[ 15.373298][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.382773][ T3892] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.425736][ T220] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.432240][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. syzkaller login: [ 42.691273][ T4217] chnl_net:caif_netlink_parms(): no params data found [ 42.723483][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.725262][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.727577][ T4217] device bridge_slave_0 entered promiscuous mode [ 42.731309][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.732902][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.735274][ T4217] device bridge_slave_1 entered promiscuous mode [ 42.748562][ T4217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.752090][ T4217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.765854][ T4217] team0: Port device team_slave_0 added [ 42.768594][ T4217] team0: Port device team_slave_1 added [ 42.781181][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.782670][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.788420][ T4217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.792473][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.793947][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.800721][ T4217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.876060][ T4217] device hsr_slave_0 entered promiscuous mode [ 42.914267][ T4217] device hsr_slave_1 entered promiscuous mode [ 43.036284][ T4217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.076284][ T4217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.115900][ T4217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.155868][ T4217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.221337][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.222956][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.224983][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.226548][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.261492][ T4217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.268532][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.271846][ T4224] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.276595][ T4224] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.279013][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 43.285914][ T4217] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.291197][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.293231][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.294788][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.300147][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.302151][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.303671][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.315854][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.318108][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.320608][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.326074][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.332630][ T4217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.335960][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.338730][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.348792][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.350361][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.358336][ T4217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.369497][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.382204][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.384487][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.386428][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.389689][ T4217] device veth0_vlan entered promiscuous mode [ 43.396230][ T4217] device veth1_vlan entered promiscuous mode [ 43.408383][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.410350][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.412577][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.418132][ T4217] device veth0_macvtap entered promiscuous mode [ 43.421808][ T4217] device veth1_macvtap entered promiscuous mode [ 43.431009][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.432704][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.435750][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.440177][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.442646][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.447233][ T4217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.449067][ T4217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.450909][ T4217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.452874][ T4217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 43.481516][ T4217] ------------[ cut here ]------------ [ 43.482769][ T4217] WARNING: CPU: 0 PID: 4217 at net/core/dev.c:3284 skb_checksum_help+0x348/0x4f8 [ 43.484769][ T4217] Modules linked in: [ 43.485674][ T4217] CPU: 0 PID: 4217 Comm: syz-executor417 Not tainted 6.1.32-syzkaller #0 [ 43.487479][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 43.489796][ T4217] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 43.491521][ T4217] pc : skb_checksum_help+0x348/0x4f8 [ 43.492688][ T4217] lr : skb_checksum_help+0x234/0x4f8 [ 43.493793][ T4217] sp : ffff80001d9f6ae0 [ 43.494632][ T4217] x29: ffff80001d9f6b00 x28: 0000000000000586 x27: 000000000000061f [ 43.496309][ T4217] x26: dfff800000000000 x25: 0000000000000621 x24: 0000000000005653 [ 43.497981][ T4217] x23: 0000000000000586 x22: ffff0000d3e3c718 x21: 0000000000000519 [ 43.499751][ T4217] x20: ffff0000d3e3c640 x19: ffff800017ed6000 x18: 0000000000000278 [ 43.501441][ T4217] x17: ffff800010b96db4 x16: ffff80000825f9d8 x15: 0000000000000000 [ 43.503012][ T4217] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 43.504669][ T4217] x11: ff808000103f7580 x10: 0000000000000000 x9 : ffff0000d8741bc0 [ 43.506389][ T4217] x8 : ffff8000103f7580 x7 : ffff8000103aa6a0 x6 : ffff8000103aa658 [ 43.508069][ T4217] x5 : ffff80001d9f6a70 x4 : ffff80001d9f6a60 x3 : 000000000000006d [ 43.509866][ T4217] x2 : 00000000000004fa x1 : 0000000000000519 x0 : 0000000000000621 [ 43.511569][ T4217] Call trace: [ 43.512270][ T4217] skb_checksum_help+0x348/0x4f8 [ 43.513384][ T4217] ip_do_fragment+0x1bc/0x1b14 [ 43.514365][ T4217] ip_fragment+0x11c/0x308 [ 43.515292][ T4217] __ip_finish_output+0x280/0x458 [ 43.516369][ T4217] ip_finish_output+0x40/0x268 [ 43.517472][ T4217] ip_output+0x330/0x49c [ 43.518395][ T4217] ip_local_out+0x120/0x160 [ 43.519353][ T4217] iptunnel_xmit+0x40c/0x88c [ 43.520394][ T4217] ip_tunnel_xmit+0x19ac/0x28e8 [ 43.521386][ T4217] ipgre_xmit+0x5d8/0x8c8 [ 43.522316][ T4217] dev_hard_start_xmit+0x25c/0x9a4 [ 43.523370][ T4217] __dev_queue_xmit+0x186c/0x38d8 [ 43.524449][ T4217] dev_queue_xmit+0x24/0x34 [ 43.525428][ T4217] packet_sendmsg+0x36f0/0x4ce0 [ 43.526499][ T4217] ____sys_sendmsg+0x558/0x844 [ 43.527483][ T4217] __sys_sendmsg+0x26c/0x33c [ 43.528662][ T4217] __arm64_sys_sendmsg+0x80/0x94 [ 43.529670][ T4217] invoke_syscall+0x98/0x2c0 [ 43.530617][ T4217] el0_svc_common+0x138/0x258 [ 43.531669][ T4217] do_el0_svc+0x64/0x218 [ 43.532631][ T4217] el0_svc+0x58/0x168 [ 43.533482][ T4217] el0t_64_sync_handler+0x84/0xf0 [ 43.534596][ T4217] el0t_64_sync+0x18c/0x190 [ 43.535528][ T4217] irq event stamp: 135975 [ 43.536400][ T4217] hardirqs last enabled at (135974): [] kasan_quarantine_put+0xdc/0x204 [ 43.538562][ T4217] hardirqs last disabled at (135975): [] el1_dbg+0x24/0x80 [ 43.540421][ T4217] softirqs last enabled at (135600): [] release_sock+0x178/0x1cc [ 43.542500][ T4217] softirqs last disabled at (135636): [] local_bh_disable+0x10/0x34 [ 43.544683][ T4217] ---[ end trace 0000000000000000 ]--- [ 43.545913][ T4217] skb len=1414 headroom=168 headlen=1305 tailroom=0 [ 43.545913][ T4217] mac=(168,0) net=(168,20) trans=188 [ 43.545913][ T4217] shinfo(txflags=0 nr_frags=1 gso(size=0 type=0 segs=0)) [ 43.545913][ T4217] csum(0x60000c7 ip_summed=3 complete_sw=0 valid=0 level=0) [ 43.545913][ T4217] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 43.552701][ T4217] dev name=veth1_to_team feat=0x000061164fdd19e9 [ 43.554002][ T4217] sk family=17 type=3 proto=0 [ 43.554988][ T4217] skb linear: 00000000: 45 02 05 86 03 24 00 00 0f 2f 0d ae ac 14 14 20 [ 43.556684][ T4217] skb linear: 00000010: ef 06 e6 3a 00 00 08 00 bd 0f 05 6e 10 89 0c 52 [ 43.558392][ T4217] skb linear: 00000020: 0f 06 2c 69 fd fe 4b 88 94 30 5a f7 9f 6b 4c 11 [ 43.560203][ T4217] skb linear: 00000030: 95 10 da 9f e3 c0 63 76 c3 30 76 a1 67 d5 02 61 [ 43.562005][ T4217] skb linear: 00000040: a6 7a d2 9b 30 8c de 52 1a a0 c3 85 c7 3f ed 0c [ 43.563743][ T4217] skb linear: 00000050: 3a c8 16 89 86 6e 16 bd bd 00 00 00 d5 8f 00 00 [ 43.565533][ T4217] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.567254][ T4217] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.569069][ T4217] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.570779][ T4217] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.572571][ T4217] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.574397][ T4217] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.576155][ T4217] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.577898][ T4217] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.579605][ T4217] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.581362][ T4217] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.583143][ T4217] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.585036][ T4217] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.586745][ T4217] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00