no interfaces have a carrier [ 35.258577][ T4871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.268639][ T4871] eql: remember to turn off Van-Jacobson compression on your slave devices [ 35.615190][ T4959] ssh-keygen (4959) used greatest stack depth: 22720 bytes left Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.161' (ECDSA) to the list of known hosts. 2022/11/22 09:34:59 fuzzer started 2022/11/22 09:35:00 connecting to host at 10.128.0.169:43709 2022/11/22 09:35:00 checking machine... 2022/11/22 09:35:00 checking revisions... 2022/11/22 09:35:00 testing simple program... syzkaller login: [ 59.285132][ T5296] cgroup: Unknown subsys name 'net' [ 59.386419][ T5296] cgroup: Unknown subsys name 'rlimit' [ 59.613652][ T5300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.621849][ T5300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.629802][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.638315][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.646380][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.653870][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.777611][ T5298] chnl_net:caif_netlink_parms(): no params data found [ 59.824313][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.832423][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.840944][ T5298] device bridge_slave_0 entered promiscuous mode [ 59.851267][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.858583][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.866899][ T5298] device bridge_slave_1 entered promiscuous mode [ 59.888726][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.900606][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.925094][ T5298] team0: Port device team_slave_0 added [ 59.933511][ T5298] team0: Port device team_slave_1 added [ 59.951207][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.958546][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.984953][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.998293][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.005730][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.033439][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.048061][ T154] general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN [ 60.060142][ T154] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 60.068716][ T154] CPU: 0 PID: 154 Comm: kworker/0:2 Not tainted 6.1.0-rc6-next-20221122-syzkaller #0 [ 60.078341][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.088401][ T154] Workqueue: ipv6_addrconf addrconf_dad_work [ 60.094537][ T154] RIP: 0010:xfrm_policy_lookup_bytype.cold+0x1c/0x54 [ 60.101325][ T154] Code: c0 55 28 8e e8 ec 8d 37 fa e9 6a f3 7b fe e8 32 f2 79 f7 49 8d bf cc 00 00 00 b8 ff ff 37 00 48 89 fa 48 c1 e0 2a 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1c 41 [ 60.121019][ T154] RSP: 0018:ffffc90002e3f1e0 EFLAGS: 00010203 [ 60.127087][ T154] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 60.135099][ T154] RDX: 0000000000000019 RSI: ffffffff8a06cc4e RDI: 00000000000000cc [ 60.143194][ T154] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 60.151169][ T154] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000000 [ 60.159144][ T154] R13: ffff88801e178000 R14: ffffed1003c2f2ff R15: 0000000000000000 [ 60.167129][ T154] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 60.176243][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.182924][ T154] CR2: 00007ff7e6ad9300 CR3: 0000000071337000 CR4: 00000000003506f0 [ 60.190902][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.198877][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.206944][ T154] Call Trace: [ 60.210307][ T154] [ 60.213247][ T154] ? mark_lock.part.0+0xee/0x1910 [ 60.218470][ T154] ? xfrm_policy_match+0x2e0/0x2e0 [ 60.223595][ T154] ? lock_chain_count+0x20/0x20 [ 60.228473][ T154] ? lock_chain_count+0x20/0x20 [ 60.233433][ T154] xfrm_lookup_with_ifid+0x39b/0x20f0 [ 60.238817][ T154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.244735][ T154] ? xfrm_expand_policies+0x680/0x680 [ 60.250114][ T154] ? decode_session6+0x677/0x1880 [ 60.255158][ T154] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 60.260984][ T154] ? security_xfrm_decode_session+0x84/0xb0 [ 60.266891][ T154] xfrmi_xmit+0x3c7/0x1b90 [ 60.271328][ T154] ? xfrmi_exit_batch_net+0x5c0/0x5c0 [ 60.276716][ T154] dev_hard_start_xmit+0x1c2/0x990 [ 60.281855][ T154] __dev_queue_xmit+0x2cdf/0x3ba0 [ 60.286907][ T154] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 60.292207][ T154] ? find_held_lock+0x2d/0x110 [ 60.296986][ T154] ? ip6_finish_output2+0x56c/0x1530 [ 60.302289][ T154] ? mark_held_locks+0x9f/0xe0 [ 60.307068][ T154] ? ___neigh_create+0x188e/0x2a20 [ 60.312191][ T154] ? neigh_connected_output+0x41e/0x520 [ 60.317742][ T154] neigh_connected_output+0x3c4/0x520 [ 60.323126][ T154] ip6_finish_output2+0x56c/0x1530 [ 60.328260][ T154] ip6_finish_output+0x694/0x1170 [ 60.333303][ T154] ip6_output+0x1f1/0x540 [ 60.337651][ T154] ndisc_send_skb+0xa63/0x1740 [ 60.342427][ T154] ? ndisc_ifinfo_sysctl_change+0x600/0x600 [ 60.348335][ T154] ? ndisc_net_init+0x220/0x220 [ 60.353202][ T154] ? skb_set_owner_w+0x26d/0x420 [ 60.358150][ T154] ndisc_send_rs+0x132/0x6f0 [ 60.362758][ T154] addrconf_dad_completed+0x37a/0xda0 [ 60.368144][ T154] ? addrconf_rs_timer+0x870/0x870 [ 60.373265][ T154] ? __local_bh_enable_ip+0xa4/0x130 [ 60.378574][ T154] addrconf_dad_work+0x820/0x12d0 [ 60.383611][ T154] ? addrconf_dad_completed+0xda0/0xda0 [ 60.389170][ T154] process_one_work+0x9bf/0x1710 [ 60.394122][ T154] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 60.399505][ T154] ? rwlock_bug.part.0+0x90/0x90 [ 60.404448][ T154] ? _raw_spin_lock_irq+0x45/0x50 [ 60.409497][ T154] worker_thread+0x669/0x1090 [ 60.414186][ T154] ? __kthread_parkme+0x163/0x220 [ 60.419227][ T154] ? process_one_work+0x1710/0x1710 [ 60.424438][ T154] kthread+0x2e8/0x3a0 [ 60.428509][ T154] ? kthread_complete_and_exit+0x40/0x40 [ 60.434145][ T154] ret_from_fork+0x1f/0x30 [ 60.438583][ T154] [ 60.441721][ T154] Modules linked in: [ 60.445666][ T154] ---[ end trace 0000000000000000 ]--- [ 60.451166][ T154] RIP: 0010:xfrm_policy_lookup_bytype.cold+0x1c/0x54 [ 60.457957][ T154] Code: c0 55 28 8e e8 ec 8d 37 fa e9 6a f3 7b fe e8 32 f2 79 f7 49 8d bf cc 00 00 00 b8 ff ff 37 00 48 89 fa 48 c1 e0 2a 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1c 41 [ 60.479080][ T154] RSP: 0018:ffffc90002e3f1e0 EFLAGS: 00010203 [ 60.485264][ T154] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 60.493262][ T154] RDX: 0000000000000019 RSI: ffffffff8a06cc4e RDI: 00000000000000cc [ 60.501354][ T154] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 60.509344][ T154] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000000 [ 60.517317][ T154] R13: ffff88801e178000 R14: ffffed1003c2f2ff R15: 0000000000000000 [ 60.525302][ T154] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 60.534243][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.540846][ T154] CR2: 00007ff7e6ad9300 CR3: 0000000071337000 CR4: 00000000003506f0 [ 60.548913][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.557085][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.565102][ T154] Kernel panic - not syncing: Fatal exception in interrupt [ 60.572785][ T154] Kernel Offset: disabled [ 60.577105][ T154] Rebooting in 86400 seconds..