[ 448.477596][ T2824] bond2 (unregistering): Released all slaves [ 448.545088][ T2824] team0 (unregistering): Port device team_slave_1 removed [ 448.562069][ T2824] team0 (unregistering): Port device team_slave_0 removed [ 448.573633][ T2824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.586416][ T2824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.634255][ T2824] bond0 (unregistering): Released all slaves [ 449.087731][T17103] chnl_net:caif_netlink_parms(): no params data found [ 449.621207][T17103] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.634909][T17103] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.644925][T17103] bridge_slave_0: entered allmulticast mode [ 449.712218][T17103] bridge_slave_0: entered promiscuous mode [ 449.721792][T17103] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.730873][T17103] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.739449][T17103] bridge_slave_1: entered allmulticast mode [ 449.746481][T17103] bridge_slave_1: entered promiscuous mode [ 449.869290][T17103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.915149][T17103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.006480][T17103] team0: Port device team_slave_0 added [ 450.030299][T17103] team0: Port device team_slave_1 added [ 450.140851][T17103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.148185][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.217742][T17103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.231124][T17103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.239085][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.265660][T17103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.417255][T17103] hsr_slave_0: entered promiscuous mode [ 450.487616][T17103] hsr_slave_1: entered promiscuous mode Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 455.473290][T17342] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 455.520952][T17342] bond1: entered promiscuous mode [ 455.532771][T17342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.559805][T17342] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 455.570948][T17342] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 455.588611][T17342] bond1: (slave gre1): making interface the new active one [ 455.596318][T17342] gre1: entered promiscuous mode [ 455.602728][T17342] bond1: (slave gre1): Enslaving as an active interface with an up link [ 455.611721][T17338] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 455.691770][T17349] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 455.809670][T17349] bond2: entered promiscuous mode [ 455.870747][T17349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.966629][T17362] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 456.043246][T17362] bond3: entered promiscuous mode [ 456.094632][T17362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.157561][T17366] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 456.216503][T17366] bond4: entered promiscuous mode [ 456.248085][T17366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.389701][T17369] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 456.528668][T17369] bond5: entered promiscuous mode [ 456.552123][T17369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.580193][T17374] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 456.654008][T17374] bond6: entered promiscuous mode [ 456.717226][T17374] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.831253][T17379] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 456.866079][T17379] bond7: entered promiscuous mode [ 456.893926][T17379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 456.969372][T17385] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 457.102516][T17385] bond8: entered promiscuous mode [ 457.114289][T17385] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.153753][T17388] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 457.232388][T17388] bond9: entered promiscuous mode [ 457.334923][T17388] 8021q: adding VLAN 0 to HW filter on device bond9 [ 457.386361][T17393] netlink: 'syz-executor425': attribute type 1 has an invalid length. [ 457.562886][T17393] bond10: entered promiscuous mode [ 457.609514][T17393] 8021q: adding VLAN 0 to HW filter on device bond10 [ 457.781240][T17400] bond11: entered promiscuous mode [ 457.813152][T17400] 8021q: adding VLAN 0 to HW filter on device bond11 [ 457.935566][T17402] bond12: entered promiscuous mode [ 457.962320][T17402] 8021q: adding VLAN 0 to HW filter on device bond12 [ 458.035793][T17405] bond13: entered promiscuous mode [ 458.073540][T17405] 8021q: adding VLAN 0 to HW filter on device bond13 [ 458.208640][T17407] bond14: entered promiscuous mode [ 458.261627][T17407] 8021q: adding VLAN 0 to HW filter on device bond14 [ 458.437212][T17413] bond15: entered promiscuous mode [ 458.477006][T17413] 8021q: adding VLAN 0 to HW filter on device bond15 [ 458.542747][T17419] bond16: entered promiscuous mode [ 458.562120][T17419] 8021q: adding VLAN 0 to HW filter on device bond16 [ 458.740078][T17423] bond17: entered promiscuous mode [ 458.772671][T17423] 8021q: adding VLAN 0 to HW filter on device bond17 [ 458.964330][T17427] bond18: entered promiscuous mode [ 458.987425][T17427] 8021q: adding VLAN 0 to HW filter on device bond18 [ 459.086574][T17433] bond19: entered promiscuous mode [ 459.144430][T17433] 8021q: adding VLAN 0 to HW filter on device bond19 [ 459.329253][T17437] bond20: entered promiscuous mode [ 459.370005][T17437] 8021q: adding VLAN 0 to HW filter on device bond20 [ 459.415651][ T4656] skbuff: skb_under_panic: text:ffffffff88ab9bdb len:23 put:19 head:ffff8880365d0c00 data:ffff8880365d0bff tail:0x16 end:0x140 dev:bond1 [ 459.431855][ T4656] ------------[ cut here ]------------ [ 459.437522][ T4656] kernel BUG at net/core/skbuff.c:150! [ 459.443094][ T4656] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 459.449179][ T4656] CPU: 1 PID: 4656 Comm: dhcpcd Not tainted 6.3.0-rc7-next-20230419-syzkaller-13077-g3cdbc01c40e3 #0 [ 459.460187][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 459.470240][ T4656] RIP: 0010:skb_panic+0x152/0x1d0 [ 459.475276][ T4656] Code: 0f b6 04 01 84 c0 74 04 3c 03 7e 20 8b 4b 70 41 56 45 89 e8 48 c7 c7 40 3c 5d 8b 41 57 56 48 89 ee 52 4c 89 e2 e8 4e 96 64 f9 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 b9 78 d3 f9 4c [ 459.494895][ T4656] RSP: 0018:ffffc900035ff720 EFLAGS: 00010286 [ 459.500978][ T4656] RAX: 0000000000000086 RBX: ffff888050888a00 RCX: 0000000000000000 [ 459.509036][ T4656] RDX: 0000000000000000 RSI: ffffffff8168155c RDI: 0000000000000005 [ 459.517464][ T4656] RBP: ffffffff8b5d4aa0 R08: 0000000000000005 R09: 0000000000000000 [ 459.525438][ T4656] R10: 0000000000000201 R11: 0000000000000000 R12: ffffffff88ab9bdb [ 459.533440][ T4656] R13: 0000000000000013 R14: ffff888078c04000 R15: 0000000000000140 [ 459.541755][ T4656] FS: 00007fd2661a4740(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 459.550787][ T4656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.557383][ T4656] CR2: 00007f0aec4a8a70 CR3: 000000001dadf000 CR4: 00000000003506e0 [ 459.565528][ T4656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.574019][ T4656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.582012][ T4656] Call Trace: [ 459.585287][ T4656] [ 459.588236][ T4656] ? erspan_fill_info+0x3d0/0x3d0 [ 459.593432][ T4656] ? ipgre_header+0x6b/0x3c0 [ 459.598134][ T4656] skb_push+0xc8/0xe0 [ 459.602297][ T4656] ipgre_header+0x6b/0x3c0 [ 459.606754][ T4656] ? erspan_fill_info+0x3d0/0x3d0 [ 459.611799][ T4656] lapbeth_data_transmit+0x2a3/0x360 [ 459.617392][ T4656] ? lapbeth_data_indication+0x4b0/0x4b0 [ 459.623207][ T4656] lapb_data_transmit+0x93/0xc0 [ 459.628691][ T4656] lapb_transmit_buffer+0x187/0x3a0 [ 459.633903][ T4656] lapb_send_control+0x1cb/0x370 [ 459.638968][ T4656] lapb_establish_data_link+0xeb/0x110 [ 459.644438][ T4656] lapb_device_event+0x399/0x570 [ 459.649391][ T4656] notifier_call_chain+0xb6/0x3c0 [ 459.654526][ T4656] call_netdevice_notifiers_info+0xb9/0x130 [ 459.660790][ T4656] __dev_notify_flags+0x120/0x2d0 [ 459.666368][ T4656] ? dev_change_name+0x790/0x790 [ 459.671764][ T4656] ? dev_set_allmulti+0x30/0x30 [ 459.676891][ T4656] ? apparmor_capable+0x1dc/0x460 [ 459.682146][ T4656] dev_change_flags+0x11b/0x170 [ 459.688241][ T4656] devinet_ioctl+0x15fb/0x1df0 [ 459.693029][ T4656] ? inet_ifa_byprefix+0x2e0/0x2e0 [ 459.698346][ T4656] ? _copy_from_user+0x11e/0x190 [ 459.703346][ T4656] inet_ioctl+0x33f/0x380 [ 459.707781][ T4656] ? ipip_gro_complete+0x140/0x140 [ 459.712917][ T4656] ? lock_downgrade+0x690/0x690 [ 459.717787][ T4656] ? tomoyo_path_number_perm+0x166/0x570 [ 459.723533][ T4656] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 459.729514][ T4656] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 459.735515][ T4656] sock_do_ioctl+0xcc/0x230 [ 459.740025][ T4656] ? get_user_ifreq+0x250/0x250 [ 459.744886][ T4656] ? vfs_fileattr_set+0xc40/0xc40 [ 459.750064][ T4656] sock_ioctl+0x1f8/0x680 [ 459.754538][ T4656] ? br_ioctl_call+0xb0/0xb0 [ 459.759155][ T4656] ? fd_install+0x201/0x6f0 [ 459.763703][ T4656] ? __sys_socket+0x8e/0x250 [ 459.768306][ T4656] ? bpf_lsm_file_ioctl+0x9/0x10 [ 459.773351][ T4656] ? br_ioctl_call+0xb0/0xb0 [ 459.778038][ T4656] __x64_sys_ioctl+0x197/0x210 [ 459.783025][ T4656] do_syscall_64+0x39/0xb0 [ 459.787732][ T4656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 459.794080][ T4656] RIP: 0033:0x7fd2662920e7 [ 459.798590][ T4656] Code: 3c 1c e8 1c ff ff ff 85 c0 79 87 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 61 9d 0c 00 f7 d8 64 89 01 48 [ 459.819096][ T4656] RSP: 002b:00007fffbbaaf358 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.827692][ T4656] RAX: ffffffffffffffda RBX: 00007fd2661a46c8 RCX: 00007fd2662920e7 [ 459.835665][ T4656] RDX: 00007fffbbabf548 RSI: 0000000000008914 RDI: 000000000000000e [ 459.843823][ T4656] RBP: 00007fffbbacf6f8 R08: 00007fffbbabf508 R09: 00007fffbbabf4b8 [ 459.851858][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.859873][ T4656] R13: 00007fffbbabf548 R14: 0000000000000028 R15: 0000000000008914 [ 459.871887][ T4656] [ 459.874996][ T4656] Modules linked in: [ 459.878960][ T4656] ---[ end trace 0000000000000000 ]--- [ 459.884439][ T4656] RIP: 0010:skb_panic+0x152/0x1d0 [ 459.889524][ T4656] Code: 0f b6 04 01 84 c0 74 04 3c 03 7e 20 8b 4b 70 41 56 45 89 e8 48 c7 c7 40 3c 5d 8b 41 57 56 48 89 ee 52 4c 89 e2 e8 4e 96 64 f9 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 b9 78 d3 f9 4c [ 459.909396][ T4656] RSP: 0018:ffffc900035ff720 EFLAGS: 00010286 [ 459.915493][ T4656] RAX: 0000000000000086 RBX: ffff888050888a00 RCX: 0000000000000000 [ 459.923531][ T4656] RDX: 0000000000000000 RSI: ffffffff8168155c RDI: 0000000000000005 [ 459.931566][ T4656] RBP: ffffffff8b5d4aa0 R08: 0000000000000005 R09: 0000000000000000 [ 459.939596][ T4656] R10: 0000000000000201 R11: 0000000000000000 R12: ffffffff88ab9bdb [ 459.947596][ T4656] R13: 0000000000000013 R14: ffff888078c04000 R15: 0000000000000140 [ 459.955894][ T4656] FS: 00007fd2661a4740(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 459.964978][ T4656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.971806][ T4656] CR2: 00007f0aec4a8a70 CR3: 000000001dadf000 CR4: 00000000003506e0 [ 459.979925][ T4656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.987957][ T4656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.996221][ T4656] Kernel panic - not syncing: Fatal exception in interrupt [ 460.003839][ T4656] Kernel Offset: disabled [ 460.008361][ T4656] Rebooting in 86400 seconds..