Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. syzkaller login: [ 36.328753][ T4221] chnl_net:caif_netlink_parms(): no params data found [ 36.359215][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.361254][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.363785][ T4221] device bridge_slave_0 entered promiscuous mode [ 36.368012][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.369986][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.372381][ T4221] device bridge_slave_1 entered promiscuous mode [ 36.386252][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.390287][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.403139][ T4221] team0: Port device team_slave_0 added [ 36.406502][ T4221] team0: Port device team_slave_1 added [ 36.418002][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.419873][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.426704][ T4221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.431691][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.433576][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.440991][ T4221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.508708][ T4221] device hsr_slave_0 entered promiscuous mode [ 36.547174][ T4221] device hsr_slave_1 entered promiscuous mode [ 36.648938][ T4221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.709418][ T4221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.759620][ T4221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.809350][ T4221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.873008][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.875106][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.877458][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.879420][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.913626][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.921174][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.924941][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.928157][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.930941][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 36.937624][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.945004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.948246][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.950268][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.958650][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.961215][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.963100][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.972307][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.975058][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.981388][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.986648][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.991643][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.996148][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.008309][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.010521][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.016688][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.029050][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.041146][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.044059][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.046502][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.051690][ T4221] device veth0_vlan entered promiscuous mode [ 37.058188][ T4221] device veth1_vlan entered promiscuous mode [ 37.072437][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.074914][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.077706][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.082997][ T4221] device veth0_macvtap entered promiscuous mode [ 37.087646][ T4221] device veth1_macvtap entered promiscuous mode [ 37.099154][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.101245][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.104838][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.110937][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.114626][ T4221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.118046][ T4221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.120497][ T4221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.122807][ T4221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.126243][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 37.152134][ T4221] skb len=10601 headroom=168 headlen=104 tailroom=0 [ 37.152134][ T4221] mac=(168,0) net=(168,20) trans=188 [ 37.152134][ T4221] shinfo(txflags=0 nr_frags=4 gso(size=0 type=0 segs=0)) [ 37.152134][ T4221] csum(0x50e05d1 ip_summed=3 complete_sw=0 valid=0 level=0) [ 37.152134][ T4221] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 37.161034][ T4221] dev name=veth1_to_team feat=0x000061164fdd19e9 [ 37.162681][ T4221] skb linear: 00000000: 45 02 29 69 6a 61 00 00 0f 2f 77 cd ac 14 14 20 [ 37.164846][ T4221] skb linear: 00000010: e0 00 00 01 00 00 08 00 bd 0b 29 51 10 83 0c 52 [ 37.167166][ T4221] skb linear: 00000020: 0f 06 a8 79 fd fe 4b 88 94 30 5a f7 9f 6b 4c 11 [ 37.169404][ T4221] skb linear: 00000030: 95 10 01 00 e3 c0 63 76 c3 30 d0 ef 4e f9 fc f4 [ 37.171671][ T4221] skb linear: 00000040: 76 a1 67 d5 02 61 a6 7a 34 a0 a7 d8 4b f8 a4 a6 [ 37.173903][ T4221] skb linear: 00000050: 99 9e 6b ad 8e 3b 20 2f 76 00 00 00 4c 6e 00 00 [ 37.176183][ T4221] skb linear: 00000060: 00 00 00 00 00 00 00 00 [ 37.177958][ T4221] skb frag: 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.180191][ T4221] skb frag: 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.182517][ T4221] skb frag: 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.184739][ T4221] skb frag: 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.186988][ T4221] skb frag: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.189205][ T4221] skb frag: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.191437][ T4221] skb frag: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.193634][ T4221] skb frag: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.195918][ T4221] skb frag: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.198284][ T4221] skb frag: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 [ 37.200550][ T4221] skb frag: 000000a0: 20 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 [ 37.202838][ T4221] skb frag: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.205072][ T4221] skb frag: 000000c0: 00 00 00 00 00 00 00 00 [ 37.206715][ T4221] ------------[ cut here ]------------ [ 37.208186][ T4221] offset (1321) >= skb_headlen() (104) [ 37.210127][ T4221] WARNING: CPU: 0 PID: 4221 at net/core/dev.c:3305 skb_checksum_help+0x55c/0x64c [ 37.212469][ T4221] Modules linked in: [ 37.213477][ T4221] CPU: 0 PID: 4221 Comm: syz-executor844 Not tainted 6.1.80-syzkaller #0 [ 37.215657][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 37.218302][ T4221] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.220455][ T4221] pc : skb_checksum_help+0x55c/0x64c [ 37.221869][ T4221] lr : skb_checksum_help+0x558/0x64c [ 37.223273][ T4221] sp : ffff80001dd76aa0 [ 37.224402][ T4221] x29: ffff80001dd76ac0 x28: 1fffe0001aa3db28 x27: dfff800000000000 [ 37.226534][ T4221] x26: 0000000000002969 x25: 0000000000000068 x24: 0000000000000529 [ 37.228706][ T4221] x23: ffff0000d51ed998 x22: ffff0000d51ed930 x21: ffff0000d51ed8c0 [ 37.230845][ T4221] x20: 00000000ffffffea x19: 0000000000002969 x18: ffff80001dd75e20 [ 37.232974][ T4221] x17: 0000000000000000 x16: ffff800012145f4c x15: 0000000000000000 [ 37.235080][ T4221] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000000001 [ 37.237317][ T4221] x11: 0000000000ff0100 x10: 0000000000000000 x9 : f5e4c15a2a440a00 [ 37.239483][ T4221] x8 : f5e4c15a2a440a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 37.241648][ T4221] x5 : ffff80001dd76398 x4 : ffff800015902a60 x3 : ffff80000aa8b40c [ 37.243852][ T4221] x2 : ffff0001b435fcd0 x1 : 0000000000000200 x0 : 0000000000000000 [ 37.245959][ T4221] Call trace: [ 37.246822][ T4221] skb_checksum_help+0x55c/0x64c [ 37.248136][ T4221] ip_do_fragment+0x1bc/0x1b14 [ 37.249458][ T4221] ip_fragment+0x11c/0x308 [ 37.250624][ T4221] __ip_finish_output+0x280/0x458 [ 37.251938][ T4221] ip_finish_output+0x40/0x268 [ 37.253197][ T4221] ip_mc_output+0x56c/0x780 [ 37.254428][ T4221] ip_local_out+0x120/0x160 [ 37.255608][ T4221] iptunnel_xmit+0x40c/0x8ec [ 37.256859][ T4221] ip_tunnel_xmit+0x19b4/0x28f4 [ 37.258149][ T4221] ipgre_xmit+0x68c/0xa18 [ 37.259320][ T4221] dev_hard_start_xmit+0x25c/0x9a4 [ 37.260668][ T4221] __dev_queue_xmit+0x186c/0x38d8 [ 37.262067][ T4221] dev_queue_xmit+0x24/0x34 [ 37.263276][ T4221] packet_sendmsg+0x36f0/0x4cd8 [ 37.264583][ T4221] ____sys_sendmsg+0x55c/0x848 [ 37.265893][ T4221] __sys_sendmsg+0x26c/0x33c [ 37.267125][ T4221] __arm64_sys_sendmsg+0x80/0x94 [ 37.268477][ T4221] invoke_syscall+0x98/0x2c0 [ 37.269746][ T4221] el0_svc_common+0x138/0x258 [ 37.271025][ T4221] do_el0_svc+0x64/0x218 [ 37.272148][ T4221] el0_svc+0x58/0x168 [ 37.273224][ T4221] el0t_64_sync_handler+0x84/0xf0 [ 37.274561][ T4221] el0t_64_sync+0x18c/0x190 [ 37.275781][ T4221] irq event stamp: 131973 [ 37.276975][ T4221] hardirqs last enabled at (131972): [] __up_console_sem+0xb4/0x100 [ 37.279592][ T4221] hardirqs last disabled at (131973): [] el1_dbg+0x24/0x80 [ 37.281963][ T4221] softirqs last enabled at (131490): [] __do_softirq+0xc1c/0xe38 [ 37.284520][ T4221] softirqs last disabled at (131552): [] local_bh_disable+0x10/0x34 [ 37.287064][ T4221] ---[ end trace 0000000000000000 ]---