966718][ T8480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.991137][ T8482] device veth1_vlan entered promiscuous mode [ 57.018616][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.031472][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.040812][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.064478][ T7] ================================================================================ [ 57.073895][ T7] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2021:28 [ 57.081697][ T7] member access within address 00000000dda20fb3 with insufficient space [ 57.090073][ T7] for an object of type 'struct sk_buff' [ 57.095785][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.10.0-syzkaller #0 [ 57.103578][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.113651][ T7] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.119620][ T7] Call Trace: [ 57.122900][ T7] dump_stack+0x137/0x1be [ 57.123038][ T8439] Bluetooth: hci0: command 0x040f tx timeout [ 57.127219][ T7] ? wake_up_klogd+0xb2/0xf0 [ 57.137753][ T7] ubsan_type_mismatch_common+0x1e2/0x390 [ 57.143484][ T7] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 57.149538][ T7] wg_xmit+0x45d/0xdf0 [ 57.153633][ T7] netdev_start_xmit+0x7b/0x140 [ 57.158486][ T7] dev_hard_start_xmit+0x182/0x2e0 [ 57.163597][ T7] __dev_queue_xmit+0x1229/0x1e60 [ 57.168626][ T7] ip6_finish_output2+0xe8d/0x11e0 [ 57.173728][ T7] ? __ip6_finish_output+0x26b/0x390 [ 57.179009][ T7] ndisc_send_skb+0x85b/0xc70 [ 57.183700][ T7] addrconf_dad_completed+0x5ef/0x990 [ 57.189078][ T7] addrconf_dad_work+0xb92/0x1480 [ 57.194099][ T7] ? rcu_read_lock_sched_held+0x62/0x100 [ 57.199723][ T7] process_one_work+0x471/0x830 [ 57.204581][ T7] worker_thread+0x757/0xb10 [ 57.209174][ T7] ? pr_cont_work+0x100/0x100 [ 57.213841][ T7] kthread+0x39a/0x3c0 [ 57.217904][ T7] ? pr_cont_work+0x100/0x100 [ 57.222561][ T7] ? __list_add+0xc0/0xc0 [ 57.226874][ T7] ret_from_fork+0x1f/0x30 [ 57.231364][ T7] ================================================================================ [ 57.240690][ T7] Kernel panic - not syncing: panic_on_warn set ... [ 57.247278][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.10.0-syzkaller #0 [ 57.255063][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.265108][ T7] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.271073][ T7] Call Trace: [ 57.274348][ T7] dump_stack+0x137/0x1be [ 57.278663][ T7] ? panic+0x226/0x830 [ 57.282811][ T7] panic+0x2e3/0x830 [ 57.286702][ T7] ? ubsan_type_mismatch_common+0x206/0x390 [ 57.292602][ T7] ubsan_type_mismatch_common+0x388/0x390 [ 57.298312][ T7] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 57.304281][ T7] wg_xmit+0x45d/0xdf0 [ 57.308357][ T7] netdev_start_xmit+0x7b/0x140 [ 57.313194][ T7] dev_hard_start_xmit+0x182/0x2e0 [ 57.318297][ T7] __dev_queue_xmit+0x1229/0x1e60 [ 57.323339][ T7] ip6_finish_output2+0xe8d/0x11e0 [ 57.328449][ T7] ? __ip6_finish_output+0x26b/0x390 [ 57.333731][ T7] ndisc_send_skb+0x85b/0xc70 [ 57.338445][ T7] addrconf_dad_completed+0x5ef/0x990 [ 57.343814][ T7] addrconf_dad_work+0xb92/0x1480 [ 57.348845][ T7] ? rcu_read_lock_sched_held+0x62/0x100 [ 57.354472][ T7] process_one_work+0x471/0x830 [ 57.359332][ T7] worker_thread+0x757/0xb10 [ 57.363014][ T8439] Bluetooth: hci1: command 0x040f tx timeout [ 57.363920][ T7] ? pr_cont_work+0x100/0x100 [ 57.374526][ T7] kthread+0x39a/0x3c0 [ 57.378631][ T7] ? pr_cont_work+0x100/0x100 [ 57.383402][ T7] ? __list_add+0xc0/0xc0 [ 57.387731][ T7] ret_from_fork+0x1f/0x30 [ 57.392934][ T7] Kernel Offset: disabled [ 57.397343][ T7] Rebooting in 86400 seconds..