DUID 00:04:d5:34:fd:2d:90:3b:7d:1f:5f:ef:10:3f:c1:8d:8b:e5 forked to background, child pid 3213 [ 26.163511][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.172490][ T3214] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. syzkaller login: [ 58.022925][ T3539] chnl_net:caif_netlink_parms(): no params data found [ 58.059880][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.067257][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.075118][ T3539] device bridge_slave_0 entered promiscuous mode [ 58.083567][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.090635][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.098467][ T3539] device bridge_slave_1 entered promiscuous mode [ 58.118624][ T3539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.129201][ T3539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.149987][ T3539] team0: Port device team_slave_0 added [ 58.156982][ T3539] team0: Port device team_slave_1 added [ 58.173487][ T3539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.180413][ T3539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.206519][ T3539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.218465][ T3539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.225458][ T3539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.251366][ T3539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.279038][ T3539] device hsr_slave_0 entered promiscuous mode [ 58.285903][ T3539] device hsr_slave_1 entered promiscuous mode [ 58.363973][ T3539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.373712][ T3539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.383072][ T3539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.391770][ T3539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.410246][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.417400][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.425043][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.432165][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.474552][ T3539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.486843][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.496377][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.505900][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.514152][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 58.526385][ T3539] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.536815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.545286][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.552580][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.564178][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.573234][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.580291][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.603823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.612909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.621615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.629832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.639214][ T3539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.646962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.665178][ T3539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.673036][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.680436][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.705078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.718406][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.726990][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.735183][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.744483][ T3539] device veth0_vlan entered promiscuous mode [ 58.755499][ T3539] device veth1_vlan entered promiscuous mode [ 58.771282][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.779202][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.787546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.798900][ T3539] device veth0_macvtap entered promiscuous mode [ 58.807485][ T3539] device veth1_macvtap entered promiscuous mode [ 58.821500][ T3539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.828826][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.839455][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.850177][ T3539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.858873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.868946][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 58.878332][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.887290][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.896272][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.931157][ T3539] ------------[ cut here ]------------ [ 58.936685][ T3539] WARNING: CPU: 1 PID: 3539 at net/core/dev.c:3284 skb_checksum_help+0x3d0/0x5b0 [ 58.945838][ T3539] Modules linked in: [ 58.949736][ T3539] CPU: 1 PID: 3539 Comm: syz-executor266 Not tainted 6.1.32-syzkaller #0 [ 58.958190][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 58.968273][ T3539] RIP: 0010:skb_checksum_help+0x3d0/0x5b0 [ 58.974014][ T3539] Code: 4c 89 ff e8 02 02 00 00 bb ea ff ff ff eb cf 0f 0b 80 3d c6 48 c4 05 01 0f 85 ac 01 00 00 e8 a7 f8 0e f9 bb ea ff ff ff eb b4 <0f> 0b 80 3d ac 48 c4 05 01 0f 85 9f 01 00 00 e8 8c f8 0e f9 bb ea [ 58.993647][ T3539] RSP: 0018:ffffc90003a2ef08 EFLAGS: 00010212 [ 58.999809][ T3539] RAX: 0000000000000000 RBX: 0000000000000621 RCX: ffff88807c311dc0 [ 59.007807][ T3539] RDX: ffff888022dfc074 RSI: 0000000000000519 RDI: 0000000000000621 [ 59.015819][ T3539] RBP: 0000000000000519 R08: ffffffff887adbb5 R09: fffff52000745dd2 [ 59.023809][ T3539] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110045bf810 [ 59.031813][ T3539] R13: ffff888022dfc070 R14: dffffc0000000000 R15: ffff888022dfc000 [ 59.039781][ T3539] FS: 000055555564f300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 59.048728][ T3539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.055328][ T3539] CR2: 0000000020001000 CR3: 0000000071b22000 CR4: 00000000003506e0 [ 59.063422][ T3539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.071426][ T3539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.079411][ T3539] Call Trace: [ 59.082720][ T3539] [ 59.085652][ T3539] ? __warn+0x15a/0x520 [ 59.089794][ T3539] ? skb_checksum_help+0x3d0/0x5b0 [ 59.094929][ T3539] ? report_bug+0x2af/0x500 [ 59.099445][ T3539] ? skb_checksum_help+0x3d0/0x5b0 [ 59.104583][ T3539] ? handle_bug+0x3d/0x70 [ 59.108913][ T3539] ? exc_invalid_op+0x16/0x40 [ 59.113618][ T3539] ? asm_exc_invalid_op+0x16/0x20 [ 59.118647][ T3539] ? skb_checksum_help+0x2b5/0x5b0 [ 59.123780][ T3539] ? skb_checksum_help+0x3d0/0x5b0 [ 59.128890][ T3539] ? skb_checksum_help+0x2b5/0x5b0 [ 59.134029][ T3539] ip_do_fragment+0x209/0x1b20 [ 59.138885][ T3539] ? print_irqtrace_events+0x210/0x210 [ 59.144355][ T3539] ? ip_fragment+0x220/0x220 [ 59.148946][ T3539] ? ip_frag_next+0xb10/0xb10 [ 59.153648][ T3539] ? kmem_cache_free+0x292/0x510 [ 59.158588][ T3539] ? ip_fragment+0x9a/0x220 [ 59.163106][ T3539] __ip_finish_output+0x2bd/0x4b0 [ 59.168129][ T3539] iptunnel_xmit+0x50c/0x930 [ 59.172751][ T3539] ip_tunnel_xmit+0x2296/0x2c70 [ 59.177612][ T3539] ? tnl_update_pmtu+0x10b0/0x10b0 [ 59.182735][ T3539] ? validate_xmit_xfrm+0xb4/0x10b0 [ 59.187940][ T3539] ? gre_build_header+0x25b/0x9a0 [ 59.193011][ T3539] ipgre_xmit+0x759/0xa60 [ 59.197364][ T3539] dev_hard_start_xmit+0x261/0x8c0 [ 59.202521][ T3539] __dev_queue_xmit+0x1b97/0x3c90 [ 59.207554][ T3539] ? netdev_core_pick_tx+0x320/0x320 [ 59.212865][ T3539] ? virtio_net_hdr_to_skb+0x666/0x11a0 [ 59.218423][ T3539] packet_sendmsg+0x4750/0x6170 [ 59.223299][ T3539] ? aa_sk_perm+0xa30/0xa30 [ 59.227817][ T3539] ? aa_sk_perm+0x8fa/0xa30 [ 59.232361][ T3539] ? iovec_from_user+0x2f2/0x380 [ 59.237307][ T3539] ? packet_getsockopt+0xed0/0xed0 [ 59.242436][ T3539] ? __import_iovec+0x316/0x4c0 [ 59.247288][ T3539] ? aa_sock_msg_perm+0x91/0x150 [ 59.252242][ T3539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 59.257523][ T3539] ? security_socket_sendmsg+0x7d/0xa0 [ 59.263028][ T3539] ? packet_getsockopt+0xed0/0xed0 [ 59.268141][ T3539] ____sys_sendmsg+0x59e/0x8f0 [ 59.272958][ T3539] ? __sys_sendmsg_sock+0x30/0x30 [ 59.277997][ T3539] ? _raw_spin_unlock+0x24/0x40 [ 59.282870][ T3539] __sys_sendmsg+0x2a9/0x390 [ 59.287462][ T3539] ? ____sys_sendmsg+0x8f0/0x8f0 [ 59.292445][ T3539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 59.298432][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.304445][ T3539] ? lockdep_hardirqs_on+0x94/0x130 [ 59.309661][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.315696][ T3539] do_syscall_64+0x3d/0xb0 [ 59.320129][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.326066][ T3539] RIP: 0033:0x7fa271fbe569 [ 59.330480][ T3539] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.350102][ T3539] RSP: 002b:00007ffcd0d2a688 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.358531][ T3539] RAX: ffffffffffffffda RBX: 00007ffcd0d2a698 RCX: 00007fa271fbe569 [ 59.366516][ T3539] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 59.374500][ T3539] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 59.382484][ T3539] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffcd0d2a6a0 [ 59.390460][ T3539] R13: 00007ffcd0d2a6c0 R14: 0000000000000000 R15: 0000000000000000 [ 59.398487][ T3539] [ 59.401544][ T3539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.408829][ T3539] CPU: 1 PID: 3539 Comm: syz-executor266 Not tainted 6.1.32-syzkaller #0 [ 59.417223][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 59.427262][ T3539] Call Trace: [ 59.430523][ T3539] [ 59.433442][ T3539] dump_stack_lvl+0x1e3/0x2cb [ 59.438125][ T3539] ? nf_tcp_handle_invalid+0x642/0x642 [ 59.443573][ T3539] ? panic+0x75d/0x75d [ 59.447642][ T3539] ? vscnprintf+0x59/0x80 [ 59.451966][ T3539] panic+0x318/0x75d [ 59.455864][ T3539] ? __warn+0x169/0x520 [ 59.460017][ T3539] ? memcpy_page_flushcache+0xfc/0xfc [ 59.465393][ T3539] __warn+0x348/0x520 [ 59.469365][ T3539] ? skb_checksum_help+0x3d0/0x5b0 [ 59.474467][ T3539] report_bug+0x2af/0x500 [ 59.478789][ T3539] ? skb_checksum_help+0x3d0/0x5b0 [ 59.483891][ T3539] handle_bug+0x3d/0x70 [ 59.488033][ T3539] exc_invalid_op+0x16/0x40 [ 59.492525][ T3539] asm_exc_invalid_op+0x16/0x20 [ 59.497363][ T3539] RIP: 0010:skb_checksum_help+0x3d0/0x5b0 [ 59.503070][ T3539] Code: 4c 89 ff e8 02 02 00 00 bb ea ff ff ff eb cf 0f 0b 80 3d c6 48 c4 05 01 0f 85 ac 01 00 00 e8 a7 f8 0e f9 bb ea ff ff ff eb b4 <0f> 0b 80 3d ac 48 c4 05 01 0f 85 9f 01 00 00 e8 8c f8 0e f9 bb ea [ 59.522663][ T3539] RSP: 0018:ffffc90003a2ef08 EFLAGS: 00010212 [ 59.528722][ T3539] RAX: 0000000000000000 RBX: 0000000000000621 RCX: ffff88807c311dc0 [ 59.536683][ T3539] RDX: ffff888022dfc074 RSI: 0000000000000519 RDI: 0000000000000621 [ 59.544642][ T3539] RBP: 0000000000000519 R08: ffffffff887adbb5 R09: fffff52000745dd2 [ 59.552601][ T3539] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110045bf810 [ 59.560557][ T3539] R13: ffff888022dfc070 R14: dffffc0000000000 R15: ffff888022dfc000 [ 59.568517][ T3539] ? skb_checksum_help+0x2b5/0x5b0 [ 59.573621][ T3539] ? skb_checksum_help+0x2b5/0x5b0 [ 59.578724][ T3539] ip_do_fragment+0x209/0x1b20 [ 59.583481][ T3539] ? print_irqtrace_events+0x210/0x210 [ 59.588925][ T3539] ? ip_fragment+0x220/0x220 [ 59.593502][ T3539] ? ip_frag_next+0xb10/0xb10 [ 59.598179][ T3539] ? kmem_cache_free+0x292/0x510 [ 59.603111][ T3539] ? ip_fragment+0x9a/0x220 [ 59.607603][ T3539] __ip_finish_output+0x2bd/0x4b0 [ 59.612615][ T3539] iptunnel_xmit+0x50c/0x930 [ 59.617205][ T3539] ip_tunnel_xmit+0x2296/0x2c70 [ 59.622059][ T3539] ? tnl_update_pmtu+0x10b0/0x10b0 [ 59.627154][ T3539] ? validate_xmit_xfrm+0xb4/0x10b0 [ 59.632349][ T3539] ? gre_build_header+0x25b/0x9a0 [ 59.637374][ T3539] ipgre_xmit+0x759/0xa60 [ 59.641704][ T3539] dev_hard_start_xmit+0x261/0x8c0 [ 59.646809][ T3539] __dev_queue_xmit+0x1b97/0x3c90 [ 59.651835][ T3539] ? netdev_core_pick_tx+0x320/0x320 [ 59.657115][ T3539] ? virtio_net_hdr_to_skb+0x666/0x11a0 [ 59.662666][ T3539] packet_sendmsg+0x4750/0x6170 [ 59.667508][ T3539] ? aa_sk_perm+0xa30/0xa30 [ 59.672023][ T3539] ? aa_sk_perm+0x8fa/0xa30 [ 59.676517][ T3539] ? iovec_from_user+0x2f2/0x380 [ 59.681441][ T3539] ? packet_getsockopt+0xed0/0xed0 [ 59.686542][ T3539] ? __import_iovec+0x316/0x4c0 [ 59.691379][ T3539] ? aa_sock_msg_perm+0x91/0x150 [ 59.696302][ T3539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 59.701580][ T3539] ? security_socket_sendmsg+0x7d/0xa0 [ 59.707025][ T3539] ? packet_getsockopt+0xed0/0xed0 [ 59.712128][ T3539] ____sys_sendmsg+0x59e/0x8f0 [ 59.716909][ T3539] ? __sys_sendmsg_sock+0x30/0x30 [ 59.721940][ T3539] ? _raw_spin_unlock+0x24/0x40 [ 59.726787][ T3539] __sys_sendmsg+0x2a9/0x390 [ 59.731385][ T3539] ? ____sys_sendmsg+0x8f0/0x8f0 [ 59.736348][ T3539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 59.742330][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.748302][ T3539] ? lockdep_hardirqs_on+0x94/0x130 [ 59.753493][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.759464][ T3539] do_syscall_64+0x3d/0xb0 [ 59.763870][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.770029][ T3539] RIP: 0033:0x7fa271fbe569 [ 59.774438][ T3539] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.794032][ T3539] RSP: 002b:00007ffcd0d2a688 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.802438][ T3539] RAX: ffffffffffffffda RBX: 00007ffcd0d2a698 RCX: 00007fa271fbe569 [ 59.810393][ T3539] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 59.818349][ T3539] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 59.826307][ T3539] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffcd0d2a6a0 [ 59.834264][ T3539] R13: 00007ffcd0d2a6c0 R14: 0000000000000000 R15: 0000000000000000 [ 59.842232][ T3539] [ 59.845294][ T3539] Kernel Offset: disabled [ 59.849665][ T3539] Rebooting in 86400 seconds..