[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. 2021/01/13 21:50:36 fuzzer started 2021/01/13 21:50:37 dialing manager at 10.128.0.26:43403 2021/01/13 21:50:37 syscalls: 3495 2021/01/13 21:50:37 code coverage: enabled 2021/01/13 21:50:37 comparison tracing: enabled 2021/01/13 21:50:37 extra coverage: enabled 2021/01/13 21:50:37 setuid sandbox: enabled 2021/01/13 21:50:37 namespace sandbox: enabled 2021/01/13 21:50:37 Android sandbox: /sys/fs/selinux/policy does not exist 2021/01/13 21:50:37 fault injection: enabled 2021/01/13 21:50:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/01/13 21:50:37 net packet injection: enabled 2021/01/13 21:50:37 net device setup: enabled 2021/01/13 21:50:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/01/13 21:50:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/01/13 21:50:37 USB emulation: enabled 2021/01/13 21:50:37 hci packet injection: enabled 2021/01/13 21:50:37 wifi device emulation: enabled 2021/01/13 21:50:37 fetching corpus: 0, signal 0/0 (executing program) 2021/01/13 21:50:37 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 21:50:37 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 21:50:39 starting 6 fuzzer processes 21:50:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000001100)='/dev/vcsa#\x00', 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x12, r0, 0x0) 21:50:39 executing program 1: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) 21:50:39 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001880)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 21:50:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc000) 21:50:40 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @null}, 0x1c) 21:50:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) syzkaller login: [ 56.607487][ T8461] IPVS: ftp: loaded support on port[0] = 21 [ 56.838168][ T8463] IPVS: ftp: loaded support on port[0] = 21 [ 56.923851][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 57.042793][ T8465] IPVS: ftp: loaded support on port[0] = 21 [ 57.108859][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.117626][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.126281][ T8461] device bridge_slave_0 entered promiscuous mode [ 57.141844][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.150356][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.158970][ T8461] device bridge_slave_1 entered promiscuous mode [ 57.219021][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.261012][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.368851][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 57.382711][ T8461] team0: Port device team_slave_0 added [ 57.412704][ T8467] IPVS: ftp: loaded support on port[0] = 21 [ 57.413126][ T8461] team0: Port device team_slave_1 added [ 57.578162][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.580038][ T8469] IPVS: ftp: loaded support on port[0] = 21 [ 57.588068][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.618996][ T8461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.659455][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.670560][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.696840][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.708665][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.716275][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.724523][ T8463] device bridge_slave_0 entered promiscuous mode [ 57.735561][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.742622][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.750850][ T8463] device bridge_slave_1 entered promiscuous mode [ 57.826237][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.843146][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.932713][ T8461] device hsr_slave_0 entered promiscuous mode [ 57.940931][ T8461] device hsr_slave_1 entered promiscuous mode [ 57.956452][ T8463] team0: Port device team_slave_0 added [ 58.017035][ T8463] team0: Port device team_slave_1 added [ 58.054159][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.082931][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.118904][ T8463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.133334][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.141664][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.169726][ T8463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.241304][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 58.262155][ T8463] device hsr_slave_0 entered promiscuous mode [ 58.269860][ T8463] device hsr_slave_1 entered promiscuous mode [ 58.278110][ T8463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.286846][ T8463] Cannot create hsr debugfs directory [ 58.305217][ T8593] IPVS: ftp: loaded support on port[0] = 21 [ 58.470651][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 58.517329][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 58.543820][ T3219] Bluetooth: hci0: command 0x0409 tx timeout [ 58.716270][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.723356][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.732882][ T8469] device bridge_slave_0 entered promiscuous mode [ 58.763203][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.773963][ T3219] Bluetooth: hci1: command 0x0409 tx timeout [ 58.781237][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.789930][ T8465] device bridge_slave_0 entered promiscuous mode [ 58.802410][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.809826][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.818195][ T8465] device bridge_slave_1 entered promiscuous mode [ 58.837155][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.844320][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.852594][ T8469] device bridge_slave_1 entered promiscuous mode [ 58.904094][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.917056][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.930085][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.955335][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.986539][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.994144][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.001999][ T8467] device bridge_slave_0 entered promiscuous mode [ 59.020700][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.028671][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 59.036488][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.046997][ T8467] device bridge_slave_1 entered promiscuous mode [ 59.105452][ T8469] team0: Port device team_slave_0 added [ 59.114483][ T8465] team0: Port device team_slave_0 added [ 59.163026][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.174067][ T8469] team0: Port device team_slave_1 added [ 59.187289][ T8465] team0: Port device team_slave_1 added [ 59.207772][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 59.221536][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.260232][ T34] Bluetooth: hci3: command 0x0409 tx timeout [ 59.290583][ T8461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.324435][ T8461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.341834][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.350686][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.379339][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.399092][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.406517][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.434136][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.447724][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.455077][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.481544][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.495852][ T8467] team0: Port device team_slave_0 added [ 59.502633][ T8461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.509999][ T34] Bluetooth: hci4: command 0x0409 tx timeout [ 59.526020][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.533083][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.561258][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.588671][ T8467] team0: Port device team_slave_1 added [ 59.598170][ T8461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.667985][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.676255][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.706086][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.722401][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.731682][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.760439][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.776027][ T8465] device hsr_slave_0 entered promiscuous mode [ 59.784578][ T8465] device hsr_slave_1 entered promiscuous mode [ 59.792022][ T8465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.800011][ T8465] Cannot create hsr debugfs directory [ 59.810742][ T8469] device hsr_slave_0 entered promiscuous mode [ 59.818404][ T8469] device hsr_slave_1 entered promiscuous mode [ 59.826779][ T8469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.836190][ T8469] Cannot create hsr debugfs directory [ 59.929978][ T8463] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.971864][ T8467] device hsr_slave_0 entered promiscuous mode [ 59.979850][ T8467] device hsr_slave_1 entered promiscuous mode [ 59.990256][ T8467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.998804][ T8467] Cannot create hsr debugfs directory [ 60.005100][ T8463] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.019159][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.027365][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.037282][ T8593] device bridge_slave_0 entered promiscuous mode [ 60.051699][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.059368][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.063747][ T34] Bluetooth: hci5: command 0x0409 tx timeout [ 60.069250][ T8593] device bridge_slave_1 entered promiscuous mode [ 60.106167][ T8463] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.157963][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.168242][ T8463] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.209440][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.339087][ T8593] team0: Port device team_slave_0 added [ 60.398507][ T8593] team0: Port device team_slave_1 added [ 60.494712][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.501737][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.529403][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.563174][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.577351][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.586015][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.614546][ T34] Bluetooth: hci0: command 0x041b tx timeout [ 60.620820][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.661343][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.695234][ T8469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.712859][ T8469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.722519][ T8469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.741239][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.752883][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.772771][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.809315][ T8469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.820498][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.830349][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.839982][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.847462][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.863098][ T9356] Bluetooth: hci1: command 0x041b tx timeout [ 60.872281][ T8593] device hsr_slave_0 entered promiscuous mode [ 60.879707][ T8593] device hsr_slave_1 entered promiscuous mode [ 60.886699][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.895983][ T8593] Cannot create hsr debugfs directory [ 60.925833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.944454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.953364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.964819][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.971877][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.980717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.990444][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.999724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.008813][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.018681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.057273][ T8465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.093600][ T3219] Bluetooth: hci2: command 0x041b tx timeout [ 61.109405][ T8465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.120489][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.131632][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.143168][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.155138][ T3196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.183357][ T8461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.198577][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.213944][ T8465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.226601][ T8465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.245489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.259919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.268429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.281825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.299063][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.346513][ T3219] Bluetooth: hci3: command 0x041b tx timeout [ 61.369601][ T8467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.396518][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.408822][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.419444][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.426564][ T3219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.436846][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.456280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.465228][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.474264][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.481316][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.490707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.500491][ T8467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.515693][ T8467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.559212][ T8467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.587787][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 61.596276][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.612342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.624725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.644921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.656680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.714789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.722691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.734663][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.743206][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.752329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.762087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.771446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.779997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.792937][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.808431][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.857958][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.871418][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.885100][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.920208][ T8593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.942661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.953198][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.962294][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.969429][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.978067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.987897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.997864][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.006615][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.019061][ T8593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.032933][ T8593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.052676][ T8593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.075464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.085241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.092778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.100830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.111411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.133791][ T3219] Bluetooth: hci5: command 0x041b tx timeout [ 62.151764][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.166575][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.178197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.187329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.196411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.205292][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.214528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.230732][ T8461] device veth0_vlan entered promiscuous mode [ 62.245540][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.260157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.277309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.290672][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.311992][ T8461] device veth1_vlan entered promiscuous mode [ 62.345780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.355326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.363009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.374398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.382693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.391289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.406394][ T8469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.427463][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.438411][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.463883][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.475110][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.484312][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.492864][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.504496][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.511996][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.522222][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.531424][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.545293][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.578171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.587194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.620209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.629919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.640306][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.647472][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.655512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.664606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.674238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.682014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.709369][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 62.714518][ T8463] device veth0_vlan entered promiscuous mode [ 62.732840][ T8463] device veth1_vlan entered promiscuous mode [ 62.746429][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.755566][ T8461] device veth0_macvtap entered promiscuous mode [ 62.775965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.784730][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.792979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.802511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.811559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.819646][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.828322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.837992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.847990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.857664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.867225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.876175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.887198][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.920390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.932560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.963759][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 62.964537][ T8461] device veth1_macvtap entered promiscuous mode [ 63.009650][ T8463] device veth0_macvtap entered promiscuous mode [ 63.020561][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.031403][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.040076][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.049442][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.059610][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.068321][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.077367][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.088022][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.099228][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.135678][ T8463] device veth1_macvtap entered promiscuous mode [ 63.149807][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.158070][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.175666][ T9356] Bluetooth: hci2: command 0x040f tx timeout [ 63.204764][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.246052][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.256645][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.270662][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.280968][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.288366][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.301232][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.310817][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.324743][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.338376][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.352087][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 63.368691][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.380689][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.418337][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.424133][ T3219] Bluetooth: hci3: command 0x040f tx timeout [ 63.431937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.440210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.449992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.458915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.468482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.478900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.488219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.498229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.507879][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.516064][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.524305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.532109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.544581][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 63.567071][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.578855][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.596118][ T8461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.605137][ T8461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614020][ T8461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.622719][ T8461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.645696][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.654869][ T3219] Bluetooth: hci4: command 0x040f tx timeout [ 63.669463][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.682453][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.692450][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.701645][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.710741][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.720336][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.730046][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.737471][ T9767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.745485][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.754387][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.762716][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.769834][ T9767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.777929][ T9767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.789124][ T8463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.802222][ T8463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.811115][ T8463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.821283][ T8463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.843297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.852041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.890483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.910130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.926978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.944543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.953063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.961646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.970241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.980013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.992576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.000843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.009299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.018242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.079162][ T8593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.105175][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.119566][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.128517][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.137848][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.147169][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.156358][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.165292][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.174051][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.182498][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.194634][ T8469] device veth0_vlan entered promiscuous mode [ 64.213776][ T3219] Bluetooth: hci5: command 0x040f tx timeout [ 64.265352][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.288214][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.316224][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.333749][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.342119][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.359413][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.371641][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.380322][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.430485][ T8465] device veth0_vlan entered promiscuous mode [ 64.441765][ T8467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.472353][ T17] ================================================================================ [ 64.481817][ T17] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2021:28 [ 64.489709][ T17] member access within address 00000000057ac34b with insufficient space [ 64.498103][ T17] for an object of type 'struct sk_buff' [ 64.503827][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.10.0-syzkaller #0 [ 64.512085][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.522179][ T17] Workqueue: ipv6_addrconf addrconf_dad_work [ 64.528267][ T17] Call Trace: [ 64.531563][ T17] dump_stack+0x137/0x1be [ 64.535898][ T17] ? wake_up_klogd+0xb2/0xf0 [ 64.540500][ T17] ubsan_type_mismatch_common+0x1e2/0x390 [ 64.546229][ T17] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 64.552221][ T17] wg_xmit+0x45d/0xdf0 [ 64.556324][ T17] netdev_start_xmit+0x7b/0x140 [ 64.561183][ T17] dev_hard_start_xmit+0x182/0x2e0 [ 64.566314][ T17] __dev_queue_xmit+0x1229/0x1e60 [ 64.571369][ T17] ip6_finish_output2+0xe8d/0x11e0 [ 64.576493][ T17] ? __ip6_finish_output+0x26b/0x390 [ 64.581787][ T17] ndisc_send_skb+0x85b/0xc70 [ 64.586599][ T17] addrconf_dad_completed+0x5ef/0x990 [ 64.591987][ T17] addrconf_dad_work+0xb92/0x1480 [ 64.597044][ T17] ? rcu_read_lock_sched_held+0x62/0x100 [ 64.602684][ T17] process_one_work+0x471/0x830 [ 64.607567][ T17] worker_thread+0x757/0xb10 [ 64.612187][ T17] ? pr_cont_work+0x100/0x100 [ 64.616874][ T17] kthread+0x39a/0x3c0 [ 64.620974][ T17] ? pr_cont_work+0x100/0x100 [ 64.625657][ T17] ? __list_add+0xc0/0xc0 [ 64.629993][ T17] ret_from_fork+0x1f/0x30 [ 64.634527][ T17] ================================================================================ [ 64.643858][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 64.650459][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.10.0-syzkaller #0 [ 64.658352][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.668446][ T17] Workqueue: ipv6_addrconf addrconf_dad_work [ 64.674467][ T17] Call Trace: [ 64.677833][ T17] dump_stack+0x137/0x1be [ 64.682177][ T17] ? panic+0x226/0x830 [ 64.686260][ T17] panic+0x2e3/0x830 [ 64.690172][ T17] ? ubsan_type_mismatch_common+0x206/0x390 [ 64.696170][ T17] ubsan_type_mismatch_common+0x388/0x390 [ 64.701924][ T17] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 64.707914][ T17] wg_xmit+0x45d/0xdf0 [ 64.712038][ T17] netdev_start_xmit+0x7b/0x140 [ 64.716915][ T17] dev_hard_start_xmit+0x182/0x2e0 [ 64.722141][ T17] __dev_queue_xmit+0x1229/0x1e60 [ 64.727459][ T17] ip6_finish_output2+0xe8d/0x11e0 [ 64.732585][ T17] ? __ip6_finish_output+0x26b/0x390 [ 64.737880][ T17] ndisc_send_skb+0x85b/0xc70 [ 64.742613][ T17] addrconf_dad_completed+0x5ef/0x990 [ 64.748019][ T17] addrconf_dad_work+0xb92/0x1480 [ 64.753081][ T17] ? rcu_read_lock_sched_held+0x62/0x100 [ 64.758722][ T17] process_one_work+0x471/0x830 [ 64.763601][ T17] worker_thread+0x757/0xb10 [ 64.768220][ T17] ? pr_cont_work+0x100/0x100 [ 64.773808][ T17] kthread+0x39a/0x3c0 [ 64.778144][ T17] ? pr_cont_work+0x100/0x100 [ 64.783345][ T17] ? __list_add+0xc0/0xc0 [ 64.788228][ T17] ret_from_fork+0x1f/0x30 [ 64.793321][ T17] Kernel Offset: disabled [ 64.797730][ T17] Rebooting in 86400 seconds..