[ 9.670134][ T2659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.672608][ T2659] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.702657][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.707114][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.15.202' (ECDSA) to the list of known hosts. syzkaller login: [ 32.414872][ T3080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.417025][ T3080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.418862][ T3080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.420876][ T3080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.422686][ T3080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.424532][ T3080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.426589][ T3075] Bluetooth: hci0: HCI_REQ-0x0c1a [ 32.460501][ T3075] chnl_net:caif_netlink_parms(): no params data found [ 32.477815][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.479403][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.481240][ T3075] device bridge_slave_0 entered promiscuous mode [ 32.483995][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.485573][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.487402][ T3075] device bridge_slave_1 entered promiscuous mode [ 32.494720][ T3075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.497433][ T3075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.505033][ T3075] team0: Port device team_slave_0 added [ 32.507165][ T3075] team0: Port device team_slave_1 added [ 32.513301][ T3075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.515034][ T3075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.520592][ T3075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.524312][ T3075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.525811][ T3075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.531345][ T3075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.614457][ T3075] device hsr_slave_0 entered promiscuous mode [ 32.673623][ T3075] device hsr_slave_1 entered promiscuous mode [ 32.753905][ T3075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.814574][ T3075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.864405][ T3075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.904522][ T3075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.951554][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.953167][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.954995][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.956586][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.973236][ T3075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.978912][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.981512][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.984642][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.986748][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 32.990922][ T3075] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.995042][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.997092][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.998625][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.004610][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.006693][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.008167][ T3087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.012201][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.016433][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.018560][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.024074][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.025978][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.028295][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.035116][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.036703][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.040942][ T3075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.049437][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.057486][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.059542][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.061385][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.065392][ T3075] device veth0_vlan entered promiscuous mode [ 33.068714][ T3075] device veth1_vlan entered promiscuous mode [ 33.076052][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.078046][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.080037][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.083114][ T3075] device veth0_macvtap entered promiscuous mode [ 33.086861][ T3075] device veth1_macvtap entered promiscuous mode [ 33.092640][ T3075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.094517][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.097257][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.100425][ T3075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.102994][ T3075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.106186][ T3075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.108029][ T3075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.109858][ T3075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.112557][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 33.140676][ T436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.142642][ T436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.146464][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.156264][ T436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.158049][ T436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.160112][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.173948][ C1] Unable to handle kernel paging request at virtual address ffff0003550e4900 [ 33.175974][ C1] Mem abort info: [ 33.176865][ C1] ESR = 0x0000000096000005 [ 33.177991][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 33.179408][ C1] SET = 0, FnV = 0 [ 33.180209][ C1] EA = 0, S1PTW = 0 [ 33.181044][ C1] FSC = 0x05: level 1 translation fault [ 33.182406][ C1] Data abort info: [ 33.183211][ C1] ISV = 0, ISS = 0x00000005 [ 33.184287][ C1] CM = 0, WnR = 0 [ 33.185103][ C1] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c5508000 [ 33.186748][ C1] [ffff0003550e4900] pgd=180000023fff8003, p4d=180000023fff8003, pud=0000000000000000 [ 33.188910][ C1] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 33.190411][ C1] Modules linked in: [ 33.191288][ C1] CPU: 1 PID: 3088 Comm: kworker/1:3 Not tainted 6.1.0-rc5-syzkaller-32269-g9500fc6e9e60 #0 [ 33.193598][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.195876][ C1] Workqueue: mld mld_ifc_work [ 33.196906][ C1] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 33.198533][ C1] pc : rhltable_lookup+0xd4/0x398 [ 33.199587][ C1] lr : rhltable_lookup+0xc8/0x398 [ 33.200605][ C1] sp : ffff80000800bcb0 [ 33.201439][ C1] x29: ffff80000800bcd0 x28: ffff80000d98f000 x27: 0000000000000000 [ 33.203073][ C1] x26: 0000000000000080 x25: 0000000000000000 x24: ffff0003550e4900 [ 33.204757][ C1] x23: ffff80000d98f000 x22: ffff0003550e4901 x21: ffff0000cbf1a200 [ 33.206369][ C1] x20: ffff0000cdf897b0 x19: ffff0000cdc8003a x18: 00000000000000c0 [ 33.208073][ C1] x17: ffff80000ddda198 x16: 0000000000000101 x15: 0000000000000100 [ 33.209868][ C1] x14: 0000000000000000 x13: 000000000000000c x12: ffff80000d690450 [ 33.211714][ C1] x11: ff8080000bd03d04 x10: 0000000000000000 x9 : ffff80000bd03d04 [ 33.213495][ C1] x8 : ffff0003550e4880 x7 : ffff8000082a7bc0 x6 : 0000000000000000 [ 33.215473][ C1] x5 : 0000000000000020 x4 : ffff80000800baf0 x3 : 0000000000000000 [ 33.217340][ C1] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 33.219283][ C1] Call trace: [ 33.220086][ C1] rhltable_lookup+0xd4/0x398 [ 33.221176][ C1] sta_info_hash_lookup+0x5c/0x88 [ 33.222294][ C1] ieee80211_rx_list+0x7c0/0xc44 [ 33.223406][ C1] ieee80211_rx_napi+0xd4/0x200 [ 33.224465][ C1] ieee80211_tasklet_handler+0xcc/0x110 [ 33.225741][ C1] tasklet_action_common+0x1d4/0x248 [ 33.226987][ C1] tasklet_action+0x30/0x3c [ 33.228021][ C1] _stext+0x168/0x37c [ 33.228986][ C1] ____do_softirq+0x14/0x20 [ 33.229996][ C1] call_on_irq_stack+0x2c/0x54 [ 33.231150][ C1] do_softirq_own_stack+0x20/0x2c [ 33.232277][ C1] do_softirq+0xac/0x108 [ 33.233220][ C1] __local_bh_enable_ip+0x18c/0x1a4 [ 33.234441][ C1] local_bh_enable+0x28/0x34 [ 33.235524][ C1] ip6_finish_output2+0xa1c/0xbec [ 33.236662][ C1] ip6_finish_output+0x448/0x4c4 [ 33.237818][ C1] ip6_output+0x180/0x2dc [ 33.238902][ C1] mld_sendpack+0x514/0x924 [ 33.239929][ C1] mld_send_cr+0x4e8/0x5a8 [ 33.240915][ C1] mld_ifc_work+0x38/0x290 [ 33.241947][ C1] process_one_work+0x2d8/0x504 [ 33.243043][ C1] worker_thread+0x340/0x610 [ 33.244141][ C1] kthread+0x12c/0x158 [ 33.245084][ C1] ret_from_fork+0x10/0x20 [ 33.246084][ C1] Code: 97168d0a 8b384ea8 91020118 b2400316 (f940031a) [ 33.247777][ C1] ---[ end trace 0000000000000000 ]--- [ 33.504191][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 33.505912][ C1] SMP: stopping secondary CPUs [ 33.506960][ C1] Kernel Offset: disabled [ 33.507867][ C1] CPU features: 0x00000,040e0108,4c017203 [ 33.509104][ C1] Memory Limit: none [ 33.765947][ C1] Rebooting in 86400 seconds..