Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. 2021/01/13 23:24:31 fuzzer started 2021/01/13 23:24:31 dialing manager at 10.128.0.26:43403 2021/01/13 23:24:32 syscalls: 3495 2021/01/13 23:24:32 code coverage: enabled 2021/01/13 23:24:32 comparison tracing: enabled 2021/01/13 23:24:32 extra coverage: enabled 2021/01/13 23:24:32 setuid sandbox: enabled 2021/01/13 23:24:32 namespace sandbox: enabled 2021/01/13 23:24:32 Android sandbox: /sys/fs/selinux/policy does not exist 2021/01/13 23:24:32 fault injection: enabled 2021/01/13 23:24:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/01/13 23:24:32 net packet injection: enabled 2021/01/13 23:24:32 net device setup: enabled 2021/01/13 23:24:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/01/13 23:24:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/01/13 23:24:32 USB emulation: enabled 2021/01/13 23:24:32 hci packet injection: enabled 2021/01/13 23:24:32 wifi device emulation: enabled 2021/01/13 23:24:32 fetching corpus: 0, signal 0/0 (executing program) 2021/01/13 23:24:32 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 23:24:32 fetching corpus: 1, signal 140/140 (executing program) 2021/01/13 23:24:34 starting 6 fuzzer processes 23:24:34 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 23:24:34 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/tcp\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_vs\x00') 23:24:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x62d8d56b}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c875) 23:24:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x17, 0x0, &(0x7f0000000000)) 23:24:35 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 23:24:35 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) [ 52.999290][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 53.198124][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 53.203751][ T8483] IPVS: ftp: loaded support on port[0] = 21 [ 53.296315][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.305599][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.341210][ T8481] device bridge_slave_0 entered promiscuous mode [ 53.389831][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.396953][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.406823][ T8481] device bridge_slave_1 entered promiscuous mode [ 53.433440][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.445250][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.516091][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 53.524334][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 53.538228][ T8481] team0: Port device team_slave_0 added [ 53.548547][ T8481] team0: Port device team_slave_1 added [ 53.663085][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 53.687774][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.695099][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.723481][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.737073][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.746638][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.774628][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.946455][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 53.970933][ T8481] device hsr_slave_0 entered promiscuous mode [ 53.979444][ T8481] device hsr_slave_1 entered promiscuous mode [ 54.059358][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.105755][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.136634][ T8483] device bridge_slave_0 entered promiscuous mode [ 54.146617][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.155623][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.170730][ T8483] device bridge_slave_1 entered promiscuous mode [ 54.316680][ T8502] IPVS: ftp: loaded support on port[0] = 21 [ 54.357509][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.373273][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.461118][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 54.558692][ T8483] team0: Port device team_slave_0 added [ 54.568376][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 54.600756][ T8483] team0: Port device team_slave_1 added [ 54.645764][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.664560][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.692204][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.708205][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.716128][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.743520][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.898336][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.910280][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.918236][ T8485] device bridge_slave_0 entered promiscuous mode [ 54.928288][ T3187] Bluetooth: hci0: command 0x0409 tx timeout [ 54.949524][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.969885][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.977821][ T8485] device bridge_slave_1 entered promiscuous mode [ 54.996829][ T8483] device hsr_slave_0 entered promiscuous mode [ 55.003883][ T8483] device hsr_slave_1 entered promiscuous mode [ 55.010687][ T8483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.018621][ T8483] Cannot create hsr debugfs directory [ 55.106235][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.123730][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.130979][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.139110][ T8487] device bridge_slave_0 entered promiscuous mode [ 55.152622][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 55.159450][ T3124] Bluetooth: hci1: command 0x0409 tx timeout [ 55.173812][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.196052][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.204494][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.212815][ T8487] device bridge_slave_1 entered promiscuous mode [ 55.251041][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 55.281482][ T8481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.297495][ T8485] team0: Port device team_slave_0 added [ 55.323897][ T8481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.350724][ T8485] team0: Port device team_slave_1 added [ 55.368635][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.379375][ T8481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.392992][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 55.424745][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.440265][ T8481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.461197][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.468173][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.497240][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.518647][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.527778][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.555509][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.639486][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 55.645922][ T8487] team0: Port device team_slave_0 added [ 55.690235][ T8485] device hsr_slave_0 entered promiscuous mode [ 55.696915][ T8485] device hsr_slave_1 entered promiscuous mode [ 55.704464][ T8485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.715651][ T8485] Cannot create hsr debugfs directory [ 55.723727][ T8487] team0: Port device team_slave_1 added [ 55.747604][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.754964][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.765249][ T8502] device bridge_slave_0 entered promiscuous mode [ 55.774515][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.781853][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.790331][ T8489] device bridge_slave_0 entered promiscuous mode [ 55.798716][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.805884][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.814829][ T8489] device bridge_slave_1 entered promiscuous mode [ 55.845589][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.852908][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.863328][ T8502] device bridge_slave_1 entered promiscuous mode [ 55.879640][ T2995] Bluetooth: hci4: command 0x0409 tx timeout [ 55.908540][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.915836][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.942280][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.973080][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.997700][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.005398][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.033563][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.063343][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.075260][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.088226][ T8483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.109337][ T3187] Bluetooth: hci5: command 0x0409 tx timeout [ 56.117066][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.147644][ T8489] team0: Port device team_slave_0 added [ 56.154050][ T8483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.173599][ T8487] device hsr_slave_0 entered promiscuous mode [ 56.182784][ T8487] device hsr_slave_1 entered promiscuous mode [ 56.190366][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.197938][ T8487] Cannot create hsr debugfs directory [ 56.217911][ T8489] team0: Port device team_slave_1 added [ 56.232937][ T8483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.244866][ T8483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.271447][ T8502] team0: Port device team_slave_0 added [ 56.299694][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.306677][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.337419][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.364588][ T8502] team0: Port device team_slave_1 added [ 56.386368][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.394628][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.430757][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.506480][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.514010][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.541909][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.582011][ T8489] device hsr_slave_0 entered promiscuous mode [ 56.588849][ T8489] device hsr_slave_1 entered promiscuous mode [ 56.596707][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.604826][ T8489] Cannot create hsr debugfs directory [ 56.616897][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.624777][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.651992][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.755857][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.788163][ T8502] device hsr_slave_0 entered promiscuous mode [ 56.797144][ T8502] device hsr_slave_1 entered promiscuous mode [ 56.805433][ T8502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.813394][ T8502] Cannot create hsr debugfs directory [ 56.832071][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.881910][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.896833][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.909488][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.918107][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.928938][ T3187] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.936306][ T3187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.989330][ T3124] Bluetooth: hci0: command 0x041b tx timeout [ 56.996560][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.005908][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.016776][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.025302][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.032446][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.071462][ T8485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.101832][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.113038][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.135375][ T8485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.146621][ T8485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.169624][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.178152][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.192178][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.202958][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.215538][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.226450][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.229196][ T9542] Bluetooth: hci1: command 0x041b tx timeout [ 57.244840][ T8485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.262503][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.284111][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.306950][ T8481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.320707][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.344774][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.355473][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.412711][ T8489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.446920][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.470099][ T3124] Bluetooth: hci2: command 0x041b tx timeout [ 57.475417][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.489282][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.497111][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.506374][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.515721][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.525008][ T3187] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.532233][ T3187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.541829][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.550445][ T3187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.568388][ T8489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.580857][ T8489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.616831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.626992][ T8489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.706876][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.720335][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.730266][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.738183][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.746542][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.757660][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.767029][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.776700][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.787137][ T9542] Bluetooth: hci3: command 0x041b tx timeout [ 57.802608][ T8487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.820442][ T8487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.846783][ T8481] device veth0_vlan entered promiscuous mode [ 57.875545][ T8487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.885368][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.904533][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.913741][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.924421][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.935112][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.945886][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.949175][ T9542] Bluetooth: hci4: command 0x041b tx timeout [ 57.955421][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.000914][ T8487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.017005][ T8481] device veth1_vlan entered promiscuous mode [ 58.026194][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.041772][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.056122][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.066824][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.079593][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.090257][ T8502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.115557][ T8483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.135777][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.165338][ T8502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.176539][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.185853][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.197866][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.207882][ T9542] Bluetooth: hci5: command 0x041b tx timeout [ 58.240921][ T8502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.262242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.272913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.292323][ T8481] device veth0_macvtap entered promiscuous mode [ 58.321558][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.331390][ T8502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.348233][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.359945][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.367386][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.379588][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.390222][ T8481] device veth1_macvtap entered promiscuous mode [ 58.403560][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.455591][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.466580][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.476335][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.486946][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.495381][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.515427][ T8483] device veth0_vlan entered promiscuous mode [ 58.531677][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.547885][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.561768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.575808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.585440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.595384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.603639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.613421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.623256][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.631657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.654778][ T8483] device veth1_vlan entered promiscuous mode [ 58.692060][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.707202][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.721156][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.745609][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.753877][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.763845][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.774155][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.783511][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.790705][ T3124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.798746][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.808162][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.817093][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.824271][ T3124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.832330][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.841221][ T3124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.863410][ T8481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.876605][ T8481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886160][ T8481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.895435][ T8481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.920291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.928296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.938301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.950984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.960168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.968483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.977588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.986866][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.994018][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.002664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.010691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.027600][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.057183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.065203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.073786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.083620][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.092591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.101849][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.111607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.120445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.129365][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.136821][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.150262][ T8489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.169544][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 59.193462][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.258331][ T9542] ================================================================================ [ 59.267849][ T9542] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2021:28 [ 59.277119][ T9542] member access within address 00000000bb7369d3 with insufficient space [ 59.286579][ T9542] for an object of type 'struct sk_buff' [ 59.292322][ T9542] CPU: 1 PID: 9542 Comm: kworker/1:3 Not tainted 5.10.0-syzkaller #0 [ 59.300385][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.310453][ T9542] Workqueue: ipv6_addrconf addrconf_dad_work [ 59.316677][ T9542] Call Trace: [ 59.319987][ T9542] dump_stack+0x137/0x1be [ 59.324295][ T9542] ? wake_up_klogd+0xb2/0xf0 [ 59.328880][ T9542] ubsan_type_mismatch_common+0x1e2/0x390 [ 59.334579][ T9542] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 59.340539][ T9542] wg_xmit+0x45d/0xdf0 [ 59.344602][ T9542] netdev_start_xmit+0x7b/0x140 [ 59.349434][ T9542] dev_hard_start_xmit+0x182/0x2e0 [ 59.354543][ T9542] __dev_queue_xmit+0x1229/0x1e60 [ 59.359564][ T9542] ip6_finish_output2+0xe8d/0x11e0 [ 59.365612][ T9542] ? __ip6_finish_output+0x26b/0x390 [ 59.370878][ T9542] ndisc_send_skb+0x85b/0xc70 [ 59.375550][ T9542] addrconf_dad_completed+0x5ef/0x990 [ 59.380929][ T9542] addrconf_dad_work+0xb92/0x1480 [ 59.385938][ T9542] ? rcu_read_lock_sched_held+0x62/0x100 [ 59.391551][ T9542] process_one_work+0x471/0x830 [ 59.396410][ T9542] worker_thread+0x757/0xb10 [ 59.401010][ T9542] ? __kthread_parkme+0x148/0x190 [ 59.406133][ T9542] ? pr_cont_work+0x100/0x100 [ 59.410796][ T9542] kthread+0x39a/0x3c0 [ 59.414850][ T9542] ? pr_cont_work+0x100/0x100 [ 59.419504][ T9542] ? __list_add+0xc0/0xc0 [ 59.423842][ T9542] ret_from_fork+0x1f/0x30 [ 59.428390][ T9542] ================================================================================ [ 59.437785][ T9542] Kernel panic - not syncing: panic_on_warn set ... [ 59.444388][ T9542] CPU: 1 PID: 9542 Comm: kworker/1:3 Not tainted 5.10.0-syzkaller #0 [ 59.452566][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.462628][ T9542] Workqueue: ipv6_addrconf addrconf_dad_work [ 59.468588][ T9542] Call Trace: [ 59.471866][ T9542] dump_stack+0x137/0x1be [ 59.476176][ T9542] ? panic+0x226/0x830 [ 59.480243][ T9542] panic+0x2e3/0x830 [ 59.484120][ T9542] ? ubsan_type_mismatch_common+0x206/0x390 [ 59.489995][ T9542] ubsan_type_mismatch_common+0x388/0x390 [ 59.495707][ T9542] __ubsan_handle_type_mismatch_v1+0x41/0x50 [ 59.501682][ T9542] wg_xmit+0x45d/0xdf0 [ 59.505748][ T9542] netdev_start_xmit+0x7b/0x140 [ 59.510590][ T9542] dev_hard_start_xmit+0x182/0x2e0 [ 59.515860][ T9542] __dev_queue_xmit+0x1229/0x1e60 [ 59.520894][ T9542] ip6_finish_output2+0xe8d/0x11e0 [ 59.525988][ T9542] ? __ip6_finish_output+0x26b/0x390 [ 59.531289][ T9542] ndisc_send_skb+0x85b/0xc70 [ 59.535961][ T9542] addrconf_dad_completed+0x5ef/0x990 [ 59.541340][ T9542] addrconf_dad_work+0xb92/0x1480 [ 59.546348][ T9542] ? rcu_read_lock_sched_held+0x62/0x100 [ 59.551961][ T9542] process_one_work+0x471/0x830 [ 59.556800][ T9542] worker_thread+0x757/0xb10 [ 59.561415][ T9542] ? __kthread_parkme+0x148/0x190 [ 59.566447][ T9542] ? pr_cont_work+0x100/0x100 [ 59.571112][ T9542] kthread+0x39a/0x3c0 [ 59.575164][ T9542] ? pr_cont_work+0x100/0x100 [ 59.579818][ T9542] ? __list_add+0xc0/0xc0 [ 59.584138][ T9542] ret_from_fork+0x1f/0x30 [ 59.589471][ T9542] Kernel Offset: disabled [ 59.594207][ T9542] Rebooting in 86400 seconds..