Warning: Permanently added '10.128.0.241' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 36.908287][ T4217] netlink: 'syz-executor239': attribute type 1 has an invalid length. [ 36.916534][ T4217] device bond1 entered promiscuous mode [ 36.923543][ T4217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.930260][ T4217] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 36.932544][ T4217] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 36.941243][ T4217] bond1: (slave ip6gre1): making interface the new active one [ 36.942936][ T4217] device ip6gre1 entered promiscuous mode [ 36.945110][ T4217] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 36.950423][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready executing program [ 36.975532][ T4228] netlink: 'syz-executor239': attribute type 1 has an invalid length. [ 36.997509][ T4228] device bond2 entered promiscuous mode [ 37.006927][ T4228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 37.012071][ T4228] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 37.014211][ T4228] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 37.018491][ T4228] bond2: (slave ip6gre2): making interface the new active one [ 37.020000][ T4228] device ip6gre2 entered promiscuous mode [ 37.021858][ T4228] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 37.026157][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready executing program [ 37.049754][ T4234] netlink: 'syz-executor239': attribute type 1 has an invalid length. [ 37.075548][ T4234] device bond3 entered promiscuous mode [ 37.079985][ T4234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 37.090852][ T4234] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 37.093115][ T4234] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 37.103073][ T4234] bond3: (slave ip6gre3): making interface the new active one [ 37.104689][ T4234] device ip6gre3 entered promiscuous mode [ 37.106692][ T4234] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 37.113847][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready executing program [ 37.123022][ T4240] netlink: 'syz-executor239': attribute type 1 has an invalid length. [ 37.143462][ T4240] device bond4 entered promiscuous mode [ 37.152543][ T4240] 8021q: adding VLAN 0 to HW filter on device bond4 [ 37.162947][ T4240] bond4: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 37.165031][ T4240] bond4: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 37.171791][ T4240] bond4: (slave ip6gre4): making interface the new active one [ 37.173285][ T4240] device ip6gre4 entered promiscuous mode [ 37.175162][ T4240] bond4: (slave ip6gre4): Enslaving as an active interface with an up link [ 37.176997][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 37.200691][ T4244] netlink: 'syz-executor239': attribute type 1 has an invalid length. executing program [ 37.218412][ T4244] device bond5 entered promiscuous mode [ 37.240698][ T4244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 37.244178][ T4244] bond5: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 37.246214][ T4244] bond5: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode [ 37.263035][ T4244] bond5: (slave ip6gre5): making interface the new active one [ 37.264661][ T4244] device ip6gre5 entered promiscuous mode [ 37.274011][ T4244] bond5: (slave ip6gre5): Enslaving as an active interface with an up link [ 37.275933][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 37.291848][ T4252] netlink: 'syz-executor239': attribute type 1 has an invalid length. executing program [ 37.310938][ T4252] device bond6 entered promiscuous mode [ 37.317477][ T4252] 8021q: adding VLAN 0 to HW filter on device bond6 [ 37.331594][ T4252] bond6: (slave ip6gre6): The slave device specified does not support setting the MAC address [ 37.333714][ T4252] bond6: (slave ip6gre6): Setting fail_over_mac to active for active-backup mode [ 37.347653][ T4252] bond6: (slave ip6gre6): making interface the new active one [ 37.349283][ T4252] device ip6gre6 entered promiscuous mode [ 37.351175][ T4252] bond6: (slave ip6gre6): Enslaving as an active interface with an up link [ 37.352924][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready executing program [ 37.364836][ T4255] netlink: 'syz-executor239': attribute type 1 has an invalid length. [ 37.374767][ T4255] device bond7 entered promiscuous mode [ 37.380228][ T4255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 37.382056][ T3892] skbuff: skb_under_panic: text:ffff8000110d7388 len:44 put:40 head:ffff0000cf3ab800 data:ffff0000cf3ab7ea tail:0x16 end:0xc0 dev:bond1 [ 37.385536][ T3892] ------------[ cut here ]------------ [ 37.386639][ T3892] kernel BUG at net/core/skbuff.c:120! [ 37.387870][ T3892] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 37.389462][ T3892] Modules linked in: [ 37.390367][ T3892] CPU: 0 PID: 3892 Comm: dhcpcd Not tainted 6.1.33-syzkaller #0 [ 37.391888][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 37.393971][ T3892] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.395687][ T3892] pc : skb_under_panic+0x13c/0x140 [ 37.396805][ T3892] lr : skb_under_panic+0x13c/0x140 [ 37.397855][ T3892] sp : ffff8000200672c0 [ 37.398662][ T3892] x29: ffff8000200672d0 x28: 1fffe00018c349b1 x27: dfff800000000000 [ 37.400313][ T3892] x26: ffff0000d2720290 x25: 0000000000000016 x24: ffff0000cf3ab7ea [ 37.401949][ T3892] x23: ffff0000cf3ab800 x22: 000000000000002c x21: 00000000000000c0 [ 37.403566][ T3892] x20: 0000000000000028 x19: ffff8000110d7388 x18: ffff800020066820 [ 37.405394][ T3892] x17: 0000000000000000 x16: ffff800012102bf4 x15: 0000000000000000 [ 37.407081][ T3892] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 37.408682][ T3892] x11: ff80800008345658 x10: 0000000000000000 x9 : e1f99bcd03577e00 [ 37.410366][ T3892] x8 : e1f99bcd03577e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 37.411944][ T3892] x5 : ffff800020066bd8 x4 : ffff8000156a2a40 x3 : ffff8000085879f4 [ 37.413562][ T3892] x2 : 0000000000000001 x1 : 0000000100000201 x0 : 0000000000000085 [ 37.415179][ T3892] Call trace: [ 37.415885][ T3892] skb_under_panic+0x13c/0x140 [ 37.416911][ T3892] skb_push+0x104/0x11c [ 37.417859][ T3892] ip6gre_header+0xbc/0x67c [ 37.418805][ T3892] lapbeth_data_transmit+0x1c4/0x298 [ 37.420014][ T3892] lapb_data_transmit+0x8c/0xb0 [ 37.421068][ T3892] lapb_transmit_buffer+0x178/0x204 [ 37.422107][ T3892] lapb_send_control+0x220/0x320 [ 37.423130][ T3892] lapb_establish_data_link+0x94/0xec [ 37.424275][ T3892] lapb_device_event+0x348/0x4e0 [ 37.425348][ T3892] raw_notifier_call_chain+0xd4/0x164 [ 37.426534][ T3892] __dev_notify_flags+0x2ac/0x534 [ 37.427599][ T3892] dev_change_flags+0xc8/0x154 [ 37.428491][ T3892] devinet_ioctl+0x858/0x17e4 [ 37.429485][ T3892] inet_ioctl+0x2ac/0x4d8 [ 37.430417][ T3892] sock_do_ioctl+0x134/0x2dc [ 37.431386][ T3892] sock_ioctl+0x4ec/0x858 [ 37.432272][ T3892] __arm64_sys_ioctl+0x14c/0x1c8 [ 37.433307][ T3892] invoke_syscall+0x98/0x2c0 [ 37.434285][ T3892] el0_svc_common+0x138/0x258 [ 37.435296][ T3892] do_el0_svc+0x64/0x218 [ 37.436192][ T3892] el0_svc+0x58/0x168 [ 37.437002][ T3892] el0t_64_sync_handler+0x84/0xf0 [ 37.438078][ T3892] el0t_64_sync+0x18c/0x190 [ 37.439024][ T3892] Code: aa1803e6 aa1903e7 a90023f5 947506cf (d4210000) [ 37.440540][ T3892] ---[ end trace 0000000000000000 ]--- [ 37.789028][ T3892] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt [ 37.790880][ T3892] SMP: stopping secondary CPUs [ 37.791856][ T3892] Kernel Offset: disabled [ 37.792810][ T3892] CPU features: 0x00000,02070084,26017203 [ 37.794048][ T3892] Memory Limit: none [ 38.131287][ T3892] Rebooting in 86400 seconds..