[ 15.380292][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.385750][ T3892] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.428836][ T39] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.435496][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.173' (ECDSA) to the list of known hosts. syzkaller login: [ 36.294502][ T4218] chnl_net:caif_netlink_parms(): no params data found [ 36.325956][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.327597][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.330056][ T4218] device bridge_slave_0 entered promiscuous mode [ 36.333604][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.335212][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.337358][ T4218] device bridge_slave_1 entered promiscuous mode [ 36.350808][ T4218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.354317][ T4218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.368186][ T4218] team0: Port device team_slave_0 added [ 36.370900][ T4218] team0: Port device team_slave_1 added [ 36.382176][ T4218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.383697][ T4218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.389537][ T4218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.393448][ T4218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.394923][ T4218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.400536][ T4218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.459510][ T4218] device hsr_slave_0 entered promiscuous mode [ 36.497924][ T4218] device hsr_slave_1 entered promiscuous mode [ 36.621901][ T4218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.670171][ T4218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.710630][ T4218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.759632][ T4218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.813493][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.815148][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.817084][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.818771][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.852057][ T4218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.859982][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.863231][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.865546][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.870137][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 36.876727][ T4218] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.882231][ T4014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.884333][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.885852][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.890300][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.892372][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.893869][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.909132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.911830][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.916855][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.920582][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.925604][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.930206][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.942157][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.943933][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.950613][ T4218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.961389][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.972687][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.974943][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.976929][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.982051][ T4218] device veth0_vlan entered promiscuous mode [ 36.987158][ T4218] device veth1_vlan entered promiscuous mode [ 37.000678][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.002806][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.005033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.009905][ T4218] device veth0_macvtap entered promiscuous mode [ 37.014334][ T4218] device veth1_macvtap entered promiscuous mode [ 37.024733][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.026440][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.029486][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.033817][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.036175][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.041173][ T4218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.043077][ T4218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.045015][ T4218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.046839][ T4218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 37.072209][ T4218] ------------[ cut here ]------------ [ 37.073426][ T4218] WARNING: CPU: 0 PID: 4218 at net/core/dev.c:3284 skb_checksum_help+0x348/0x4f8 [ 37.075458][ T4218] Modules linked in: [ 37.076365][ T4218] CPU: 0 PID: 4218 Comm: syz-executor210 Not tainted 6.1.32-syzkaller #0 [ 37.078173][ T4218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 37.080471][ T4218] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.082269][ T4218] pc : skb_checksum_help+0x348/0x4f8 [ 37.083376][ T4218] lr : skb_checksum_help+0x234/0x4f8 [ 37.084496][ T4218] sp : ffff80001daf6ae0 [ 37.085393][ T4218] x29: ffff80001daf6b00 x28: 0000000000000586 x27: 000000000000061f [ 37.087370][ T4218] x26: dfff800000000000 x25: 0000000000000621 x24: 0000000000005653 [ 37.089123][ T4218] x23: 0000000000000586 x22: ffff0000dfd830d8 x21: 0000000000000519 [ 37.090861][ T4218] x20: ffff0000dfd83000 x19: ffff800017ed6000 x18: 0000000000000140 [ 37.092690][ T4218] x17: ffff800010b96db4 x16: ffff80000825f9d8 x15: 0000000000000000 [ 37.094433][ T4218] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 37.096189][ T4218] x11: ff808000103f7580 x10: 0000000000000000 x9 : ffff0000d566b780 [ 37.097995][ T4218] x8 : ffff8000103f7580 x7 : ffff8000103aa6a0 x6 : ffff8000103aa658 [ 37.099736][ T4218] x5 : ffff80001daf6a70 x4 : ffff80001daf6a60 x3 : 000000000000006d [ 37.101534][ T4218] x2 : 00000000000004fa x1 : 0000000000000519 x0 : 0000000000000621 [ 37.103341][ T4218] Call trace: [ 37.104078][ T4218] skb_checksum_help+0x348/0x4f8 [ 37.105202][ T4218] ip_do_fragment+0x1bc/0x1b14 [ 37.106232][ T4218] ip_fragment+0x11c/0x308 [ 37.107201][ T4218] __ip_finish_output+0x280/0x458 [ 37.108258][ T4218] ip_finish_output+0x40/0x268 [ 37.109288][ T4218] ip_output+0x330/0x49c [ 37.110196][ T4218] ip_local_out+0x120/0x160 [ 37.111251][ T4218] iptunnel_xmit+0x40c/0x88c [ 37.112242][ T4218] ip_tunnel_xmit+0x19ac/0x28e8 [ 37.113333][ T4218] ipgre_xmit+0x5d8/0x8c8 [ 37.114317][ T4218] dev_hard_start_xmit+0x25c/0x9a4 [ 37.115505][ T4218] __dev_queue_xmit+0x186c/0x38d8 [ 37.116594][ T4218] dev_queue_xmit+0x24/0x34 [ 37.117547][ T4218] packet_sendmsg+0x36f0/0x4ce0 [ 37.118635][ T4218] ____sys_sendmsg+0x558/0x844 [ 37.119670][ T4218] __sys_sendmsg+0x26c/0x33c [ 37.120721][ T4218] __arm64_sys_sendmsg+0x80/0x94 [ 37.121901][ T4218] invoke_syscall+0x98/0x2c0 [ 37.122914][ T4218] el0_svc_common+0x138/0x258 [ 37.123901][ T4218] do_el0_svc+0x64/0x218 [ 37.124797][ T4218] el0_svc+0x58/0x168 [ 37.125660][ T4218] el0t_64_sync_handler+0x84/0xf0 [ 37.126809][ T4218] el0t_64_sync+0x18c/0x190 [ 37.127773][ T4218] irq event stamp: 135343 [ 37.128713][ T4218] hardirqs last enabled at (135342): [] kasan_quarantine_put+0xdc/0x204 [ 37.130905][ T4218] hardirqs last disabled at (135343): [] el1_dbg+0x24/0x80 [ 37.132929][ T4218] softirqs last enabled at (134972): [] release_sock+0x178/0x1cc [ 37.135085][ T4218] softirqs last disabled at (135008): [] local_bh_disable+0x10/0x34 [ 37.137171][ T4218] ---[ end trace 0000000000000000 ]--- [ 37.138548][ T4218] skb len=1414 headroom=168 headlen=1305 tailroom=0 [ 37.138548][ T4218] mac=(168,0) net=(168,20) trans=188 [ 37.138548][ T4218] shinfo(txflags=0 nr_frags=1 gso(size=0 type=0 segs=0)) [ 37.138548][ T4218] csum(0x60000c7 ip_summed=3 complete_sw=0 valid=0 level=0) [ 37.138548][ T4218] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 37.145585][ T4218] dev name=veth1_to_team feat=0x000061164fdd19e9 [ 37.146940][ T4218] sk family=17 type=3 proto=0 [ 37.148013][ T4218] skb linear: 00000000: 45 02 05 86 1f 1e 00 00 0f 2f f1 b3 ac 14 14 20 [ 37.149867][ T4218] skb linear: 00000010: ef 06 e6 3a 00 00 08 00 bd 0f 05 6e 10 89 0c 52 [ 37.151762][ T4218] skb linear: 00000020: 0f 06 2c 69 fd fe 4b 88 94 30 5a f7 9f 6b 4c 11 [ 37.153562][ T4218] skb linear: 00000030: 95 10 da 9f e3 c0 63 76 c3 30 76 a1 67 d5 02 61 [ 37.155394][ T4218] skb linear: 00000040: a6 7a d2 9b 30 8c de 52 1a a0 c3 85 c7 3f ed 0c [ 37.157255][ T4218] skb linear: 00000050: 3a c8 16 89 86 6e 16 bd bd 00 00 00 d5 8f 00 00 [ 37.159171][ T4218] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.160981][ T4218] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.162823][ T4218] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.164784][ T4218] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.166555][ T4218] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.168479][ T4218] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.170249][ T4218] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.171989][ T4218] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.173878][ T4218] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.175758][ T4218] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.177724][ T4218] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.179561][ T4218] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.181541][ T4218] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00