Warning: Permanently added '10.128.1.54' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.999463][ T3080] netlink: 'syz-executor408': attribute type 1 has an invalid length. [ 27.005632][ T3080] device bond1 entered promiscuous mode [ 27.009916][ T3080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 27.020809][ T3080] device ip6gre1 entered promiscuous mode [ 27.022710][ T3080] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 27.025319][ T3080] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 27.035673][ T3080] bond1: (slave ip6gre1): making interface the new active one [ 27.038117][ T3080] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 27.044519][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 27.051334][ T3095] netlink: 'syz-executor408': attribute type 1 has an invalid length. executing program [ 27.059877][ T3095] device bond2 entered promiscuous mode [ 27.069840][ T3095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 27.072790][ T3095] device ip6gre2 entered promiscuous mode [ 27.074376][ T3095] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 27.077098][ T3095] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 27.082313][ T3095] bond2: (slave ip6gre2): making interface the new active one [ 27.084756][ T3095] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 27.087247][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready executing program [ 27.095125][ T3097] netlink: 'syz-executor408': attribute type 1 has an invalid length. [ 27.103749][ T3097] device bond3 entered promiscuous mode [ 27.107046][ T3097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 27.112512][ T3097] device ip6gre3 entered promiscuous mode [ 27.114221][ T3097] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 27.116805][ T3097] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 27.120599][ T3097] bond3: (slave ip6gre3): making interface the new active one [ 27.122927][ T3097] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 27.125095][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready executing program [ 27.135845][ T3099] netlink: 'syz-executor408': attribute type 1 has an invalid length. [ 27.143044][ T3099] device bond4 entered promiscuous mode [ 27.148267][ T3099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 27.166005][ T3099] device ip6gre4 entered promiscuous mode [ 27.167705][ T3099] bond4: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 27.173620][ T3099] bond4: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 27.179574][ T3099] bond4: (slave ip6gre4): making interface the new active one [ 27.182083][ T3099] bond4: (slave ip6gre4): Enslaving as an active interface with an up link [ 27.184988][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 27.190201][ T3101] netlink: 'syz-executor408': attribute type 1 has an invalid length. executing program [ 27.198265][ T3101] device bond5 entered promiscuous mode [ 27.202806][ T3101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 27.210773][ T3101] device ip6gre5 entered promiscuous mode [ 27.212451][ T3101] bond5: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 27.216325][ T3101] bond5: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode [ 27.220266][ T3101] bond5: (slave ip6gre5): making interface the new active one [ 27.222735][ T3101] bond5: (slave ip6gre5): Enslaving as an active interface with an up link [ 27.227642][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready executing program [ 27.232105][ T3103] netlink: 'syz-executor408': attribute type 1 has an invalid length. [ 27.237453][ T3103] device bond6 entered promiscuous mode [ 27.241464][ T3103] 8021q: adding VLAN 0 to HW filter on device bond6 [ 27.244661][ T3103] device ip6gre6 entered promiscuous mode [ 27.246400][ T3103] bond6: (slave ip6gre6): The slave device specified does not support setting the MAC address [ 27.248992][ T3103] bond6: (slave ip6gre6): Setting fail_over_mac to active for active-backup mode [ 27.252378][ T3103] bond6: (slave ip6gre6): making interface the new active one [ 27.254823][ T3103] bond6: (slave ip6gre6): Enslaving as an active interface with an up link [ 27.257076][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready executing program [ 27.266982][ T3105] netlink: 'syz-executor408': attribute type 1 has an invalid length. [ 27.272636][ T3105] device bond7 entered promiscuous mode [ 27.275696][ T3105] 8021q: adding VLAN 0 to HW filter on device bond7 [ 27.278753][ T3105] device ip6gre7 entered promiscuous mode [ 27.280587][ T3105] bond7: (slave ip6gre7): The slave device specified does not support setting the MAC address [ 27.283196][ T3105] bond7: (slave ip6gre7): Setting fail_over_mac to active for active-backup mode [ 27.286612][ T3105] bond7: (slave ip6gre7): making interface the new active one [ 27.289138][ T3105] bond7: (slave ip6gre7): Enslaving as an active interface with an up link [ 27.291598][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready executing program [ 27.300237][ T3107] netlink: 'syz-executor408': attribute type 1 has an invalid length. [ 27.310904][ T3107] device bond8 entered promiscuous mode [ 27.313834][ T3107] 8021q: adding VLAN 0 to HW filter on device bond8 [ 27.317002][ T3107] device ip6gre8 entered promiscuous mode [ 27.318618][ T3107] bond8: (slave ip6gre8): The slave device specified does not support setting the MAC address [ 27.325428][ T3107] bond8: (slave ip6gre8): Setting fail_over_mac to active for active-backup mode [ 27.336227][ T3107] bond8: (slave ip6gre8): making interface the new active one [ 27.338628][ T3107] bond8: (slave ip6gre8): Enslaving as an active interface with an up link [ 27.346938][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 27.354941][ T3109] netlink: 'syz-executor408': attribute type 1 has an invalid length. executing program [ 27.361276][ T3109] device bond9 entered promiscuous mode [ 27.364183][ T3109] 8021q: adding VLAN 0 to HW filter on device bond9 [ 27.368270][ T3109] device ip6gre9 entered promiscuous mode [ 27.372649][ T3109] bond9: (slave ip6gre9): The slave device specified does not support setting the MAC address [ 27.375391][ T3109] bond9: (slave ip6gre9): Setting fail_over_mac to active for active-backup mode [ 27.380391][ T3109] bond9: (slave ip6gre9): making interface the new active one [ 27.382901][ T3109] bond9: (slave ip6gre9): Enslaving as an active interface with an up link [ 27.390066][ T3111] netlink: 'syz-executor408': attribute type 1 has an invalid length. executing program [ 27.396933][ T3111] device bond10 entered promiscuous mode [ 27.402355][ T3111] 8021q: adding VLAN 0 to HW filter on device bond10 [ 27.404396][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 27.409604][ T3111] device ip6gre10 entered promiscuous mode [ 27.411410][ T3111] bond10: (slave ip6gre10): The slave device specified does not support setting the MAC address [ 27.414096][ T3111] bond10: (slave ip6gre10): Setting fail_over_mac to active for active-backup mode [ 27.420375][ T3111] bond10: (slave ip6gre10): making interface the new active one [ 27.425058][ T3111] bond10: (slave ip6gre10): Enslaving as an active interface with an up link [ 27.430087][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready executing program [ 27.442524][ T3113] device bond11 entered promiscuous mode [ 27.445766][ T3113] 8021q: adding VLAN 0 to HW filter on device bond11 [ 27.460704][ T3113] device ip6gre11 entered promiscuous mode [ 27.465339][ T3113] bond11: (slave ip6gre11): The slave device specified does not support setting the MAC address [ 27.468255][ T3113] bond11: (slave ip6gre11): Setting fail_over_mac to active for active-backup mode [ 27.472684][ T3113] bond11: (slave ip6gre11): making interface the new active one [ 27.475247][ T3113] bond11: (slave ip6gre11): Enslaving as an active interface with an up link [ 27.480037][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready executing program [ 27.488897][ T3115] device bond12 entered promiscuous mode [ 27.492671][ T3115] 8021q: adding VLAN 0 to HW filter on device bond12 [ 27.497290][ T3115] device ip6gre12 entered promiscuous mode [ 27.499294][ T3115] bond12: (slave ip6gre12): The slave device specified does not support setting the MAC address [ 27.502130][ T3115] bond12: (slave ip6gre12): Setting fail_over_mac to active for active-backup mode [ 27.507317][ T3115] bond12: (slave ip6gre12): making interface the new active one [ 27.510375][ T3115] bond12: (slave ip6gre12): Enslaving as an active interface with an up link [ 27.514414][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready executing program [ 27.531793][ T3117] device bond13 entered promiscuous mode [ 27.540162][ T3117] 8021q: adding VLAN 0 to HW filter on device bond13 [ 27.548205][ T3117] device ip6gre13 entered promiscuous mode [ 27.552892][ T3117] bond13: (slave ip6gre13): The slave device specified does not support setting the MAC address [ 27.556909][ T3117] bond13: (slave ip6gre13): Setting fail_over_mac to active for active-backup mode [ 27.560766][ T3117] bond13: (slave ip6gre13): making interface the new active one [ 27.563323][ T3117] bond13: (slave ip6gre13): Enslaving as an active interface with an up link executing program [ 27.567999][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 27.576957][ T3119] device bond14 entered promiscuous mode [ 27.580928][ T3119] 8021q: adding VLAN 0 to HW filter on device bond14 [ 27.597564][ T3119] device ip6gre14 entered promiscuous mode [ 27.599629][ T3119] bond14: (slave ip6gre14): The slave device specified does not support setting the MAC address [ 27.602640][ T3119] bond14: (slave ip6gre14): Setting fail_over_mac to active for active-backup mode [ 27.607287][ T3119] bond14: (slave ip6gre14): making interface the new active one [ 27.611052][ T3119] bond14: (slave ip6gre14): Enslaving as an active interface with an up link [ 27.613431][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready executing program [ 27.624527][ T3121] device bond15 entered promiscuous mode [ 27.627742][ T3121] 8021q: adding VLAN 0 to HW filter on device bond15 [ 27.640590][ T3121] device ip6gre15 entered promiscuous mode [ 27.642243][ T3121] bond15: (slave ip6gre15): The slave device specified does not support setting the MAC address [ 27.644894][ T3121] bond15: (slave ip6gre15): Setting fail_over_mac to active for active-backup mode [ 27.648365][ T3121] bond15: (slave ip6gre15): making interface the new active one [ 27.651040][ T3121] bond15: (slave ip6gre15): Enslaving as an active interface with an up link [ 27.653842][ T2200] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready executing program [ 27.657146][ T2658] skbuff: skb_under_panic: text:ffff80000b8acdc4 len:44 put:40 head:ffff0000c7b18800 data:ffff0000c7b187ea tail:0x16 end:0xc0 dev:bond1 [ 27.661286][ T2658] ------------[ cut here ]------------ [ 27.662755][ T2658] kernel BUG at net/core/skbuff.c:120! [ 27.664184][ T2658] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 27.666176][ T2658] Modules linked in: [ 27.667178][ T2658] CPU: 0 PID: 2658 Comm: dhcpcd Not tainted 6.1.0-rc5-syzkaller-32269-g9500fc6e9e60 #0 [ 27.669543][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.672163][ T2658] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 27.674154][ T2658] pc : skb_panic+0x4c/0x50 [ 27.675298][ T2658] lr : skb_panic+0x4c/0x50 [ 27.676454][ T2658] sp : ffff800016a3b810 [ 27.677565][ T2658] x29: ffff800016a3b820 x28: ffff800016a3bc60 x27: ffff80000cbdbaec [ 27.679612][ T2658] x26: ffff80000d8f23a8 x25: 000000000000003f x24: ffff0000c7a9ea00 [ 27.681638][ T2658] x23: 0000000000006000 x22: ffff0000c7b187ea x21: ffff80000b8acdc4 [ 27.683690][ T2658] x20: ffff0000c7a9ea00 x19: 0000000000000028 x18: 00000000000000c0 [ 27.685763][ T2658] x17: ffff80000ddda198 x16: ffff80000dc18158 x15: ffff0000c3879a40 [ 27.687886][ T2658] x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c3879a40 [ 27.689916][ T2658] x11: ff808000081c6510 x10: 0000000000000000 x9 : eced11face243b00 [ 27.691953][ T2658] x8 : eced11face243b00 x7 : ffff80000c0b2b74 x6 : 0000000000000000 [ 27.694019][ T2658] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 27.696037][ T2658] x2 : 0000000000000000 x1 : 0000000100000201 x0 : 0000000000000085 [ 27.698076][ T2658] Call trace: [ 27.698906][ T2658] skb_panic+0x4c/0x50 [ 27.699973][ T2658] skb_pull+0x0/0xbc [ 27.700940][ T2658] ip6gre_header+0x58/0x24c [ 27.702071][ T2658] lapbeth_data_transmit+0xb4/0xe4 [ 27.703390][ T2658] lapb_data_transmit+0x3c/0x60 [ 27.704629][ T2658] lapb_transmit_buffer+0x154/0x1a0 [ 27.705952][ T2658] lapb_send_control+0x170/0x18c [ 27.707223][ T2658] lapb_establish_data_link+0x50/0x70 [ 27.708597][ T2658] lapb_device_event+0x2ac/0x380 [ 27.709844][ T2658] raw_notifier_call_chain+0x7c/0x108 [ 27.711259][ T2658] __dev_notify_flags+0x170/0x2e8 [ 27.712551][ T2658] dev_change_flags+0x78/0x9c [ 27.713732][ T2658] devinet_ioctl+0x620/0xa10 [ 27.714908][ T2658] inet_ioctl+0x1e8/0x3a0 [ 27.715991][ T2658] sock_do_ioctl+0x68/0x194 [ 27.717141][ T2658] sock_ioctl+0x384/0x5c0 [ 27.718255][ T2658] __arm64_sys_ioctl+0xd0/0x140 [ 27.719476][ T2658] el0_svc_common+0x138/0x220 [ 27.720682][ T2658] do_el0_svc+0x48/0x164 [ 27.721799][ T2658] el0_svc+0x58/0x150 [ 27.722849][ T2658] el0t_64_sync_handler+0x84/0xf0 [ 27.724124][ T2658] el0t_64_sync+0x190/0x194 [ 27.725245][ T2658] Code: 9122a400 aa0803e1 a90027ea 9438c5ab (d4210000) [ 27.727061][ T2658] ---[ end trace 0000000000000000 ]--- [ 27.987728][ T2658] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt [ 27.989852][ T2658] SMP: stopping secondary CPUs [ 27.991077][ T2658] Kernel Offset: disabled [ 27.992175][ T2658] CPU features: 0x00000,040e0108,4c017203 [ 27.993624][ T2658] Memory Limit: none [ 28.248065][ T2658] Rebooting in 86400 seconds..