[ 9.823322][ T2658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.825580][ T2658] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.858921][ T29] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.863126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. syzkaller login: [ 30.095248][ T3075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.097160][ T3075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.098935][ T3075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.101241][ T3075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.103127][ T3075] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.104702][ T3075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.106845][ T3074] Bluetooth: hci0: HCI_REQ-0x0c1a [ 30.138439][ T3074] chnl_net:caif_netlink_parms(): no params data found [ 30.155328][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156979][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.159128][ T3074] device bridge_slave_0 entered promiscuous mode [ 30.161944][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.163545][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.165606][ T3074] device bridge_slave_1 entered promiscuous mode [ 30.174525][ T3074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.177550][ T3074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.185256][ T3074] team0: Port device team_slave_0 added [ 30.187279][ T3074] team0: Port device team_slave_1 added [ 30.194071][ T3074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.195835][ T3074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.201927][ T3074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.205400][ T3074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.206912][ T3074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.212999][ T3074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.310197][ T3074] device hsr_slave_0 entered promiscuous mode [ 30.369536][ T3074] device hsr_slave_1 entered promiscuous mode [ 30.441178][ T3074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.470461][ T3074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.510394][ T3074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.560298][ T3074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.608143][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.609937][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.611747][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.613448][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.630300][ T3074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.635769][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.638424][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.643307][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.645783][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 30.650309][ T3074] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.661503][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.663680][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.665304][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.667242][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.669608][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.671110][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.673287][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.675378][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.678277][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 30.683633][ T3074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.686218][ T3074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.689965][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.692298][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.694747][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 30.704372][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.705983][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 30.708444][ T3074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.718667][ T3074] device veth0_vlan entered promiscuous mode [ 30.721103][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.723539][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.725563][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.727442][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.731715][ T3074] device veth1_vlan entered promiscuous mode [ 30.739084][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 30.741688][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 30.743930][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.747067][ T3074] device veth0_macvtap entered promiscuous mode [ 30.749717][ T3074] device veth1_macvtap entered promiscuous mode [ 30.755111][ T3074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.758168][ T3074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.761971][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.764056][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.766139][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.768532][ T3074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.772140][ T3074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.774033][ T3074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.775736][ T3074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.800747][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.805608][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.808266][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.811407][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.813354][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.815831][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 30.835992][ T1171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.840016][ C0] Unable to handle kernel paging request at virtual address ffff000308e88118 [ 30.842335][ C0] Mem abort info: [ 30.843320][ C0] ESR = 0x0000000096000005 [ 30.844415][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 30.846033][ C0] SET = 0, FnV = 0 [ 30.847012][ C0] EA = 0, S1PTW = 0 [ 30.847986][ C0] FSC = 0x05: level 1 translation fault [ 30.849385][ C0] Data abort info: [ 30.850258][ C0] ISV = 0, ISS = 0x00000005 [ 30.851394][ C0] CM = 0, WnR = 0 [ 30.852291][ C0] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c5508000 [ 30.854103][ C0] [ffff000308e88118] pgd=180000023fff8003, p4d=180000023fff8003, pud=0000000000000000 [ 30.856467][ C0] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 30.858189][ C0] Modules linked in: [ 30.859172][ C0] CPU: 0 PID: 3086 Comm: kworker/0:6 Not tainted 6.1.0-rc5-syzkaller-32269-g9500fc6e9e60 #0 [ 30.861618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 30.864172][ C0] Workqueue: mld mld_ifc_work [ 30.865393][ C0] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 30.867300][ C0] pc : rhltable_lookup+0xd4/0x398 [ 30.868495][ C0] lr : rhltable_lookup+0xc8/0x398 [ 30.869762][ C0] sp : ffff800008003d60 [ 30.870786][ C0] x29: ffff800008003d80 x28: ffff80000d98f000 x27: 0000000000000000 [ 30.872825][ C0] x26: 0000000000000002 x25: 0000000000000000 x24: ffff000308e88118 [ 30.874811][ C0] x23: ffff80000d98f000 x22: ffff000308e88119 x21: ffff0000cb7aa400 [ 30.876823][ C0] x20: ffff0000ce7c17b0 x19: ffff0000cae1f834 x18: 00000000000000c0 [ 30.878371][ C0] x17: ffff80000ddda198 x16: 0000000000000101 x15: 0000000000000100 [ 30.879865][ C0] x14: 0000000000000000 x13: 000000000000000c x12: ffff80000d690450 [ 30.881670][ C0] x11: ff8080000bd03d04 x10: 0000000000000000 x9 : ffff80000bd03d04 [ 30.883569][ C0] x8 : ffff000308e88098 x7 : ffff80000bcfd720 x6 : 0000000000000000 [ 30.885415][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 30.887295][ C0] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 30.889323][ C0] Call trace: [ 30.890079][ C0] rhltable_lookup+0xd4/0x398 [ 30.891088][ C0] sta_info_get_by_addrs+0x64/0xf8 [ 30.892306][ C0] ieee80211_tx_status+0xd8/0x1ac [ 30.893330][ C0] ieee80211_tasklet_handler+0x5c/0x110 [ 30.894393][ C0] tasklet_action_common+0x1d4/0x248 [ 30.895452][ C0] tasklet_action+0x30/0x3c [ 30.896338][ C0] _stext+0x168/0x37c [ 30.897260][ C0] ____do_softirq+0x14/0x20 [ 30.898415][ C0] call_on_irq_stack+0x2c/0x54 [ 30.899504][ C0] do_softirq_own_stack+0x20/0x2c [ 30.900531][ C0] do_softirq+0xac/0x108 [ 30.901574][ C0] __local_bh_enable_ip+0x18c/0x1a4 [ 30.902770][ C0] local_bh_enable+0x28/0x34 [ 30.903809][ C0] ip6_finish_output2+0xa1c/0xbec [ 30.905042][ C0] ip6_finish_output+0x448/0x4c4 [ 30.906176][ C0] ip6_output+0x180/0x2dc [ 30.907166][ C0] mld_sendpack+0x514/0x924 [ 30.908231][ C0] mld_send_cr+0x4e8/0x5a8 [ 30.909339][ C0] mld_ifc_work+0x38/0x290 [ 30.910449][ C0] process_one_work+0x2d8/0x504 [ 30.911575][ C0] worker_thread+0x340/0x610 [ 30.912623][ C0] kthread+0x12c/0x158 [ 30.913531][ C0] ret_from_fork+0x10/0x20 [ 30.914543][ C0] Code: 97168d0a 8b384ea8 91020118 b2400316 (f940031a) [ 30.916148][ C0] ---[ end trace 0000000000000000 ]--- [ 31.180022][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 31.181846][ C0] SMP: stopping secondary CPUs [ 31.182918][ C0] Kernel Offset: disabled [ 31.183941][ C0] CPU features: 0x00000,040e0108,4c017203 [ 31.185289][ C0] Memory Limit: none [ 31.453462][ C0] Rebooting in 86400 seconds..