NYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) [ 1143.716190][T22665] bond829: entered promiscuous mode [ 1143.721764][T22665] 8021q: adding VLAN 0 to HW filter on device bond829 [ 1143.736552][T22667] bond343 (uninitialized): Released all slaves [ 1143.754610][T22676] ipvlan0: entered promiscuous mode [ 1143.762279][T22676] ipvlan0: left promiscuous mode 01:02:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x35a}, 0x0) 01:02:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r1, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1143.823684][T22683] bond343 (uninitialized): Released all slaves 01:02:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x2) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=@delchain={0xa14, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x6}, {0x0, 0x4}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @filter_kind_options=@f_rsvp6={{0xa}, {0xc8, 0x2, [@TCA_RSVP_POLICE={0xc4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x3, 0x8, 0x7, {0x5c, 0x2, 0x800, 0x87e8, 0x2, 0x389}, {0x20, 0x0, 0xf9bc, 0x7ff, 0x7ec, 0x1b}, 0x7, 0x0, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x1, 0x200, 0x48, {0x2, 0x2, 0x800, 0x4, 0x0, 0x5}, {0x7, 0x1, 0x1, 0xfff, 0x8, 0x1}, 0x3d, 0x8000, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x0, 0xb1, 0x200, {0x6, 0x1, 0x4cc, 0x3, 0x3ff, 0x1f}, {0xb, 0x3, 0x2, 0x5, 0x5, 0x2}, 0x5, 0x4, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x904, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x7}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x8, 0x2, 0x80, 0x97}, {0x6, 0x4e, 0x67, 0x80000001}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x81, 0x9, 0x5}, {0x9, 0x87, 0x6, 0x8001}, {0x400, 0x3, 0x6, 0x5}, {0x1, 0x9, 0x40, 0x7}, {0x8, 0x7, 0x7f, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xb}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x2, 0xff, 0x5}, {0x3800, 0xa1, 0x5, 0x7}, {0x4, 0x80, 0x8, 0x9}, {0x7f, 0x6d, 0x4, 0x3bd}, {0x7, 0x2, 0x2, 0x6}, {0x2531, 0x0, 0x2d, 0x7}, {0x1000, 0x1, 0xe5, 0xc69}]}}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0x5}}, @TCA_BPF_POLICE={0x838, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x5b32, 0x511, 0xb1f, 0x10001, 0x800, 0x101, 0x800, 0x1ff, 0x0, 0x1ff, 0x0, 0xfffffff7, 0xfffffffd, 0x3, 0xeba8, 0xffff, 0x2, 0x3, 0x8000, 0xff, 0x1000, 0x9, 0x7, 0x1, 0x80, 0x73a, 0x2b, 0x9000000, 0x80, 0x6b77, 0x7, 0x1, 0x1be3, 0x5, 0x6a8, 0x400, 0x782eb2c2, 0x81, 0x0, 0x3, 0x9, 0x3, 0xfffffffe, 0x9, 0x80000000, 0x3, 0x10001, 0x8, 0x8000, 0x0, 0x81, 0x100, 0xfff, 0xffff, 0x6, 0x2, 0x8335, 0x101, 0x2, 0x7, 0x9, 0x401, 0x33a1, 0x22, 0x200, 0x2, 0x0, 0x7, 0x2, 0x7, 0x61, 0x100, 0x9, 0x2, 0x7ff, 0x451a, 0x4, 0x1, 0xc1fc, 0x40, 0x8, 0x1, 0x401, 0x8, 0xffff0f71, 0x3, 0xc4, 0x6, 0x3, 0xffffff65, 0x6, 0x1, 0x1, 0x7, 0x2, 0x8, 0xf7dc, 0xfffffffc, 0x20, 0x6, 0x1a77485b, 0x9, 0x3, 0x800, 0x4a9ff97a, 0x2, 0x0, 0xd8ef, 0xf86c, 0x1, 0x7, 0x6, 0x3, 0xff, 0x0, 0x4, 0x7fffffff, 0x7, 0x1aed, 0x4, 0x80000000, 0x3, 0x8001, 0x3, 0x8, 0x800, 0xd7, 0x9, 0xfffff801, 0x8, 0x9, 0x81, 0x2, 0x10001, 0x5, 0xff, 0x7f, 0x6, 0x5, 0x3, 0x200, 0x401, 0x2, 0x5, 0x1, 0x8, 0xe8c2ff8, 0xffffffff, 0x3, 0x674, 0x6, 0x8, 0x6142, 0x1ff, 0x0, 0x8001, 0x4, 0x8, 0x3, 0x0, 0x18f, 0x4, 0x2, 0xb0c, 0xfffffff9, 0x8001, 0xd0b, 0x10001, 0xfffffeff, 0x3, 0x10000, 0xd8, 0x7, 0x2, 0x6, 0x7, 0x1ff, 0x7fff, 0x30, 0x0, 0x9, 0x7, 0x3, 0x8001, 0xff, 0x8, 0x20, 0x8, 0x7, 0x200, 0xd8, 0xf379, 0x20, 0x6, 0x1ff, 0x3, 0x9, 0x10001, 0x546877dc, 0x401, 0x0, 0x9, 0x10000, 0x1, 0x2, 0x6, 0x8000, 0x9, 0x4, 0xffffc9e3, 0x2, 0xfff, 0x200000, 0x1f, 0x80, 0x20, 0x2, 0xfffffc01, 0x2, 0xff, 0x1, 0x8, 0x1f, 0x100, 0x0, 0x1, 0x3, 0x101, 0x17a64d06, 0x6, 0x1, 0xffff, 0xffffff55, 0x6, 0x5, 0xffffff6d, 0x0, 0x9, 0xdec, 0x7f, 0x5, 0xfffffffc, 0x4, 0x8, 0x1, 0x80000000, 0x0, 0x4, 0xc51, 0x783429e7, 0x511d, 0x1, 0x3, 0xfffffffb, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x2, 0x1, 0x25, 0x4, 0xffff3e19, 0x1, 0x100, 0x3, 0x10000, 0x5, 0x4, 0x2, 0x80, 0x4, 0x7, 0x3, 0x1000, 0x3, 0x0, 0x0, 0x87, 0x8, 0x1, 0x5112, 0x332, 0x8, 0xffffff58, 0x101, 0x32, 0x8000, 0xfffffff7, 0x10000000, 0x1, 0xfffffff9, 0x735, 0x4, 0x100, 0x0, 0xfff, 0x5, 0x7f, 0x8, 0x0, 0x0, 0x6, 0x3b, 0x8, 0x3, 0x7, 0x9, 0xffffffff, 0x1ff, 0x0, 0xff, 0x7, 0x6f4, 0x8, 0x5247, 0x17, 0x7, 0x96a, 0x8000, 0x7fffffff, 0x7, 0xffffa759, 0x8000, 0x81, 0x10001, 0xfffffff8, 0x81, 0x7, 0x7, 0x800, 0x5, 0x7, 0x76, 0xffffbd09, 0x200, 0x7, 0x2b, 0x3, 0x3, 0x1000, 0x8, 0x6, 0x5, 0x7, 0x3, 0x9, 0x9, 0x10000, 0x7, 0x81, 0x1, 0x5, 0x5, 0x8c, 0x1, 0x7, 0xff, 0x0, 0x400, 0xd2b, 0x1, 0x6, 0x0, 0xff, 0x1, 0x88, 0x80000001, 0x0, 0x7ff, 0x2, 0x7fff, 0x1, 0x4, 0x4, 0x1, 0x1ff, 0x0, 0x4, 0x0, 0x1ff, 0x80, 0xff, 0x8, 0xfffffffb, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x4000000, 0x5, 0x10000, 0x401, 0x7f, 0x7fff, 0x8, 0xfff, 0x7, 0x7, 0x0, 0x7fffffff, 0x4, 0x4, 0x8d9, 0x0, 0xff, 0xf62, 0x40, 0x1, 0xfffffffe, 0x4, 0x7, 0xffff0000, 0x3, 0x3f, 0x7, 0x3, 0x3, 0x1, 0x3ff, 0x0, 0x1f, 0x5a7, 0x8, 0x8, 0x4a, 0x6, 0x5, 0x10000, 0x9, 0x4, 0x100, 0x4, 0x81, 0x712, 0x7fff, 0x7f, 0xe9, 0x3, 0x6, 0x7, 0x9, 0xff, 0x101, 0x99b, 0x7, 0x2, 0x1000, 0x0, 0x9, 0x3ff, 0x5, 0x401, 0x75e, 0x65d, 0x846d, 0x7, 0x6, 0x7f, 0x80000001, 0x3ff, 0x0, 0x6, 0x1, 0x4, 0x0, 0x2, 0xa3f8, 0x0, 0x2d39, 0x80, 0x9, 0x0, 0x101, 0x9, 0x9, 0x101, 0x33, 0x9, 0xfffffffc, 0x8, 0x19, 0x1, 0x1, 0x9, 0xea, 0xfc54, 0xff, 0x7, 0x4, 0x1, 0x2eb, 0xc25, 0x4, 0x0, 0xb4, 0x1, 0xffff7494, 0xc7, 0x7, 0xb60c, 0x5, 0x5aa4, 0x7, 0x10d25fa3, 0x5b5a, 0x0, 0xa, 0xffffffff]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 01:02:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:38 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r1, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=@delchain={0xa14, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x6}, {0x0, 0x4}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @filter_kind_options=@f_rsvp6={{0xa}, {0xc8, 0x2, [@TCA_RSVP_POLICE={0xc4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x3, 0x8, 0x7, {0x5c, 0x2, 0x800, 0x87e8, 0x2, 0x389}, {0x20, 0x0, 0xf9bc, 0x7ff, 0x7ec, 0x1b}, 0x7, 0x0, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x1, 0x200, 0x48, {0x2, 0x2, 0x800, 0x4, 0x0, 0x5}, {0x7, 0x1, 0x1, 0xfff, 0x8, 0x1}, 0x3d, 0x8000, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x0, 0xb1, 0x200, {0x6, 0x1, 0x4cc, 0x3, 0x3ff, 0x1f}, {0xb, 0x3, 0x2, 0x5, 0x5, 0x2}, 0x5, 0x4, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x904, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x7}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x8, 0x2, 0x80, 0x97}, {0x6, 0x4e, 0x67, 0x80000001}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x81, 0x9, 0x5}, {0x9, 0x87, 0x6, 0x8001}, {0x400, 0x3, 0x6, 0x5}, {0x1, 0x9, 0x40, 0x7}, {0x8, 0x7, 0x7f, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xb}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x2, 0xff, 0x5}, {0x3800, 0xa1, 0x5, 0x7}, {0x4, 0x80, 0x8, 0x9}, {0x7f, 0x6d, 0x4, 0x3bd}, {0x7, 0x2, 0x2, 0x6}, {0x2531, 0x0, 0x2d, 0x7}, {0x1000, 0x1, 0xe5, 0xc69}]}}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0x5}}, @TCA_BPF_POLICE={0x838, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x5b32, 0x511, 0xb1f, 0x10001, 0x800, 0x101, 0x800, 0x1ff, 0x0, 0x1ff, 0x0, 0xfffffff7, 0xfffffffd, 0x3, 0xeba8, 0xffff, 0x2, 0x3, 0x8000, 0xff, 0x1000, 0x9, 0x7, 0x1, 0x80, 0x73a, 0x2b, 0x9000000, 0x80, 0x6b77, 0x7, 0x1, 0x1be3, 0x5, 0x6a8, 0x400, 0x782eb2c2, 0x81, 0x0, 0x3, 0x9, 0x3, 0xfffffffe, 0x9, 0x80000000, 0x3, 0x10001, 0x8, 0x8000, 0x0, 0x81, 0x100, 0xfff, 0xffff, 0x6, 0x2, 0x8335, 0x101, 0x2, 0x7, 0x9, 0x401, 0x33a1, 0x22, 0x200, 0x2, 0x0, 0x7, 0x2, 0x7, 0x61, 0x100, 0x9, 0x2, 0x7ff, 0x451a, 0x4, 0x1, 0xc1fc, 0x40, 0x8, 0x1, 0x401, 0x8, 0xffff0f71, 0x3, 0xc4, 0x6, 0x3, 0xffffff65, 0x6, 0x1, 0x1, 0x7, 0x2, 0x8, 0xf7dc, 0xfffffffc, 0x20, 0x6, 0x1a77485b, 0x9, 0x3, 0x800, 0x4a9ff97a, 0x2, 0x0, 0xd8ef, 0xf86c, 0x1, 0x7, 0x6, 0x3, 0xff, 0x0, 0x4, 0x7fffffff, 0x7, 0x1aed, 0x4, 0x80000000, 0x3, 0x8001, 0x3, 0x8, 0x800, 0xd7, 0x9, 0xfffff801, 0x8, 0x9, 0x81, 0x2, 0x10001, 0x5, 0xff, 0x7f, 0x6, 0x5, 0x3, 0x200, 0x401, 0x2, 0x5, 0x1, 0x8, 0xe8c2ff8, 0xffffffff, 0x3, 0x674, 0x6, 0x8, 0x6142, 0x1ff, 0x0, 0x8001, 0x4, 0x8, 0x3, 0x0, 0x18f, 0x4, 0x2, 0xb0c, 0xfffffff9, 0x8001, 0xd0b, 0x10001, 0xfffffeff, 0x3, 0x10000, 0xd8, 0x7, 0x2, 0x6, 0x7, 0x1ff, 0x7fff, 0x30, 0x0, 0x9, 0x7, 0x3, 0x8001, 0xff, 0x8, 0x20, 0x8, 0x7, 0x200, 0xd8, 0xf379, 0x20, 0x6, 0x1ff, 0x3, 0x9, 0x10001, 0x546877dc, 0x401, 0x0, 0x9, 0x10000, 0x1, 0x2, 0x6, 0x8000, 0x9, 0x4, 0xffffc9e3, 0x2, 0xfff, 0x200000, 0x1f, 0x80, 0x20, 0x2, 0xfffffc01, 0x2, 0xff, 0x1, 0x8, 0x1f, 0x100, 0x0, 0x1, 0x3, 0x101, 0x17a64d06, 0x6, 0x1, 0xffff, 0xffffff55, 0x6, 0x5, 0xffffff6d, 0x0, 0x9, 0xdec, 0x7f, 0x5, 0xfffffffc, 0x4, 0x8, 0x1, 0x80000000, 0x0, 0x4, 0xc51, 0x783429e7, 0x511d, 0x1, 0x3, 0xfffffffb, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x2, 0x1, 0x25, 0x4, 0xffff3e19, 0x1, 0x100, 0x3, 0x10000, 0x5, 0x4, 0x2, 0x80, 0x4, 0x7, 0x3, 0x1000, 0x3, 0x0, 0x0, 0x87, 0x8, 0x1, 0x5112, 0x332, 0x8, 0xffffff58, 0x101, 0x32, 0x8000, 0xfffffff7, 0x10000000, 0x1, 0xfffffff9, 0x735, 0x4, 0x100, 0x0, 0xfff, 0x5, 0x7f, 0x8, 0x0, 0x0, 0x6, 0x3b, 0x8, 0x3, 0x7, 0x9, 0xffffffff, 0x1ff, 0x0, 0xff, 0x7, 0x6f4, 0x8, 0x5247, 0x17, 0x7, 0x96a, 0x8000, 0x7fffffff, 0x7, 0xffffa759, 0x8000, 0x81, 0x10001, 0xfffffff8, 0x81, 0x7, 0x7, 0x800, 0x5, 0x7, 0x76, 0xffffbd09, 0x200, 0x7, 0x2b, 0x3, 0x3, 0x1000, 0x8, 0x6, 0x5, 0x7, 0x3, 0x9, 0x9, 0x10000, 0x7, 0x81, 0x1, 0x5, 0x5, 0x8c, 0x1, 0x7, 0xff, 0x0, 0x400, 0xd2b, 0x1, 0x6, 0x0, 0xff, 0x1, 0x88, 0x80000001, 0x0, 0x7ff, 0x2, 0x7fff, 0x1, 0x4, 0x4, 0x1, 0x1ff, 0x0, 0x4, 0x0, 0x1ff, 0x80, 0xff, 0x8, 0xfffffffb, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x4000000, 0x5, 0x10000, 0x401, 0x7f, 0x7fff, 0x8, 0xfff, 0x7, 0x7, 0x0, 0x7fffffff, 0x4, 0x4, 0x8d9, 0x0, 0xff, 0xf62, 0x40, 0x1, 0xfffffffe, 0x4, 0x7, 0xffff0000, 0x3, 0x3f, 0x7, 0x3, 0x3, 0x1, 0x3ff, 0x0, 0x1f, 0x5a7, 0x8, 0x8, 0x4a, 0x6, 0x5, 0x10000, 0x9, 0x4, 0x100, 0x4, 0x81, 0x712, 0x7fff, 0x7f, 0xe9, 0x3, 0x6, 0x7, 0x9, 0xff, 0x101, 0x99b, 0x7, 0x2, 0x1000, 0x0, 0x9, 0x3ff, 0x5, 0x401, 0x75e, 0x65d, 0x846d, 0x7, 0x6, 0x7f, 0x80000001, 0x3ff, 0x0, 0x6, 0x1, 0x4, 0x0, 0x2, 0xa3f8, 0x0, 0x2d39, 0x80, 0x9, 0x0, 0x101, 0x9, 0x9, 0x101, 0x33, 0x9, 0xfffffffc, 0x8, 0x19, 0x1, 0x1, 0x9, 0xea, 0xfc54, 0xff, 0x7, 0x4, 0x1, 0x2eb, 0xc25, 0x4, 0x0, 0xb4, 0x1, 0xffff7494, 0xc7, 0x7, 0xb60c, 0x5, 0x5aa4, 0x7, 0x10d25fa3, 0x5b5a, 0x0, 0xa, 0xffffffff]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x48001}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x2) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=@delchain={0xa14, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x6}, {0x0, 0x4}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @filter_kind_options=@f_rsvp6={{0xa}, {0xc8, 0x2, [@TCA_RSVP_POLICE={0xc4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x3, 0x8, 0x7, {0x5c, 0x2, 0x800, 0x87e8, 0x2, 0x389}, {0x20, 0x0, 0xf9bc, 0x7ff, 0x7ec, 0x1b}, 0x7, 0x0, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x1, 0x200, 0x48, {0x2, 0x2, 0x800, 0x4, 0x0, 0x5}, {0x7, 0x1, 0x1, 0xfff, 0x8, 0x1}, 0x3d, 0x8000, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x0, 0xb1, 0x200, {0x6, 0x1, 0x4cc, 0x3, 0x3ff, 0x1f}, {0xb, 0x3, 0x2, 0x5, 0x5, 0x2}, 0x5, 0x4, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x904, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x7}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x8, 0x2, 0x80, 0x97}, {0x6, 0x4e, 0x67, 0x80000001}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x81, 0x9, 0x5}, {0x9, 0x87, 0x6, 0x8001}, {0x400, 0x3, 0x6, 0x5}, {0x1, 0x9, 0x40, 0x7}, {0x8, 0x7, 0x7f, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xb}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x2, 0xff, 0x5}, {0x3800, 0xa1, 0x5, 0x7}, {0x4, 0x80, 0x8, 0x9}, {0x7f, 0x6d, 0x4, 0x3bd}, {0x7, 0x2, 0x2, 0x6}, {0x2531, 0x0, 0x2d, 0x7}, {0x1000, 0x1, 0xe5, 0xc69}]}}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0x5}}, @TCA_BPF_POLICE={0x838, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x5b32, 0x511, 0xb1f, 0x10001, 0x800, 0x101, 0x800, 0x1ff, 0x0, 0x1ff, 0x0, 0xfffffff7, 0xfffffffd, 0x3, 0xeba8, 0xffff, 0x2, 0x3, 0x8000, 0xff, 0x1000, 0x9, 0x7, 0x1, 0x80, 0x73a, 0x2b, 0x9000000, 0x80, 0x6b77, 0x7, 0x1, 0x1be3, 0x5, 0x6a8, 0x400, 0x782eb2c2, 0x81, 0x0, 0x3, 0x9, 0x3, 0xfffffffe, 0x9, 0x80000000, 0x3, 0x10001, 0x8, 0x8000, 0x0, 0x81, 0x100, 0xfff, 0xffff, 0x6, 0x2, 0x8335, 0x101, 0x2, 0x7, 0x9, 0x401, 0x33a1, 0x22, 0x200, 0x2, 0x0, 0x7, 0x2, 0x7, 0x61, 0x100, 0x9, 0x2, 0x7ff, 0x451a, 0x4, 0x1, 0xc1fc, 0x40, 0x8, 0x1, 0x401, 0x8, 0xffff0f71, 0x3, 0xc4, 0x6, 0x3, 0xffffff65, 0x6, 0x1, 0x1, 0x7, 0x2, 0x8, 0xf7dc, 0xfffffffc, 0x20, 0x6, 0x1a77485b, 0x9, 0x3, 0x800, 0x4a9ff97a, 0x2, 0x0, 0xd8ef, 0xf86c, 0x1, 0x7, 0x6, 0x3, 0xff, 0x0, 0x4, 0x7fffffff, 0x7, 0x1aed, 0x4, 0x80000000, 0x3, 0x8001, 0x3, 0x8, 0x800, 0xd7, 0x9, 0xfffff801, 0x8, 0x9, 0x81, 0x2, 0x10001, 0x5, 0xff, 0x7f, 0x6, 0x5, 0x3, 0x200, 0x401, 0x2, 0x5, 0x1, 0x8, 0xe8c2ff8, 0xffffffff, 0x3, 0x674, 0x6, 0x8, 0x6142, 0x1ff, 0x0, 0x8001, 0x4, 0x8, 0x3, 0x0, 0x18f, 0x4, 0x2, 0xb0c, 0xfffffff9, 0x8001, 0xd0b, 0x10001, 0xfffffeff, 0x3, 0x10000, 0xd8, 0x7, 0x2, 0x6, 0x7, 0x1ff, 0x7fff, 0x30, 0x0, 0x9, 0x7, 0x3, 0x8001, 0xff, 0x8, 0x20, 0x8, 0x7, 0x200, 0xd8, 0xf379, 0x20, 0x6, 0x1ff, 0x3, 0x9, 0x10001, 0x546877dc, 0x401, 0x0, 0x9, 0x10000, 0x1, 0x2, 0x6, 0x8000, 0x9, 0x4, 0xffffc9e3, 0x2, 0xfff, 0x200000, 0x1f, 0x80, 0x20, 0x2, 0xfffffc01, 0x2, 0xff, 0x1, 0x8, 0x1f, 0x100, 0x0, 0x1, 0x3, 0x101, 0x17a64d06, 0x6, 0x1, 0xffff, 0xffffff55, 0x6, 0x5, 0xffffff6d, 0x0, 0x9, 0xdec, 0x7f, 0x5, 0xfffffffc, 0x4, 0x8, 0x1, 0x80000000, 0x0, 0x4, 0xc51, 0x783429e7, 0x511d, 0x1, 0x3, 0xfffffffb, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x2, 0x1, 0x25, 0x4, 0xffff3e19, 0x1, 0x100, 0x3, 0x10000, 0x5, 0x4, 0x2, 0x80, 0x4, 0x7, 0x3, 0x1000, 0x3, 0x0, 0x0, 0x87, 0x8, 0x1, 0x5112, 0x332, 0x8, 0xffffff58, 0x101, 0x32, 0x8000, 0xfffffff7, 0x10000000, 0x1, 0xfffffff9, 0x735, 0x4, 0x100, 0x0, 0xfff, 0x5, 0x7f, 0x8, 0x0, 0x0, 0x6, 0x3b, 0x8, 0x3, 0x7, 0x9, 0xffffffff, 0x1ff, 0x0, 0xff, 0x7, 0x6f4, 0x8, 0x5247, 0x17, 0x7, 0x96a, 0x8000, 0x7fffffff, 0x7, 0xffffa759, 0x8000, 0x81, 0x10001, 0xfffffff8, 0x81, 0x7, 0x7, 0x800, 0x5, 0x7, 0x76, 0xffffbd09, 0x200, 0x7, 0x2b, 0x3, 0x3, 0x1000, 0x8, 0x6, 0x5, 0x7, 0x3, 0x9, 0x9, 0x10000, 0x7, 0x81, 0x1, 0x5, 0x5, 0x8c, 0x1, 0x7, 0xff, 0x0, 0x400, 0xd2b, 0x1, 0x6, 0x0, 0xff, 0x1, 0x88, 0x80000001, 0x0, 0x7ff, 0x2, 0x7fff, 0x1, 0x4, 0x4, 0x1, 0x1ff, 0x0, 0x4, 0x0, 0x1ff, 0x80, 0xff, 0x8, 0xfffffffb, 0x5, 0x1, 0x0, 0x3, 0x2, 0x2, 0x4000000, 0x5, 0x10000, 0x401, 0x7f, 0x7fff, 0x8, 0xfff, 0x7, 0x7, 0x0, 0x7fffffff, 0x4, 0x4, 0x8d9, 0x0, 0xff, 0xf62, 0x40, 0x1, 0xfffffffe, 0x4, 0x7, 0xffff0000, 0x3, 0x3f, 0x7, 0x3, 0x3, 0x1, 0x3ff, 0x0, 0x1f, 0x5a7, 0x8, 0x8, 0x4a, 0x6, 0x5, 0x10000, 0x9, 0x4, 0x100, 0x4, 0x81, 0x712, 0x7fff, 0x7f, 0xe9, 0x3, 0x6, 0x7, 0x9, 0xff, 0x101, 0x99b, 0x7, 0x2, 0x1000, 0x0, 0x9, 0x3ff, 0x5, 0x401, 0x75e, 0x65d, 0x846d, 0x7, 0x6, 0x7f, 0x80000001, 0x3ff, 0x0, 0x6, 0x1, 0x4, 0x0, 0x2, 0xa3f8, 0x0, 0x2d39, 0x80, 0x9, 0x0, 0x101, 0x9, 0x9, 0x101, 0x33, 0x9, 0xfffffffc, 0x8, 0x19, 0x1, 0x1, 0x9, 0xea, 0xfc54, 0xff, 0x7, 0x4, 0x1, 0x2eb, 0xc25, 0x4, 0x0, 0xb4, 0x1, 0xffff7494, 0xc7, 0x7, 0xb60c, 0x5, 0x5aa4, 0x7, 0x10d25fa3, 0x5b5a, 0x0, 0xa, 0xffffffff]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) [ 1143.870030][T22672] bond830: entered promiscuous mode [ 1143.875434][T22672] 8021q: adding VLAN 0 to HW filter on device bond830 01:02:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x360}, 0x0) 01:02:38 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r1, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) [ 1143.978551][T22693] ipvlan0: entered promiscuous mode [ 1143.984394][T22693] ipvlan0: left promiscuous mode 01:02:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x362}, 0x0) 01:02:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 1144.044007][T22713] __nla_validate_parse: 12 callbacks suppressed [ 1144.044028][T22713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 1144.101654][T22713] bond831: entered promiscuous mode [ 1144.107114][T22713] 8021q: adding VLAN 0 to HW filter on device bond831 [ 1144.141228][T22728] ipvlan0: entered promiscuous mode [ 1144.146839][T22728] ipvlan0: left promiscuous mode 01:02:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x440000, 0x120) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000280)) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000240)='veth0_to_batadv\x00') setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, 0x8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 01:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x368}, 0x0) 01:02:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 01:02:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x372}, 0x0) 01:02:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 01:02:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2], 0x3c}}, 0x0) [ 1144.281119][T22759] ipvlan0: entered promiscuous mode [ 1144.287799][T22759] ipvlan0: left promiscuous mode [ 1144.354636][T22766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1144.386682][T22766] bond832: entered promiscuous mode [ 1144.392238][T22766] 8021q: adding VLAN 0 to HW filter on device bond832 [ 1144.405168][T22777] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1144.443409][T22780] bond833: entered promiscuous mode [ 1144.448855][T22780] 8021q: adding VLAN 0 to HW filter on device bond833 01:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x37a}, 0x0) 01:02:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2], 0x3c}}, 0x0) 01:02:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = open(&(0x7f0000000180)='./file0\x00', 0x440000, 0x120) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000280)) (async) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000240)='veth0_to_batadv\x00') (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, 0x8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x38a}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2], 0x3c}}, 0x0) 01:02:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x440000, 0x120) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000280)) (async) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000280)) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000240)='veth0_to_batadv\x00') setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, 0x8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1144.549475][T22793] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1144.562992][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x392}, 0x0) 01:02:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 01:02:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) [ 1144.636167][T22816] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1144.647355][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 1144.700963][T22820] bond834: entered promiscuous mode [ 1144.707961][T22820] 8021q: adding VLAN 0 to HW filter on device bond834 [ 1144.720873][T22821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:02:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x398}, 0x0) 01:02:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x10000002}, @ptr={0xffffffff}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x5, 0x3}, {0x10, 0x1}]}, @union={0x9, 0x5, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x3, 0x400}, {0x7, 0x5, 0x15be}, {0x0, 0x2, 0x1}, {0xb, 0x3, 0xf9}, {0x4, 0x2, 0x8}]}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x5, 0x1000}, {0x9}]}]}, {0x0, [0x0, 0x51, 0x2e, 0x30]}}, &(0x7f00000002c0)=""/238, 0xca, 0xee, 0x1}, 0x20) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) [ 1144.802350][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1144.834364][T22820] bond835: entered promiscuous mode [ 1144.840165][T22820] 8021q: adding VLAN 0 to HW filter on device bond835 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0x0) 01:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0x0) 01:02:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 01:02:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3a8}, 0x0) 01:02:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) [ 1144.937484][T22867] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1144.999414][T22874] bond836: entered promiscuous mode [ 1145.005785][T22874] 8021q: adding VLAN 0 to HW filter on device bond836 01:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3b0}, 0x0) [ 1145.069753][T22886] ipvlan0: entered promiscuous mode [ 1145.076499][T22886] ipvlan0: left promiscuous mode 01:02:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c00010062"], 0x3c}}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x50}}, 0x0) 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3b2}, 0x0) 01:02:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x10000002}, @ptr={0xffffffff}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x5, 0x3}, {0x10, 0x1}]}, @union={0x9, 0x5, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x3, 0x400}, {0x7, 0x5, 0x15be}, {0x0, 0x2, 0x1}, {0xb, 0x3, 0xf9}, {0x4, 0x2, 0x8}]}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x5, 0x1000}, {0x9}]}]}, {0x0, [0x0, 0x51, 0x2e, 0x30]}}, &(0x7f00000002c0)=""/238, 0xca, 0xee, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x10000002}, @ptr={0xffffffff}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x5, 0x3}, {0x10, 0x1}]}, @union={0x9, 0x5, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x3, 0x400}, {0x7, 0x5, 0x15be}, {0x0, 0x2, 0x1}, {0xb, 0x3, 0xf9}, {0x4, 0x2, 0x8}]}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x5, 0x1000}, {0x9}]}]}, {0x0, [0x0, 0x51, 0x2e, 0x30]}}, &(0x7f00000002c0)=""/238, 0xca, 0xee, 0x1}, 0x20) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x50}}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3ba}, 0x0) 01:02:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c00010062"], 0x3c}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x50}}, 0x0) 01:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c080000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c0}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) [ 1145.857266][T22914] bond837: entered promiscuous mode [ 1145.862674][T22914] 8021q: adding VLAN 0 to HW filter on device bond837 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}}, 0x0) 01:02:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x10000002}, @ptr={0xffffffff}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x5, 0x3}, {0x10, 0x1}]}, @union={0x9, 0x5, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x3, 0x400}, {0x7, 0x5, 0x15be}, {0x0, 0x2, 0x1}, {0xb, 0x3, 0xf9}, {0x4, 0x2, 0x8}]}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x5, 0x1000}, {0x9}]}]}, {0x0, [0x0, 0x51, 0x2e, 0x30]}}, &(0x7f00000002c0)=""/238, 0xca, 0xee, 0x1}, 0x20) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c00010062"], 0x3c}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}}, 0x0) 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c2}, 0x0) 01:02:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYRES32=r2], 0x50}}, 0x0) 01:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:40 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:40 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) [ 1146.030697][T22950] bond838: entered promiscuous mode [ 1146.037268][T22950] 8021q: adding VLAN 0 to HW filter on device bond838 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3ca}, 0x0) 01:02:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYRES32=r2], 0x50}}, 0x0) 01:02:40 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500070000000000"], 0x50}}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) [ 1146.208295][T22950] bond839: entered promiscuous mode [ 1146.213786][T22950] 8021q: adding VLAN 0 to HW filter on device bond839 [ 1146.242497][T22966] bond343: entered promiscuous mode [ 1146.247724][T22966] bond343: entered allmulticast mode [ 1146.253502][T22966] 8021q: adding VLAN 0 to HW filter on device bond343 01:02:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3d2}, 0x0) 01:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYRES32=r2], 0x50}}, 0x0) 01:02:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) [ 1146.310286][T22978] bond839: (slave bridge3138): making interface the new active one [ 1146.318339][T22978] bridge3138: entered promiscuous mode [ 1146.328458][T22978] bond839: (slave bridge3138): Enslaving as an active interface with an up link [ 1146.346369][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond839: link becomes ready 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:02:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3d8}, 0x0) 01:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) 01:02:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0x0) 01:02:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) 01:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0x0) 01:02:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) 01:02:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) [ 1146.463720][T22987] bond344: entered promiscuous mode [ 1146.469085][T22987] bond344: entered allmulticast mode [ 1146.474950][T22987] 8021q: adding VLAN 0 to HW filter on device bond344 01:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0x0) 01:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3da}, 0x0) 01:02:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) 01:02:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x50}}, 0x0) [ 1146.583434][T23020] bond345: entered promiscuous mode [ 1146.588922][T23020] bond345: entered allmulticast mode [ 1146.595328][T23020] 8021q: adding VLAN 0 to HW filter on device bond345 01:02:41 executing program 0: pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3e2}, 0x0) [ 1146.633836][T23026] ipvlan0: entered promiscuous mode [ 1146.639645][T23026] ipvlan0: left promiscuous mode 01:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x50}}, 0x0) 01:02:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) 01:02:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x50}}, 0x0) [ 1146.719563][T23037] bond346: entered promiscuous mode [ 1146.724911][T23037] bond346: entered allmulticast mode [ 1146.730566][T23037] 8021q: adding VLAN 0 to HW filter on device bond346 01:02:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3e4}, 0x0) 01:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x50}}, 0x0) 01:02:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) [ 1146.816824][T23051] bond347: entered promiscuous mode [ 1146.822231][T23051] bond347: entered allmulticast mode [ 1146.827704][T23051] 8021q: adding VLAN 0 to HW filter on device bond347 01:02:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x50}}, 0x0) 01:02:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100"], 0x50}}, 0x0) [ 1146.862927][T23050] bond840: entered promiscuous mode [ 1146.868315][T23050] 8021q: adding VLAN 0 to HW filter on device bond840 [ 1146.942587][T23064] bond348: entered promiscuous mode [ 1146.947831][T23064] bond348: entered allmulticast mode [ 1146.953458][T23064] 8021q: adding VLAN 0 to HW filter on device bond348 01:02:42 executing program 0: pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) (async) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) (async) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3e6}, 0x0) 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}}, 0x0) 01:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:42 executing program 0: pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}}, 0x0) 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3ea}, 0x0) 01:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xbc, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xc, 0xd}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x5, 0x1, 0x3ff, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3766, 0xfc8b, 0x2, 0x5, 0x35, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x80, 0x4, 0x5, 0x0, 0x5, 0x6, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x3c7, 0xa4, 0x4, 0x401, 0x7, 0x7]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r6}) [ 1147.608079][T23080] validate_nla: 7 callbacks suppressed [ 1147.608099][T23080] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}}, 0x0) 01:02:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) [ 1147.662056][T23080] bond349: entered promiscuous mode [ 1147.667357][T23080] bond349: entered allmulticast mode [ 1147.672915][T23080] 8021q: adding VLAN 0 to HW filter on device bond349 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3ec}, 0x0) 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r2], 0x50}}, 0x0) [ 1147.756400][T23105] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1147.781583][T23105] bond841: entered promiscuous mode [ 1147.787096][T23105] 8021q: adding VLAN 0 to HW filter on device bond841 01:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1147.799923][T23107] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1147.825587][T23107] bond842: entered promiscuous mode [ 1147.831082][T23107] 8021q: adding VLAN 0 to HW filter on device bond842 [ 1147.844213][T23113] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) [ 1147.865145][T23113] bond350: entered promiscuous mode [ 1147.870450][T23113] bond350: entered allmulticast mode [ 1147.875919][T23113] 8021q: adding VLAN 0 to HW filter on device bond350 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3f0}, 0x0) 01:02:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xbc, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xc, 0xd}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x5, 0x1, 0x3ff, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3766, 0xfc8b, 0x2, 0x5, 0x35, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x80, 0x4, 0x5, 0x0, 0x5, 0x6, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x3c7, 0xa4, 0x4, 0x401, 0x7, 0x7]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xbc, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xc, 0xd}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x5, 0x1, 0x3ff, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3766, 0xfc8b, 0x2, 0x5, 0x35, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x80, 0x4, 0x5, 0x0, 0x5, 0x6, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x3c7, 0xa4, 0x4, 0x401, 0x7, 0x7]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r6}) 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1147.949549][T23126] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1147.979254][T23126] bond351: entered promiscuous mode [ 1147.984542][T23126] bond351: entered allmulticast mode [ 1147.990216][T23126] 8021q: adding VLAN 0 to HW filter on device bond351 01:02:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3f2}, 0x0) [ 1148.052008][T23134] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1148.078365][T23134] bond843: entered promiscuous mode [ 1148.084214][T23134] 8021q: adding VLAN 0 to HW filter on device bond843 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1148.097152][T23135] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) [ 1148.127264][T23144] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1148.153860][T23144] bond352: entered promiscuous mode [ 1148.159153][T23144] bond352: entered allmulticast mode [ 1148.164863][T23144] 8021q: adding VLAN 0 to HW filter on device bond352 01:02:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xbc, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xc, 0xd}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x5, 0x1, 0x3ff, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3766, 0xfc8b, 0x2, 0x5, 0x35, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x80, 0x4, 0x5, 0x0, 0x5, 0x6, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x3c7, 0xa4, 0x4, 0x401, 0x7, 0x7]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r6}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0xbc, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xc, 0xd}, {0x5, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x7, 0x5, 0x1, 0x3ff, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3766, 0xfc8b, 0x2, 0x5, 0x35, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x80, 0x4, 0x5, 0x0, 0x5, 0x6, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x3c7, 0xa4, 0x4, 0x401, 0x7, 0x7]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x4008040) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r6}) (async) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3f8}, 0x0) 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) [ 1148.257475][T23160] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1148.284309][T23160] bond353: entered promiscuous mode [ 1148.289547][T23160] bond353: entered allmulticast mode [ 1148.295303][T23160] 8021q: adding VLAN 0 to HW filter on device bond353 01:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) [ 1148.310477][T23162] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1148.345569][T23162] bond844: entered promiscuous mode [ 1148.351104][T23162] 8021q: adding VLAN 0 to HW filter on device bond844 01:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) 01:02:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3fa}, 0x0) 01:02:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000140), &(0x7f0000000180)=0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1148.444552][T23176] bond354: entered promiscuous mode [ 1148.449801][T23176] bond354: entered allmulticast mode [ 1148.455404][T23176] 8021q: adding VLAN 0 to HW filter on device bond354 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x500}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1148.536061][T23203] bond845: entered promiscuous mode [ 1148.541525][T23203] 8021q: adding VLAN 0 to HW filter on device bond845 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r2], 0x50}}, 0x0) [ 1148.675665][T23203] bond845: (slave bridge3139): making interface the new active one [ 1148.683613][T23203] bridge3139: entered promiscuous mode [ 1148.694426][T23203] bond845: (slave bridge3139): Enslaving as an active interface with an up link 01:02:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000140), &(0x7f0000000180)=0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000140), &(0x7f0000000180)=0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) (async) 01:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x700}, 0x0) 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r2], 0x50}}, 0x0) [ 1148.745924][T23209] bond846: entered promiscuous mode [ 1148.751393][T23209] 8021q: adding VLAN 0 to HW filter on device bond846 [ 1148.785628][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond845: link becomes ready 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x802}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1148.896769][T23244] bond847: entered promiscuous mode [ 1148.902325][T23244] 8021q: adding VLAN 0 to HW filter on device bond847 [ 1148.919145][T23249] bond355 (uninitialized): Released all slaves [ 1149.010609][T23244] bond847: (slave bridge3140): making interface the new active one [ 1149.018624][T23244] bridge3140: entered promiscuous mode [ 1149.029629][T23244] bond847: (slave bridge3140): Enslaving as an active interface with an up link [ 1149.041026][T23261] bond355 (uninitialized): Released all slaves 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x803}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="080001", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async, rerun: 64) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000140), &(0x7f0000000180)=0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r8}) 01:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1149.067629][T23252] bond848: entered promiscuous mode [ 1149.073099][T23252] 8021q: adding VLAN 0 to HW filter on device bond848 [ 1149.085807][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bond847: link becomes ready 01:02:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x7, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x7ffc, 0x10}, {0x10, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x900}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1149.151951][T23280] __nla_validate_parse: 60 callbacks suppressed [ 1149.151986][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.190904][T23281] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 01:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1149.204115][T23274] bond355 (uninitialized): Released all slaves [ 1149.210767][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1149.251621][T23286] bond849: entered promiscuous mode [ 1149.257688][T23286] 8021q: adding VLAN 0 to HW filter on device bond849 01:02:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9a", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1149.315794][T23290] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:02:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x7, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x7ffc, 0x10}, {0x10, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x7, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x7ffc, 0x10}, {0x10, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) (async) 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 01:02:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9a", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1149.360566][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1149.370163][T23311] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 01:02:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa01}, 0x0) [ 1149.430512][T23319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1149.457630][T23319] bond850: entered promiscuous mode [ 1149.464048][T23319] 8021q: adding VLAN 0 to HW filter on device bond850 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9a", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1149.477001][T23321] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1149.486939][T23322] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x7, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x7ffc, 0x10}, {0x10, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x7, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x7ffc, 0x10}, {0x10, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) (async) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa02}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1149.552417][T23332] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1149.629773][T23345] bond851: entered promiscuous mode [ 1149.635467][T23345] 8021q: adding VLAN 0 to HW filter on device bond851 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa03}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a00", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/blk_cgroup', 0x243, 0x45) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a00", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a00", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xab8}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1149.803722][T23379] bond852: entered promiscuous mode [ 1149.809762][T23379] 8021q: adding VLAN 0 to HW filter on device bond852 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028005000600000000000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/blk_cgroup', 0x243, 0x45) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xadd}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028005000600000000000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028005000600000000000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/blk_cgroup', 0x243, 0x45) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/blk_cgroup', 0x243, 0x45) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) (async) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1149.951434][T23406] bond853: entered promiscuous mode [ 1149.957390][T23406] 8021q: adding VLAN 0 to HW filter on device bond853 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000080002", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xade}, 0x0) 01:02:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000080002", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1150.059304][T23424] bond854: entered promiscuous mode [ 1150.064782][T23424] 8021q: adding VLAN 0 to HW filter on device bond854 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64384a9ac9a2c7202be0e7683f3397c219e52bf82c6b4a5ca4282eddc8f81f4234bbf4e718c02f714b1e393dbcb50ca1d59f60232bdc0d2a9525fee499795d609134b75188768330a5dc84814ccf7e30b2e1e94c3a31c141efaae1407cdbbefd395de744dcd544"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000080002", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 01:02:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1150.234749][T23461] bond355: entered promiscuous mode [ 1150.247453][T23461] 8021q: adding VLAN 0 to HW filter on device bond355 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xd00}, 0x0) 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64384a9ac9a2c7202be0e7683f3397c219e52bf82c6b4a5ca4282eddc8f81f4234bbf4e718c02f714b1e393dbcb50ca1d59f60232bdc0d2a9525fee499795d609134b75188768330a5dc84814ccf7e30b2e1e94c3a31c141efaae1407cdbbefd395de744dcd544"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3f02}) 01:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64384a9ac9a2c7202be0e7683f3397c219e52bf82c6b4a5ca4282eddc8f81f4234bbf4e718c02f714b1e393dbcb50ca1d59f60232bdc0d2a9525fee499795d609134b75188768330a5dc84814ccf7e30b2e1e94c3a31c141efaae1407cdbbefd395de744dcd544"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3f02}) 01:02:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x80000, 0xfffffffe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000016008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3f02}) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xb}) 01:02:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x2c, 0x80000, 0xfffffffe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000016008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xb}) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 01:02:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x80000, 0xfffffffe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000016008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2c, 0x80000, 0xfffffffe) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000016008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xb}) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 1) 01:02:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1200}, 0x0) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1150.775860][T23583] FAULT_INJECTION: forcing a failure. [ 1150.775860][T23583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.788997][T23583] CPU: 1 PID: 23583 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1150.799850][T23583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1150.810066][T23583] Call Trace: [ 1150.813331][T23583] [ 1150.816281][T23583] dump_stack_lvl+0xda/0x130 [ 1150.820892][T23583] dump_stack+0x15/0x20 [ 1150.825093][T23583] should_fail_ex+0x21f/0x230 [ 1150.829811][T23583] should_fail+0xb/0x10 [ 1150.834057][T23583] should_fail_usercopy+0x1a/0x20 [ 1150.839071][T23583] _copy_from_user+0x1e/0xd0 [ 1150.843900][T23583] copy_msghdr_from_user+0x54/0x2a0 [ 1150.849373][T23583] __sys_sendmsg+0x177/0x270 [ 1150.854042][T23583] __x64_sys_sendmsg+0x46/0x50 [ 1150.858825][T23583] do_syscall_64+0x41/0xc0 [ 1150.863257][T23583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1150.869156][T23583] RIP: 0033:0x7fc243af5169 [ 1150.873594][T23583] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1150.893263][T23583] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.901682][T23583] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1150.909727][T23583] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1150.917700][T23583] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 01:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 2) [ 1150.925722][T23583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.933723][T23583] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1150.941753][T23583] [ 1150.964766][T23589] FAULT_INJECTION: forcing a failure. [ 1150.964766][T23589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.972776][T23576] bond855: entered promiscuous mode [ 1150.977950][T23589] CPU: 1 PID: 23589 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1150.983613][T23576] 8021q: adding VLAN 0 to HW filter on device bond855 [ 1150.993748][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1150.993766][T23589] Call Trace: [ 1150.993772][T23589] [ 1150.993778][T23589] dump_stack_lvl+0xda/0x130 [ 1151.021538][T23589] dump_stack+0x15/0x20 01:02:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028005000600000000000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1151.025727][T23589] should_fail_ex+0x21f/0x230 [ 1151.030440][T23589] should_fail+0xb/0x10 [ 1151.034668][T23589] should_fail_usercopy+0x1a/0x20 [ 1151.039722][T23589] _copy_from_user+0x1e/0xd0 [ 1151.044374][T23589] iovec_from_user+0x170/0x290 [ 1151.049473][T23589] __import_iovec+0x4d/0x280 [ 1151.054090][T23589] import_iovec+0xbb/0xd0 [ 1151.058500][T23589] copy_msghdr_from_user+0x24a/0x2a0 [ 1151.063828][T23589] __sys_sendmsg+0x177/0x270 [ 1151.068580][T23589] __x64_sys_sendmsg+0x46/0x50 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1201}, 0x0) [ 1151.073363][T23589] do_syscall_64+0x41/0xc0 [ 1151.077847][T23589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1151.083857][T23589] RIP: 0033:0x7fc243af5169 [ 1151.088300][T23589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1151.108170][T23589] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.116691][T23589] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1202}, 0x0) 01:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 3) [ 1151.124722][T23589] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1151.132711][T23589] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.140996][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.149062][T23589] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1151.157041][T23589] 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1151.195030][T23606] FAULT_INJECTION: forcing a failure. [ 1151.195030][T23606] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.207812][T23606] CPU: 1 PID: 23606 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1151.218348][T23606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1151.228499][T23606] Call Trace: [ 1151.231780][T23606] [ 1151.234714][T23606] dump_stack_lvl+0xda/0x130 [ 1151.239372][T23606] dump_stack+0x15/0x20 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1203}, 0x0) [ 1151.243715][T23606] should_fail_ex+0x21f/0x230 [ 1151.248420][T23606] __should_failslab+0x92/0xa0 [ 1151.253231][T23606] should_failslab+0x9/0x20 [ 1151.257739][T23606] slab_pre_alloc_hook+0x38/0x180 [ 1151.262807][T23606] kmem_cache_alloc_node+0x5d/0x2e0 [ 1151.268017][T23606] ? __alloc_skb+0x109/0x2e0 [ 1151.272637][T23606] __alloc_skb+0x109/0x2e0 [ 1151.277144][T23606] netlink_sendmsg+0x483/0x770 [ 1151.277821][T23600] bond856: entered promiscuous mode [ 1151.281923][T23606] ? netlink_getsockopt+0x710/0x710 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028005000600000000000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000000040", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1151.281948][T23606] ____sys_sendmsg+0x375/0x4c0 [ 1151.287460][T23600] 8021q: adding VLAN 0 to HW filter on device bond856 [ 1151.292332][T23606] __sys_sendmsg+0x1e3/0x270 [ 1151.292370][T23606] __x64_sys_sendmsg+0x46/0x50 [ 1151.313889][T23606] do_syscall_64+0x41/0xc0 [ 1151.318337][T23606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1151.324275][T23606] RIP: 0033:0x7fc243af5169 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x132e}, 0x0) [ 1151.328689][T23606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1151.348739][T23606] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.357471][T23606] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1151.365485][T23606] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1151.373574][T23606] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.381580][T23606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:02:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028005000600000000000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 4) [ 1151.389558][T23606] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1151.397580][T23606] 01:02:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) 01:02:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1400}, 0x0) 01:02:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000000040", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 5) 01:02:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1803}, 0x0) [ 1151.479314][T23631] FAULT_INJECTION: forcing a failure. [ 1151.479314][T23631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.492484][T23631] CPU: 1 PID: 23631 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1151.503143][T23631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1151.513289][T23631] Call Trace: [ 1151.516718][T23631] [ 1151.519659][T23631] dump_stack_lvl+0xda/0x130 [ 1151.524246][T23631] dump_stack+0x15/0x20 [ 1151.528467][T23631] should_fail_ex+0x21f/0x230 [ 1151.533145][T23631] should_fail+0xb/0x10 [ 1151.537304][T23631] should_fail_usercopy+0x1a/0x20 [ 1151.542392][T23631] copyin+0x1a/0x90 [ 1151.546203][T23631] _copy_from_iter+0x24b/0x8c0 [ 1151.551011][T23631] ? __virt_addr_valid+0x16a/0x1b0 [ 1151.556141][T23631] ? __check_object_size+0x329/0x4e0 [ 1151.561414][T23631] netlink_sendmsg+0x53c/0x770 [ 1151.566166][T23631] ? netlink_getsockopt+0x710/0x710 [ 1151.571395][T23631] ____sys_sendmsg+0x375/0x4c0 [ 1151.576291][T23631] __sys_sendmsg+0x1e3/0x270 [ 1151.580874][T23631] __x64_sys_sendmsg+0x46/0x50 [ 1151.585710][T23631] do_syscall_64+0x41/0xc0 [ 1151.590137][T23631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1151.596123][T23631] RIP: 0033:0x7fc243af5169 [ 1151.600744][T23631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1151.620478][T23631] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:02:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 6) [ 1151.628893][T23631] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1151.636865][T23631] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1151.644965][T23631] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.652937][T23631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.660911][T23631] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1151.669178][T23631] 01:02:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000080002", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000080002", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1151.690693][T23648] FAULT_INJECTION: forcing a failure. [ 1151.690693][T23648] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.703442][T23648] CPU: 0 PID: 23648 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1151.713934][T23648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1151.724107][T23648] Call Trace: [ 1151.727604][T23648] [ 1151.730586][T23648] dump_stack_lvl+0xda/0x130 [ 1151.735230][T23648] dump_stack+0x15/0x20 01:02:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800800010068737200240002800500060000000000080002", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1151.739414][T23648] should_fail_ex+0x21f/0x230 [ 1151.744225][T23648] __should_failslab+0x92/0xa0 [ 1151.749010][T23648] should_failslab+0x9/0x20 [ 1151.753555][T23648] slab_pre_alloc_hook+0x38/0x180 [ 1151.758614][T23648] kmem_cache_alloc+0x58/0x260 [ 1151.763408][T23648] ? skb_clone+0x154/0x1e0 [ 1151.767868][T23648] skb_clone+0x154/0x1e0 [ 1151.772180][T23648] __netlink_deliver_tap+0x2c0/0x4c0 [ 1151.777611][T23648] netlink_unicast+0x615/0x640 [ 1151.782438][T23648] netlink_sendmsg+0x665/0x770 [ 1151.787220][T23648] ? netlink_getsockopt+0x710/0x710 [ 1151.792514][T23648] ____sys_sendmsg+0x375/0x4c0 [ 1151.797284][T23648] __sys_sendmsg+0x1e3/0x270 [ 1151.801971][T23648] __x64_sys_sendmsg+0x46/0x50 [ 1151.806815][T23648] do_syscall_64+0x41/0xc0 [ 1151.811241][T23648] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1151.817224][T23648] RIP: 0033:0x7fc243af5169 [ 1151.821661][T23648] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1151.841542][T23648] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.850122][T23648] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1151.858087][T23648] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1151.866142][T23648] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.874110][T23648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.882274][T23648] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1151.890262][T23648] 01:02:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000000040", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="00100085eb9afc4cd8d06e754a0081c5b589c67530ef6aaed5bb6121ef20366e2e1d239ee33c4e7ab110a1127e3b2f8ae5921d93e2be869fb940d7491f2ddfa93e5c0d59fb0e2994f916110145114d97a1d71cc56fa943f3f6fc1d5429922914f10027d7bc8fc7342f43b672216c77e06ca698b93a0df31fb9f86037d9d43a31fec0801d6a697fead8e8ef53d5e33fd6ce419f0452a54134afa8e1dc177a6f8c3e036496eddd26474eb8bf057c877f6d", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x6d0400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xa, &(0x7f0000001640)=ANY=[@ANYBLOB="18110000123f93a008c896e2af5fb4c103f52937284dea54a90fff0ccc210b528fb8094671767adc7ad6d1f653042f93591e149c8ac5cd0216c376bad785dddd8666452ebbcf129d6c7720b7dfb13fac19d27ffb9137b10875cc3cc0e380345f37ddcd2ec76700554046c17782ef45c0d0256c54e08970d0a28657d73b984d3883123b1965f0a18d9995dbff47383941f36444eb486bee20e05d2f7eee", @ANYRES32=r2, @ANYBLOB="0000000000000000726108000000002018000000030000000000186600000000000000000000020000ca0f3100000500000000000000000000008510000003000000"], &(0x7f0000000200)='GPL\x00', 0x1ce, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x9, '\x00', r4, 0x2, r6, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x6, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}) 01:02:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1a00}, 0x0) 01:02:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 7) 01:02:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1151.969709][T23667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=23667 comm=syz-executor.0 [ 1151.970407][T23648] bond356: entered promiscuous mode [ 1151.988394][T23648] bond356: entered allmulticast mode [ 1151.993960][T23648] 8021q: adding VLAN 0 to HW filter on device bond356 01:02:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x64030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="00100085eb9afc4cd8d06e754a0081c5b589c67530ef6aaed5bb6121ef20366e2e1d239ee33c4e7ab110a1127e3b2f8ae5921d93e2be869fb940d7491f2ddfa93e5c0d59fb0e2994f916110145114d97a1d71cc56fa943f3f6fc1d5429922914f10027d7bc8fc7342f43b672216c77e06ca698b93a0df31fb9f86037d9d43a31fec0801d6a697fead8e8ef53d5e33fd6ce419f0452a54134afa8e1dc177a6f8c3e036496eddd26474eb8bf057c877f6d", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x6d0400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xa, &(0x7f0000001640)=ANY=[@ANYBLOB="18110000123f93a008c896e2af5fb4c103f52937284dea54a90fff0ccc210b528fb8094671767adc7ad6d1f653042f93591e149c8ac5cd0216c376bad785dddd8666452ebbcf129d6c7720b7dfb13fac19d27ffb9137b10875cc3cc0e380345f37ddcd2ec76700554046c17782ef45c0d0256c54e08970d0a28657d73b984d3883123b1965f0a18d9995dbff47383941f36444eb486bee20e05d2f7eee", @ANYRES32=r2, @ANYBLOB="0000000000000000726108000000002018000000030000000000186600000000000000000000020000ca0f3100000500000000000000000000008510000003000000"], &(0x7f0000000200)='GPL\x00', 0x1ce, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x9, '\x00', r4, 0x2, r6, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x6, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}) 01:02:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1a01}, 0x0) [ 1152.069210][T23671] FAULT_INJECTION: forcing a failure. [ 1152.069210][T23671] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.082070][T23671] CPU: 0 PID: 23671 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1152.092585][T23671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1152.102755][T23671] Call Trace: [ 1152.106040][T23671] [ 1152.108974][T23671] dump_stack_lvl+0xda/0x130 [ 1152.113577][T23671] dump_stack+0x15/0x20 [ 1152.117747][T23671] should_fail_ex+0x21f/0x230 [ 1152.122523][T23671] __should_failslab+0x92/0xa0 [ 1152.123287][T23680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=23680 comm=syz-executor.0 [ 1152.127368][T23671] should_failslab+0x9/0x20 [ 1152.127389][T23671] slab_pre_alloc_hook+0x38/0x180 [ 1152.149943][T23671] __kmem_cache_alloc_node+0x46/0x250 [ 1152.155321][T23671] ? rtnl_newlink+0x5d/0x15a0 [ 1152.160120][T23671] kmalloc_trace+0x2a/0xa0 [ 1152.164637][T23671] rtnl_newlink+0x5d/0x15a0 [ 1152.169270][T23671] ? update_load_avg+0x1cf/0x6c0 [ 1152.174301][T23671] ? newidle_balance+0x2ba/0x330 [ 1152.179235][T23671] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 1152.186000][T23671] ? _raw_spin_unlock+0x26/0x40 [ 1152.191012][T23671] ? finish_task_switch+0xac/0x280 [ 1152.196124][T23671] ? __schedule+0x656/0x8e0 [ 1152.200673][T23671] ? selinux_capable+0x1fb/0x260 [ 1152.205630][T23671] ? __list_del_entry_valid+0x5f/0xe0 [ 1152.211110][T23671] ? _raw_spin_unlock+0x26/0x40 [ 1152.216012][T23671] ? __mutex_lock+0x21c/0x8d0 [ 1152.220701][T23671] ? rtnl_setlink+0x2d0/0x2d0 [ 1152.225706][T23671] rtnetlink_rcv_msg+0x807/0x8c0 [ 1152.230721][T23671] ? slab_post_alloc_hook+0x75/0x2d0 [ 1152.236019][T23671] ? xas_load+0x37c/0x390 [ 1152.240395][T23671] ? __rcu_read_unlock+0x4d/0x70 [ 1152.245452][T23671] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1152.250732][T23671] ? xa_load+0xb9/0xe0 [ 1152.255018][T23671] ? kmem_cache_free+0x178/0x280 [ 1152.260274][T23671] ? nlmon_xmit+0x4b/0x60 [ 1152.264780][T23671] ? __kfree_skb+0x102/0x140 [ 1152.269547][T23671] ? consume_skb+0x57/0x180 [ 1152.274569][T23671] ? nlmon_xmit+0x4b/0x60 [ 1152.278990][T23671] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1152.284539][T23671] ? ref_tracker_free+0x3a1/0x400 [ 1152.289624][T23671] ? local_bh_enable+0x1f/0x20 [ 1152.294519][T23671] ? __dev_queue_xmit+0xbba/0x1e60 [ 1152.299891][T23671] netlink_rcv_skb+0x126/0x220 [ 1152.304723][T23671] ? rtnetlink_bind+0x60/0x60 [ 1152.309522][T23671] rtnetlink_rcv+0x1c/0x20 [ 1152.314002][T23671] netlink_unicast+0x56f/0x640 [ 1152.318773][T23671] netlink_sendmsg+0x665/0x770 [ 1152.323565][T23671] ? netlink_getsockopt+0x710/0x710 [ 1152.328889][T23671] ____sys_sendmsg+0x375/0x4c0 [ 1152.334099][T23671] __sys_sendmsg+0x1e3/0x270 [ 1152.338784][T23671] __x64_sys_sendmsg+0x46/0x50 [ 1152.343558][T23671] do_syscall_64+0x41/0xc0 [ 1152.347994][T23671] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1152.354065][T23671] RIP: 0033:0x7fc243af5169 [ 1152.358478][T23671] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1152.379471][T23671] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1152.388051][T23671] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1152.396336][T23671] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1152.404517][T23671] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.412571][T23671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:02:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 8) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1152.420823][T23671] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1152.428997][T23671] 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="00100085eb9afc4cd8d06e754a0081c5b589c67530ef6aaed5bb6121ef20366e2e1d239ee33c4e7ab110a1127e3b2f8ae5921d93e2be869fb940d7491f2ddfa93e5c0d59fb0e2994f916110145114d97a1d71cc56fa943f3f6fc1d5429922914f10027d7bc8fc7342f43b672216c77e06ca698b93a0df31fb9f86037d9d43a31fec0801d6a697fead8e8ef53d5e33fd6ce419f0452a54134afa8e1dc177a6f8c3e036496eddd26474eb8bf057c877f6d", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x6d0400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xa, &(0x7f0000001640)=ANY=[@ANYBLOB="18110000123f93a008c896e2af5fb4c103f52937284dea54a90fff0ccc210b528fb8094671767adc7ad6d1f653042f93591e149c8ac5cd0216c376bad785dddd8666452ebbcf129d6c7720b7dfb13fac19d27ffb9137b10875cc3cc0e380345f37ddcd2ec76700554046c17782ef45c0d0256c54e08970d0a28657d73b984d3883123b1965f0a18d9995dbff47383941f36444eb486bee20e05d2f7eee", @ANYRES32=r2, @ANYBLOB="0000000000000000726108000000002018000000030000000000186600000000000000000000020000ca0f3100000500000000000000000000008510000003000000"], &(0x7f0000000200)='GPL\x00', 0x1ce, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x9, '\x00', r4, 0x2, r6, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x6, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}) 01:02:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1a03}, 0x0) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 9) 01:02:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 1) [ 1152.557716][T23706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=23706 comm=syz-executor.0 [ 1152.561719][T23695] bond357: entered promiscuous mode [ 1152.576243][T23695] bond357: entered allmulticast mode [ 1152.582053][T23695] 8021q: adding VLAN 0 to HW filter on device bond357 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/74, &(0x7f00000001c0)=0x4a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x200042, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xced6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff0001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r8, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000600)=ANY=[@ANYBLOB="62870000", @ANYRES16=r8, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffa3, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r9, 0x100, 0x70bdaa, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x695}}, @NL80211_ATTR_STA_WME={0x0, 0x81, [@NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000b90b4a99f764bee7826b9d985d7b590e5c0b90305089dca618921bb1e52b7d5d", @ANYRES16=r9, @ANYBLOB="02002dbd7000fcdbdf25640000000c0099000100008059000000"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x20000800) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@private2, 0x0, r10}) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvfrom(r12, &(0x7f0000000340)=""/175, 0xaf, 0x10040, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4, 0x100, 0x0, 0x2, r10}) [ 1152.653171][T23719] FAULT_INJECTION: forcing a failure. [ 1152.653171][T23719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.666942][T23719] CPU: 1 PID: 23719 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1152.677585][T23719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1152.687820][T23719] Call Trace: [ 1152.691102][T23719] [ 1152.692619][T23718] validate_nla: 11 callbacks suppressed 01:02:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 1152.692631][T23718] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1152.694028][T23719] dump_stack_lvl+0xda/0x130 [ 1152.713455][T23719] dump_stack+0x15/0x20 [ 1152.717797][T23719] should_fail_ex+0x21f/0x230 [ 1152.722585][T23719] should_fail+0xb/0x10 [ 1152.726860][T23719] should_fail_usercopy+0x1a/0x20 [ 1152.732086][T23719] _copy_from_user+0x1e/0xd0 [ 1152.734611][T23718] bond358: entered promiscuous mode [ 1152.736688][T23719] copy_msghdr_from_user+0x54/0x2a0 [ 1152.742338][T23718] bond358: entered allmulticast mode 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1152.747510][T23719] __sys_sendmsg+0x177/0x270 [ 1152.747543][T23719] __x64_sys_sendmsg+0x46/0x50 [ 1152.753562][T23727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23727 comm=syz-executor.0 [ 1152.757713][T23719] do_syscall_64+0x41/0xc0 [ 1152.757738][T23719] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1152.765850][T23718] 8021q: adding VLAN 0 to HW filter on device bond358 [ 1152.776378][T23719] RIP: 0033:0x7f0cb5e7d169 [ 1152.776398][T23719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1152.776415][T23719] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1152.776433][T23719] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1152.776444][T23719] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1152.776455][T23719] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 01:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 10) 01:02:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 2) [ 1152.776484][T23719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.793514][T23723] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1152.793849][T23719] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1152.829342][T23723] bond857: entered promiscuous mode [ 1152.834460][T23719] [ 1152.885405][T23723] 8021q: adding VLAN 0 to HW filter on device bond857 [ 1152.904780][T23738] FAULT_INJECTION: forcing a failure. [ 1152.904780][T23738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.918323][T23738] CPU: 1 PID: 23738 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1152.929024][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1152.939263][T23738] Call Trace: [ 1152.942559][T23738] [ 1152.945494][T23738] dump_stack_lvl+0xda/0x130 [ 1152.950174][T23738] dump_stack+0x15/0x20 01:02:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2202}, 0x0) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1152.954341][T23738] should_fail_ex+0x21f/0x230 [ 1152.959030][T23738] should_fail+0xb/0x10 [ 1152.963415][T23738] should_fail_usercopy+0x1a/0x20 [ 1152.968567][T23738] _copy_from_user+0x1e/0xd0 [ 1152.973178][T23738] iovec_from_user+0x170/0x290 [ 1152.977978][T23738] __import_iovec+0x4d/0x280 [ 1152.982704][T23738] import_iovec+0xbb/0xd0 [ 1152.987122][T23738] copy_msghdr_from_user+0x24a/0x2a0 [ 1152.992548][T23738] __sys_sendmsg+0x177/0x270 [ 1152.997421][T23738] __x64_sys_sendmsg+0x46/0x50 [ 1153.002356][T23738] do_syscall_64+0x41/0xc0 [ 1153.006901][T23738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1153.012883][T23738] RIP: 0033:0x7f0cb5e7d169 [ 1153.017490][T23738] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.037352][T23738] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.045800][T23738] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 01:02:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 3) [ 1153.054046][T23738] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1153.062117][T23738] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.070640][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.078737][T23738] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1153.086987][T23738] [ 1153.111266][T23746] FAULT_INJECTION: forcing a failure. [ 1153.111266][T23746] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.124157][T23746] CPU: 1 PID: 23746 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1153.134824][T23746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1153.144869][T23746] Call Trace: [ 1153.148139][T23746] [ 1153.151060][T23746] dump_stack_lvl+0xda/0x130 [ 1153.155789][T23746] dump_stack+0x15/0x20 [ 1153.159964][T23746] should_fail_ex+0x21f/0x230 [ 1153.164662][T23746] __should_failslab+0x92/0xa0 [ 1153.169461][T23746] should_failslab+0x9/0x20 [ 1153.174048][T23746] slab_pre_alloc_hook+0x38/0x180 [ 1153.179079][T23746] kmem_cache_alloc_node+0x5d/0x2e0 [ 1153.184272][T23746] ? __alloc_skb+0x109/0x2e0 [ 1153.188997][T23746] __alloc_skb+0x109/0x2e0 [ 1153.193434][T23746] netlink_sendmsg+0x483/0x770 [ 1153.198206][T23746] ? netlink_getsockopt+0x710/0x710 [ 1153.203425][T23746] ____sys_sendmsg+0x375/0x4c0 [ 1153.208305][T23746] __sys_sendmsg+0x1e3/0x270 [ 1153.212942][T23746] __x64_sys_sendmsg+0x46/0x50 [ 1153.217776][T23746] do_syscall_64+0x41/0xc0 [ 1153.222486][T23746] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1153.228380][T23746] RIP: 0033:0x7f0cb5e7d169 [ 1153.233309][T23746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.253796][T23746] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.262292][T23746] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1153.270308][T23746] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1153.278459][T23746] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.286682][T23746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.294656][T23746] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1153.302864][T23746] 01:02:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 4) [ 1153.306655][T23735] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1153.337588][T23735] bond359: entered promiscuous mode [ 1153.343058][T23735] bond359: entered allmulticast mode [ 1153.350625][T23735] 8021q: adding VLAN 0 to HW filter on device bond359 01:02:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/74, &(0x7f00000001c0)=0x4a) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x200042, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xced6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff0001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r8, &(0x7f0000000100)}, 0x20) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000600)=ANY=[@ANYBLOB="62870000", @ANYRES16=r8, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffa3, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r9, 0x100, 0x70bdaa, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x695}}, @NL80211_ATTR_STA_WME={0x0, 0x81, [@NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000b90b4a99f764bee7826b9d985d7b590e5c0b90305089dca618921bb1e52b7d5d", @ANYRES16=r9, @ANYBLOB="02002dbd7000fcdbdf25640000000c0099000100008059000000"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x20000800) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e75000081c5f71025534602d708039cd0bf4653b922767b289ec0a9e4f044dfa838a4a362346901eeb3145de5dad2c151314a404749332f53f7bc75adbb694580b729ae00b2e1b7545243f97f665aa9f09904dfa620f69a647996dfffa2c85386f7ce9ba06fa9c1bd49a8eaaefb65c8a5ba5d81430485032c4c2c65b92c4ddd1bd7bebaded4766905c3fe653ef130f976dbe28d0af5a99aad5ce139aecbdbd1433339b14b9cc619e3a8bc7b6bd808818e6c7b2246596a4649784678fc3fafcc6d5649057447e73f1adcee783863b1a850c0ea0c038bb83062277096cae5c6b22f388b934fb32a290d84af884a5bfb503116c17f0bc87c6d6ed0afe83c3d6b6befd2fbdcce77189c12f8db76412d59de4fe93a6a3316e0c6441aa6569108e6fbcfaa6f1a60d6e2c2176a804f2933ea92ec2428f407112c873cf3369e5bc0350de113856502b8e40f35ec0a31aa0a50a0c5d995396cf1f31724019354bf7b2e0e2c54c5aa585dddf1366cd411969efffdb0273c", @ANYRES32=r10, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@private2, 0x0, r10}) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvfrom(r12, &(0x7f0000000340)=""/175, 0xaf, 0x10040, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4, 0x100, 0x0, 0x2, r10}) 01:02:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 5) 01:02:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 11) 01:02:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2300}, 0x0) [ 1153.427449][T23756] FAULT_INJECTION: forcing a failure. [ 1153.427449][T23756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.440862][T23756] CPU: 0 PID: 23756 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1153.452603][T23756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1153.463096][T23756] Call Trace: [ 1153.466688][T23756] [ 1153.469728][T23756] dump_stack_lvl+0xda/0x130 [ 1153.474369][T23756] dump_stack+0x15/0x20 [ 1153.478621][T23756] should_fail_ex+0x21f/0x230 [ 1153.483291][T23756] should_fail+0xb/0x10 [ 1153.487562][T23756] should_fail_usercopy+0x1a/0x20 [ 1153.492580][T23756] copyin+0x1a/0x90 [ 1153.496552][T23756] _copy_from_iter+0x24b/0x8c0 [ 1153.501402][T23756] ? __virt_addr_valid+0x16a/0x1b0 [ 1153.503367][T23762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23762 comm=syz-executor.0 [ 1153.506629][T23756] ? __check_object_size+0x329/0x4e0 [ 1153.525397][T23756] netlink_sendmsg+0x53c/0x770 [ 1153.530571][T23756] ? netlink_getsockopt+0x710/0x710 [ 1153.535775][T23756] ____sys_sendmsg+0x375/0x4c0 [ 1153.540762][T23756] __sys_sendmsg+0x1e3/0x270 [ 1153.545525][T23756] __x64_sys_sendmsg+0x46/0x50 [ 1153.550328][T23756] do_syscall_64+0x41/0xc0 [ 1153.554736][T23756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1153.560786][T23756] RIP: 0033:0x7f0cb5e7d169 [ 1153.565471][T23756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.585241][T23756] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.594195][T23756] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1153.602253][T23756] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1153.610248][T23756] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.618583][T23756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:02:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 6) [ 1153.626841][T23756] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1153.634948][T23756] [ 1153.671780][T23767] FAULT_INJECTION: forcing a failure. [ 1153.671780][T23767] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.683698][T23760] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1153.684678][T23767] CPU: 0 PID: 23767 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1153.692911][T23760] FAULT_INJECTION: forcing a failure. [ 1153.692911][T23760] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.703174][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1153.703188][T23767] Call Trace: [ 1153.703193][T23767] [ 1153.703198][T23767] dump_stack_lvl+0xda/0x130 [ 1153.703234][T23767] dump_stack+0x15/0x20 [ 1153.703248][T23767] should_fail_ex+0x21f/0x230 [ 1153.703268][T23767] __should_failslab+0x92/0xa0 [ 1153.703287][T23767] should_failslab+0x9/0x20 [ 1153.755603][T23767] slab_pre_alloc_hook+0x38/0x180 [ 1153.760735][T23767] kmem_cache_alloc+0x58/0x260 [ 1153.765866][T23767] ? skb_clone+0x154/0x1e0 [ 1153.770374][T23767] skb_clone+0x154/0x1e0 [ 1153.774790][T23767] __netlink_deliver_tap+0x2c0/0x4c0 [ 1153.780260][T23767] netlink_unicast+0x615/0x640 [ 1153.785082][T23767] netlink_sendmsg+0x665/0x770 [ 1153.790137][T23767] ? netlink_getsockopt+0x710/0x710 [ 1153.795518][T23767] ____sys_sendmsg+0x375/0x4c0 [ 1153.801282][T23767] __sys_sendmsg+0x1e3/0x270 [ 1153.805905][T23767] __x64_sys_sendmsg+0x46/0x50 [ 1153.810722][T23767] do_syscall_64+0x41/0xc0 [ 1153.815168][T23767] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1153.821313][T23767] RIP: 0033:0x7f0cb5e7d169 [ 1153.825839][T23767] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.845618][T23767] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.854348][T23767] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1153.862752][T23767] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:02:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400}, 0x0) [ 1153.870891][T23767] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.878981][T23767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.887303][T23767] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1153.895396][T23767] [ 1153.898428][T23760] CPU: 1 PID: 23760 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1153.908865][T23760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1153.919129][T23760] Call Trace: [ 1153.922444][T23760] [ 1153.925451][T23760] dump_stack_lvl+0xda/0x130 [ 1153.930124][T23760] dump_stack+0x15/0x20 [ 1153.934453][T23760] should_fail_ex+0x21f/0x230 [ 1153.939395][T23760] __should_failslab+0x92/0xa0 [ 1153.944165][T23760] should_failslab+0x9/0x20 [ 1153.948844][T23760] slab_pre_alloc_hook+0x38/0x180 [ 1153.954082][T23760] __kmem_cache_alloc_node+0x46/0x250 [ 1153.959456][T23760] ? __hw_addr_add_ex+0x13d/0x350 [ 1153.964500][T23760] kmalloc_trace+0x2a/0xa0 [ 1153.968992][T23760] __hw_addr_add_ex+0x13d/0x350 [ 1153.973862][T23760] dev_addr_init+0xb2/0x120 [ 1153.978631][T23760] ? stack_depot_init+0x4f/0x130 [ 1153.987308][T23760] alloc_netdev_mqs+0x1b6/0x870 [ 1153.992444][T23760] ? bond_slave_arr_work_rearm+0x40/0x40 [ 1153.998168][T23760] rtnl_create_link+0x226/0x7f0 [ 1154.003094][T23760] rtnl_newlink+0xda3/0x15a0 [ 1154.007948][T23760] ? __list_del_entry_valid+0x5f/0xe0 [ 1154.013491][T23760] ? _raw_spin_unlock+0x26/0x40 [ 1154.018559][T23760] ? __mutex_lock+0x21c/0x8d0 [ 1154.023561][T23760] ? rtnl_setlink+0x2d0/0x2d0 [ 1154.028279][T23760] rtnetlink_rcv_msg+0x807/0x8c0 [ 1154.033231][T23760] ? slab_post_alloc_hook+0x75/0x2d0 [ 1154.038606][T23760] ? xas_load+0x37c/0x390 [ 1154.042976][T23760] ? __rcu_read_unlock+0x4d/0x70 [ 1154.048002][T23760] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1154.053369][T23760] ? xa_load+0xb9/0xe0 [ 1154.057502][T23760] ? kmem_cache_free+0x178/0x280 [ 1154.062461][T23760] ? nlmon_xmit+0x4b/0x60 [ 1154.067006][T23760] ? __kfree_skb+0x102/0x140 [ 1154.071589][T23760] ? consume_skb+0x57/0x180 [ 1154.076626][T23760] ? nlmon_xmit+0x4b/0x60 [ 1154.080952][T23760] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1154.086301][T23760] ? ref_tracker_free+0x3a1/0x400 [ 1154.091598][T23760] ? local_bh_enable+0x1f/0x20 [ 1154.096474][T23760] ? __dev_queue_xmit+0xbba/0x1e60 [ 1154.101684][T23760] netlink_rcv_skb+0x126/0x220 [ 1154.106484][T23760] ? rtnetlink_bind+0x60/0x60 [ 1154.111169][T23760] rtnetlink_rcv+0x1c/0x20 [ 1154.115808][T23760] netlink_unicast+0x56f/0x640 [ 1154.120797][T23760] netlink_sendmsg+0x665/0x770 [ 1154.125774][T23760] ? netlink_getsockopt+0x710/0x710 [ 1154.131070][T23760] ____sys_sendmsg+0x375/0x4c0 [ 1154.136004][T23760] __sys_sendmsg+0x1e3/0x270 [ 1154.140659][T23760] __x64_sys_sendmsg+0x46/0x50 [ 1154.145636][T23760] do_syscall_64+0x41/0xc0 [ 1154.150086][T23760] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1154.156018][T23760] RIP: 0033:0x7fc243af5169 [ 1154.160562][T23760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1154.180159][T23760] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.188575][T23760] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1154.196683][T23760] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1154.205153][T23760] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.213383][T23760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:02:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:48 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/74, &(0x7f00000001c0)=0x4a) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x200042, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xced6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff0001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xced6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff0001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r8, &(0x7f0000000100)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r8, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000600)=ANY=[@ANYBLOB="62870000", @ANYRES16=r8, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffa3, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r9, 0x100, 0x70bdaa, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x695}}, @NL80211_ATTR_STA_WME={0x0, 0x81, [@NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000b90b4a99f764bee7826b9d985d7b590e5c0b90305089dca618921bb1e52b7d5d", @ANYRES16=r9, @ANYBLOB="02002dbd7000fcdbdf25640000000c0099000100008059000000"], 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x20000800) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e75000081c5f71025534602d708039cd0bf4653b922767b289ec0a9e4f044dfa838a4a362346901eeb3145de5dad2c151314a404749332f53f7bc75adbb694580b729ae00b2e1b7545243f97f665aa9f09904dfa620f69a647996dfffa2c85386f7ce9ba06fa9c1bd49a8eaaefb65c8a5ba5d81430485032c4c2c65b92c4ddd1bd7bebaded4766905c3fe653ef130f976dbe28d0af5a99aad5ce139aecbdbd1433339b14b9cc619e3a8bc7b6bd808818e6c7b2246596a4649784678fc3fafcc6d5649057447e73f1adcee783863b1a850c0ea0c038bb83062277096cae5c6b22f388b934fb32a290d84af884a5bfb503116c17f0bc87c6d6ed0afe83c3d6b6befd2fbdcce77189c12f8db76412d59de4fe93a6a3316e0c6441aa6569108e6fbcfaa6f1a60d6e2c2176a804f2933ea92ec2428f407112c873cf3369e5bc0350de113856502b8e40f35ec0a31aa0a50a0c5d995396cf1f31724019354bf7b2e0e2c54c5aa585dddf1366cd411969efffdb0273c", @ANYRES32=r10, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@private2, 0x0, r10}) socket(0x10, 0x803, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvfrom(r12, &(0x7f0000000340)=""/175, 0xaf, 0x10040, 0x0, 0x0) (async) recvfrom(r12, &(0x7f0000000340)=""/175, 0xaf, 0x10040, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4, 0x100, 0x0, 0x2, r10}) [ 1154.221405][T23760] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1154.229468][T23760] [ 1154.232739][T23761] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1154.246971][T23767] __nla_validate_parse: 77 callbacks suppressed [ 1154.246984][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:02:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 12) 01:02:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000000040", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1154.273737][T23767] ipvlan0: entered promiscuous mode [ 1154.279688][T23767] ipvlan0: left promiscuous mode [ 1154.293575][T23768] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 01:02:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2500}, 0x0) [ 1154.328983][T23775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23775 comm=syz-executor.0 [ 1154.331678][T23777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23777 comm=syz-executor.0 [ 1154.369806][T23776] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:02:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 7) 01:02:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r11, &(0x7f0000000c00)="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"}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r10, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000340)=ANY=[@ANYBLOB="62870002000000", @ANYRES16=r11, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffa3, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r12, 0x100, 0x70bdaa, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x695}}, @NL80211_ATTR_STA_WME={0x0, 0x81, [@NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x518, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xee68, 0x72}}}}, [@NL80211_ATTR_FRAME={0x4f0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x36}, @random="57c5e5f91917", @broadcast, @broadcast, {0x4, 0x2}}, {0xb, 0x1, 0x1, 0x0, 0x7}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @random="2390abae69f7", @device_b, @from_mac, {0x8, 0x3f}}, {0x3, 0x0, 0x3, 0x1, 0x3f}}}, @a_msdu=[{@device_b, @device_b, 0x8f, "b59df89651b5504fd4b17bb8ad74936b7b77ab65adb14240ff6c45261bf1c3fae7dc3da4750ef4e142a64e5d1175cec181bed24442c0e522226ae256b2b5034a6ba56179b05c8f2da6d6d87431da4953b2dc754c1de03aa2309814dfa8281ca2b8ca06d1b27a10caf53e54df1361cf297a3947b35833f8fd8f42f5c49f8fef15d0e3ae41dd5ca97b57d555f9708051"}, {@broadcast, @device_a, 0xfd, "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"}, {@broadcast, @device_b, 0xf6, "72b04427ca91f906ae36cd2ce823fa09caf0899d3165865522211774f9c7949d7bbfd94f8cab179a3a85328fb2951001a23b3b27d7f9710f7a1142abf4eda136a1e40cee7e60ff8edbb671f580a7ae18a010bb36fadd1ef9be5b5e8f4e8e5038775ddc26393c40e9788b6777f2384751a4a93d21e46d7942a73da3c25ed550ba35777df56c23b8fb57cd3e3a8698f6419246d9a3a6b0e8d8f98a9c395e2b1bc9ba14a254fbbc733fe42da90054010ea4b8d55a6b6d3a9836d9cd5f7c88e422448d261dae2535897522e27f8cf44d1c20f3d08c9f676c5f2248ac22cc5d00b8b89468fd4c2410b4b590b74ddd08d0dccadeeace9af7c0"}, {@device_b, @broadcast, 0xfe, "4f8ed79c7c14ddb8cd976bd91ae242f7a65042697d2418871d9cfb6c425961124279050434abfb899d7cda8da2f8dbeb1d46ac41a46870fd2d2f9f0ce6c3b4bf79420ac809fe327d30eb768960244af4f0edd2494bb2f9ba62e8efe15011be8f48f257ded413b13c91a9adefb8a3336820c669c6509d7c9545d3232f27a7ac2d3e4de71d32c94adc3b11e30fcb98b663c967bf34509d43ce199d3619765336184bc49630afdb716a4951c009153dd642d3eeed28d1b33fba693c9ee5c0612d9df336ccca838d62a7e2cfce0cfa3aa32080dffc861616d57911705c2aebe259874ef6a8a7c60f52c920eb22415913d3a1554f584ea7217e93fa9c522d51cc"}, {@broadcast, @broadcast, 0x71, "1b0039b26b4be5f3038cb48362086de4da38e17add4028ff07fb76a0f40c20e6655848c746092bd89ded7b596549ef596dc6b2f97d606e715e14983f46ec1ca9e9cdb40aac3ab523332640fe5455d9fc8456ea733655020e60b26a2186fddbc9bbfcf62085f4e1f59086dfeb786ced61a9"}, {@device_a, @device_a, 0x6e, "f72f0212dabba861e75b07410f77cc21f0eabd6aadda3bdfd35ee8bf6d0472b43483f389ddda6157b708f6d534aa324d7a9dc4f42dc42b99f373afd0c097a7652770b9c8719b6590623e26a02e9065f4a67c875e4bc9a4902b7d1d6f2ccb838b4f4911b437de667e552fb6bc8d94"}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x400c00c}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x0, 0x6, 0x135, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1154.384162][T23779] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 13) 01:02:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000000040", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1154.427678][T23779] bond360: entered promiscuous mode [ 1154.433012][T23779] bond360: entered allmulticast mode [ 1154.438586][T23779] 8021q: adding VLAN 0 to HW filter on device bond360 [ 1154.451413][T23781] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 01:02:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2a00}, 0x0) [ 1154.493756][T23788] FAULT_INJECTION: forcing a failure. [ 1154.493756][T23788] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.506683][T23788] CPU: 1 PID: 23788 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1154.517468][T23788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1154.527814][T23788] Call Trace: [ 1154.531288][T23788] [ 1154.534267][T23788] dump_stack_lvl+0xda/0x130 [ 1154.538913][T23788] dump_stack+0x15/0x20 [ 1154.543305][T23788] should_fail_ex+0x21f/0x230 [ 1154.548076][T23788] __should_failslab+0x92/0xa0 [ 1154.553007][T23788] should_failslab+0x9/0x20 [ 1154.557553][T23788] slab_pre_alloc_hook+0x38/0x180 [ 1154.563444][T23788] __kmem_cache_alloc_node+0x46/0x250 [ 1154.568901][T23788] ? rtnl_newlink+0x5d/0x15a0 [ 1154.573766][T23788] kmalloc_trace+0x2a/0xa0 [ 1154.578244][T23788] rtnl_newlink+0x5d/0x15a0 [ 1154.589876][T23788] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1154.595417][T23788] ? update_load_avg+0x1cf/0x6c0 [ 1154.601109][T23788] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 1154.607823][T23788] ? _raw_spin_unlock+0x26/0x40 [ 1154.612978][T23788] ? finish_task_switch+0xac/0x280 [ 1154.618130][T23788] ? __schedule+0x656/0x8e0 [ 1154.622718][T23788] ? selinux_capable+0x1fb/0x260 [ 1154.627822][T23788] ? __list_del_entry_valid+0x5f/0xe0 [ 1154.633256][T23788] ? _raw_spin_unlock+0x26/0x40 [ 1154.638225][T23788] ? __mutex_lock+0x21c/0x8d0 [ 1154.642939][T23788] ? rtnl_setlink+0x2d0/0x2d0 [ 1154.648222][T23788] rtnetlink_rcv_msg+0x807/0x8c0 [ 1154.653273][T23788] ? slab_post_alloc_hook+0x75/0x2d0 [ 1154.658559][T23788] ? xas_load+0x37c/0x390 [ 1154.662933][T23788] ? __rcu_read_unlock+0x4d/0x70 [ 1154.668184][T23788] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1154.673645][T23788] ? xa_load+0xb9/0xe0 [ 1154.677893][T23788] ? kmem_cache_free+0x178/0x280 [ 1154.682839][T23788] ? nlmon_xmit+0x4b/0x60 [ 1154.687379][T23788] ? __kfree_skb+0x102/0x140 [ 1154.692187][T23788] ? consume_skb+0x57/0x180 [ 1154.697314][T23788] ? nlmon_xmit+0x4b/0x60 [ 1154.701697][T23788] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1154.707041][T23788] ? ref_tracker_free+0x3a1/0x400 [ 1154.712225][T23788] ? local_bh_enable+0x1f/0x20 [ 1154.717319][T23788] ? __dev_queue_xmit+0xbba/0x1e60 [ 1154.722606][T23788] netlink_rcv_skb+0x126/0x220 [ 1154.727379][T23788] ? rtnetlink_bind+0x60/0x60 [ 1154.732158][T23788] rtnetlink_rcv+0x1c/0x20 [ 1154.736570][T23788] netlink_unicast+0x56f/0x640 [ 1154.741366][T23788] netlink_sendmsg+0x665/0x770 [ 1154.746197][T23788] ? netlink_getsockopt+0x710/0x710 [ 1154.751855][T23788] ____sys_sendmsg+0x375/0x4c0 [ 1154.756893][T23788] __sys_sendmsg+0x1e3/0x270 [ 1154.761496][T23788] __x64_sys_sendmsg+0x46/0x50 [ 1154.766294][T23788] do_syscall_64+0x41/0xc0 [ 1154.770720][T23788] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1154.777059][T23788] RIP: 0033:0x7f0cb5e7d169 [ 1154.781644][T23788] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1154.802237][T23788] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.810665][T23788] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1154.818724][T23788] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1154.826823][T23788] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.834932][T23788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:02:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 8) [ 1154.843172][T23788] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1154.851148][T23788] [ 1154.855230][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1154.889755][T23791] bond858: entered promiscuous mode [ 1154.895224][T23791] 8021q: adding VLAN 0 to HW filter on device bond858 [ 1154.926396][T23795] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 14) 01:02:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000030500000000000000000040", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1154.947930][T23795] bond361: entered promiscuous mode [ 1154.953280][T23795] bond361: entered allmulticast mode [ 1154.958732][T23795] 8021q: adding VLAN 0 to HW filter on device bond361 [ 1154.976522][T23799] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 01:02:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2a02}, 0x0) [ 1155.015600][T23810] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1155.039189][T23810] bond362: entered promiscuous mode [ 1155.044502][T23810] bond362: entered allmulticast mode [ 1155.050075][T23810] 8021q: adding VLAN 0 to HW filter on device bond362 01:02:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 15) [ 1155.062773][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1155.079318][T23805] FAULT_INJECTION: forcing a failure. [ 1155.079318][T23805] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.092371][T23805] CPU: 0 PID: 23805 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1155.103468][T23805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1155.113785][T23805] Call Trace: [ 1155.117172][T23805] [ 1155.120317][T23805] dump_stack_lvl+0xda/0x130 [ 1155.124998][T23805] dump_stack+0x15/0x20 [ 1155.129243][T23805] should_fail_ex+0x21f/0x230 [ 1155.134353][T23805] __should_failslab+0x92/0xa0 [ 1155.139216][T23805] should_failslab+0x9/0x20 [ 1155.143816][T23805] slab_pre_alloc_hook+0x38/0x180 [ 1155.148911][T23805] ? kvmalloc_node+0x72/0x160 [ 1155.153638][T23805] __kmem_cache_alloc_node+0x46/0x250 [ 1155.159113][T23805] ? kvmalloc_node+0x72/0x160 [ 1155.163786][T23805] __kmalloc_node+0x98/0x1a0 [ 1155.168513][T23805] kvmalloc_node+0x72/0x160 [ 1155.173037][T23805] alloc_netdev_mqs+0x89/0x870 [ 1155.177987][T23805] ? hsr_del_ports+0x90/0x90 [ 1155.182739][T23805] rtnl_create_link+0x226/0x7f0 [ 1155.187675][T23805] rtnl_newlink+0xda3/0x15a0 [ 1155.192450][T23805] ? __list_del_entry_valid+0x5f/0xe0 [ 1155.198088][T23805] ? _raw_spin_unlock+0x26/0x40 [ 1155.203066][T23805] ? __mutex_lock+0x21c/0x8d0 [ 1155.207741][T23805] ? rtnl_setlink+0x2d0/0x2d0 [ 1155.212575][T23805] rtnetlink_rcv_msg+0x807/0x8c0 [ 1155.217735][T23805] ? slab_post_alloc_hook+0x75/0x2d0 [ 1155.223034][T23805] ? xas_load+0x37c/0x390 [ 1155.227411][T23805] ? __rcu_read_unlock+0x4d/0x70 [ 1155.232372][T23805] ? xa_load+0xb9/0xe0 [ 1155.236457][T23805] ? kmem_cache_free+0x178/0x280 [ 1155.241651][T23805] ? nlmon_xmit+0x4b/0x60 [ 1155.246416][T23805] ? __kfree_skb+0x102/0x140 [ 1155.251124][T23805] ? consume_skb+0x57/0x180 [ 1155.255831][T23805] ? nlmon_xmit+0x4b/0x60 [ 1155.260181][T23805] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1155.265583][T23805] ? ref_tracker_free+0x3a1/0x400 [ 1155.270660][T23805] ? local_bh_enable+0x1f/0x20 [ 1155.275432][T23805] ? __dev_queue_xmit+0xbba/0x1e60 [ 1155.280539][T23805] netlink_rcv_skb+0x126/0x220 [ 1155.285454][T23805] ? rtnetlink_bind+0x60/0x60 [ 1155.290287][T23805] rtnetlink_rcv+0x1c/0x20 [ 1155.294791][T23805] netlink_unicast+0x56f/0x640 [ 1155.299637][T23805] netlink_sendmsg+0x665/0x770 [ 1155.304401][T23805] ? netlink_getsockopt+0x710/0x710 [ 1155.309598][T23805] ____sys_sendmsg+0x375/0x4c0 [ 1155.314641][T23805] __sys_sendmsg+0x1e3/0x270 [ 1155.319295][T23805] __x64_sys_sendmsg+0x46/0x50 [ 1155.324072][T23805] do_syscall_64+0x41/0xc0 [ 1155.328505][T23805] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1155.334442][T23805] RIP: 0033:0x7f0cb5e7d169 [ 1155.338849][T23805] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1155.358570][T23805] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:02:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 9) 01:02:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) (async) vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r11, &(0x7f0000000c00)="41da36e5e72eb2684d204a0f47b76602a8eed5c4ff02001423021662764717c9e688d39b4e016dbd0968dc248f8c2bf15611620eb70ba22e1df1a3aa1171c86658eed48414bd8061244ff1992164edc6d9ef0e28ff6fb20da5fbc1fdd0811e6c537eea9c67e7f2ea355e2abee318d4d1cb4f2a0054a8cfef0d1a3c5beed6b3bc0d1ef1d148c282fc29511217295dfbd9bb2bfa98db345ec4d53817d6a42f0a7907f27748b0e6b90907956f5e149c5cad681c4d9fabb8d16d58a4169cc6ab76324830dae938112683fbedaa3bd648762d0f2d9cd0f3401c699ceddfe25c8c993e74efb1dd5670f16b1007cd41c847796700fc3db5807b71c8fa3de9ef502dff06d351f4c261f4eb659710b5a9c96d68bf9c70bb66f067e375c67289e5e7c186069ae760c0951d5fa797fa10cb8ff2dcecf833a2361867449e1d92afcbb1369bca1de859ff12ca4bff6b53d8dde7c09fcc9b3ab9e3e6932c0dc50bb712cc23bcbadfb0e430f7c11dc1a858e720bdd165218a6139"}, 0x20) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r10, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000340)=ANY=[@ANYBLOB="62870002000000", @ANYRES16=r11, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffa3, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r12, 0x100, 0x70bdaa, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x695}}, @NL80211_ATTR_STA_WME={0x0, 0x81, [@NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x518, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xee68, 0x72}}}}, [@NL80211_ATTR_FRAME={0x4f0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x36}, @random="57c5e5f91917", @broadcast, @broadcast, {0x4, 0x2}}, {0xb, 0x1, 0x1, 0x0, 0x7}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @random="2390abae69f7", @device_b, @from_mac, {0x8, 0x3f}}, {0x3, 0x0, 0x3, 0x1, 0x3f}}}, @a_msdu=[{@device_b, @device_b, 0x8f, "b59df89651b5504fd4b17bb8ad74936b7b77ab65adb14240ff6c45261bf1c3fae7dc3da4750ef4e142a64e5d1175cec181bed24442c0e522226ae256b2b5034a6ba56179b05c8f2da6d6d87431da4953b2dc754c1de03aa2309814dfa8281ca2b8ca06d1b27a10caf53e54df1361cf297a3947b35833f8fd8f42f5c49f8fef15d0e3ae41dd5ca97b57d555f9708051"}, {@broadcast, @device_a, 0xfd, "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"}, {@broadcast, @device_b, 0xf6, "72b04427ca91f906ae36cd2ce823fa09caf0899d3165865522211774f9c7949d7bbfd94f8cab179a3a85328fb2951001a23b3b27d7f9710f7a1142abf4eda136a1e40cee7e60ff8edbb671f580a7ae18a010bb36fadd1ef9be5b5e8f4e8e5038775ddc26393c40e9788b6777f2384751a4a93d21e46d7942a73da3c25ed550ba35777df56c23b8fb57cd3e3a8698f6419246d9a3a6b0e8d8f98a9c395e2b1bc9ba14a254fbbc733fe42da90054010ea4b8d55a6b6d3a9836d9cd5f7c88e422448d261dae2535897522e27f8cf44d1c20f3d08c9f676c5f2248ac22cc5d00b8b89468fd4c2410b4b590b74ddd08d0dccadeeace9af7c0"}, {@device_b, @broadcast, 0xfe, "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"}, {@broadcast, @broadcast, 0x71, "1b0039b26b4be5f3038cb48362086de4da38e17add4028ff07fb76a0f40c20e6655848c746092bd89ded7b596549ef596dc6b2f97d606e715e14983f46ec1ca9e9cdb40aac3ab523332640fe5455d9fc8456ea733655020e60b26a2186fddbc9bbfcf62085f4e1f59086dfeb786ced61a9"}, {@device_a, @device_a, 0x6e, "f72f0212dabba861e75b07410f77cc21f0eabd6aadda3bdfd35ee8bf6d0472b43483f389ddda6157b708f6d534aa324d7a9dc4f42dc42b99f373afd0c097a7652770b9c8719b6590623e26a02e9065f4a67c875e4bc9a4902b7d1d6f2ccb838b4f4911b437de667e552fb6bc8d94"}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x400c00c}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x0, 0x6, 0x135, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1155.367089][T23805] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1155.375071][T23805] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1155.383055][T23805] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.391186][T23805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.399230][T23805] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1155.407420][T23805] 01:02:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async, rerun: 32) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) (async) vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r11, &(0x7f0000000c00)="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"}, 0x20) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r10, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000340)=ANY=[@ANYBLOB="62870002000000", @ANYRES16=r11, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) (async, rerun: 64) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffa3, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r12, 0x100, 0x70bdaa, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x695}}, @NL80211_ATTR_STA_WME={0x0, 0x81, [@NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x0, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x0, 0x2, 0x1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x518, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xee68, 0x72}}}}, [@NL80211_ATTR_FRAME={0x4f0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x36}, @random="57c5e5f91917", @broadcast, @broadcast, {0x4, 0x2}}, {0xb, 0x1, 0x1, 0x0, 0x7}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @random="2390abae69f7", @device_b, @from_mac, {0x8, 0x3f}}, {0x3, 0x0, 0x3, 0x1, 0x3f}}}, @a_msdu=[{@device_b, @device_b, 0x8f, "b59df89651b5504fd4b17bb8ad74936b7b77ab65adb14240ff6c45261bf1c3fae7dc3da4750ef4e142a64e5d1175cec181bed24442c0e522226ae256b2b5034a6ba56179b05c8f2da6d6d87431da4953b2dc754c1de03aa2309814dfa8281ca2b8ca06d1b27a10caf53e54df1361cf297a3947b35833f8fd8f42f5c49f8fef15d0e3ae41dd5ca97b57d555f9708051"}, {@broadcast, @device_a, 0xfd, "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"}, {@broadcast, @device_b, 0xf6, "72b04427ca91f906ae36cd2ce823fa09caf0899d3165865522211774f9c7949d7bbfd94f8cab179a3a85328fb2951001a23b3b27d7f9710f7a1142abf4eda136a1e40cee7e60ff8edbb671f580a7ae18a010bb36fadd1ef9be5b5e8f4e8e5038775ddc26393c40e9788b6777f2384751a4a93d21e46d7942a73da3c25ed550ba35777df56c23b8fb57cd3e3a8698f6419246d9a3a6b0e8d8f98a9c395e2b1bc9ba14a254fbbc733fe42da90054010ea4b8d55a6b6d3a9836d9cd5f7c88e422448d261dae2535897522e27f8cf44d1c20f3d08c9f676c5f2248ac22cc5d00b8b89468fd4c2410b4b590b74ddd08d0dccadeeace9af7c0"}, {@device_b, @broadcast, 0xfe, "4f8ed79c7c14ddb8cd976bd91ae242f7a65042697d2418871d9cfb6c425961124279050434abfb899d7cda8da2f8dbeb1d46ac41a46870fd2d2f9f0ce6c3b4bf79420ac809fe327d30eb768960244af4f0edd2494bb2f9ba62e8efe15011be8f48f257ded413b13c91a9adefb8a3336820c669c6509d7c9545d3232f27a7ac2d3e4de71d32c94adc3b11e30fcb98b663c967bf34509d43ce199d3619765336184bc49630afdb716a4951c009153dd642d3eeed28d1b33fba693c9ee5c0612d9df336ccca838d62a7e2cfce0cfa3aa32080dffc861616d57911705c2aebe259874ef6a8a7c60f52c920eb22415913d3a1554f584ea7217e93fa9c522d51cc"}, {@broadcast, @broadcast, 0x71, "1b0039b26b4be5f3038cb48362086de4da38e17add4028ff07fb76a0f40c20e6655848c746092bd89ded7b596549ef596dc6b2f97d606e715e14983f46ec1ca9e9cdb40aac3ab523332640fe5455d9fc8456ea733655020e60b26a2186fddbc9bbfcf62085f4e1f59086dfeb786ced61a9"}, {@device_a, @device_a, 0x6e, "f72f0212dabba861e75b07410f77cc21f0eabd6aadda3bdfd35ee8bf6d0472b43483f389ddda6157b708f6d534aa324d7a9dc4f42dc42b99f373afd0c097a7652770b9c8719b6590623e26a02e9065f4a67c875e4bc9a4902b7d1d6f2ccb838b4f4911b437de667e552fb6bc8d94"}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x400c00c}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x0, 0x6, 0x135, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1155.451297][T23814] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 01:02:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2a03}, 0x0) [ 1155.492321][T23818] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1155.500637][T23818] FAULT_INJECTION: forcing a failure. [ 1155.500637][T23818] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.513386][T23818] CPU: 1 PID: 23818 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1155.523803][T23818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1155.534017][T23818] Call Trace: [ 1155.537381][T23818] [ 1155.540329][T23818] dump_stack_lvl+0xda/0x130 [ 1155.544925][T23818] dump_stack+0x15/0x20 [ 1155.549430][T23818] should_fail_ex+0x21f/0x230 [ 1155.554136][T23818] __should_failslab+0x92/0xa0 [ 1155.558922][T23818] should_failslab+0x9/0x20 [ 1155.563659][T23818] slab_pre_alloc_hook+0x38/0x180 [ 1155.568870][T23818] ? kvmalloc_node+0x72/0x160 [ 1155.573652][T23818] __kmem_cache_alloc_node+0x46/0x250 [ 1155.579329][T23818] ? kvmalloc_node+0x72/0x160 [ 1155.584102][T23818] __kmalloc_node+0x98/0x1a0 [ 1155.588705][T23818] kvmalloc_node+0x72/0x160 [ 1155.593225][T23818] alloc_netdev_mqs+0x6ac/0x870 [ 1155.598159][T23818] rtnl_create_link+0x226/0x7f0 [ 1155.603032][T23818] rtnl_newlink+0xda3/0x15a0 [ 1155.607908][T23818] ? __list_del_entry_valid+0x5f/0xe0 [ 1155.613320][T23818] ? _raw_spin_unlock+0x26/0x40 [ 1155.618164][T23818] ? __mutex_lock+0x21c/0x8d0 [ 1155.623017][T23818] ? rtnl_setlink+0x2d0/0x2d0 [ 1155.627735][T23818] rtnetlink_rcv_msg+0x807/0x8c0 [ 1155.632681][T23818] ? slab_post_alloc_hook+0x75/0x2d0 [ 1155.637961][T23818] ? xas_load+0x37c/0x390 [ 1155.642355][T23818] ? __rcu_read_unlock+0x4d/0x70 [ 1155.647282][T23818] ? xa_load+0xb9/0xe0 [ 1155.651338][T23818] ? kmem_cache_free+0x178/0x280 [ 1155.656371][T23818] ? nlmon_xmit+0x4b/0x60 [ 1155.660710][T23818] ? __kfree_skb+0x102/0x140 [ 1155.665422][T23818] ? consume_skb+0x57/0x180 [ 1155.669972][T23818] ? nlmon_xmit+0x4b/0x60 [ 1155.674463][T23818] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1155.679754][T23818] ? ref_tracker_free+0x3a1/0x400 [ 1155.684780][T23818] ? local_bh_enable+0x1f/0x20 [ 1155.689554][T23818] ? __dev_queue_xmit+0xbba/0x1e60 [ 1155.694846][T23818] netlink_rcv_skb+0x126/0x220 [ 1155.699608][T23818] ? rtnetlink_bind+0x60/0x60 [ 1155.704363][T23818] rtnetlink_rcv+0x1c/0x20 [ 1155.708821][T23818] netlink_unicast+0x56f/0x640 [ 1155.713641][T23818] netlink_sendmsg+0x665/0x770 [ 1155.718405][T23818] ? netlink_getsockopt+0x710/0x710 [ 1155.723691][T23818] ____sys_sendmsg+0x375/0x4c0 [ 1155.728480][T23818] __sys_sendmsg+0x1e3/0x270 [ 1155.733066][T23818] __x64_sys_sendmsg+0x46/0x50 [ 1155.737911][T23818] do_syscall_64+0x41/0xc0 [ 1155.742339][T23818] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1155.748233][T23818] RIP: 0033:0x7fc243af5169 [ 1155.752646][T23818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1155.772457][T23818] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.780968][T23818] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 01:02:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 16) [ 1155.789217][T23818] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1155.797277][T23818] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.805270][T23818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.813277][T23818] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1155.821310][T23818] [ 1155.825352][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1155.834626][T23821] FAULT_INJECTION: forcing a failure. [ 1155.834626][T23821] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.847294][T23821] CPU: 1 PID: 23821 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1155.857923][T23821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1155.868084][T23821] Call Trace: [ 1155.871350][T23821] [ 1155.874278][T23821] dump_stack_lvl+0xda/0x130 [ 1155.878883][T23821] dump_stack+0x15/0x20 [ 1155.883031][T23821] should_fail_ex+0x21f/0x230 [ 1155.887779][T23821] __should_failslab+0x92/0xa0 [ 1155.892582][T23821] should_failslab+0x9/0x20 [ 1155.897070][T23821] slab_pre_alloc_hook+0x38/0x180 [ 1155.902088][T23821] __kmem_cache_alloc_node+0x46/0x250 [ 1155.907450][T23821] ? __hw_addr_add_ex+0x13d/0x350 [ 1155.912564][T23821] kmalloc_trace+0x2a/0xa0 [ 1155.917093][T23821] __hw_addr_add_ex+0x13d/0x350 [ 1155.922042][T23821] dev_addr_init+0xb2/0x120 [ 1155.926608][T23821] ? stack_depot_init+0x4f/0x130 [ 1155.932851][T23821] alloc_netdev_mqs+0x1b6/0x870 [ 1155.937769][T23821] ? hsr_del_ports+0x90/0x90 [ 1155.942430][T23821] rtnl_create_link+0x226/0x7f0 [ 1155.947888][T23821] rtnl_newlink+0xda3/0x15a0 [ 1155.952494][T23821] ? __list_del_entry_valid+0x5f/0xe0 [ 1155.958743][T23821] ? _raw_spin_unlock+0x26/0x40 [ 1155.964035][T23821] ? __mutex_lock+0x21c/0x8d0 [ 1155.968814][T23821] ? rtnl_setlink+0x2d0/0x2d0 [ 1155.973559][T23821] rtnetlink_rcv_msg+0x807/0x8c0 [ 1155.978660][T23821] ? slab_post_alloc_hook+0x75/0x2d0 [ 1155.984020][T23821] ? xas_load+0x37c/0x390 [ 1155.988455][T23821] ? __rcu_read_unlock+0x4d/0x70 [ 1155.993469][T23821] ? xa_load+0xb9/0xe0 [ 1155.997893][T23821] ? kmem_cache_free+0x178/0x280 [ 1156.003138][T23821] ? nlmon_xmit+0x4b/0x60 [ 1156.008463][T23821] ? __kfree_skb+0x102/0x140 [ 1156.013620][T23821] ? consume_skb+0x57/0x180 [ 1156.018329][T23821] ? nlmon_xmit+0x4b/0x60 [ 1156.022805][T23821] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1156.028226][T23821] ? ref_tracker_free+0x3a1/0x400 [ 1156.033250][T23821] ? local_bh_enable+0x1f/0x20 [ 1156.038615][T23821] ? __dev_queue_xmit+0xbba/0x1e60 [ 1156.044137][T23821] netlink_rcv_skb+0x126/0x220 [ 1156.048992][T23821] ? rtnetlink_bind+0x60/0x60 [ 1156.053876][T23821] rtnetlink_rcv+0x1c/0x20 [ 1156.058577][T23821] netlink_unicast+0x56f/0x640 [ 1156.063625][T23821] netlink_sendmsg+0x665/0x770 [ 1156.068510][T23821] ? netlink_getsockopt+0x710/0x710 [ 1156.073879][T23821] ____sys_sendmsg+0x375/0x4c0 [ 1156.078769][T23821] __sys_sendmsg+0x1e3/0x270 [ 1156.083586][T23821] __x64_sys_sendmsg+0x46/0x50 [ 1156.088503][T23821] do_syscall_64+0x41/0xc0 [ 1156.093094][T23821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1156.099223][T23821] RIP: 0033:0x7f0cb5e7d169 [ 1156.103645][T23821] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1156.123540][T23821] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.132046][T23821] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 01:02:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 10) [ 1156.140101][T23821] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1156.148266][T23821] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1156.156487][T23821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.164645][T23821] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1156.172916][T23821] [ 1156.186513][T23828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1, 0x4}, 0x18) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0xf3, 0x5, 0x6, 0x81}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x100, 0xfff9}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2c03}, 0x0) [ 1156.201856][T23835] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 01:02:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 17) [ 1156.272776][T23841] bond363: entered promiscuous mode [ 1156.278166][T23841] bond363: entered allmulticast mode [ 1156.283667][T23841] 8021q: adding VLAN 0 to HW filter on device bond363 [ 1156.296610][T23844] FAULT_INJECTION: forcing a failure. [ 1156.296610][T23844] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.309803][T23844] CPU: 1 PID: 23844 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 01:02:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x72020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1156.320731][T23844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1156.330902][T23844] Call Trace: [ 1156.334217][T23844] [ 1156.337175][T23844] dump_stack_lvl+0xda/0x130 [ 1156.342053][T23844] dump_stack+0x15/0x20 [ 1156.346484][T23844] should_fail_ex+0x21f/0x230 [ 1156.351275][T23844] __should_failslab+0x92/0xa0 [ 1156.356070][T23844] should_failslab+0x9/0x20 [ 1156.360627][T23844] slab_pre_alloc_hook+0x38/0x180 [ 1156.365906][T23844] ? kvmalloc_node+0x72/0x160 [ 1156.370757][T23844] __kmem_cache_alloc_node+0x46/0x250 [ 1156.376131][T23844] ? kvmalloc_node+0x72/0x160 [ 1156.380926][T23844] __kmalloc_node+0x98/0x1a0 [ 1156.385722][T23844] kvmalloc_node+0x72/0x160 [ 1156.390340][T23844] alloc_netdev_mqs+0x525/0x870 [ 1156.395408][T23844] rtnl_create_link+0x226/0x7f0 [ 1156.400296][T23844] rtnl_newlink+0xda3/0x15a0 [ 1156.404905][T23844] ? __list_del_entry_valid+0x5f/0xe0 [ 1156.410455][T23844] ? _raw_spin_unlock+0x26/0x40 [ 1156.415759][T23844] ? __mutex_lock+0x21c/0x8d0 [ 1156.420643][T23844] ? rtnl_setlink+0x2d0/0x2d0 [ 1156.425469][T23844] rtnetlink_rcv_msg+0x807/0x8c0 [ 1156.430468][T23844] ? slab_post_alloc_hook+0x75/0x2d0 [ 1156.435789][T23844] ? xas_load+0x37c/0x390 [ 1156.440183][T23844] ? __rcu_read_unlock+0x4d/0x70 [ 1156.445233][T23844] ? xa_load+0xb9/0xe0 [ 1156.449449][T23844] ? kmem_cache_free+0x178/0x280 [ 1156.454392][T23844] ? nlmon_xmit+0x4b/0x60 [ 1156.459173][T23844] ? __kfree_skb+0x102/0x140 [ 1156.463947][T23844] ? consume_skb+0x57/0x180 [ 1156.468656][T23844] ? nlmon_xmit+0x4b/0x60 [ 1156.472991][T23844] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1156.478344][T23844] ? ref_tracker_free+0x3a1/0x400 [ 1156.483463][T23844] ? local_bh_enable+0x1f/0x20 [ 1156.488362][T23844] ? __dev_queue_xmit+0xbba/0x1e60 [ 1156.493483][T23844] netlink_rcv_skb+0x126/0x220 [ 1156.498257][T23844] ? rtnetlink_bind+0x60/0x60 [ 1156.503361][T23844] rtnetlink_rcv+0x1c/0x20 [ 1156.508045][T23844] netlink_unicast+0x56f/0x640 [ 1156.512826][T23844] netlink_sendmsg+0x665/0x770 [ 1156.517640][T23844] ? netlink_getsockopt+0x710/0x710 [ 1156.522934][T23844] ____sys_sendmsg+0x375/0x4c0 [ 1156.527938][T23844] __sys_sendmsg+0x1e3/0x270 [ 1156.532622][T23844] __x64_sys_sendmsg+0x46/0x50 [ 1156.537598][T23844] do_syscall_64+0x41/0xc0 [ 1156.542088][T23844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1156.548036][T23844] RIP: 0033:0x7f0cb5e7d169 [ 1156.552524][T23844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1156.572560][T23844] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.581074][T23844] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1156.589648][T23844] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1156.598187][T23844] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1156.606306][T23844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.614867][T23844] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 01:02:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 11) [ 1156.623024][T23844] 01:02:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100003050000000000000000004000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2e13}, 0x0) [ 1156.646308][T23847] bond859: entered promiscuous mode [ 1156.651743][T23847] 8021q: adding VLAN 0 to HW filter on device bond859 01:02:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 18) [ 1156.709227][T23855] bond364: entered promiscuous mode [ 1156.714615][T23855] bond364: entered allmulticast mode [ 1156.720559][T23855] 8021q: adding VLAN 0 to HW filter on device bond364 01:02:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1, 0x4}, 0x18) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0xf3, 0x5, 0x6, 0x81}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x100, 0xfff9}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1, 0x4}, 0x18) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0xf3, 0x5, 0x6, 0x81}, &(0x7f0000000280)=0x14) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x100, 0xfff9}, 0x8) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) [ 1156.752488][T23862] FAULT_INJECTION: forcing a failure. [ 1156.752488][T23862] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.765244][T23862] CPU: 1 PID: 23862 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1156.775661][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1156.785790][T23862] Call Trace: [ 1156.789077][T23862] [ 1156.792008][T23862] dump_stack_lvl+0xda/0x130 [ 1156.796595][T23862] dump_stack+0x15/0x20 [ 1156.800742][T23862] should_fail_ex+0x21f/0x230 [ 1156.805466][T23862] __should_failslab+0x92/0xa0 [ 1156.810400][T23862] should_failslab+0x9/0x20 [ 1156.814918][T23862] slab_pre_alloc_hook+0x38/0x180 [ 1156.819970][T23862] ? kvmalloc_node+0x72/0x160 [ 1156.824697][T23862] __kmem_cache_alloc_node+0x46/0x250 [ 1156.830109][T23862] ? kvmalloc_node+0x72/0x160 [ 1156.834797][T23862] __kmalloc_node+0x98/0x1a0 [ 1156.839456][T23862] kvmalloc_node+0x72/0x160 [ 1156.844029][T23862] alloc_netdev_mqs+0x6ac/0x870 [ 1156.849238][T23862] rtnl_create_link+0x226/0x7f0 [ 1156.854089][T23862] rtnl_newlink+0xda3/0x15a0 [ 1156.858755][T23862] ? __list_del_entry_valid+0x5f/0xe0 [ 1156.864148][T23862] ? _raw_spin_unlock+0x26/0x40 [ 1156.869151][T23862] ? __mutex_lock+0x21c/0x8d0 [ 1156.873910][T23862] ? rtnl_setlink+0x2d0/0x2d0 [ 1156.878595][T23862] rtnetlink_rcv_msg+0x807/0x8c0 [ 1156.883656][T23862] ? slab_post_alloc_hook+0x75/0x2d0 [ 1156.888972][T23862] ? xas_load+0x37c/0x390 [ 1156.893389][T23862] ? __rcu_read_unlock+0x4d/0x70 [ 1156.898364][T23862] ? xa_load+0xb9/0xe0 [ 1156.902425][T23862] ? kmem_cache_free+0x178/0x280 [ 1156.907391][T23862] ? nlmon_xmit+0x4b/0x60 [ 1156.911728][T23862] ? __kfree_skb+0x102/0x140 [ 1156.916391][T23862] ? consume_skb+0x57/0x180 [ 1156.920959][T23862] ? nlmon_xmit+0x4b/0x60 [ 1156.925382][T23862] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1156.930676][T23862] ? ref_tracker_free+0x3a1/0x400 [ 1156.935729][T23862] ? local_bh_enable+0x1f/0x20 [ 1156.940549][T23862] ? __dev_queue_xmit+0xbba/0x1e60 [ 1156.945693][T23862] netlink_rcv_skb+0x126/0x220 [ 1156.950455][T23862] ? rtnetlink_bind+0x60/0x60 [ 1156.955246][T23862] rtnetlink_rcv+0x1c/0x20 [ 1156.959709][T23862] netlink_unicast+0x56f/0x640 [ 1156.964693][T23862] netlink_sendmsg+0x665/0x770 [ 1156.969476][T23862] ? netlink_getsockopt+0x710/0x710 [ 1156.974700][T23862] ____sys_sendmsg+0x375/0x4c0 [ 1156.979521][T23862] __sys_sendmsg+0x1e3/0x270 [ 1156.984299][T23862] __x64_sys_sendmsg+0x46/0x50 [ 1156.989300][T23862] do_syscall_64+0x41/0xc0 [ 1156.993786][T23862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1156.999704][T23862] RIP: 0033:0x7f0cb5e7d169 [ 1157.004298][T23862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.024096][T23862] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.032738][T23862] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1157.040701][T23862] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:02:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 12) [ 1157.048955][T23862] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.057074][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.065080][T23862] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1157.073057][T23862] 01:02:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 1) 01:02:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x72030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2f00}, 0x0) [ 1157.112804][T23869] FAULT_INJECTION: forcing a failure. [ 1157.112804][T23869] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.125646][T23869] CPU: 1 PID: 23869 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1157.136200][T23869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1157.146366][T23869] Call Trace: [ 1157.149739][T23869] [ 1157.152683][T23869] dump_stack_lvl+0xda/0x130 [ 1157.156597][T23896] FAULT_INJECTION: forcing a failure. [ 1157.156597][T23896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.157412][T23869] dump_stack+0x15/0x20 [ 1157.157434][T23869] should_fail_ex+0x21f/0x230 [ 1157.179267][T23869] __should_failslab+0x92/0xa0 [ 1157.184034][T23869] should_failslab+0x9/0x20 [ 1157.188527][T23869] slab_pre_alloc_hook+0x38/0x180 [ 1157.193551][T23869] __kmem_cache_alloc_node+0x46/0x250 [ 1157.198920][T23869] ? alloc_workqueue+0x12d/0xa80 [ 1157.203852][T23869] __kmalloc+0x95/0x1a0 [ 1157.208046][T23869] alloc_workqueue+0x12d/0xa80 [ 1157.212909][T23869] ? dev_alloc_name_ns+0x24c/0x600 [ 1157.218021][T23869] ? __should_failslab+0x92/0xa0 [ 1157.222963][T23869] ? slab_post_alloc_hook+0x75/0x2d0 [ 1157.228281][T23869] ? bond_init+0x6f/0x280 [ 1157.232606][T23869] bond_init+0x8b/0x280 [ 1157.236828][T23869] register_netdevice+0x217/0xcd0 [ 1157.241905][T23869] bond_newlink+0x3b/0x80 [ 1157.246301][T23869] ? bond_validate+0xc0/0xc0 [ 1157.250892][T23869] rtnl_newlink+0xe5a/0x15a0 [ 1157.255480][T23869] ? __list_del_entry_valid+0x5f/0xe0 [ 1157.260883][T23869] ? _raw_spin_unlock+0x26/0x40 [ 1157.265725][T23869] ? __mutex_lock+0x21c/0x8d0 [ 1157.270517][T23869] ? rtnl_setlink+0x2d0/0x2d0 [ 1157.275200][T23869] rtnetlink_rcv_msg+0x807/0x8c0 [ 1157.280219][T23869] ? slab_post_alloc_hook+0x75/0x2d0 [ 1157.285567][T23869] ? xas_load+0x37c/0x390 [ 1157.289899][T23869] ? __rcu_read_unlock+0x4d/0x70 [ 1157.294872][T23869] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1157.300168][T23869] ? xa_load+0xb9/0xe0 [ 1157.304285][T23869] ? kmem_cache_free+0x178/0x280 [ 1157.309302][T23869] ? nlmon_xmit+0x4b/0x60 [ 1157.313669][T23869] ? __kfree_skb+0x102/0x140 [ 1157.318359][T23869] ? consume_skb+0x57/0x180 [ 1157.322859][T23869] ? nlmon_xmit+0x4b/0x60 [ 1157.327244][T23869] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1157.332587][T23869] ? ref_tracker_free+0x3a1/0x400 [ 1157.337608][T23869] ? local_bh_enable+0x1f/0x20 [ 1157.342432][T23869] ? __dev_queue_xmit+0xbba/0x1e60 [ 1157.347533][T23869] netlink_rcv_skb+0x126/0x220 [ 1157.352416][T23869] ? rtnetlink_bind+0x60/0x60 [ 1157.357120][T23869] rtnetlink_rcv+0x1c/0x20 [ 1157.361655][T23869] netlink_unicast+0x56f/0x640 [ 1157.366455][T23869] netlink_sendmsg+0x665/0x770 [ 1157.371225][T23869] ? netlink_getsockopt+0x710/0x710 [ 1157.376429][T23869] ____sys_sendmsg+0x375/0x4c0 [ 1157.381458][T23869] __sys_sendmsg+0x1e3/0x270 [ 1157.386156][T23869] __x64_sys_sendmsg+0x46/0x50 [ 1157.390931][T23869] do_syscall_64+0x41/0xc0 [ 1157.395341][T23869] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1157.401603][T23869] RIP: 0033:0x7fc243af5169 [ 1157.406109][T23869] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.425828][T23869] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.434432][T23869] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1157.442462][T23869] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1157.450439][T23869] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.458438][T23869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.466493][T23869] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1157.474460][T23869] [ 1157.477477][T23896] CPU: 0 PID: 23896 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1157.488009][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1157.498250][T23896] Call Trace: [ 1157.501557][T23896] [ 1157.504526][T23896] dump_stack_lvl+0xda/0x130 [ 1157.509127][T23896] dump_stack+0x15/0x20 [ 1157.513365][T23896] should_fail_ex+0x21f/0x230 [ 1157.518209][T23896] should_fail+0xb/0x10 [ 1157.521818][T23902] FAULT_INJECTION: forcing a failure. [ 1157.521818][T23902] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.522445][T23896] should_fail_usercopy+0x1a/0x20 [ 1157.540128][T23896] _copy_from_user+0x1e/0xd0 [ 1157.544845][T23896] copy_msghdr_from_user+0x54/0x2a0 [ 1157.550251][T23896] __sys_sendmsg+0x177/0x270 [ 1157.554978][T23896] __x64_sys_sendmsg+0x46/0x50 [ 1157.559874][T23896] do_syscall_64+0x41/0xc0 [ 1157.564289][T23896] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1157.570189][T23896] RIP: 0033:0x7f3099bc9169 [ 1157.574783][T23896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.594384][T23896] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.602872][T23896] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:02:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2fdc}, 0x0) 01:02:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 19) [ 1157.610896][T23896] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1157.618863][T23896] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.626917][T23896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.634977][T23896] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1157.643008][T23896] [ 1157.646018][T23902] CPU: 1 PID: 23902 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 01:02:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 2) [ 1157.656573][T23902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1157.666836][T23902] Call Trace: [ 1157.670118][T23902] [ 1157.673245][T23902] dump_stack_lvl+0xda/0x130 [ 1157.678064][T23902] dump_stack+0x15/0x20 [ 1157.680715][T23905] FAULT_INJECTION: forcing a failure. [ 1157.680715][T23905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.682221][T23902] should_fail_ex+0x21f/0x230 [ 1157.682248][T23902] __should_failslab+0x92/0xa0 [ 1157.705191][T23902] should_failslab+0x9/0x20 [ 1157.709820][T23902] slab_pre_alloc_hook+0x38/0x180 [ 1157.714912][T23902] __kmem_cache_alloc_node+0x46/0x250 [ 1157.720297][T23902] ? apply_wqattrs_prepare+0xc2/0x610 [ 1157.726338][T23902] kmalloc_trace+0x2a/0xa0 [ 1157.731035][T23902] apply_wqattrs_prepare+0xc2/0x610 [ 1157.736450][T23902] ? slab_post_alloc_hook+0x75/0x2d0 [ 1157.742151][T23902] ? vsnprintf+0xdd0/0xe20 [ 1157.746723][T23902] apply_workqueue_attrs+0xa9/0x110 [ 1157.752093][T23902] alloc_workqueue+0x770/0xa80 [ 1157.756877][T23902] ? __should_failslab+0x92/0xa0 [ 1157.762242][T23902] ? slab_post_alloc_hook+0x75/0x2d0 [ 1157.767553][T23902] ? bond_init+0x6f/0x280 [ 1157.771919][T23902] bond_init+0x8b/0x280 [ 1157.776354][T23902] register_netdevice+0x217/0xcd0 [ 1157.781772][T23902] bond_newlink+0x3b/0x80 [ 1157.786223][T23902] ? bond_validate+0xc0/0xc0 [ 1157.791010][T23902] rtnl_newlink+0xe5a/0x15a0 [ 1157.795617][T23902] ? __mutex_lock+0x54/0x8d0 [ 1157.800232][T23902] ? rtnl_setlink+0x2d0/0x2d0 [ 1157.804996][T23902] rtnetlink_rcv_msg+0x807/0x8c0 [ 1157.809985][T23902] ? slab_post_alloc_hook+0x75/0x2d0 [ 1157.815688][T23902] ? xas_load+0x37c/0x390 [ 1157.820114][T23902] ? __rcu_read_unlock+0x4d/0x70 [ 1157.825263][T23902] ? xa_load+0xb9/0xe0 [ 1157.829579][T23902] ? kmem_cache_free+0x178/0x280 [ 1157.834565][T23902] ? nlmon_xmit+0x4b/0x60 [ 1157.839141][T23902] ? __kfree_skb+0x102/0x140 [ 1157.844283][T23902] ? consume_skb+0x57/0x180 [ 1157.848858][T23902] ? nlmon_xmit+0x4b/0x60 [ 1157.853329][T23902] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1157.859129][T23902] ? ref_tracker_free+0x3a1/0x400 [ 1157.864166][T23902] ? local_bh_enable+0x1f/0x20 [ 1157.869029][T23902] ? __dev_queue_xmit+0xbba/0x1e60 [ 1157.874296][T23902] netlink_rcv_skb+0x126/0x220 [ 1157.879241][T23902] ? rtnetlink_bind+0x60/0x60 [ 1157.884282][T23902] rtnetlink_rcv+0x1c/0x20 [ 1157.888975][T23902] netlink_unicast+0x56f/0x640 [ 1157.893905][T23902] netlink_sendmsg+0x665/0x770 [ 1157.898934][T23902] ? netlink_getsockopt+0x710/0x710 [ 1157.904307][T23902] ____sys_sendmsg+0x375/0x4c0 [ 1157.909229][T23902] __sys_sendmsg+0x1e3/0x270 [ 1157.913892][T23902] __x64_sys_sendmsg+0x46/0x50 [ 1157.918690][T23902] do_syscall_64+0x41/0xc0 [ 1157.923253][T23902] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1157.929242][T23902] RIP: 0033:0x7fc243af5169 [ 1157.933847][T23902] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.954115][T23902] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.962609][T23902] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1157.970751][T23902] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1157.978844][T23902] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.987015][T23902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.995857][T23902] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1158.003847][T23902] [ 1158.006973][T23905] CPU: 0 PID: 23905 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1158.017630][T23905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1158.027690][T23905] Call Trace: [ 1158.030994][T23905] [ 1158.033961][T23905] dump_stack_lvl+0xda/0x130 [ 1158.038628][T23905] dump_stack+0x15/0x20 [ 1158.042919][T23905] should_fail_ex+0x21f/0x230 [ 1158.047606][T23905] should_fail+0xb/0x10 [ 1158.051826][T23905] should_fail_usercopy+0x1a/0x20 [ 1158.053234][T23908] validate_nla: 4 callbacks suppressed [ 1158.053263][T23908] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1158.056898][T23905] _copy_from_user+0x1e/0xd0 [ 1158.056923][T23905] iovec_from_user+0x170/0x290 [ 1158.066025][T23908] FAULT_INJECTION: forcing a failure. [ 1158.066025][T23908] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.070420][T23905] __import_iovec+0x4d/0x280 [ 1158.070452][T23905] import_iovec+0xbb/0xd0 [ 1158.070476][T23905] copy_msghdr_from_user+0x24a/0x2a0 [ 1158.106709][T23905] __sys_sendmsg+0x177/0x270 [ 1158.111307][T23905] __x64_sys_sendmsg+0x46/0x50 [ 1158.116157][T23905] do_syscall_64+0x41/0xc0 [ 1158.120563][T23905] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1158.126558][T23905] RIP: 0033:0x7f3099bc9169 [ 1158.130985][T23905] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.150848][T23905] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:02:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 20) [ 1158.159778][T23905] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1158.167739][T23905] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1158.175874][T23905] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.184097][T23905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.192061][T23905] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1158.200128][T23905] [ 1158.203137][T23908] CPU: 1 PID: 23908 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 01:02:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 3) [ 1158.213665][T23908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1158.223788][T23908] Call Trace: [ 1158.227086][T23908] [ 1158.230478][T23908] dump_stack_lvl+0xda/0x130 [ 1158.235200][T23908] dump_stack+0x15/0x20 [ 1158.239110][T23910] FAULT_INJECTION: forcing a failure. [ 1158.239110][T23910] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.239451][T23908] should_fail_ex+0x21f/0x230 [ 1158.239480][T23908] __should_failslab+0x92/0xa0 [ 1158.261617][T23908] should_failslab+0x9/0x20 [ 1158.266125][T23908] slab_pre_alloc_hook+0x38/0x180 [ 1158.271152][T23908] __kmem_cache_alloc_node+0x46/0x250 [ 1158.276544][T23908] ? init_rescuer+0x67/0x190 [ 1158.281220][T23908] kmalloc_node_trace+0x27/0xa0 [ 1158.286152][T23908] init_rescuer+0x67/0x190 [ 1158.290607][T23908] alloc_workqueue+0x8d5/0xa80 [ 1158.295458][T23908] ? __should_failslab+0x92/0xa0 [ 1158.300386][T23908] ? slab_post_alloc_hook+0x75/0x2d0 [ 1158.305918][T23908] ? bond_init+0x6f/0x280 [ 1158.310253][T23908] bond_init+0x8b/0x280 [ 1158.314434][T23908] register_netdevice+0x217/0xcd0 [ 1158.319476][T23908] bond_newlink+0x3b/0x80 [ 1158.323823][T23908] ? bond_validate+0xc0/0xc0 [ 1158.328561][T23908] rtnl_newlink+0xe5a/0x15a0 [ 1158.333150][T23908] ? __mutex_lock+0x54/0x8d0 [ 1158.337791][T23908] ? rtnl_setlink+0x2d0/0x2d0 [ 1158.342500][T23908] rtnetlink_rcv_msg+0x807/0x8c0 [ 1158.347494][T23908] ? slab_post_alloc_hook+0x75/0x2d0 [ 1158.352972][T23908] ? xas_load+0x37c/0x390 [ 1158.357365][T23908] ? __rcu_read_unlock+0x4d/0x70 [ 1158.362345][T23908] ? xa_load+0xb9/0xe0 [ 1158.366426][T23908] ? kmem_cache_free+0x178/0x280 [ 1158.371366][T23908] ? nlmon_xmit+0x4b/0x60 [ 1158.375928][T23908] ? __kfree_skb+0x102/0x140 [ 1158.380643][T23908] ? consume_skb+0x57/0x180 [ 1158.385165][T23908] ? nlmon_xmit+0x4b/0x60 [ 1158.389485][T23908] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1158.394774][T23908] ? ref_tracker_free+0x3a1/0x400 [ 1158.399880][T23908] ? local_bh_enable+0x1f/0x20 [ 1158.404971][T23908] ? __dev_queue_xmit+0xbba/0x1e60 [ 1158.410131][T23908] netlink_rcv_skb+0x126/0x220 [ 1158.415019][T23908] ? rtnetlink_bind+0x60/0x60 [ 1158.420050][T23908] rtnetlink_rcv+0x1c/0x20 [ 1158.424774][T23908] netlink_unicast+0x56f/0x640 [ 1158.429627][T23908] netlink_sendmsg+0x665/0x770 [ 1158.434480][T23908] ? netlink_getsockopt+0x710/0x710 [ 1158.440017][T23908] ____sys_sendmsg+0x375/0x4c0 [ 1158.445599][T23908] __sys_sendmsg+0x1e3/0x270 [ 1158.450299][T23908] __x64_sys_sendmsg+0x46/0x50 [ 1158.455496][T23908] do_syscall_64+0x41/0xc0 [ 1158.460901][T23908] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1158.466940][T23908] RIP: 0033:0x7fc243af5169 [ 1158.471374][T23908] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.491438][T23908] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.499882][T23908] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1158.507861][T23908] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1158.515918][T23908] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.524022][T23908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.532079][T23908] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1158.540048][T23908] [ 1158.543099][T23910] CPU: 0 PID: 23910 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1158.553534][T23910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1158.563883][T23910] Call Trace: 01:02:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (fail_nth: 21) 01:02:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1, 0x4}, 0x18) (async) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0xf3, 0x5, 0x6, 0x81}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x100, 0xfff9}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1158.567189][T23910] [ 1158.570225][T23910] dump_stack_lvl+0xda/0x130 [ 1158.575050][T23910] dump_stack+0x15/0x20 [ 1158.579369][T23910] should_fail_ex+0x21f/0x230 [ 1158.584088][T23910] __should_failslab+0x92/0xa0 [ 1158.587165][T23893] FAULT_INJECTION: forcing a failure. [ 1158.587165][T23893] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.589059][T23910] should_failslab+0x9/0x20 [ 1158.589081][T23910] slab_pre_alloc_hook+0x38/0x180 [ 1158.611786][T23910] kmem_cache_alloc_node+0x5d/0x2e0 [ 1158.616982][T23910] ? __alloc_skb+0x109/0x2e0 [ 1158.621691][T23910] __alloc_skb+0x109/0x2e0 [ 1158.626190][T23910] netlink_sendmsg+0x483/0x770 [ 1158.631742][T23910] ? netlink_getsockopt+0x710/0x710 [ 1158.636987][T23910] ____sys_sendmsg+0x375/0x4c0 [ 1158.641803][T23910] __sys_sendmsg+0x1e3/0x270 [ 1158.646563][T23910] __x64_sys_sendmsg+0x46/0x50 [ 1158.651483][T23910] do_syscall_64+0x41/0xc0 [ 1158.655893][T23910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1158.661846][T23910] RIP: 0033:0x7f3099bc9169 [ 1158.666367][T23910] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.686055][T23910] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.694537][T23910] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1158.702682][T23910] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1158.711001][T23910] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.719072][T23910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.727150][T23910] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1158.735461][T23910] [ 1158.738668][T23893] CPU: 1 PID: 23893 Comm: syz-executor.4 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1158.749223][T23893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1158.759696][T23893] Call Trace: [ 1158.763061][T23893] 01:02:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 4) [ 1158.766110][T23893] dump_stack_lvl+0xda/0x130 [ 1158.770793][T23893] dump_stack+0x15/0x20 [ 1158.774965][T23893] should_fail_ex+0x21f/0x230 [ 1158.779845][T23893] __should_failslab+0x92/0xa0 [ 1158.784710][T23893] should_failslab+0x9/0x20 [ 1158.789591][T23893] slab_pre_alloc_hook+0x38/0x180 [ 1158.794644][T23893] __kmem_cache_alloc_node+0x46/0x250 [ 1158.800446][T23893] ? rb_insert_color+0x295/0x2a0 [ 1158.805398][T23893] ? hsr_create_self_node+0x3e/0x120 [ 1158.810809][T23893] kmalloc_trace+0x2a/0xa0 [ 1158.815405][T23893] hsr_create_self_node+0x3e/0x120 [ 1158.820552][T23893] hsr_dev_finalize+0x168/0x440 [ 1158.825492][T23893] hsr_newlink+0x426/0x470 [ 1158.830142][T23893] ? hsr_get_node_list+0x450/0x450 [ 1158.835352][T23893] rtnl_newlink+0xe5a/0x15a0 [ 1158.840411][T23893] ? __list_del_entry_valid+0x5f/0xe0 [ 1158.845945][T23893] ? _raw_spin_unlock+0x26/0x40 [ 1158.850972][T23893] ? __mutex_lock+0x21c/0x8d0 [ 1158.855726][T23893] ? rtnl_setlink+0x2d0/0x2d0 [ 1158.860704][T23893] rtnetlink_rcv_msg+0x807/0x8c0 [ 1158.866530][T23893] ? slab_post_alloc_hook+0x75/0x2d0 [ 1158.871946][T23893] ? xas_load+0x37c/0x390 [ 1158.877151][T23893] ? __rcu_read_unlock+0x4d/0x70 [ 1158.882181][T23893] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1158.887518][T23893] ? xa_load+0xb9/0xe0 [ 1158.891608][T23893] ? kmem_cache_free+0x178/0x280 [ 1158.896800][T23893] ? nlmon_xmit+0x4b/0x60 [ 1158.901481][T23893] ? __kfree_skb+0x102/0x140 [ 1158.906061][T23893] ? consume_skb+0x57/0x180 [ 1158.910648][T23893] ? nlmon_xmit+0x4b/0x60 [ 1158.915034][T23893] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1158.920420][T23893] ? ref_tracker_free+0x3a1/0x400 [ 1158.925543][T23893] ? local_bh_enable+0x1f/0x20 [ 1158.930307][T23893] ? __dev_queue_xmit+0xbba/0x1e60 [ 1158.935572][T23893] netlink_rcv_skb+0x126/0x220 [ 1158.940363][T23893] ? rtnetlink_bind+0x60/0x60 [ 1158.945066][T23893] rtnetlink_rcv+0x1c/0x20 [ 1158.949507][T23893] netlink_unicast+0x56f/0x640 [ 1158.954407][T23893] netlink_sendmsg+0x665/0x770 [ 1158.959279][T23893] ? netlink_getsockopt+0x710/0x710 [ 1158.964472][T23893] ____sys_sendmsg+0x375/0x4c0 [ 1158.969408][T23893] __sys_sendmsg+0x1e3/0x270 [ 1158.974091][T23893] __x64_sys_sendmsg+0x46/0x50 [ 1158.979048][T23893] do_syscall_64+0x41/0xc0 [ 1158.983840][T23893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1158.990074][T23893] RIP: 0033:0x7f0cb5e7d169 [ 1158.997450][T23893] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 01:02:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 5) [ 1159.017988][T23893] RSP: 002b:00007f0cb51f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.026414][T23893] RAX: ffffffffffffffda RBX: 00007f0cb5f9cf80 RCX: 00007f0cb5e7d169 [ 1159.034650][T23893] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1159.042938][T23893] RBP: 00007f0cb51f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.051078][T23893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.059343][T23893] R13: 00007ffcca054d7f R14: 00007f0cb51f0300 R15: 0000000000022000 [ 1159.067653][T23893] [ 1159.090075][T23923] FAULT_INJECTION: forcing a failure. [ 1159.090075][T23923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.103603][T23923] CPU: 0 PID: 23923 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1159.114152][T23923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1159.124269][T23923] Call Trace: [ 1159.127604][T23923] [ 1159.130584][T23923] dump_stack_lvl+0xda/0x130 [ 1159.135256][T23923] dump_stack+0x15/0x20 [ 1159.139467][T23923] should_fail_ex+0x21f/0x230 [ 1159.144399][T23923] should_fail+0xb/0x10 [ 1159.148605][T23923] should_fail_usercopy+0x1a/0x20 [ 1159.153631][T23923] copyin+0x1a/0x90 [ 1159.157446][T23923] _copy_from_iter+0x24b/0x8c0 [ 1159.162196][T23923] ? __virt_addr_valid+0x16a/0x1b0 [ 1159.167387][T23923] ? __check_object_size+0x329/0x4e0 [ 1159.172847][T23923] netlink_sendmsg+0x53c/0x770 [ 1159.177616][T23923] ? netlink_getsockopt+0x710/0x710 [ 1159.182882][T23923] ____sys_sendmsg+0x375/0x4c0 [ 1159.187703][T23923] __sys_sendmsg+0x1e3/0x270 [ 1159.192486][T23923] __x64_sys_sendmsg+0x46/0x50 [ 1159.197363][T23923] do_syscall_64+0x41/0xc0 [ 1159.201960][T23923] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1159.207943][T23923] RIP: 0033:0x7f3099bc9169 [ 1159.212365][T23923] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1159.232168][T23923] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.240596][T23923] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1159.248945][T23923] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1159.257209][T23923] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.265433][T23923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.273506][T23923] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1159.282070][T23923] 01:02:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 6) 01:02:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3003}, 0x0) [ 1159.332658][T23914] __nla_validate_parse: 7 callbacks suppressed [ 1159.332672][T23914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1159.359222][T23931] FAULT_INJECTION: forcing a failure. [ 1159.359222][T23931] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.366281][T23914] bond860: entered promiscuous mode [ 1159.372081][T23931] CPU: 1 PID: 23931 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1159.377377][T23914] 8021q: adding VLAN 0 to HW filter on device bond860 [ 1159.387878][T23931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1159.387907][T23931] Call Trace: [ 1159.387934][T23931] [ 1159.387940][T23931] dump_stack_lvl+0xda/0x130 [ 1159.387961][T23931] dump_stack+0x15/0x20 [ 1159.387976][T23931] should_fail_ex+0x21f/0x230 [ 1159.402075][T23916] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1159.406263][T23931] __should_failslab+0x92/0xa0 [ 1159.406290][T23931] should_failslab+0x9/0x20 [ 1159.415215][T23916] FAULT_INJECTION: forcing a failure. [ 1159.415215][T23916] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.417447][T23931] slab_pre_alloc_hook+0x38/0x180 [ 1159.462497][T23931] kmem_cache_alloc+0x58/0x260 [ 1159.467733][T23931] ? skb_clone+0x154/0x1e0 [ 1159.472242][T23931] skb_clone+0x154/0x1e0 [ 1159.476792][T23931] __netlink_deliver_tap+0x2c0/0x4c0 [ 1159.482122][T23931] netlink_unicast+0x615/0x640 [ 1159.486961][T23931] netlink_sendmsg+0x665/0x770 [ 1159.492062][T23931] ? netlink_getsockopt+0x710/0x710 [ 1159.497270][T23931] ____sys_sendmsg+0x375/0x4c0 [ 1159.502323][T23931] __sys_sendmsg+0x1e3/0x270 [ 1159.507106][T23931] __x64_sys_sendmsg+0x46/0x50 [ 1159.512022][T23931] do_syscall_64+0x41/0xc0 [ 1159.516429][T23931] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1159.522730][T23931] RIP: 0033:0x7f3099bc9169 [ 1159.527143][T23931] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1159.547227][T23931] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.555802][T23931] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1159.563903][T23931] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1159.571954][T23931] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:02:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYBLOB="b01747c937a52aa74740de3df879d3ae08fcb351d1eb04c86d75b627ecf4f08a53811eb20fc3b64129b4c809ff890908940110b672dfada919d6d1e64839498183861aed6b5f3998af1afb796adce160a9313a5d88c59221bbc786b7eff236a65b221e975c4e8d396d736caa0ecc661b99efb54d3b64076e50289e36adfa557d2e72c1c7b80870d353697ca538cef495483a4527347222288ab86b9ae1804b45318b3dd449a95425188f12c0a674ac7099f92f626c3cec61574fdafa92a8c07a11095dc7a245ad9fad6111995cc57960af0b67f86d1b756c3aeefa9e094475dcf0809977936af4f17a8a8bbb3df7e831654fbd7304ee34cfbeb37c9533512f9d3b9057917835d55d824c6454e4b40692c3f28c8badc27dba1fffd0069067a324459ace9b1b2cfb219a0a1ae398f93884f922eeeafd35f4201174f5f6493f3a588c7a6f57caeda053d70f55467afb2557e2403a557bfc191a4a3d4d551e4c426de2fff08a7cfc16642cf38b0e4ae781fabe9459b9977bb0ea9bdd7b2e6add4fffb918453a51c460a179901782c9239d59956c61a788a844abdac7f12555517e3e952e4bb7b5fc6efef21a3619d557d7853cfbc54e5d7ac52fd2f4fa130dcd0eb47a7d5f69e8f45fd4199b31975063757bb3bbda3599f270c9c393d2769240c3736c3a2705f08d34933bec194b62dfce4f92f14b31d6f629f19750989d49bc348346cf43ff1bf0f303525e32dc190f101b67ea1ab84705e7ea2e77fd1eee145ee168bce4b60c80f7d97daed431914240cd124801aa8bace8fec672730a5552ba2b2fa85412456feae47c9ad3a307478e0736ddb1d54a472df524362344651defd56f290a71fba5a4605a297a46cef1fb4b699651c27681c584dae31b78033a72d57bdc47687d4dbcd99f63e77ab773e6e301cacfb71afe6d7a784b765fbc12a520dfaf59cd06c140f4c6d5415b0236b1276fcf8cd37d471d2ac678d2260c0cfe32a85b93219cebb432a33e9e08e073e8a8a330ca9aceef62b0fdb8d1de91a6e1a3ed7483933d0ac6c4333f380b4587d60cadb2615c7713b6be4ca787fbccae25ffdbd0c594da2b1b4281a9113f12f52ccd7d7631af3c07514b532c58c585d9892125c5b1bdfef5a5944c3f1159e367750deccfb551d182ed31c7774cdd75071e314eabbf9515809d6289522eb1023d84207bed1c5900793ea998f83007f436e5ca978e6e2a0a20a4af41888b08f96bafb2c7fbb4b8337960c3602b2f0aad711640e537316def71a25f8ff5c6b3713bbf6cf86ac6449d716ece4e945930baf2cc725d70229aa5ba514589cd91f15be16a87611905d4c91fdc8b31142b5fa844a39327605a09d094ac491d51871c0e8d06bcc701142b9d4cd54f0f1f6c09e62f72a2c0e86b1b5e2e90dc41143b9a022e00760f4f1c0c3b82b6a08b24648d5cc3c56c3af86a1758e611a9d983c15c52a33461fba01f230fa05bed367bbd1e0c20a9a74bdcdf19a49cdc6be684c4a929fa543ddd00fa4bb06fbe68281eb6a39aa7dae24714d5a5df0616291de1c3afbd4356b12399dd968b3f7235b322ef776d37c1cbefbeec3849f47d9107cad5491605524cb5b247b52ff10bd2273fa6791d574c186facb1c1382b52dd71345cc04dee3f2989e6e2bd1ad77069d202ff1b062c67ee144d7c0bb48855eb692237617849f9034f0f466de1d2b0757bac11f60e4ab6d9b16b8b017a6d8036b5ac5bf951a48f0d2a7822d08a9619862d38c98b57806382980e6991795a2674b3f79a247ccc13746c90a0851acca80827b873f7ada74fe026691c23ce7c767d76cc8066c40dea353cc7cce85e7610d821aba9cd6851d6dcbc8fc2bb0ec3d2ff2bd4849e92f4c84cd81577ad09064dd923b763564f0a9e42b2619338567633f2a8612afb2b70b38895a9704cb995c562d0a4dc8f5ee2433181e92eb8c2a681f3dec461016d9a043f41216e28409a3fd1be60905b23a0277811666f45abd486571139988ae1926539e824fd8243265c1955be12d1c76c208dd4497bf73eb839fabb01b302598a4ce2db31a67c85f231eee39a292c985d149192bd39508d8582f2fe07b50a61befd7ed46623bf7ada31e061e4b7096b68e475445ce611422df5a87bf3eb3bc617ec5bec5f530702e72874090d275416493e70e58e2a45406c1131d6b8a9ced8172fb0f92c3ee643aa08a891a12c28ab68a1129597d09c7c0bc02d29a9c8b75b6f0d9dddd1ba5f08e412e21e98dd6bce059689354331d6dc9ae28eed5f5266845081ae91cf6ecfba0c17bf160def86bef0ddee81ffc0c933ca3e9ee591012f3393443fd2a10c3d581e94b86f9ce36e221642501c203a12c41c0625568209b95678dd05790bb220b56a3daf76c7dd3332bc75ad4dbdc9dd89594f7afb186dcf151e1d4327b2e00736b0eded1cab78213a1a553ca1c869f071038439b9b9e44031eaa9c943d97368429958aa31a580d262aed66c2a85285ceaccb8a215bea504f7ab916e5c271900e9b396c8ab7b0ff1672e0501a8696b079058d29296416ea09d104d8e7f2bfb0c18f0e28ddee7afb8198ff1e11c852db854c4e1bd54ec9b7dcc3b75cb8bb8685b339592ed65f3341f37bef1a6ac476233ba2e59c6d9b8bc5a37e1790319d5c84ca284a30a466156000dd430a718aef33c4b30898d8b9674b394a92619b64ee71f4043a3604a8e5f6a80096f01ce945c1a002a1ec08df43a7562eb631a6693ce441911f529ddbad859c4f4bb8f670d440896e85ce510a0c308a4e6450a56be0a83724ebc1f1fd7a8ccb258509f2c556aa2aeb8a3ccb17eade5bc3e5a965d0ff0a98bb0d54299491407e05963bb30b31f1e3dc8f16ae3ca2f6265c7e7bf9028086c8246e60e60288f6d70183965b7d81e58b822ae51c95f7e687cb410e1324fe6f0fac146b62cc06e06fdb1a1df4bb87b89929ae2e09493f21077160dc5474044a79385a543a10bf507e5b1b1ba2771caab88283e0de1512efb37241add05ff4e651be2a363d3010cd3a475515e92441b09b8b4b579c3f02f2f183c842ad3569536e753d91b2fb8be1f1b36bbbcb087ea642a0071cd0a1345bad98ea74dd288f465ff130c3c586b5f087af975985e9769aadefca0e38930205daa45a34c5fd5dcfe15aea772f3ff2781f981d5c60a17883d4db1eca1b12107dc5ff69822403992c2c14270126994eccffcfe8f76b79822b5c691d62bc4a3036a80be5edcc7e2d3d4897a786832c0fd621edb74357c5a0591c6d1c1e127cef7a58b8e5b601897df5508a50fcbfd4280b883d2f0b1aa9c3f57f47efbff6f1000a0f1a77ae5b8bf21be23ea451485156655be4e82384b709c2e744c28ba014710edb2771f0ee14171b35e1ef1e989f043962a3d25c3477006debdee743aa442a1aae3f104d18a8d5033f99b41946172a848be091ea0af010ee9fbc8102d07ca368b5b9102467418e21dfabceed7c03f337d79cb34539535bcae9458d9e5f415c696eaf4fd8f6e27e40c2e8206e644df312d31daedbbfb5211272f9e3b330867b3bc2a1f9a8b14f236c881f112372f118b88e5cff866b79d5393ecdf03fe07a30a4fbb5f19f50986dc3bc7bcbbb4e69dfdc75f3b4ec5e90beb6abce5608808f5c9a14863e5cbf386dd78df82f1e0b9cf9aaafedc2e88b5823a8e0dab72c149aa283df7dd684dc19a46ca08c9c095498418e0f95463ab99d7de5f87145428deb577cb1da60d136153dc1f755a5a89e291b48105ecddd6e600992ad60d70bb480759bf4a3a1f58122d6101a004a4a1fb13489f5c85d0508a0617e2cedc7bd5275482205fcccf65e0f3a8a16fa00cb239fdd21b3c0d4c2ab83fc36b4638cacf29ef3b6aa193a93a52e49ad89137bbade601e86a0c3c528fd48a309dc0e4fbc9d7740e4a6ab604c1119188f97a08b96bebc787cff2e6db4b12ff5661c9f3be1d4a75cb65168d1dcbefac0252a6f91c5b6966ac844831f8778c7330bb37679f44e506faa70d0388ad9ac5090019635753883076c2221d2af0e27bc32b2acc23a301c0acf9a196fe6fc14844fbd07ebedb563679243b865320e5e4500c5bdef585394cee989e58302a8d6dac67d9ff7c86e9dc1796a692db896d67e5a2f0363c8157da374010614cf56dc655a2d0e6d86efdc9c0dc913becc9f55284557f9c0314b1fbb33a46d76b890facc43acd14f001ea8ea9416ee1041ad67d221ded975b0df94aeb85935c1b2e6b29f2228a382154c06c8565a7c756f0aa59c358c6067260ef88accb5c100ddc1c24be2a3801785c3b80bccd538857b3c2207b84c18b36c1362153e260f42d5064f51d501eb8ca7e5c7df245304be0b200ac5b96ab80df10712ffc967946c1679e71805f3d3e4ee32316342c82fabe84ffaced399f559760bb3beca1e2bda83fe21944451c3d0353b48d4991c999fcb60d15db31dbd37cc57f60853584557b5da6c21f17c81693db2236134ed4ed1d1a3679d8684c3a87857bb27d5ff98c5dce104be0c424e216f551f284351c3eea0277a754634d42a722182506b7bafa88ae633b1c8c1f40314c98c9dcad8eaa820461ed0b4b4f223dcfb6625ac6e77bf4666db29c987848203e9faecbf1717032022e0553c92ffbf36a5c192bd09fc620691d0c5a635c6ba76d73372708512d6098e234078d06b4d7a0b0bea01b9923ee38a76bc2ea24cd3d70bf083d90efad1ee58f28606488e888f36e97e793d8d98533969b84edce662dc612599a08d3ccd595f1ce0e40443908255732609fe286bbd01588a5674158c08228420ade87bd08bb3e387a0e38da5a4ec980f25f1fe664ec631068822af72fe62b2be5ce677dcc08d1d77d577e675b78e21dde20515d9ab8df4079f1cca48e10b5f275a07d247c404ad4760a91488518b6fdec25cb1baeab4abba325e10c1efe58924a423e0d1a6e92b348786b14c56a9987627b05bfd410710d55e54acba926abcef80158c20562cd52558dceb4c97818d6eedb53be65a0c883a723af0869f0331cf6bd0c8c8f15bba262daff607f596826716ee0bcb67044a76fd5a1f7b5c12e5aff0efd9e3dc5b5ca88b08280db37baab8ed0ec0bdb8a0e824aea9caa3d4860f4fc8f5b2fc9308d59f34bf340c61c4ebe25f619e0a8f2bab0f94742bc9643a51400b428393a7df1900c67f3771af6a47c256bd3b50e6db15c8899c60359b6cbbbc523ab00986598bea613020a08a11528c25e1428e46a795137bb95cd4b7f8f164a601b10e19964cd79184664054a4ba294575e26635f598f199348959c3aa5ff8fb5bfc8d2bbc126ed7ff95ed29d5eddc7ce97b96bc130b1cb108ffef0e8a1acd6376822d90b894976a120d25025d9292df28db69115aead177970e5a91a6b9d0b0b1a3dc0dc481de6f566572a81163ad4b0b8943af351d72e811a31ad182345d4001862c1185d50f2bef7dec66c248820e78af204ab77526200f8a3be7be5859cff401f0d0990624b7ae6901499628cc49c557b98e73ce8bd50b69bae395476c7772379798b26c13dfffb195d4702463099d71771e2e8b37a313531e7daffe20c1518f19a9d9511c011824ef6c74eb34f9efd30342e001dab757930d01afaaf31952ae9bdd63988917bf49df2a3b1efb62ce7d6e1f6210a34ba7106e72d8c55801c1567e1a297d49d516da2e365ba985fae9b24b435cb29a817772944fec943ac2f4b64c23c99ad094a78ea77d20680cd279402dbb94b023b4346aee206174fcaab160af6dce924b8a8c2f5fe601757c3d726c9e90b98ec43c80284558213617c12bdd303cc", @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8, @ANYBLOB="46a085c0d9bfed723226b3353d89a005723a1c8979aa8f55d1fdccdf31b5c11bd751d461efbea52e7128bfd68d3886fb834f8148b65849d128e491548904001f0036f51760c6e5a733d9e9be339697dff7b1db8ca102542d3815dc27ac7163fdb11168a2858db3f820f37ca920dffc5dbcbf9757bb4a42abcdc761c188f3689fb6404c1fd920a6"], 0x3c}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r8, @empty, @multicast1}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000001700)={'ip6gre0\x00', r8, 0x29, 0x5, 0x57, 0xffffffff, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x5, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000001780)={'syztnl2\x00', r8, 0x20, 0x8, 0x7, 0xffffffff, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x65, 0x0, 0x5c, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0xb, 0xd5, [@broadcast, @empty]}, @ra={0x94, 0x4}, @generic={0x44, 0xe, "f0b24b8da762711eb93ae262"}, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x4, [0x5, 0x4, 0x7fffffff]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x6, 0x0, 0x4, [0xffffffff, 0x400]}]}}}}}) sendmsg$nl_route(r11, &(0x7f0000001880)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000001800)=@RTM_NEWMDB={0x58, 0x54, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x0, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x0, 0x1, {@in6_addr=@local, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x40c1) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@newchain={0x4c, 0x64, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xf, 0x6}, {0x0, 0xf}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x10000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ae04}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1159.579965][T23931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.588015][T23931] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1159.596125][T23931] [ 1159.599195][T23916] CPU: 0 PID: 23916 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1159.610037][T23916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1159.620192][T23916] Call Trace: [ 1159.623665][T23916] [ 1159.626633][T23916] dump_stack_lvl+0xda/0x130 [ 1159.631399][T23916] dump_stack+0x15/0x20 [ 1159.635600][T23916] should_fail_ex+0x21f/0x230 [ 1159.640413][T23916] __should_failslab+0x92/0xa0 [ 1159.645254][T23916] should_failslab+0x9/0x20 [ 1159.649744][T23916] slab_pre_alloc_hook+0x38/0x180 [ 1159.654938][T23916] __kmem_cache_alloc_node+0x46/0x250 [ 1159.661276][T23916] ? alloc_workqueue+0x177/0xa80 [ 1159.666456][T23916] kmalloc_trace+0x2a/0xa0 [ 1159.670972][T23916] alloc_workqueue+0x177/0xa80 [ 1159.675736][T23916] ? __should_failslab+0x92/0xa0 [ 1159.680675][T23916] ? slab_post_alloc_hook+0x75/0x2d0 [ 1159.686196][T23916] ? bond_init+0x6f/0x280 [ 1159.690538][T23916] bond_init+0x8b/0x280 [ 1159.694711][T23916] register_netdevice+0x217/0xcd0 [ 1159.699839][T23916] bond_newlink+0x3b/0x80 [ 1159.704177][T23916] ? bond_validate+0xc0/0xc0 [ 1159.708825][T23916] rtnl_newlink+0xe5a/0x15a0 [ 1159.713719][T23916] ? __list_del_entry_valid+0x5f/0xe0 [ 1159.719301][T23916] ? _raw_spin_unlock+0x26/0x40 [ 1159.724161][T23916] ? __mutex_lock+0x21c/0x8d0 [ 1159.728867][T23916] ? rtnl_setlink+0x2d0/0x2d0 [ 1159.733639][T23916] rtnetlink_rcv_msg+0x807/0x8c0 [ 1159.738654][T23916] ? slab_post_alloc_hook+0x75/0x2d0 [ 1159.744027][T23916] ? xas_load+0x37c/0x390 [ 1159.748729][T23916] ? __rcu_read_unlock+0x4d/0x70 [ 1159.753892][T23916] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1159.759217][T23916] ? xa_load+0xb9/0xe0 [ 1159.763339][T23916] ? kmem_cache_free+0x178/0x280 [ 1159.768582][T23916] ? nlmon_xmit+0x4b/0x60 [ 1159.773023][T23916] ? __kfree_skb+0x102/0x140 [ 1159.777722][T23916] ? consume_skb+0x57/0x180 [ 1159.782320][T23916] ? nlmon_xmit+0x4b/0x60 [ 1159.786733][T23916] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1159.792036][T23916] ? ref_tracker_free+0x3a1/0x400 [ 1159.797159][T23916] ? local_bh_enable+0x1f/0x20 [ 1159.801969][T23916] ? __dev_queue_xmit+0xbba/0x1e60 [ 1159.807085][T23916] netlink_rcv_skb+0x126/0x220 [ 1159.811861][T23916] ? rtnetlink_bind+0x60/0x60 [ 1159.816549][T23916] rtnetlink_rcv+0x1c/0x20 [ 1159.821004][T23916] netlink_unicast+0x56f/0x640 [ 1159.825769][T23916] netlink_sendmsg+0x665/0x770 [ 1159.830960][T23916] ? netlink_getsockopt+0x710/0x710 [ 1159.836356][T23916] ____sys_sendmsg+0x375/0x4c0 [ 1159.841128][T23916] __sys_sendmsg+0x1e3/0x270 [ 1159.845922][T23916] __x64_sys_sendmsg+0x46/0x50 [ 1159.850703][T23916] do_syscall_64+0x41/0xc0 [ 1159.855245][T23916] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1159.862143][T23916] RIP: 0033:0x7fc243af5169 [ 1159.866645][T23916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1159.886521][T23916] RSP: 002b:00007fc242e68168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.895144][T23916] RAX: ffffffffffffffda RBX: 00007fc243c14f80 RCX: 00007fc243af5169 [ 1159.903193][T23916] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1159.911330][T23916] RBP: 00007fc242e681d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.919574][T23916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:02:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1159.927657][T23916] R13: 00007fff9a1690bf R14: 00007fc242e68300 R15: 0000000000022000 [ 1159.935807][T23916] [ 1159.941767][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1159.969687][T23925] ipvlan0: entered promiscuous mode [ 1159.975548][T23925] ipvlan0: left promiscuous mode 01:02:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3202}, 0x0) [ 1160.012754][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1160.042029][T23931] ipvlan0: entered promiscuous mode [ 1160.047700][T23931] ipvlan0: left promiscuous mode 01:02:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 7) [ 1160.071712][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1160.098068][T23935] bond861: entered promiscuous mode [ 1160.106047][T23935] 8021q: adding VLAN 0 to HW filter on device bond861 01:02:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1160.118908][T23936] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1160.199813][T23943] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1160.222593][T23943] bond365: entered promiscuous mode [ 1160.228215][T23943] bond365: entered allmulticast mode [ 1160.233920][T23943] 8021q: adding VLAN 0 to HW filter on device bond365 01:02:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYBLOB="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", @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8, @ANYBLOB="46a085c0d9bfed723226b3353d89a005723a1c8979aa8f55d1fdccdf31b5c11bd751d461efbea52e7128bfd68d3886fb834f8148b65849d128e491548904001f0036f51760c6e5a733d9e9be339697dff7b1db8ca102542d3815dc27ac7163fdb11168a2858db3f820f37ca920dffc5dbcbf9757bb4a42abcdc761c188f3689fb6404c1fd920a6"], 0x3c}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r8, @empty, @multicast1}, 0xc) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (rerun: 32) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000001700)={'ip6gre0\x00', r8, 0x29, 0x5, 0x57, 0xffffffff, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x5, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000001780)={'syztnl2\x00', r8, 0x20, 0x8, 0x7, 0xffffffff, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x65, 0x0, 0x5c, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0xb, 0xd5, [@broadcast, @empty]}, @ra={0x94, 0x4}, @generic={0x44, 0xe, "f0b24b8da762711eb93ae262"}, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x4, [0x5, 0x4, 0x7fffffff]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x6, 0x0, 0x4, [0xffffffff, 0x400]}]}}}}}) sendmsg$nl_route(r11, &(0x7f0000001880)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000001800)=@RTM_NEWMDB={0x58, 0x54, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x0, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x0, 0x1, {@in6_addr=@local, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x40c1) (async) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@newchain={0x4c, 0x64, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xf, 0x6}, {0x0, 0xf}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x10000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ae04}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async, rerun: 64) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (rerun: 64) 01:02:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYBLOB="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", @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8, @ANYBLOB="46a085c0d9bfed723226b3353d89a005723a1c8979aa8f55d1fdccdf31b5c11bd751d461efbea52e7128bfd68d3886fb834f8148b65849d128e491548904001f0036f51760c6e5a733d9e9be339697dff7b1db8ca102542d3815dc27ac7163fdb11168a2858db3f820f37ca920dffc5dbcbf9757bb4a42abcdc761c188f3689fb6404c1fd920a6"], 0x3c}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r8, @empty, @multicast1}, 0xc) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000001700)={'ip6gre0\x00', r8, 0x29, 0x5, 0x57, 0xffffffff, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x5, 0x2}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000001780)={'syztnl2\x00', r8, 0x20, 0x8, 0x7, 0xffffffff, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x65, 0x0, 0x5c, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0xb, 0xd5, [@broadcast, @empty]}, @ra={0x94, 0x4}, @generic={0x44, 0xe, "f0b24b8da762711eb93ae262"}, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x4, [0x5, 0x4, 0x7fffffff]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x6, 0x0, 0x4, [0xffffffff, 0x400]}]}}}}}) sendmsg$nl_route(r11, &(0x7f0000001880)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000001800)=@RTM_NEWMDB={0x58, 0x54, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x0, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x0, 0x1, {@in6_addr=@local, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x40c1) (async) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@newchain={0x4c, 0x64, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xf, 0x6}, {0x0, 0xf}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x10000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ae04}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1160.247228][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1160.284632][T23947] ipvlan0: entered promiscuous mode [ 1160.291425][T23947] ipvlan0: left promiscuous mode 01:02:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3203}, 0x0) [ 1160.327733][T23951] FAULT_INJECTION: forcing a failure. [ 1160.327733][T23951] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.341058][T23951] CPU: 0 PID: 23951 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1160.351660][T23951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1160.362059][T23951] Call Trace: [ 1160.365417][T23951] [ 1160.368334][T23951] dump_stack_lvl+0xda/0x130 [ 1160.373039][T23951] dump_stack+0x15/0x20 [ 1160.377264][T23951] should_fail_ex+0x21f/0x230 [ 1160.381987][T23951] __should_failslab+0x92/0xa0 [ 1160.387028][T23951] should_failslab+0x9/0x20 [ 1160.391703][T23951] slab_pre_alloc_hook+0x38/0x180 [ 1160.396915][T23951] __kmem_cache_alloc_node+0x46/0x250 [ 1160.402298][T23951] ? rtnl_newlink+0x5d/0x15a0 [ 1160.407044][T23951] kmalloc_trace+0x2a/0xa0 [ 1160.411456][T23951] rtnl_newlink+0x5d/0x15a0 [ 1160.416510][T23951] ? kvm_clock_read+0x14/0x30 [ 1160.421431][T23951] ? kvm_sched_clock_read+0x9/0x20 [ 1160.426646][T23951] ? __rcu_read_unlock+0x4d/0x70 [ 1160.431758][T23951] ? raw_spin_rq_lock_nested+0x10/0x20 [ 1160.437419][T23951] ? newidle_balance+0x2ba/0x330 [ 1160.442487][T23951] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 1160.449759][T23951] ? _raw_spin_unlock+0x26/0x40 [ 1160.454596][T23951] ? finish_task_switch+0xac/0x280 [ 1160.459819][T23951] ? __schedule+0x656/0x8e0 [ 1160.464575][T23951] ? selinux_capable+0x1fb/0x260 [ 1160.469609][T23951] ? __list_del_entry_valid+0x5f/0xe0 [ 1160.475100][T23951] ? _raw_spin_unlock+0x26/0x40 [ 1160.479992][T23951] ? __mutex_lock+0x21c/0x8d0 [ 1160.484878][T23951] ? rtnl_setlink+0x2d0/0x2d0 [ 1160.489701][T23951] rtnetlink_rcv_msg+0x807/0x8c0 [ 1160.494717][T23951] ? xas_load+0x253/0x390 [ 1160.499206][T23951] ? try_charge_memcg+0xb42/0xd20 [ 1160.504968][T23951] ? xas_load+0x37c/0x390 [ 1160.509499][T23951] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1160.514799][T23951] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1160.520155][T23951] ? kmem_cache_free+0x178/0x280 [ 1160.525267][T23951] ? nlmon_xmit+0x4b/0x60 [ 1160.529693][T23951] ? __kfree_skb+0x102/0x140 [ 1160.534320][T23951] ? consume_skb+0x57/0x180 [ 1160.538976][T23951] ? nlmon_xmit+0x4b/0x60 [ 1160.543542][T23951] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1160.548878][T23951] ? ref_tracker_free+0x3a1/0x400 [ 1160.554070][T23951] ? local_bh_enable+0x1f/0x20 [ 1160.558921][T23951] ? __dev_queue_xmit+0xbba/0x1e60 [ 1160.564217][T23951] netlink_rcv_skb+0x126/0x220 [ 1160.569048][T23951] ? rtnetlink_bind+0x60/0x60 [ 1160.574275][T23951] rtnetlink_rcv+0x1c/0x20 [ 1160.578685][T23951] netlink_unicast+0x56f/0x640 [ 1160.583523][T23951] netlink_sendmsg+0x665/0x770 [ 1160.588306][T23951] ? netlink_getsockopt+0x710/0x710 [ 1160.593581][T23951] ____sys_sendmsg+0x375/0x4c0 [ 1160.598441][T23951] __sys_sendmsg+0x1e3/0x270 [ 1160.603106][T23951] __x64_sys_sendmsg+0x46/0x50 [ 1160.608058][T23951] do_syscall_64+0x41/0xc0 [ 1160.612558][T23951] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1160.618564][T23951] RIP: 0033:0x7f3099bc9169 [ 1160.623113][T23951] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1160.642773][T23951] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.651193][T23951] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1160.659181][T23951] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1160.667284][T23951] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:02:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 8) [ 1160.675619][T23951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.683777][T23951] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1160.691751][T23951] 01:02:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1160.719906][T23961] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1160.744813][T23961] bond366: entered promiscuous mode [ 1160.750459][T23961] bond366: entered allmulticast mode [ 1160.755925][T23961] 8021q: adding VLAN 0 to HW filter on device bond366 01:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newae={0x84, 0x1e, 0x400, 0x70bd28, 0x25dfdbfd, {{@in=@private=0xa010102, 0x4d4, 0x2, 0x32}, @in6=@private1, 0x96, 0x3500}, [@sec_ctx={0x1d, 0x8, {0x19, 0x8, 0x0, 0x0, 0x11, "74e5b0a298a0858c8d3b94f483e81ea21f"}}, @tfcpad={0x8, 0x16, 0xfffff000}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e22, @in6=@loopback}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x410) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1160.768316][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3a00}, 0x0) [ 1160.850255][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1160.865075][T23972] FAULT_INJECTION: forcing a failure. [ 1160.865075][T23972] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.877794][T23972] CPU: 0 PID: 23972 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1160.888203][T23972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1160.898328][T23972] Call Trace: [ 1160.901611][T23972] [ 1160.904556][T23972] dump_stack_lvl+0xda/0x130 [ 1160.909241][T23972] dump_stack+0x15/0x20 [ 1160.913415][T23972] should_fail_ex+0x21f/0x230 [ 1160.918161][T23972] __should_failslab+0x92/0xa0 [ 1160.923033][T23972] should_failslab+0x9/0x20 [ 1160.927645][T23972] slab_pre_alloc_hook+0x38/0x180 [ 1160.932660][T23972] ? kvmalloc_node+0x72/0x160 [ 1160.937327][T23972] __kmem_cache_alloc_node+0x46/0x250 [ 1160.942684][T23972] ? kvmalloc_node+0x72/0x160 [ 1160.947368][T23972] __kmalloc_node+0x98/0x1a0 [ 1160.952056][T23972] kvmalloc_node+0x72/0x160 [ 1160.956600][T23972] alloc_netdev_mqs+0x89/0x870 [ 1160.961381][T23972] ? hsr_del_ports+0x90/0x90 [ 1160.966028][T23972] rtnl_create_link+0x226/0x7f0 [ 1160.970894][T23972] rtnl_newlink+0xda3/0x15a0 [ 1160.975532][T23972] ? __list_del_entry_valid+0x5f/0xe0 [ 1160.980905][T23972] ? _raw_spin_unlock+0x26/0x40 [ 1160.985852][T23972] ? __mutex_lock+0x21c/0x8d0 [ 1160.990610][T23972] ? rtnl_setlink+0x2d0/0x2d0 [ 1160.995291][T23972] rtnetlink_rcv_msg+0x807/0x8c0 [ 1161.000277][T23972] ? __refill_stock+0x7c/0xb0 [ 1161.004990][T23972] ? try_charge_memcg+0xafc/0xd20 [ 1161.010118][T23972] ? xas_load+0x37c/0x390 [ 1161.014445][T23972] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1161.019890][T23972] ? kmem_cache_free+0x178/0x280 [ 1161.025079][T23972] ? nlmon_xmit+0x4b/0x60 [ 1161.029440][T23972] ? __kfree_skb+0x102/0x140 [ 1161.034127][T23972] ? consume_skb+0x57/0x180 [ 1161.038721][T23972] ? nlmon_xmit+0x4b/0x60 [ 1161.043142][T23972] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1161.048474][T23972] ? ref_tracker_free+0x3a1/0x400 [ 1161.053499][T23972] ? local_bh_enable+0x1f/0x20 [ 1161.058253][T23972] ? __dev_queue_xmit+0xbba/0x1e60 [ 1161.063394][T23972] netlink_rcv_skb+0x126/0x220 [ 1161.068201][T23972] ? rtnetlink_bind+0x60/0x60 [ 1161.072894][T23972] rtnetlink_rcv+0x1c/0x20 [ 1161.077374][T23972] netlink_unicast+0x56f/0x640 [ 1161.082138][T23972] netlink_sendmsg+0x665/0x770 [ 1161.087001][T23972] ? netlink_getsockopt+0x710/0x710 [ 1161.092202][T23972] ____sys_sendmsg+0x375/0x4c0 [ 1161.097039][T23972] __sys_sendmsg+0x1e3/0x270 [ 1161.101657][T23972] __x64_sys_sendmsg+0x46/0x50 [ 1161.106540][T23972] do_syscall_64+0x41/0xc0 [ 1161.111058][T23972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1161.117017][T23972] RIP: 0033:0x7f3099bc9169 [ 1161.121431][T23972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1161.141054][T23972] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.149515][T23972] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1161.157504][T23972] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1161.165585][T23972] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.173550][T23972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.181520][T23972] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1161.189481][T23972] 01:02:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 9) [ 1161.193224][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1161.217415][T23974] ipvlan0: entered promiscuous mode [ 1161.223819][T23974] ipvlan0: left promiscuous mode [ 1161.235073][T23977] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1161.255974][T23977] bond367: entered promiscuous mode [ 1161.261209][T23977] bond367: entered allmulticast mode [ 1161.266807][T23977] 8021q: adding VLAN 0 to HW filter on device bond367 [ 1161.278410][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1161.309480][T23981] bond862: entered promiscuous mode [ 1161.315095][T23981] 8021q: adding VLAN 0 to HW filter on device bond862 01:02:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3a01}, 0x0) 01:02:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newae={0x84, 0x1e, 0x400, 0x70bd28, 0x25dfdbfd, {{@in=@private=0xa010102, 0x4d4, 0x2, 0x32}, @in6=@private1, 0x96, 0x3500}, [@sec_ctx={0x1d, 0x8, {0x19, 0x8, 0x0, 0x0, 0x11, "74e5b0a298a0858c8d3b94f483e81ea21f"}}, @tfcpad={0x8, 0x16, 0xfffff000}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e22, @in6=@loopback}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x410) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1161.364526][T23989] FAULT_INJECTION: forcing a failure. [ 1161.364526][T23989] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.377233][T23989] CPU: 1 PID: 23989 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1161.387735][T23989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1161.397893][T23989] Call Trace: [ 1161.401172][T23989] [ 1161.404145][T23989] dump_stack_lvl+0xda/0x130 [ 1161.408755][T23989] dump_stack+0x15/0x20 [ 1161.412968][T23989] should_fail_ex+0x21f/0x230 [ 1161.417662][T23989] __should_failslab+0x92/0xa0 [ 1161.422595][T23989] should_failslab+0x9/0x20 [ 1161.427088][T23989] slab_pre_alloc_hook+0x38/0x180 [ 1161.432111][T23989] __kmem_cache_alloc_node+0x46/0x250 [ 1161.437489][T23989] ? __hw_addr_add_ex+0x13d/0x350 [ 1161.442567][T23989] kmalloc_trace+0x2a/0xa0 [ 1161.446997][T23989] __hw_addr_add_ex+0x13d/0x350 [ 1161.451877][T23989] dev_addr_init+0xb2/0x120 [ 1161.456382][T23989] ? stack_depot_init+0x4f/0x130 [ 1161.461374][T23989] alloc_netdev_mqs+0x1b6/0x870 [ 1161.466288][T23989] ? hsr_del_ports+0x90/0x90 [ 1161.470933][T23989] rtnl_create_link+0x226/0x7f0 [ 1161.475895][T23989] rtnl_newlink+0xda3/0x15a0 [ 1161.480517][T23989] ? __list_del_entry_valid+0x5f/0xe0 [ 1161.485897][T23989] ? _raw_spin_unlock+0x26/0x40 [ 1161.490934][T23989] ? __mutex_lock+0x21c/0x8d0 [ 1161.495631][T23989] ? rtnl_setlink+0x2d0/0x2d0 [ 1161.500340][T23989] rtnetlink_rcv_msg+0x807/0x8c0 [ 1161.505276][T23989] ? slab_post_alloc_hook+0x75/0x2d0 [ 1161.510686][T23989] ? try_charge_memcg+0xb42/0xd20 [ 1161.515783][T23989] ? xas_load+0x37c/0x390 [ 1161.520198][T23989] ? __rcu_read_unlock+0x4d/0x70 [ 1161.525130][T23989] ? xa_load+0xb9/0xe0 [ 1161.529323][T23989] ? kmem_cache_free+0x178/0x280 [ 1161.534266][T23989] ? nlmon_xmit+0x4b/0x60 [ 1161.538595][T23989] ? __kfree_skb+0x102/0x140 [ 1161.543279][T23989] ? consume_skb+0x57/0x180 [ 1161.547845][T23989] ? nlmon_xmit+0x4b/0x60 [ 1161.552287][T23989] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1161.558173][T23989] ? ref_tracker_free+0x3a1/0x400 [ 1161.563377][T23989] ? local_bh_enable+0x1f/0x20 [ 1161.568330][T23989] ? __dev_queue_xmit+0xbba/0x1e60 [ 1161.573475][T23989] netlink_rcv_skb+0x126/0x220 [ 1161.578652][T23989] ? rtnetlink_bind+0x60/0x60 [ 1161.583364][T23989] rtnetlink_rcv+0x1c/0x20 [ 1161.587980][T23989] netlink_unicast+0x56f/0x640 [ 1161.592787][T23989] netlink_sendmsg+0x665/0x770 [ 1161.597548][T23989] ? netlink_getsockopt+0x710/0x710 [ 1161.602848][T23989] ____sys_sendmsg+0x375/0x4c0 [ 1161.607609][T23989] __sys_sendmsg+0x1e3/0x270 [ 1161.612266][T23989] __x64_sys_sendmsg+0x46/0x50 [ 1161.617182][T23989] do_syscall_64+0x41/0xc0 [ 1161.621634][T23989] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1161.627548][T23989] RIP: 0033:0x7f3099bc9169 [ 1161.632077][T23989] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1161.651874][T23989] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:02:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 10) [ 1161.660336][T23989] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1161.668440][T23989] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1161.676542][T23989] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.684660][T23989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.692846][T23989] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1161.700905][T23989] [ 1161.721977][T23994] ipvlan0: entered promiscuous mode [ 1161.727769][T23994] ipvlan0: left promiscuous mode [ 1161.739217][T23995] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1161.760814][T23995] bond368: entered promiscuous mode [ 1161.766174][T23995] bond368: entered allmulticast mode 01:02:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3a02}, 0x0) [ 1161.772219][T23995] 8021q: adding VLAN 0 to HW filter on device bond368 01:02:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newae={0x84, 0x1e, 0x400, 0x70bd28, 0x25dfdbfd, {{@in=@private=0xa010102, 0x4d4, 0x2, 0x32}, @in6=@private1, 0x96, 0x3500}, [@sec_ctx={0x1d, 0x8, {0x19, 0x8, 0x0, 0x0, 0x11, "74e5b0a298a0858c8d3b94f483e81ea21f"}}, @tfcpad={0x8, 0x16, 0xfffff000}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e22, @in6=@loopback}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x410) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1161.838326][T24001] bond863: entered promiscuous mode [ 1161.843747][T24001] 8021q: adding VLAN 0 to HW filter on device bond863 01:02:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81ffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1161.883117][T24007] ipvlan0: entered promiscuous mode [ 1161.888922][T24007] ipvlan0: left promiscuous mode [ 1161.911580][T24010] ipvlan0: entered promiscuous mode [ 1161.917372][T24010] ipvlan0: left promiscuous mode 01:02:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 11) [ 1161.929760][T24012] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1161.956332][T24012] bond369: entered promiscuous mode [ 1161.961978][T24012] bond369: entered allmulticast mode [ 1161.967561][T24012] 8021q: adding VLAN 0 to HW filter on device bond369 01:02:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3a03}, 0x0) 01:02:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292a492df37fb670a20e479a4b44f9974b9f5"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$netlink(0x10, 0x3, 0x15) [ 1162.055326][T24018] bond864: entered promiscuous mode [ 1162.060799][T24018] 8021q: adding VLAN 0 to HW filter on device bond864 [ 1162.090703][T24026] FAULT_INJECTION: forcing a failure. [ 1162.090703][T24026] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.103521][T24026] CPU: 1 PID: 24026 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1162.113950][T24026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1162.123996][T24026] Call Trace: [ 1162.127259][T24026] [ 1162.130260][T24026] dump_stack_lvl+0xda/0x130 [ 1162.134842][T24026] dump_stack+0x15/0x20 [ 1162.139035][T24026] should_fail_ex+0x21f/0x230 [ 1162.143934][T24026] __should_failslab+0x92/0xa0 [ 1162.148749][T24026] should_failslab+0x9/0x20 [ 1162.154092][T24026] slab_pre_alloc_hook+0x38/0x180 [ 1162.159169][T24026] ? kvmalloc_node+0x72/0x160 [ 1162.164037][T24026] __kmem_cache_alloc_node+0x46/0x250 [ 1162.169411][T24026] ? kvmalloc_node+0x72/0x160 [ 1162.174104][T24026] __kmalloc_node+0x98/0x1a0 [ 1162.178720][T24026] kvmalloc_node+0x72/0x160 [ 1162.183320][T24026] alloc_netdev_mqs+0x6ac/0x870 [ 1162.188194][T24026] rtnl_create_link+0x226/0x7f0 [ 1162.193129][T24026] rtnl_newlink+0xda3/0x15a0 [ 1162.197857][T24026] ? __list_del_entry_valid+0x5f/0xe0 [ 1162.203219][T24026] ? _raw_spin_unlock+0x26/0x40 [ 1162.208117][T24026] ? __mutex_lock+0x21c/0x8d0 [ 1162.212881][T24026] ? rtnl_setlink+0x2d0/0x2d0 [ 1162.217747][T24026] rtnetlink_rcv_msg+0x807/0x8c0 [ 1162.222753][T24026] ? slab_post_alloc_hook+0x75/0x2d0 [ 1162.228028][T24026] ? xas_load+0x37c/0x390 [ 1162.232340][T24026] ? __rcu_read_unlock+0x4d/0x70 [ 1162.237269][T24026] ? xa_load+0xb9/0xe0 [ 1162.241331][T24026] ? kmem_cache_free+0x178/0x280 [ 1162.246256][T24026] ? nlmon_xmit+0x4b/0x60 [ 1162.250597][T24026] ? __kfree_skb+0x102/0x140 [ 1162.255190][T24026] ? consume_skb+0x57/0x180 [ 1162.259697][T24026] ? nlmon_xmit+0x4b/0x60 [ 1162.264067][T24026] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1162.269443][T24026] ? ref_tracker_free+0x3a1/0x400 [ 1162.274580][T24026] ? local_bh_enable+0x1f/0x20 [ 1162.279415][T24026] ? __dev_queue_xmit+0xbba/0x1e60 [ 1162.284531][T24026] netlink_rcv_skb+0x126/0x220 [ 1162.289287][T24026] ? rtnetlink_bind+0x60/0x60 [ 1162.293982][T24026] rtnetlink_rcv+0x1c/0x20 [ 1162.298392][T24026] netlink_unicast+0x56f/0x640 [ 1162.303150][T24026] netlink_sendmsg+0x665/0x770 [ 1162.307923][T24026] ? netlink_getsockopt+0x710/0x710 [ 1162.313136][T24026] ____sys_sendmsg+0x375/0x4c0 [ 1162.317920][T24026] __sys_sendmsg+0x1e3/0x270 [ 1162.322505][T24026] __x64_sys_sendmsg+0x46/0x50 [ 1162.327367][T24026] do_syscall_64+0x41/0xc0 [ 1162.331799][T24026] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1162.337728][T24026] RIP: 0033:0x7f3099bc9169 [ 1162.342215][T24026] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1162.361977][T24026] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.370429][T24026] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1162.378390][T24026] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1162.386378][T24026] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.394374][T24026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:02:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 12) 01:02:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x82020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1162.402333][T24026] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1162.410406][T24026] [ 1162.424534][T24029] ipvlan0: entered promiscuous mode [ 1162.430560][T24029] ipvlan0: left promiscuous mode 01:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1162.451528][T24030] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1162.472233][T24030] bond370: entered promiscuous mode [ 1162.477488][T24030] bond370: entered allmulticast mode [ 1162.482964][T24030] 8021q: adding VLAN 0 to HW filter on device bond370 01:02:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292a492df37fb670a20e479a4b44f9974b9f5"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$netlink(0x10, 0x3, 0x15) (async) socket$netlink(0x10, 0x3, 0x15) 01:02:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c00}, 0x0) [ 1162.531174][T24041] FAULT_INJECTION: forcing a failure. [ 1162.531174][T24041] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.544007][T24041] CPU: 0 PID: 24041 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1162.554602][T24041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1162.564768][T24041] Call Trace: [ 1162.568137][T24041] [ 1162.571133][T24041] dump_stack_lvl+0xda/0x130 [ 1162.575796][T24041] dump_stack+0x15/0x20 [ 1162.579960][T24041] should_fail_ex+0x21f/0x230 [ 1162.584799][T24041] __should_failslab+0x92/0xa0 [ 1162.589604][T24041] should_failslab+0x9/0x20 [ 1162.594160][T24041] slab_pre_alloc_hook+0x38/0x180 [ 1162.599180][T24041] __kmem_cache_alloc_node+0x46/0x250 [ 1162.604630][T24041] ? rb_insert_color+0x295/0x2a0 [ 1162.609658][T24041] ? hsr_create_self_node+0x3e/0x120 [ 1162.614977][T24041] kmalloc_trace+0x2a/0xa0 [ 1162.619480][T24041] hsr_create_self_node+0x3e/0x120 [ 1162.624689][T24041] hsr_dev_finalize+0x168/0x440 [ 1162.629561][T24041] hsr_newlink+0x426/0x470 [ 1162.634076][T24041] ? hsr_get_node_list+0x450/0x450 [ 1162.639249][T24041] rtnl_newlink+0xe5a/0x15a0 [ 1162.643877][T24041] ? __list_del_entry_valid+0x5f/0xe0 [ 1162.649246][T24041] ? _raw_spin_unlock+0x26/0x40 [ 1162.654091][T24041] ? __mutex_lock+0x21c/0x8d0 [ 1162.658848][T24041] ? rtnl_setlink+0x2d0/0x2d0 [ 1162.663527][T24041] rtnetlink_rcv_msg+0x807/0x8c0 [ 1162.668600][T24041] ? slab_post_alloc_hook+0x75/0x2d0 [ 1162.674057][T24041] ? xas_load+0x37c/0x390 [ 1162.678435][T24041] ? __rcu_read_unlock+0x4d/0x70 [ 1162.683480][T24041] ? xa_load+0xb9/0xe0 [ 1162.687645][T24041] ? kmem_cache_free+0x178/0x280 [ 1162.692646][T24041] ? nlmon_xmit+0x4b/0x60 [ 1162.697059][T24041] ? __kfree_skb+0x102/0x140 [ 1162.701751][T24041] ? consume_skb+0x57/0x180 [ 1162.706340][T24041] ? nlmon_xmit+0x4b/0x60 [ 1162.710669][T24041] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1162.716031][T24041] ? ref_tracker_free+0x3a1/0x400 [ 1162.721229][T24041] ? local_bh_enable+0x1f/0x20 [ 1162.726062][T24041] ? __dev_queue_xmit+0xbba/0x1e60 [ 1162.731510][T24041] netlink_rcv_skb+0x126/0x220 [ 1162.736450][T24041] ? rtnetlink_bind+0x60/0x60 [ 1162.741290][T24041] rtnetlink_rcv+0x1c/0x20 [ 1162.745842][T24041] netlink_unicast+0x56f/0x640 [ 1162.750602][T24041] netlink_sendmsg+0x665/0x770 [ 1162.755452][T24041] ? netlink_getsockopt+0x710/0x710 [ 1162.760748][T24041] ____sys_sendmsg+0x375/0x4c0 [ 1162.765552][T24041] __sys_sendmsg+0x1e3/0x270 [ 1162.770174][T24041] __x64_sys_sendmsg+0x46/0x50 [ 1162.774933][T24041] do_syscall_64+0x41/0xc0 [ 1162.779499][T24041] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1162.785611][T24041] RIP: 0033:0x7f3099bc9169 [ 1162.790062][T24041] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1162.809851][T24041] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.818323][T24041] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:02:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 13) [ 1162.826302][T24041] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1162.834266][T24041] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.842232][T24041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.850237][T24041] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1162.858211][T24041] 01:02:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x82030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1162.890198][T24047] ipvlan0: entered promiscuous mode [ 1162.895852][T24047] ipvlan0: left promiscuous mode [ 1162.906712][T24048] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1162.928417][T24048] bond371: entered promiscuous mode [ 1162.933706][T24048] bond371: entered allmulticast mode 01:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1162.939081][T24048] 8021q: adding VLAN 0 to HW filter on device bond371 01:02:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292a492df37fb670a20e479a4b44f9974b9f5"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) socket$netlink(0x10, 0x3, 0x15) 01:02:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3e03}, 0x0) [ 1162.985349][T24059] FAULT_INJECTION: forcing a failure. [ 1162.985349][T24059] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.998391][T24059] CPU: 0 PID: 24059 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1163.008821][T24059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1163.019150][T24059] Call Trace: [ 1163.022563][T24059] [ 1163.025495][T24059] dump_stack_lvl+0xda/0x130 [ 1163.030292][T24059] dump_stack+0x15/0x20 [ 1163.034443][T24059] should_fail_ex+0x21f/0x230 [ 1163.039284][T24059] __should_failslab+0x92/0xa0 [ 1163.044133][T24059] should_failslab+0x9/0x20 [ 1163.048720][T24059] slab_pre_alloc_hook+0x38/0x180 [ 1163.053821][T24059] ? kvmalloc_node+0x72/0x160 [ 1163.058501][T24059] __kmem_cache_alloc_node+0x46/0x250 [ 1163.063876][T24059] ? kvmalloc_node+0x72/0x160 [ 1163.068654][T24059] __kmalloc_node+0x98/0x1a0 [ 1163.073267][T24059] kvmalloc_node+0x72/0x160 [ 1163.077799][T24059] alloc_netdev_mqs+0x6ac/0x870 [ 1163.082655][T24059] rtnl_create_link+0x226/0x7f0 [ 1163.087738][T24059] rtnl_newlink+0xda3/0x15a0 [ 1163.092334][T24059] ? __list_del_entry_valid+0x5f/0xe0 [ 1163.097739][T24059] ? _raw_spin_unlock+0x26/0x40 [ 1163.102577][T24059] ? __mutex_lock+0x21c/0x8d0 [ 1163.107271][T24059] ? rtnl_setlink+0x2d0/0x2d0 [ 1163.111946][T24059] rtnetlink_rcv_msg+0x807/0x8c0 [ 1163.116897][T24059] ? slab_post_alloc_hook+0x75/0x2d0 [ 1163.122241][T24059] ? xas_load+0x37c/0x390 [ 1163.126568][T24059] ? __rcu_read_unlock+0x4d/0x70 [ 1163.131505][T24059] ? xa_load+0xb9/0xe0 [ 1163.135879][T24059] ? kmem_cache_free+0x178/0x280 [ 1163.140809][T24059] ? nlmon_xmit+0x4b/0x60 [ 1163.145309][T24059] ? __kfree_skb+0x102/0x140 [ 1163.150021][T24059] ? consume_skb+0x57/0x180 [ 1163.154571][T24059] ? nlmon_xmit+0x4b/0x60 [ 1163.158911][T24059] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1163.164280][T24059] ? ref_tracker_free+0x3a1/0x400 [ 1163.169299][T24059] ? local_bh_enable+0x1f/0x20 [ 1163.174087][T24059] ? __dev_queue_xmit+0xbba/0x1e60 [ 1163.179368][T24059] netlink_rcv_skb+0x126/0x220 [ 1163.184140][T24059] ? rtnetlink_bind+0x60/0x60 [ 1163.188966][T24059] rtnetlink_rcv+0x1c/0x20 [ 1163.193424][T24059] netlink_unicast+0x56f/0x640 [ 1163.198266][T24059] netlink_sendmsg+0x665/0x770 [ 1163.203038][T24059] ? netlink_getsockopt+0x710/0x710 [ 1163.208220][T24059] ____sys_sendmsg+0x375/0x4c0 [ 1163.213042][T24059] __sys_sendmsg+0x1e3/0x270 [ 1163.217638][T24059] __x64_sys_sendmsg+0x46/0x50 [ 1163.222394][T24059] do_syscall_64+0x41/0xc0 [ 1163.226801][T24059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1163.232744][T24059] RIP: 0033:0x7f3099bc9169 [ 1163.237212][T24059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1163.256823][T24059] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.265337][T24059] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1163.273320][T24059] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:02:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 14) [ 1163.281291][T24059] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.289343][T24059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.297320][T24059] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1163.305414][T24059] 01:02:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1163.340545][T24064] ipvlan0: entered promiscuous mode [ 1163.346364][T24064] ipvlan0: left promiscuous mode [ 1163.357876][T24066] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1163.379897][T24066] bond372: entered promiscuous mode [ 1163.385203][T24066] bond372: entered allmulticast mode 01:02:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8506e754a0081c5f053a448d80f2f78", @ANYRES32=r0, @ANYBLOB="2377f292252155b21c0012000c000100626f6e644410e517cbcf1f4da48408bf084385c9d93c4352303a4e30c1f106000000000000006788ff87c500000000"], 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r2}) 01:02:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1163.390861][T24066] 8021q: adding VLAN 0 to HW filter on device bond372 01:02:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) [ 1163.468768][T24076] FAULT_INJECTION: forcing a failure. [ 1163.468768][T24076] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.481489][T24076] CPU: 1 PID: 24076 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1163.492239][T24076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1163.502393][T24076] Call Trace: [ 1163.505666][T24076] [ 1163.508603][T24076] dump_stack_lvl+0xda/0x130 [ 1163.513205][T24076] dump_stack+0x15/0x20 [ 1163.517357][T24076] should_fail_ex+0x21f/0x230 [ 1163.522078][T24076] __should_failslab+0x92/0xa0 [ 1163.526894][T24076] should_failslab+0x9/0x20 [ 1163.531385][T24076] slab_pre_alloc_hook+0x38/0x180 [ 1163.536587][T24076] __kmem_cache_alloc_node+0x46/0x250 [ 1163.542042][T24076] ? ethnl_default_notify+0x7c/0x410 [ 1163.547405][T24076] __kmalloc+0x95/0x1a0 [ 1163.551696][T24076] ethnl_default_notify+0x7c/0x410 [ 1163.557025][T24076] ? dev_map_notification+0x3a3/0x4e0 [ 1163.562444][T24076] ethtool_notify+0xb7/0x190 [ 1163.567196][T24076] ethnl_netdev_event+0x41/0x50 [ 1163.572062][T24076] raw_notifier_call_chain+0x54/0xb0 [ 1163.577434][T24076] netdev_update_features+0xe4/0x140 [ 1163.582847][T24076] hsr_add_port+0x308/0x480 [ 1163.587461][T24076] hsr_dev_finalize+0x26d/0x440 [ 1163.592334][T24076] hsr_newlink+0x426/0x470 [ 1163.596811][T24076] ? hsr_get_node_list+0x450/0x450 [ 1163.602064][T24076] rtnl_newlink+0xe5a/0x15a0 [ 1163.606758][T24076] ? __list_del_entry_valid+0x5f/0xe0 [ 1163.612302][T24076] ? _raw_spin_unlock+0x26/0x40 [ 1163.617255][T24076] ? __mutex_lock+0x21c/0x8d0 [ 1163.622070][T24076] ? rtnl_setlink+0x2d0/0x2d0 [ 1163.626766][T24076] rtnetlink_rcv_msg+0x807/0x8c0 [ 1163.631755][T24076] ? slab_post_alloc_hook+0x75/0x2d0 [ 1163.637063][T24076] ? xas_load+0x37c/0x390 [ 1163.641472][T24076] ? __rcu_read_unlock+0x4d/0x70 [ 1163.646490][T24076] ? xa_load+0xb9/0xe0 [ 1163.650559][T24076] ? kmem_cache_free+0x178/0x280 [ 1163.655553][T24076] ? nlmon_xmit+0x4b/0x60 [ 1163.659869][T24076] ? __kfree_skb+0x102/0x140 [ 1163.664504][T24076] ? consume_skb+0x57/0x180 [ 1163.669030][T24076] ? nlmon_xmit+0x4b/0x60 [ 1163.673343][T24076] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1163.678640][T24076] ? ref_tracker_free+0x3a1/0x400 [ 1163.683712][T24076] ? local_bh_enable+0x1f/0x20 [ 1163.688549][T24076] ? __dev_queue_xmit+0xbba/0x1e60 [ 1163.693691][T24076] netlink_rcv_skb+0x126/0x220 [ 1163.698488][T24076] ? rtnetlink_bind+0x60/0x60 [ 1163.703205][T24076] rtnetlink_rcv+0x1c/0x20 [ 1163.707783][T24076] netlink_unicast+0x56f/0x640 [ 1163.712542][T24076] netlink_sendmsg+0x665/0x770 [ 1163.717407][T24076] ? netlink_getsockopt+0x710/0x710 [ 1163.722655][T24076] ____sys_sendmsg+0x375/0x4c0 [ 1163.727432][T24076] __sys_sendmsg+0x1e3/0x270 [ 1163.732039][T24076] __x64_sys_sendmsg+0x46/0x50 [ 1163.736808][T24076] do_syscall_64+0x41/0xc0 [ 1163.741298][T24076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1163.747263][T24076] RIP: 0033:0x7f3099bc9169 [ 1163.751715][T24076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1163.771351][T24076] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.780037][T24076] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1163.787997][T24076] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1163.796007][T24076] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.804044][T24076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.812008][T24076] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1163.819992][T24076] [ 1163.835984][T24076] ipvlan0: entered promiscuous mode [ 1163.841581][T24076] ipvlan0: left promiscuous mode 01:02:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 15) [ 1163.868328][T24083] ipvlan0: entered promiscuous mode [ 1163.874272][T24083] ipvlan0: left promiscuous mode [ 1163.885632][T24082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1163.913760][T24082] bond373: entered promiscuous mode [ 1163.919011][T24082] bond373: entered allmulticast mode [ 1163.924847][T24082] 8021q: adding VLAN 0 to HW filter on device bond373 01:02:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:02:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:02:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8506e754a0081c5f053a448d80f2f78", @ANYRES32=r0, @ANYBLOB="2377f292252155b21c0012000c000100626f6e644410e517cbcf1f4da48408bf084385c9d93c4352303a4e30c1f106000000000000006788ff87c500000000"], 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r2}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8506e754a0081c5f053a448d80f2f78", @ANYRES32=r0, @ANYBLOB="2377f292252155b21c0012000c000100626f6e644410e517cbcf1f4da48408bf084385c9d93c4352303a4e30c1f106000000000000006788ff87c500000000"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r2}) (async) [ 1163.972311][T24092] FAULT_INJECTION: forcing a failure. [ 1163.972311][T24092] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.985086][T24092] CPU: 1 PID: 24092 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1163.995765][T24092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1164.006001][T24092] Call Trace: [ 1164.009283][T24092] [ 1164.012239][T24092] dump_stack_lvl+0xda/0x130 [ 1164.016849][T24092] dump_stack+0x15/0x20 [ 1164.021015][T24092] should_fail_ex+0x21f/0x230 [ 1164.025758][T24092] __should_failslab+0x92/0xa0 [ 1164.030585][T24092] should_failslab+0x9/0x20 [ 1164.035117][T24092] slab_pre_alloc_hook+0x38/0x180 [ 1164.040247][T24092] __kmem_cache_alloc_node+0x46/0x250 [ 1164.045739][T24092] ? ethnl_default_notify+0xa6/0x410 [ 1164.051202][T24092] __kmalloc+0x95/0x1a0 [ 1164.055410][T24092] ethnl_default_notify+0xa6/0x410 [ 1164.060540][T24092] ? dev_map_notification+0x3a3/0x4e0 [ 1164.066015][T24092] ethtool_notify+0xb7/0x190 [ 1164.070607][T24092] ethnl_netdev_event+0x41/0x50 [ 1164.075478][T24092] raw_notifier_call_chain+0x54/0xb0 [ 1164.080804][T24092] netdev_update_features+0xe4/0x140 [ 1164.086169][T24092] hsr_add_port+0x308/0x480 [ 1164.090712][T24092] hsr_dev_finalize+0x26d/0x440 [ 1164.095636][T24092] hsr_newlink+0x426/0x470 [ 1164.100173][T24092] ? hsr_get_node_list+0x450/0x450 [ 1164.105282][T24092] rtnl_newlink+0xe5a/0x15a0 [ 1164.109894][T24092] ? __list_del_entry_valid+0x5f/0xe0 [ 1164.115260][T24092] ? _raw_spin_unlock+0x26/0x40 [ 1164.120108][T24092] ? __mutex_lock+0x21c/0x8d0 [ 1164.124782][T24092] ? rtnl_setlink+0x2d0/0x2d0 [ 1164.129468][T24092] rtnetlink_rcv_msg+0x807/0x8c0 [ 1164.134413][T24092] ? slab_post_alloc_hook+0x75/0x2d0 [ 1164.139715][T24092] ? xas_load+0x37c/0x390 [ 1164.144240][T24092] ? __rcu_read_unlock+0x4d/0x70 [ 1164.149259][T24092] ? xa_load+0xb9/0xe0 [ 1164.153332][T24092] ? kmem_cache_free+0x178/0x280 [ 1164.158271][T24092] ? nlmon_xmit+0x4b/0x60 [ 1164.162782][T24092] ? __kfree_skb+0x102/0x140 [ 1164.167381][T24092] ? consume_skb+0x57/0x180 [ 1164.171917][T24092] ? nlmon_xmit+0x4b/0x60 [ 1164.176241][T24092] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1164.181526][T24092] ? ref_tracker_free+0x3a1/0x400 [ 1164.186675][T24092] ? local_bh_enable+0x1f/0x20 [ 1164.191501][T24092] ? __dev_queue_xmit+0xbba/0x1e60 [ 1164.196683][T24092] netlink_rcv_skb+0x126/0x220 [ 1164.201567][T24092] ? rtnetlink_bind+0x60/0x60 [ 1164.206244][T24092] rtnetlink_rcv+0x1c/0x20 [ 1164.210779][T24092] netlink_unicast+0x56f/0x640 [ 1164.215538][T24092] netlink_sendmsg+0x665/0x770 [ 1164.220304][T24092] ? netlink_getsockopt+0x710/0x710 [ 1164.225498][T24092] ____sys_sendmsg+0x375/0x4c0 [ 1164.230308][T24092] __sys_sendmsg+0x1e3/0x270 [ 1164.234940][T24092] __x64_sys_sendmsg+0x46/0x50 [ 1164.239711][T24092] do_syscall_64+0x41/0xc0 [ 1164.244174][T24092] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1164.250084][T24092] RIP: 0033:0x7f3099bc9169 [ 1164.254505][T24092] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1164.274271][T24092] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.282679][T24092] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1164.290665][T24092] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1164.298730][T24092] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.306687][T24092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.314748][T24092] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1164.322836][T24092] [ 1164.337042][T24092] ipvlan0: entered promiscuous mode [ 1164.342782][T24092] ipvlan0: left promiscuous mode [ 1164.363442][T24097] __nla_validate_parse: 19 callbacks suppressed 01:02:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 16) [ 1164.363450][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1164.387297][T24097] ipvlan0: entered promiscuous mode [ 1164.393120][T24097] ipvlan0: left promiscuous mode [ 1164.409523][T24099] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:02:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88470000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:02:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1164.429476][T24099] bond374: entered promiscuous mode [ 1164.434920][T24099] bond374: entered allmulticast mode [ 1164.440385][T24099] 8021q: adding VLAN 0 to HW filter on device bond374 01:02:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:02:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4201}, 0x0) [ 1164.486561][T24103] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.500718][T24122] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1164.526477][T24122] bond375: entered promiscuous mode [ 1164.531735][T24122] bond375: entered allmulticast mode 01:02:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8506e754a0081c5f053a448d80f2f78", @ANYRES32=r0, @ANYBLOB="2377f292252155b21c0012000c000100626f6e644410e517cbcf1f4da48408bf084385c9d93c4352303a4e30c1f106000000000000006788ff87c500000000"], 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r2}) 01:02:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1164.537265][T24122] 8021q: adding VLAN 0 to HW filter on device bond375 [ 1164.549490][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.565310][T24116] FAULT_INJECTION: forcing a failure. [ 1164.565310][T24116] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.577977][T24116] CPU: 0 PID: 24116 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1164.588422][T24116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1164.598544][T24116] Call Trace: [ 1164.601808][T24116] [ 1164.604731][T24116] dump_stack_lvl+0xda/0x130 [ 1164.609348][T24116] dump_stack+0x15/0x20 [ 1164.613740][T24116] should_fail_ex+0x21f/0x230 [ 1164.618402][T24116] __should_failslab+0x92/0xa0 [ 1164.623160][T24116] should_failslab+0x9/0x20 [ 1164.627694][T24116] slab_pre_alloc_hook+0x38/0x180 [ 1164.632743][T24116] kmem_cache_alloc_node+0x5d/0x2e0 [ 1164.637965][T24116] ? __alloc_skb+0x109/0x2e0 [ 1164.642581][T24116] __alloc_skb+0x109/0x2e0 [ 1164.647005][T24116] ethnl_default_notify+0x171/0x410 [ 1164.652303][T24116] ? dev_map_notification+0x3a3/0x4e0 [ 1164.657788][T24116] ethtool_notify+0xb7/0x190 [ 1164.662435][T24116] ethnl_netdev_event+0x41/0x50 [ 1164.667370][T24116] raw_notifier_call_chain+0x54/0xb0 [ 1164.672652][T24116] netdev_update_features+0xe4/0x140 [ 1164.677996][T24116] hsr_add_port+0x308/0x480 [ 1164.682546][T24116] hsr_dev_finalize+0x26d/0x440 [ 1164.687430][T24116] hsr_newlink+0x426/0x470 [ 1164.691972][T24116] ? hsr_get_node_list+0x450/0x450 [ 1164.697162][T24116] rtnl_newlink+0xe5a/0x15a0 [ 1164.701749][T24116] ? __list_del_entry_valid+0x5f/0xe0 [ 1164.707108][T24116] ? _raw_spin_unlock+0x26/0x40 [ 1164.711958][T24116] ? __mutex_lock+0x21c/0x8d0 [ 1164.716630][T24116] ? rtnl_setlink+0x2d0/0x2d0 [ 1164.721405][T24116] rtnetlink_rcv_msg+0x807/0x8c0 [ 1164.726356][T24116] ? slab_post_alloc_hook+0x75/0x2d0 [ 1164.731831][T24116] ? try_charge_memcg+0xb42/0xd20 [ 1164.736943][T24116] ? xas_load+0x37c/0x390 [ 1164.741338][T24116] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1164.746674][T24116] ? kmem_cache_free+0x178/0x280 [ 1164.751649][T24116] ? nlmon_xmit+0x4b/0x60 [ 1164.756066][T24116] ? __kfree_skb+0x102/0x140 [ 1164.760673][T24116] ? consume_skb+0x57/0x180 [ 1164.765229][T24116] ? nlmon_xmit+0x4b/0x60 [ 1164.769607][T24116] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1164.774963][T24116] ? ref_tracker_free+0x3a1/0x400 [ 1164.780061][T24116] ? local_bh_enable+0x1f/0x20 [ 1164.784924][T24116] ? __dev_queue_xmit+0xbba/0x1e60 [ 1164.790083][T24116] netlink_rcv_skb+0x126/0x220 [ 1164.794974][T24116] ? rtnetlink_bind+0x60/0x60 [ 1164.799737][T24116] rtnetlink_rcv+0x1c/0x20 [ 1164.804162][T24116] netlink_unicast+0x56f/0x640 [ 1164.809096][T24116] netlink_sendmsg+0x665/0x770 [ 1164.813872][T24116] ? netlink_getsockopt+0x710/0x710 [ 1164.819124][T24116] ____sys_sendmsg+0x375/0x4c0 [ 1164.823908][T24116] __sys_sendmsg+0x1e3/0x270 [ 1164.828596][T24116] __x64_sys_sendmsg+0x46/0x50 [ 1164.833354][T24116] do_syscall_64+0x41/0xc0 [ 1164.837782][T24116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1164.843687][T24116] RIP: 0033:0x7f3099bc9169 [ 1164.848097][T24116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1164.867778][T24116] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.876267][T24116] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1164.884337][T24116] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1164.892296][T24116] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.900309][T24116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.908283][T24116] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1164.916254][T24116] [ 1164.929904][T24116] ipvlan0: entered promiscuous mode [ 1164.935743][T24116] ipvlan0: left promiscuous mode 01:02:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 17) 01:02:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88480000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1164.968648][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1164.988301][T24125] ipvlan0: entered promiscuous mode [ 1164.997056][T24125] ipvlan0: left promiscuous mode 01:02:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4788}, 0x0) 01:02:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1165.035282][T24131] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1165.044959][T24133] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1165.075191][T24133] bond376: entered promiscuous mode [ 1165.080514][T24133] bond376: entered allmulticast mode 01:02:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1165.086023][T24133] 8021q: adding VLAN 0 to HW filter on device bond376 [ 1165.098484][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.113436][T24135] FAULT_INJECTION: forcing a failure. [ 1165.113436][T24135] name failslab, interval 1, probability 0, space 0, times 0 01:02:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100085068154f764d8b06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c100100626f6e64"], 0x3c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/xusbatm', 0x3701, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)=@updsa={0x2b0, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x32, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xd4}, @in=@multicast1, {0x2, 0x800, 0x0, 0xff, 0x17, 0x10001, 0x0, 0x7ff}, {0x5, 0x8, 0x6, 0x3}, {0x40000000, 0xa6, 0x7}, 0x70bd29, 0x3507, 0xa, 0x2, 0x2, 0x45}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x9c, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0xff, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x33, 0x4, 0x0, 0x3506, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x2, 0x8, 0xec}}, @offload={0xc}, @replay_thresh={0x8, 0xb, 0x7f}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x100, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x2f, r5, r6}, {@in=@broadcast, 0x4d2, 0x33}, @in=@remote, {0xffff, 0x6e7, 0x4, 0x3, 0x5, 0x5, 0x7ff, 0xffffffffffffffc0}, {0x4, 0x0, 0x3}, {0x9, 0x5, 0xb2}, 0x70bd2d, 0x34ff, 0xa, 0x3, 0xa5, 0x40}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x40081) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x4, 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4084) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1165.126183][T24135] CPU: 0 PID: 24135 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1165.136820][T24135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1165.146890][T24135] Call Trace: [ 1165.150155][T24135] [ 1165.153090][T24135] dump_stack_lvl+0xda/0x130 [ 1165.157872][T24135] dump_stack+0x15/0x20 [ 1165.162174][T24135] should_fail_ex+0x21f/0x230 [ 1165.166869][T24135] __should_failslab+0x92/0xa0 [ 1165.171629][T24135] should_failslab+0x9/0x20 [ 1165.176203][T24135] slab_pre_alloc_hook+0x38/0x180 [ 1165.181323][T24135] __kmem_cache_alloc_node+0x46/0x250 [ 1165.186803][T24135] ? ethnl_default_notify+0xa6/0x410 [ 1165.192184][T24135] __kmalloc+0x95/0x1a0 [ 1165.196726][T24135] ethnl_default_notify+0xa6/0x410 [ 1165.201830][T24135] ? dev_map_notification+0x3a3/0x4e0 [ 1165.207229][T24135] ethtool_notify+0xb7/0x190 [ 1165.211835][T24135] ethnl_netdev_event+0x41/0x50 [ 1165.216674][T24135] raw_notifier_call_chain+0x54/0xb0 [ 1165.221955][T24135] netdev_update_features+0xe4/0x140 [ 1165.227336][T24135] hsr_add_port+0x308/0x480 [ 1165.231915][T24135] hsr_dev_finalize+0x26d/0x440 [ 1165.236944][T24135] hsr_newlink+0x426/0x470 [ 1165.241372][T24135] ? hsr_get_node_list+0x450/0x450 [ 1165.246601][T24135] rtnl_newlink+0xe5a/0x15a0 [ 1165.251215][T24135] ? __list_del_entry_valid+0x5f/0xe0 [ 1165.256626][T24135] ? _raw_spin_unlock+0x26/0x40 [ 1165.261671][T24135] ? __mutex_lock+0x21c/0x8d0 [ 1165.266411][T24135] ? rtnl_setlink+0x2d0/0x2d0 [ 1165.271092][T24135] rtnetlink_rcv_msg+0x807/0x8c0 [ 1165.276124][T24135] ? slab_post_alloc_hook+0x75/0x2d0 [ 1165.281410][T24135] ? xas_load+0x37c/0x390 [ 1165.285750][T24135] ? sysvec_apic_timer_interrupt+0x42/0x80 [ 1165.291633][T24135] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1165.297939][T24135] ? kmem_cache_free+0x178/0x280 [ 1165.302907][T24135] ? nlmon_xmit+0x4b/0x60 [ 1165.307354][T24135] ? __kfree_skb+0x102/0x140 [ 1165.311966][T24135] ? consume_skb+0x57/0x180 [ 1165.316479][T24135] ? nlmon_xmit+0x4b/0x60 [ 1165.320887][T24135] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1165.326238][T24135] ? ref_tracker_free+0x3a1/0x400 [ 1165.331313][T24135] ? local_bh_enable+0x1f/0x20 [ 1165.336087][T24135] ? __dev_queue_xmit+0xbba/0x1e60 [ 1165.341193][T24135] netlink_rcv_skb+0x126/0x220 [ 1165.345997][T24135] ? rtnetlink_bind+0x60/0x60 [ 1165.350700][T24135] rtnetlink_rcv+0x1c/0x20 [ 1165.355107][T24135] netlink_unicast+0x56f/0x640 [ 1165.359870][T24135] netlink_sendmsg+0x665/0x770 [ 1165.364633][T24135] ? netlink_getsockopt+0x710/0x710 [ 1165.369876][T24135] ____sys_sendmsg+0x375/0x4c0 [ 1165.374767][T24135] __sys_sendmsg+0x1e3/0x270 [ 1165.379495][T24135] __x64_sys_sendmsg+0x46/0x50 [ 1165.384390][T24135] do_syscall_64+0x41/0xc0 [ 1165.388942][T24135] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1165.394843][T24135] RIP: 0033:0x7f3099bc9169 [ 1165.399343][T24135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1165.419047][T24135] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.427605][T24135] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1165.435775][T24135] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1165.443808][T24135] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.451942][T24135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.460085][T24135] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1165.468228][T24135] [ 1165.482731][T24135] ipvlan0: entered promiscuous mode [ 1165.488379][T24135] ipvlan0: left promiscuous mode 01:03:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 01:03:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 18) [ 1165.534701][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.555007][T24142] ipvlan0: entered promiscuous mode [ 1165.560868][T24142] ipvlan0: left promiscuous mode 01:03:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1165.577511][T24144] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1165.597501][T24144] bond377: entered promiscuous mode [ 1165.603177][T24144] bond377: entered allmulticast mode [ 1165.608975][T24144] 8021q: adding VLAN 0 to HW filter on device bond377 [ 1165.623564][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100085068154f764d8b06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c100100626f6e64"], 0x3c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/xusbatm', 0x3701, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)=@updsa={0x2b0, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x32, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xd4}, @in=@multicast1, {0x2, 0x800, 0x0, 0xff, 0x17, 0x10001, 0x0, 0x7ff}, {0x5, 0x8, 0x6, 0x3}, {0x40000000, 0xa6, 0x7}, 0x70bd29, 0x3507, 0xa, 0x2, 0x2, 0x45}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x9c, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0xff, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x33, 0x4, 0x0, 0x3506, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x2, 0x8, 0xec}}, @offload={0xc}, @replay_thresh={0x8, 0xb, 0x7f}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x100, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x2f, r5, r6}, {@in=@broadcast, 0x4d2, 0x33}, @in=@remote, {0xffff, 0x6e7, 0x4, 0x3, 0x5, 0x5, 0x7ff, 0xffffffffffffffc0}, {0x4, 0x0, 0x3}, {0x9, 0x5, 0xb2}, 0x70bd2d, 0x34ff, 0xa, 0x3, 0xa5, 0x40}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x40081) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x4, 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4084) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4802}, 0x0) [ 1165.666437][T24152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.679026][T24152] FAULT_INJECTION: forcing a failure. [ 1165.679026][T24152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1165.692386][T24152] CPU: 1 PID: 24152 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1165.702811][T24152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1165.712928][T24152] Call Trace: [ 1165.716216][T24152] [ 1165.719154][T24152] dump_stack_lvl+0xda/0x130 [ 1165.723978][T24152] dump_stack+0x15/0x20 [ 1165.728118][T24152] should_fail_ex+0x21f/0x230 [ 1165.732936][T24152] __alloc_pages+0x108/0x340 [ 1165.737613][T24152] alloc_pages+0x3e1/0x4e0 [ 1165.742015][T24152] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1165.748183][T24152] get_zeroed_page+0x17/0x40 [ 1165.752825][T24152] dev_alloc_name_ns+0x2da/0x600 [ 1165.757779][T24152] ? __rcu_read_unlock+0x4d/0x70 [ 1165.762705][T24152] ? dev_set_mtu_ext+0x156/0x3e0 [ 1165.767716][T24152] dev_get_valid_name+0x120/0x1f0 [ 1165.772799][T24152] register_netdevice+0x144/0xcd0 [ 1165.777820][T24152] hsr_dev_finalize+0x2b5/0x440 [ 1165.782768][T24152] hsr_newlink+0x426/0x470 [ 1165.787444][T24152] ? hsr_get_node_list+0x450/0x450 [ 1165.792589][T24152] rtnl_newlink+0xe5a/0x15a0 [ 1165.797185][T24152] ? __list_del_entry_valid+0x5f/0xe0 [ 1165.802568][T24152] ? _raw_spin_unlock+0x26/0x40 [ 1165.807538][T24152] ? __mutex_lock+0x21c/0x8d0 [ 1165.812337][T24152] ? rtnl_setlink+0x2d0/0x2d0 [ 1165.817180][T24152] rtnetlink_rcv_msg+0x807/0x8c0 [ 1165.822167][T24152] ? slab_post_alloc_hook+0x75/0x2d0 [ 1165.827470][T24152] ? xas_load+0x37c/0x390 [ 1165.831818][T24152] ? __rcu_read_unlock+0x4d/0x70 [ 1165.836802][T24152] ? xa_load+0xb9/0xe0 [ 1165.841013][T24152] ? kmem_cache_free+0x178/0x280 [ 1165.845937][T24152] ? nlmon_xmit+0x4b/0x60 [ 1165.850284][T24152] ? __kfree_skb+0x102/0x140 [ 1165.854944][T24152] ? consume_skb+0x57/0x180 [ 1165.859506][T24152] ? nlmon_xmit+0x4b/0x60 [ 1165.863924][T24152] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1165.869219][T24152] ? ref_tracker_free+0x3a1/0x400 [ 1165.874231][T24152] ? local_bh_enable+0x1f/0x20 [ 1165.879047][T24152] ? __dev_queue_xmit+0xbba/0x1e60 [ 1165.884145][T24152] netlink_rcv_skb+0x126/0x220 [ 1165.888897][T24152] ? rtnetlink_bind+0x60/0x60 [ 1165.893609][T24152] rtnetlink_rcv+0x1c/0x20 [ 1165.898189][T24152] netlink_unicast+0x56f/0x640 [ 1165.902956][T24152] netlink_sendmsg+0x665/0x770 [ 1165.907812][T24152] ? netlink_getsockopt+0x710/0x710 [ 1165.913124][T24152] ____sys_sendmsg+0x375/0x4c0 [ 1165.917935][T24152] __sys_sendmsg+0x1e3/0x270 [ 1165.922762][T24152] __x64_sys_sendmsg+0x46/0x50 [ 1165.927593][T24152] do_syscall_64+0x41/0xc0 [ 1165.932020][T24152] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1165.938037][T24152] RIP: 0033:0x7f3099bc9169 [ 1165.942527][T24152] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 01:03:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 19) [ 1165.962511][T24152] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.970989][T24152] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1165.978977][T24152] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1165.986943][T24152] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.995079][T24152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.003093][T24152] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1166.011262][T24152] [ 1166.033251][T24158] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1166.054539][T24158] bond378: entered promiscuous mode [ 1166.059774][T24158] bond378: entered allmulticast mode [ 1166.065455][T24158] 8021q: adding VLAN 0 to HW filter on device bond378 01:03:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8a010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1166.078025][T24159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:03:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100085068154f764d8b06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c100100626f6e64"], 0x3c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/xusbatm', 0x3701, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)=@updsa={0x2b0, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x32, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xd4}, @in=@multicast1, {0x2, 0x800, 0x0, 0xff, 0x17, 0x10001, 0x0, 0x7ff}, {0x5, 0x8, 0x6, 0x3}, {0x40000000, 0xa6, 0x7}, 0x70bd29, 0x3507, 0xa, 0x2, 0x2, 0x45}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x9c, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0xff, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x33, 0x4, 0x0, 0x3506, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x2, 0x8, 0xec}}, @offload={0xc}, @replay_thresh={0x8, 0xb, 0x7f}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x100, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x2f, r5, r6}, {@in=@broadcast, 0x4d2, 0x33}, @in=@remote, {0xffff, 0x6e7, 0x4, 0x3, 0x5, 0x5, 0x7ff, 0xffffffffffffffc0}, {0x4, 0x0, 0x3}, {0x9, 0x5, 0xb2}, 0x70bd2d, 0x34ff, 0xa, 0x3, 0xa5, 0x40}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x40081) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x4, 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4084) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100085068154f764d8b06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c100100626f6e64"], 0x3c}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/xusbatm', 0x3701, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)=@updsa={0x2b0, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x32, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xd4}, @in=@multicast1, {0x2, 0x800, 0x0, 0xff, 0x17, 0x10001, 0x0, 0x7ff}, {0x5, 0x8, 0x6, 0x3}, {0x40000000, 0xa6, 0x7}, 0x70bd29, 0x3507, 0xa, 0x2, 0x2, 0x45}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x9c, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010100, 0xff, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x33, 0x4, 0x0, 0x3506, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x2, 0x8, 0xec}}, @offload={0xc}, @replay_thresh={0x8, 0xb, 0x7f}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x100, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x2f, r5, r6}, {@in=@broadcast, 0x4d2, 0x33}, @in=@remote, {0xffff, 0x6e7, 0x4, 0x3, 0x5, 0x5, 0x7ff, 0xffffffffffffffc0}, {0x4, 0x0, 0x3}, {0x9, 0x5, 0xb2}, 0x70bd2d, 0x34ff, 0xa, 0x3, 0xa5, 0x40}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x40081) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x4, 0x8) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4084) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) [ 1166.108719][T24159] ipvlan0: entered promiscuous mode [ 1166.114691][T24159] ipvlan0: left promiscuous mode 01:03:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4803}, 0x0) [ 1166.186881][T24169] FAULT_INJECTION: forcing a failure. [ 1166.186881][T24169] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.199672][T24169] CPU: 0 PID: 24169 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1166.210208][T24169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1166.220253][T24169] Call Trace: [ 1166.223622][T24169] [ 1166.226632][T24169] dump_stack_lvl+0xda/0x130 [ 1166.231431][T24169] dump_stack+0x15/0x20 [ 1166.235587][T24169] should_fail_ex+0x21f/0x230 [ 1166.240523][T24169] __should_failslab+0x92/0xa0 [ 1166.245527][T24169] should_failslab+0x9/0x20 [ 1166.250114][T24169] slab_pre_alloc_hook+0x38/0x180 [ 1166.255222][T24169] __kmem_cache_alloc_node+0x46/0x250 [ 1166.260588][T24169] ? register_netdevice+0x179/0xcd0 [ 1166.265784][T24169] kmalloc_trace+0x2a/0xa0 [ 1166.270284][T24169] register_netdevice+0x179/0xcd0 [ 1166.275366][T24169] hsr_dev_finalize+0x2b5/0x440 [ 1166.280231][T24169] hsr_newlink+0x426/0x470 [ 1166.284639][T24169] ? hsr_get_node_list+0x450/0x450 [ 1166.289752][T24169] rtnl_newlink+0xe5a/0x15a0 [ 1166.294362][T24169] ? __list_del_entry_valid+0x5f/0xe0 [ 1166.299754][T24169] ? _raw_spin_unlock+0x26/0x40 [ 1166.304604][T24169] ? __mutex_lock+0x21c/0x8d0 [ 1166.309360][T24169] ? rtnl_setlink+0x2d0/0x2d0 [ 1166.314031][T24169] rtnetlink_rcv_msg+0x807/0x8c0 [ 1166.319011][T24169] ? slab_post_alloc_hook+0x75/0x2d0 [ 1166.324295][T24169] ? xas_load+0x37c/0x390 [ 1166.328698][T24169] ? __rcu_read_unlock+0x4d/0x70 [ 1166.333628][T24169] ? xa_load+0xb9/0xe0 [ 1166.337739][T24169] ? kmem_cache_free+0x178/0x280 [ 1166.342728][T24169] ? nlmon_xmit+0x4b/0x60 [ 1166.347089][T24169] ? __kfree_skb+0x102/0x140 [ 1166.351677][T24169] ? consume_skb+0x57/0x180 [ 1166.356191][T24169] ? nlmon_xmit+0x4b/0x60 [ 1166.360642][T24169] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1166.366091][T24169] ? ref_tracker_free+0x3a1/0x400 [ 1166.371222][T24169] ? local_bh_enable+0x1f/0x20 [ 1166.375978][T24169] ? __dev_queue_xmit+0xbba/0x1e60 [ 1166.381120][T24169] netlink_rcv_skb+0x126/0x220 [ 1166.385877][T24169] ? rtnetlink_bind+0x60/0x60 [ 1166.390627][T24169] rtnetlink_rcv+0x1c/0x20 [ 1166.395065][T24169] netlink_unicast+0x56f/0x640 [ 1166.399839][T24169] netlink_sendmsg+0x665/0x770 [ 1166.404683][T24169] ? netlink_getsockopt+0x710/0x710 [ 1166.409898][T24169] ____sys_sendmsg+0x375/0x4c0 [ 1166.414663][T24169] __sys_sendmsg+0x1e3/0x270 [ 1166.419303][T24169] __x64_sys_sendmsg+0x46/0x50 [ 1166.424173][T24169] do_syscall_64+0x41/0xc0 [ 1166.428577][T24169] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1166.434487][T24169] RIP: 0033:0x7f3099bc9169 [ 1166.438952][T24169] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1166.458666][T24169] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.467077][T24169] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1166.475068][T24169] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 20) [ 1166.483051][T24169] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1166.491026][T24169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.499090][T24169] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1166.507048][T24169] 01:03:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8a020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1166.533858][T24173] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1166.554904][T24173] bond379: entered promiscuous mode [ 1166.560496][T24173] bond379: entered allmulticast mode [ 1166.566604][T24173] 8021q: adding VLAN 0 to HW filter on device bond379 01:03:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1166.593282][T24179] ipvlan0: entered promiscuous mode [ 1166.599057][T24179] ipvlan0: left promiscuous mode 01:03:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001640)={r5, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x595}}, 0xbb, 0xfff8}, 0x90) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="0c77f292252155b21cb312000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x0, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r10, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r11, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r11, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xe, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xef0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xf, 0x8, 0x2, 0xffffffffffffffe0, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x0, 0x6, 0x1, 0xb, 0xfffffffffffffffc, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x10, '\x00', r9, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x385}, 0x10, 0x0, r10, 0x0, &(0x7f00000002c0)=[r11]}, 0x80) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r7}) 01:03:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4888}, 0x0) 01:03:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1166.654381][T24201] FAULT_INJECTION: forcing a failure. [ 1166.654381][T24201] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.667083][T24201] CPU: 0 PID: 24201 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1166.677684][T24201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1166.687808][T24201] Call Trace: [ 1166.691178][T24201] [ 1166.694115][T24201] dump_stack_lvl+0xda/0x130 [ 1166.698731][T24201] dump_stack+0x15/0x20 [ 1166.702885][T24201] should_fail_ex+0x21f/0x230 [ 1166.707553][T24201] __should_failslab+0x92/0xa0 [ 1166.712503][T24201] should_failslab+0x9/0x20 [ 1166.717013][T24201] slab_pre_alloc_hook+0x38/0x180 [ 1166.722045][T24201] ? kvasprintf_const+0xe5/0xf0 [ 1166.727065][T24201] __kmem_cache_alloc_node+0x46/0x250 [ 1166.732527][T24201] ? kvasprintf_const+0xe5/0xf0 [ 1166.737408][T24201] __kmalloc_node_track_caller+0x96/0x1a0 [ 1166.743236][T24201] ? finish_task_switch+0xac/0x280 [ 1166.748357][T24201] kstrdup_const+0x5a/0x90 [ 1166.752867][T24201] kvasprintf_const+0xe5/0xf0 [ 1166.757680][T24201] kobject_set_name_vargs+0x47/0xe0 [ 1166.762902][T24201] dev_set_name+0x84/0xb0 [ 1166.767275][T24201] ? hrtimer_init+0x104/0x1f0 [ 1166.772065][T24201] ? netdev_register_kobject+0x63/0x230 [ 1166.777677][T24201] ? device_initialize+0x202/0x220 [ 1166.782804][T24201] netdev_register_kobject+0x7c/0x230 [ 1166.788213][T24201] register_netdevice+0x903/0xcd0 [ 1166.793363][T24201] hsr_dev_finalize+0x2b5/0x440 [ 1166.798306][T24201] hsr_newlink+0x426/0x470 [ 1166.802815][T24201] ? hsr_get_node_list+0x450/0x450 [ 1166.809457][T24201] rtnl_newlink+0xe5a/0x15a0 [ 1166.814040][T24201] ? __list_del_entry_valid+0x5f/0xe0 [ 1166.819488][T24201] ? _raw_spin_unlock+0x26/0x40 [ 1166.824512][T24201] ? __mutex_lock+0x21c/0x8d0 [ 1166.829249][T24201] ? rtnl_setlink+0x2d0/0x2d0 [ 1166.833944][T24201] rtnetlink_rcv_msg+0x807/0x8c0 [ 1166.838947][T24201] ? slab_post_alloc_hook+0x75/0x2d0 [ 1166.844380][T24201] ? xas_load+0x37c/0x390 [ 1166.848695][T24201] ? __rcu_read_unlock+0x4d/0x70 [ 1166.853633][T24201] ? xa_load+0xb9/0xe0 [ 1166.857814][T24201] ? kmem_cache_free+0x178/0x280 [ 1166.862797][T24201] ? nlmon_xmit+0x4b/0x60 [ 1166.867294][T24201] ? __kfree_skb+0x102/0x140 [ 1166.872193][T24201] ? consume_skb+0x57/0x180 [ 1166.876731][T24201] ? nlmon_xmit+0x4b/0x60 [ 1166.881065][T24201] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1166.886359][T24201] ? ref_tracker_free+0x3a1/0x400 [ 1166.891367][T24201] ? local_bh_enable+0x1f/0x20 [ 1166.896192][T24201] ? __dev_queue_xmit+0xbba/0x1e60 [ 1166.901353][T24201] netlink_rcv_skb+0x126/0x220 [ 1166.906260][T24201] ? rtnetlink_bind+0x60/0x60 [ 1166.911006][T24201] rtnetlink_rcv+0x1c/0x20 [ 1166.915525][T24201] netlink_unicast+0x56f/0x640 [ 1166.920460][T24201] netlink_sendmsg+0x665/0x770 [ 1166.925293][T24201] ? netlink_getsockopt+0x710/0x710 [ 1166.930636][T24201] ____sys_sendmsg+0x375/0x4c0 [ 1166.935480][T24201] __sys_sendmsg+0x1e3/0x270 [ 1166.940142][T24201] __x64_sys_sendmsg+0x46/0x50 [ 1166.944934][T24201] do_syscall_64+0x41/0xc0 [ 1166.949352][T24201] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1166.955329][T24201] RIP: 0033:0x7f3099bc9169 [ 1166.959792][T24201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1166.979620][T24201] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.988027][T24201] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1166.996102][T24201] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 21) [ 1167.004182][T24201] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.012253][T24201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.020215][T24201] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1167.028191][T24201] 01:03:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1167.057020][T24206] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1167.079135][T24206] bond380: entered promiscuous mode [ 1167.084461][T24206] bond380: entered allmulticast mode [ 1167.089909][T24206] 8021q: adding VLAN 0 to HW filter on device bond380 01:03:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4a00}, 0x0) [ 1167.142450][T24214] ipvlan0: entered promiscuous mode [ 1167.148552][T24214] ipvlan0: left promiscuous mode [ 1167.164055][T24220] FAULT_INJECTION: forcing a failure. [ 1167.164055][T24220] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.176715][T24220] CPU: 1 PID: 24220 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1167.187369][T24220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1167.197741][T24220] Call Trace: [ 1167.201013][T24220] [ 1167.203931][T24220] dump_stack_lvl+0xda/0x130 [ 1167.208552][T24220] dump_stack+0x15/0x20 [ 1167.212899][T24220] should_fail_ex+0x21f/0x230 [ 1167.217706][T24220] __should_failslab+0x92/0xa0 [ 1167.222493][T24220] should_failslab+0x9/0x20 [ 1167.227169][T24220] slab_pre_alloc_hook+0x38/0x180 [ 1167.232225][T24220] __kmem_cache_alloc_node+0x46/0x250 [ 1167.237612][T24220] ? kfree_const+0x39/0x40 [ 1167.242114][T24220] ? device_add+0x8c/0xb30 [ 1167.246801][T24220] kmalloc_trace+0x2a/0xa0 [ 1167.251362][T24220] device_add+0x8c/0xb30 [ 1167.255602][T24220] netdev_register_kobject+0xfc/0x230 [ 1167.261221][T24220] register_netdevice+0x903/0xcd0 [ 1167.266650][T24220] hsr_dev_finalize+0x2b5/0x440 [ 1167.271606][T24220] hsr_newlink+0x426/0x470 [ 1167.276146][T24220] ? hsr_get_node_list+0x450/0x450 [ 1167.281471][T24220] rtnl_newlink+0xe5a/0x15a0 [ 1167.286233][T24220] ? __list_del_entry_valid+0x5f/0xe0 [ 1167.291745][T24220] ? _raw_spin_unlock+0x26/0x40 [ 1167.296850][T24220] ? __mutex_lock+0x21c/0x8d0 [ 1167.301620][T24220] ? rtnl_setlink+0x2d0/0x2d0 [ 1167.306368][T24220] rtnetlink_rcv_msg+0x807/0x8c0 [ 1167.311377][T24220] ? slab_post_alloc_hook+0x75/0x2d0 [ 1167.316795][T24220] ? xas_load+0x37c/0x390 [ 1167.321116][T24220] ? __rcu_read_unlock+0x4d/0x70 [ 1167.326123][T24220] ? xa_load+0xb9/0xe0 [ 1167.330191][T24220] ? kmem_cache_free+0x178/0x280 [ 1167.335280][T24220] ? nlmon_xmit+0x4b/0x60 [ 1167.339620][T24220] ? __kfree_skb+0x102/0x140 [ 1167.344305][T24220] ? consume_skb+0x57/0x180 [ 1167.349112][T24220] ? nlmon_xmit+0x4b/0x60 [ 1167.353473][T24220] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1167.358842][T24220] ? ref_tracker_free+0x3a1/0x400 [ 1167.364089][T24220] ? local_bh_enable+0x1f/0x20 [ 1167.369217][T24220] ? __dev_queue_xmit+0xbba/0x1e60 [ 1167.374450][T24220] netlink_rcv_skb+0x126/0x220 [ 1167.379396][T24220] ? rtnetlink_bind+0x60/0x60 [ 1167.384343][T24220] rtnetlink_rcv+0x1c/0x20 [ 1167.388863][T24220] netlink_unicast+0x56f/0x640 [ 1167.393646][T24220] netlink_sendmsg+0x665/0x770 [ 1167.398594][T24220] ? netlink_getsockopt+0x710/0x710 [ 1167.403885][T24220] ____sys_sendmsg+0x375/0x4c0 [ 1167.408952][T24220] __sys_sendmsg+0x1e3/0x270 [ 1167.414001][T24220] __x64_sys_sendmsg+0x46/0x50 [ 1167.418860][T24220] do_syscall_64+0x41/0xc0 [ 1167.423308][T24220] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1167.429520][T24220] RIP: 0033:0x7f3099bc9169 [ 1167.433937][T24220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1167.454640][T24220] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.463378][T24220] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1167.471435][T24220] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1167.479663][T24220] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:03:02 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001640)={r5, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x595}}, 0xbb, 0xfff8}, 0x90) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="0c77f292252155b21cb312000c000100626f6e64"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x0, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) (async) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r10, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) (async) vmsplice(r10, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r11, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r11, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xe, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xef0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xf, 0x8, 0x2, 0xffffffffffffffe0, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x0, 0x6, 0x1, 0xb, 0xfffffffffffffffc, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x10, '\x00', r9, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x385}, 0x10, 0x0, r10, 0x0, &(0x7f00000002c0)=[r11]}, 0x80) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r7}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r7}) 01:03:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 22) [ 1167.487751][T24220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.495799][T24220] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1167.504047][T24220] 01:03:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1167.548169][T24227] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1167.569912][T24227] bond381: entered promiscuous mode [ 1167.575756][T24227] bond381: entered allmulticast mode [ 1167.581488][T24227] 8021q: adding VLAN 0 to HW filter on device bond381 01:03:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4a01}, 0x0) [ 1167.648194][T24238] ipvlan0: entered promiscuous mode [ 1167.654415][T24238] ipvlan0: left promiscuous mode [ 1167.670129][T24240] FAULT_INJECTION: forcing a failure. [ 1167.670129][T24240] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.682893][T24240] CPU: 1 PID: 24240 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1167.693299][T24240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1167.703609][T24240] Call Trace: [ 1167.706960][T24240] [ 1167.709894][T24240] dump_stack_lvl+0xda/0x130 [ 1167.714483][T24240] dump_stack+0x15/0x20 [ 1167.718853][T24240] should_fail_ex+0x21f/0x230 [ 1167.723637][T24240] __should_failslab+0x92/0xa0 [ 1167.728403][T24240] should_failslab+0x9/0x20 [ 1167.732891][T24240] slab_pre_alloc_hook+0x38/0x180 [ 1167.738012][T24240] ? __kernfs_new_node+0x41/0x360 [ 1167.743057][T24240] __kmem_cache_alloc_node+0x46/0x250 [ 1167.748633][T24240] ? __kernfs_new_node+0x41/0x360 [ 1167.753718][T24240] __kmalloc_node_track_caller+0x96/0x1a0 [ 1167.759480][T24240] kstrdup_const+0x5a/0x90 [ 1167.764014][T24240] __kernfs_new_node+0x41/0x360 [ 1167.768885][T24240] ? make_kgid+0x115/0x310 [ 1167.773417][T24240] ? net_ns_get_ownership+0xae/0xd0 [ 1167.778674][T24240] ? net_namespace+0x20/0x20 [ 1167.783275][T24240] kernfs_create_dir_ns+0x62/0x150 [ 1167.788460][T24240] sysfs_create_dir_ns+0xd7/0x1d0 [ 1167.793610][T24240] kobject_add_internal+0x47b/0x780 [ 1167.798824][T24240] kobject_add+0xdc/0x150 [ 1167.803208][T24240] ? __kmem_cache_alloc_node+0x18c/0x250 [ 1167.808927][T24240] ? device_add+0x2f2/0xb30 [ 1167.813996][T24240] device_add+0x300/0xb30 [ 1167.818401][T24240] netdev_register_kobject+0xfc/0x230 [ 1167.823770][T24240] register_netdevice+0x903/0xcd0 [ 1167.828817][T24240] hsr_dev_finalize+0x2b5/0x440 [ 1167.833664][T24240] hsr_newlink+0x426/0x470 [ 1167.838111][T24240] ? hsr_get_node_list+0x450/0x450 [ 1167.843381][T24240] rtnl_newlink+0xe5a/0x15a0 [ 1167.847991][T24240] ? __list_del_entry_valid+0x5f/0xe0 [ 1167.853676][T24240] ? _raw_spin_unlock+0x26/0x40 [ 1167.858546][T24240] ? __mutex_lock+0x21c/0x8d0 [ 1167.863346][T24240] ? rtnl_setlink+0x2d0/0x2d0 [ 1167.868514][T24240] rtnetlink_rcv_msg+0x807/0x8c0 [ 1167.873858][T24240] ? slab_post_alloc_hook+0x75/0x2d0 [ 1167.879219][T24240] ? xas_load+0x37c/0x390 [ 1167.883549][T24240] ? __rcu_read_unlock+0x4d/0x70 [ 1167.888587][T24240] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1167.893981][T24240] ? xa_load+0xb9/0xe0 [ 1167.898113][T24240] ? kmem_cache_free+0x178/0x280 [ 1167.903126][T24240] ? nlmon_xmit+0x4b/0x60 [ 1167.907516][T24240] ? __kfree_skb+0x102/0x140 [ 1167.912116][T24240] ? consume_skb+0x57/0x180 [ 1167.916632][T24240] ? nlmon_xmit+0x4b/0x60 [ 1167.921013][T24240] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1167.926285][T24240] ? ref_tracker_free+0x3a1/0x400 [ 1167.931301][T24240] ? local_bh_enable+0x1f/0x20 [ 1167.936169][T24240] ? __dev_queue_xmit+0xbba/0x1e60 [ 1167.941296][T24240] netlink_rcv_skb+0x126/0x220 [ 1167.946094][T24240] ? rtnetlink_bind+0x60/0x60 [ 1167.950853][T24240] rtnetlink_rcv+0x1c/0x20 [ 1167.955310][T24240] netlink_unicast+0x56f/0x640 [ 1167.960121][T24240] netlink_sendmsg+0x665/0x770 [ 1167.964904][T24240] ? netlink_getsockopt+0x710/0x710 [ 1167.970273][T24240] ____sys_sendmsg+0x375/0x4c0 [ 1167.975042][T24240] __sys_sendmsg+0x1e3/0x270 [ 1167.979693][T24240] __x64_sys_sendmsg+0x46/0x50 [ 1167.984507][T24240] do_syscall_64+0x41/0xc0 [ 1167.989079][T24240] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1167.995066][T24240] RIP: 0033:0x7f3099bc9169 [ 1167.999597][T24240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1168.019509][T24240] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.027997][T24240] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1168.036033][T24240] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001640)={r5, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x595}}, 0xbb, 0xfff8}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001640)={r5, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x595}}, 0xbb, 0xfff8}, 0x90) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="0c77f292252155b21cb312000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="0c77f292252155b21cb312000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x0, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r10, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) (async) vmsplice(r10, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r11, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) (async) writev(r11, &(0x7f0000000680)=[{&(0x7f0000000300)='G', 0x7ffff000}], 0x1) vmsplice(r11, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) (async) vmsplice(r11, &(0x7f0000000100)=[{&(0x7f0000000200)="0e", 0x1}], 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xe, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xef0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xf, 0x8, 0x2, 0xffffffffffffffe0, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x0, 0x6, 0x1, 0xb, 0xfffffffffffffffc, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x10, '\x00', r9, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x6, 0x385}, 0x10, 0x0, r10, 0x0, &(0x7f00000002c0)=[r11]}, 0x80) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r7}) 01:03:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 23) 01:03:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1168.044042][T24240] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.052062][T24240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.060304][T24240] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1168.068296][T24240] [ 1168.071541][T24240] kobject_add_internal failed for hsr2 (error: -12 parent: net) 01:03:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1168.131405][T24245] bond382: entered promiscuous mode [ 1168.136706][T24245] bond382: entered allmulticast mode [ 1168.142287][T24245] 8021q: adding VLAN 0 to HW filter on device bond382 01:03:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4a02}, 0x0) [ 1168.194614][T24259] FAULT_INJECTION: forcing a failure. [ 1168.194614][T24259] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.207585][T24259] CPU: 1 PID: 24259 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1168.218020][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1168.228071][T24259] Call Trace: [ 1168.231355][T24259] [ 1168.234286][T24259] dump_stack_lvl+0xda/0x130 [ 1168.238894][T24259] dump_stack+0x15/0x20 [ 1168.243052][T24259] should_fail_ex+0x21f/0x230 [ 1168.247751][T24259] __should_failslab+0x92/0xa0 [ 1168.252597][T24259] should_failslab+0x9/0x20 [ 1168.257094][T24259] slab_pre_alloc_hook+0x38/0x180 [ 1168.262125][T24259] kmem_cache_alloc+0x58/0x260 [ 1168.266982][T24259] ? __kernfs_new_node+0x6a/0x360 [ 1168.272114][T24259] __kernfs_new_node+0x6a/0x360 [ 1168.277004][T24259] ? make_kgid+0x115/0x310 [ 1168.281405][T24259] ? net_ns_get_ownership+0xae/0xd0 [ 1168.286609][T24259] ? net_namespace+0x20/0x20 [ 1168.291209][T24259] kernfs_create_dir_ns+0x62/0x150 [ 1168.296502][T24259] sysfs_create_dir_ns+0xd7/0x1d0 [ 1168.301515][T24259] kobject_add_internal+0x47b/0x780 [ 1168.306716][T24259] kobject_add+0xdc/0x150 [ 1168.311117][T24259] ? __kmem_cache_alloc_node+0x18c/0x250 [ 1168.316757][T24259] ? device_add+0x2f2/0xb30 [ 1168.321275][T24259] device_add+0x300/0xb30 [ 1168.325663][T24259] netdev_register_kobject+0xfc/0x230 [ 1168.331107][T24259] register_netdevice+0x903/0xcd0 [ 1168.336135][T24259] hsr_dev_finalize+0x2b5/0x440 [ 1168.340995][T24259] hsr_newlink+0x426/0x470 [ 1168.345459][T24259] ? hsr_get_node_list+0x450/0x450 [ 1168.350605][T24259] rtnl_newlink+0xe5a/0x15a0 [ 1168.355212][T24259] ? __list_del_entry_valid+0x5f/0xe0 [ 1168.360583][T24259] ? _raw_spin_unlock+0x26/0x40 [ 1168.365444][T24259] ? __mutex_lock+0x21c/0x8d0 [ 1168.370196][T24259] ? rtnl_setlink+0x2d0/0x2d0 [ 1168.374948][T24259] rtnetlink_rcv_msg+0x807/0x8c0 [ 1168.380024][T24259] ? slab_post_alloc_hook+0x75/0x2d0 [ 1168.385325][T24259] ? xas_load+0x37c/0x390 [ 1168.389674][T24259] ? __rcu_read_unlock+0x4d/0x70 [ 1168.394639][T24259] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1168.399997][T24259] ? xa_load+0xb9/0xe0 [ 1168.404143][T24259] ? kmem_cache_free+0x178/0x280 [ 1168.409162][T24259] ? nlmon_xmit+0x4b/0x60 [ 1168.413540][T24259] ? __kfree_skb+0x102/0x140 [ 1168.418590][T24259] ? consume_skb+0x57/0x180 [ 1168.423181][T24259] ? nlmon_xmit+0x4b/0x60 [ 1168.427513][T24259] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1168.432797][T24259] ? ref_tracker_free+0x3a1/0x400 [ 1168.437827][T24259] ? local_bh_enable+0x1f/0x20 [ 1168.442600][T24259] ? __dev_queue_xmit+0xbba/0x1e60 [ 1168.447718][T24259] netlink_rcv_skb+0x126/0x220 [ 1168.452565][T24259] ? rtnetlink_bind+0x60/0x60 [ 1168.457378][T24259] rtnetlink_rcv+0x1c/0x20 [ 1168.461868][T24259] netlink_unicast+0x56f/0x640 [ 1168.466775][T24259] netlink_sendmsg+0x665/0x770 [ 1168.471536][T24259] ? netlink_getsockopt+0x710/0x710 [ 1168.476758][T24259] ____sys_sendmsg+0x375/0x4c0 [ 1168.481610][T24259] __sys_sendmsg+0x1e3/0x270 [ 1168.486323][T24259] __x64_sys_sendmsg+0x46/0x50 [ 1168.491103][T24259] do_syscall_64+0x41/0xc0 [ 1168.495568][T24259] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1168.501777][T24259] RIP: 0033:0x7f3099bc9169 [ 1168.506419][T24259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1168.526301][T24259] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.534757][T24259] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 24) [ 1168.542823][T24259] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1168.551585][T24259] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.560080][T24259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.568596][T24259] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1168.577355][T24259] [ 1168.580737][T24259] kobject_add_internal failed for hsr2 (error: -12 parent: net) 01:03:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@mcast1, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1168.602537][T24258] ipvlan0: entered promiscuous mode [ 1168.608361][T24258] ipvlan0: left promiscuous mode [ 1168.636804][T24264] validate_nla: 1 callbacks suppressed [ 1168.636817][T24264] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1346, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x22, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1168.664731][T24264] bond383: entered promiscuous mode [ 1168.670031][T24264] bond383: entered allmulticast mode [ 1168.676370][T24264] 8021q: adding VLAN 0 to HW filter on device bond383 01:03:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4a03}, 0x0) [ 1168.730945][T24269] FAULT_INJECTION: forcing a failure. [ 1168.730945][T24269] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.744052][T24269] CPU: 0 PID: 24269 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1168.755028][T24269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1168.766341][T24269] Call Trace: [ 1168.769898][T24269] [ 1168.773035][T24269] dump_stack_lvl+0xda/0x130 [ 1168.777729][T24269] dump_stack+0x15/0x20 [ 1168.781976][T24269] should_fail_ex+0x21f/0x230 [ 1168.786751][T24269] __should_failslab+0x92/0xa0 [ 1168.791613][T24269] should_failslab+0x9/0x20 [ 1168.796155][T24269] slab_pre_alloc_hook+0x38/0x180 [ 1168.801358][T24269] kmem_cache_alloc+0x58/0x260 [ 1168.806360][T24269] ? __kernfs_new_node+0x6a/0x360 [ 1168.811410][T24269] __kernfs_new_node+0x6a/0x360 [ 1168.816342][T24269] ? kernfs_add_one+0x314/0x380 [ 1168.821288][T24269] kernfs_new_node+0x5f/0xd0 [ 1168.826088][T24269] __kernfs_create_file+0x49/0x180 [ 1168.831366][T24269] ? dev_attr_show+0x90/0x90 [ 1168.836174][T24269] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1168.841920][T24269] sysfs_create_file_ns+0xd0/0x110 [ 1168.847126][T24269] device_add+0x419/0xb30 [ 1168.851557][T24269] netdev_register_kobject+0xfc/0x230 [ 1168.856954][T24269] register_netdevice+0x903/0xcd0 [ 1168.862021][T24269] hsr_dev_finalize+0x2b5/0x440 [ 1168.867012][T24269] hsr_newlink+0x426/0x470 [ 1168.871714][T24269] ? hsr_get_node_list+0x450/0x450 [ 1168.876970][T24269] rtnl_newlink+0xe5a/0x15a0 [ 1168.881799][T24269] ? __list_del_entry_valid+0x5f/0xe0 [ 1168.887277][T24269] ? _raw_spin_unlock+0x26/0x40 [ 1168.892405][T24269] ? __mutex_lock+0x21c/0x8d0 [ 1168.897137][T24269] ? rtnl_setlink+0x2d0/0x2d0 [ 1168.901827][T24269] rtnetlink_rcv_msg+0x807/0x8c0 [ 1168.906841][T24269] ? slab_post_alloc_hook+0x75/0x2d0 [ 1168.912219][T24269] ? xas_load+0x37c/0x390 [ 1168.916561][T24269] ? __rcu_read_unlock+0x4d/0x70 [ 1168.921798][T24269] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1168.927646][T24269] ? xa_load+0xb9/0xe0 [ 1168.931835][T24269] ? kmem_cache_free+0x178/0x280 [ 1168.936876][T24269] ? nlmon_xmit+0x4b/0x60 [ 1168.941492][T24269] ? __kfree_skb+0x102/0x140 [ 1168.946273][T24269] ? consume_skb+0x57/0x180 [ 1168.951487][T24269] ? nlmon_xmit+0x4b/0x60 [ 1168.956606][T24269] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1168.961917][T24269] ? ref_tracker_free+0x3a1/0x400 [ 1168.967147][T24269] ? local_bh_enable+0x1f/0x20 [ 1168.971971][T24269] ? __dev_queue_xmit+0xbba/0x1e60 [ 1168.977233][T24269] netlink_rcv_skb+0x126/0x220 [ 1168.982075][T24269] ? rtnetlink_bind+0x60/0x60 [ 1168.986951][T24269] rtnetlink_rcv+0x1c/0x20 [ 1168.991385][T24269] netlink_unicast+0x56f/0x640 [ 1168.996425][T24269] netlink_sendmsg+0x665/0x770 [ 1169.002679][T24269] ? netlink_getsockopt+0x710/0x710 [ 1169.008095][T24269] ____sys_sendmsg+0x375/0x4c0 [ 1169.013275][T24269] __sys_sendmsg+0x1e3/0x270 [ 1169.018389][T24269] __x64_sys_sendmsg+0x46/0x50 [ 1169.023268][T24269] do_syscall_64+0x41/0xc0 [ 1169.028375][T24269] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1169.034358][T24269] RIP: 0033:0x7f3099bc9169 [ 1169.038936][T24269] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1169.058905][T24269] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.067743][T24269] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 25) [ 1169.075731][T24269] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1169.083972][T24269] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.092123][T24269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.100153][T24269] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1169.109158][T24269] [ 1169.136016][T24271] bond865: entered promiscuous mode [ 1169.141939][T24271] 8021q: adding VLAN 0 to HW filter on device bond865 [ 1169.175999][T24275] ipvlan0: entered promiscuous mode 01:03:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4613, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1169.181727][T24275] ipvlan0: left promiscuous mode [ 1169.192928][T24280] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1169.215393][T24280] bond384: entered promiscuous mode [ 1169.220710][T24280] bond384: entered allmulticast mode [ 1169.226308][T24280] 8021q: adding VLAN 0 to HW filter on device bond384 01:03:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) [ 1169.273053][T24293] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1169.298159][T24293] bond385: entered promiscuous mode [ 1169.303843][T24293] bond385: entered allmulticast mode [ 1169.309352][T24293] 8021q: adding VLAN 0 to HW filter on device bond385 01:03:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@mcast1, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@mcast1, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) 01:03:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1169.327921][T24286] FAULT_INJECTION: forcing a failure. [ 1169.327921][T24286] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.340579][T24286] CPU: 0 PID: 24286 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1169.351137][T24286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1169.361222][T24286] Call Trace: [ 1169.364505][T24286] [ 1169.367444][T24286] dump_stack_lvl+0xda/0x130 [ 1169.372047][T24286] dump_stack+0x15/0x20 [ 1169.376220][T24286] should_fail_ex+0x21f/0x230 [ 1169.380942][T24286] __should_failslab+0x92/0xa0 [ 1169.385831][T24286] should_failslab+0x9/0x20 [ 1169.390342][T24286] slab_pre_alloc_hook+0x38/0x180 [ 1169.395425][T24286] kmem_cache_alloc+0x58/0x260 [ 1169.400268][T24286] ? __kernfs_new_node+0x6a/0x360 [ 1169.405460][T24286] __kernfs_new_node+0x6a/0x360 [ 1169.410312][T24286] ? make_kgid+0x115/0x310 [ 1169.414772][T24286] ? net_ns_get_ownership+0xae/0xd0 [ 1169.420310][T24286] ? net_namespace+0x20/0x20 [ 1169.424894][T24286] kernfs_create_dir_ns+0x62/0x150 [ 1169.430013][T24286] sysfs_create_dir_ns+0xd7/0x1d0 [ 1169.435175][T24286] kobject_add_internal+0x47b/0x780 [ 1169.440658][T24286] kobject_add+0xdc/0x150 [ 1169.445068][T24286] ? __kmem_cache_alloc_node+0x18c/0x250 [ 1169.450757][T24286] ? device_add+0x2f2/0xb30 [ 1169.455399][T24286] device_add+0x300/0xb30 [ 1169.459725][T24286] netdev_register_kobject+0xfc/0x230 [ 1169.465121][T24286] register_netdevice+0x903/0xcd0 [ 1169.470235][T24286] hsr_dev_finalize+0x2b5/0x440 [ 1169.475141][T24286] hsr_newlink+0x426/0x470 [ 1169.479642][T24286] ? hsr_get_node_list+0x450/0x450 [ 1169.485167][T24286] rtnl_newlink+0xe5a/0x15a0 [ 1169.489865][T24286] ? __list_del_entry_valid+0x5f/0xe0 [ 1169.495228][T24286] ? _raw_spin_unlock+0x26/0x40 [ 1169.500133][T24286] ? __mutex_lock+0x21c/0x8d0 [ 1169.504804][T24286] ? rtnl_setlink+0x2d0/0x2d0 [ 1169.509594][T24286] rtnetlink_rcv_msg+0x807/0x8c0 [ 1169.514528][T24286] ? slab_post_alloc_hook+0x75/0x2d0 [ 1169.519831][T24286] ? xas_load+0x37c/0x390 [ 1169.524166][T24286] ? __rcu_read_unlock+0x4d/0x70 [ 1169.529113][T24286] ? xa_load+0xb9/0xe0 [ 1169.533234][T24286] ? kmem_cache_free+0x178/0x280 [ 1169.538169][T24286] ? nlmon_xmit+0x4b/0x60 [ 1169.542566][T24286] ? __kfree_skb+0x102/0x140 [ 1169.547353][T24286] ? consume_skb+0x57/0x180 [ 1169.551875][T24286] ? nlmon_xmit+0x4b/0x60 [ 1169.556204][T24286] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1169.561538][T24286] ? ref_tracker_free+0x3a1/0x400 [ 1169.566556][T24286] ? local_bh_enable+0x1f/0x20 [ 1169.571316][T24286] ? __dev_queue_xmit+0xbba/0x1e60 [ 1169.576479][T24286] netlink_rcv_skb+0x126/0x220 [ 1169.581485][T24286] ? rtnetlink_bind+0x60/0x60 [ 1169.586357][T24286] rtnetlink_rcv+0x1c/0x20 [ 1169.590773][T24286] netlink_unicast+0x56f/0x640 [ 1169.595534][T24286] netlink_sendmsg+0x665/0x770 [ 1169.600291][T24286] ? netlink_getsockopt+0x710/0x710 [ 1169.605543][T24286] ____sys_sendmsg+0x375/0x4c0 [ 1169.610327][T24286] __sys_sendmsg+0x1e3/0x270 [ 1169.615120][T24286] __x64_sys_sendmsg+0x46/0x50 [ 1169.619875][T24286] do_syscall_64+0x41/0xc0 [ 1169.624277][T24286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1169.630188][T24286] RIP: 0033:0x7f3099bc9169 [ 1169.634609][T24286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1169.654496][T24286] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.663347][T24286] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1169.671405][T24286] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 26) [ 1169.679409][T24286] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.687573][T24286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.695733][T24286] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1169.703799][T24286] [ 1169.707028][T24286] kobject_add_internal failed for hsr2 (error: -12 parent: net) 01:03:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x98010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1169.731382][T24294] __nla_validate_parse: 19 callbacks suppressed [ 1169.731395][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1169.757626][T24294] ipvlan0: entered promiscuous mode [ 1169.763277][T24294] ipvlan0: left promiscuous mode 01:03:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5202}, 0x0) 01:03:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4788, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1169.801522][T24300] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1169.825612][T24300] bond386: entered promiscuous mode [ 1169.831001][T24300] bond386: entered allmulticast mode [ 1169.842652][T24300] 8021q: adding VLAN 0 to HW filter on device bond386 01:03:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3a, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@mcast1, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1169.854917][T24301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1169.893174][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1169.907366][T24316] FAULT_INJECTION: forcing a failure. [ 1169.907366][T24316] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.920070][T24316] CPU: 0 PID: 24316 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1169.930741][T24316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1169.940847][T24316] Call Trace: [ 1169.944118][T24316] [ 1169.947034][T24316] dump_stack_lvl+0xda/0x130 [ 1169.951820][T24316] dump_stack+0x15/0x20 [ 1169.955969][T24316] should_fail_ex+0x21f/0x230 [ 1169.960685][T24316] __should_failslab+0x92/0xa0 [ 1169.965461][T24316] should_failslab+0x9/0x20 [ 1169.970263][T24316] slab_pre_alloc_hook+0x38/0x180 [ 1169.975460][T24316] ? __kernfs_new_node+0x41/0x360 [ 1169.980519][T24316] __kmem_cache_alloc_node+0x46/0x250 [ 1169.985992][T24316] ? __kernfs_new_node+0x41/0x360 [ 1169.991060][T24316] __kmalloc_node_track_caller+0x96/0x1a0 [ 1169.996799][T24316] kstrdup_const+0x5a/0x90 [ 1170.001311][T24316] __kernfs_new_node+0x41/0x360 [ 1170.006208][T24316] ? up_write+0x30/0xe0 [ 1170.010378][T24316] ? kernfs_activate+0x252/0x270 [ 1170.015418][T24316] kernfs_new_node+0x5f/0xd0 [ 1170.020006][T24316] kernfs_create_link+0x6c/0x120 [ 1170.024974][T24316] sysfs_do_create_link_sd+0x6b/0xf0 [ 1170.030329][T24316] sysfs_create_link+0x51/0x70 [ 1170.035219][T24316] device_add+0x642/0xb30 [ 1170.039656][T24316] netdev_register_kobject+0xfc/0x230 [ 1170.045156][T24316] register_netdevice+0x903/0xcd0 [ 1170.050276][T24316] hsr_dev_finalize+0x2b5/0x440 [ 1170.055176][T24316] hsr_newlink+0x426/0x470 [ 1170.059593][T24316] ? hsr_get_node_list+0x450/0x450 [ 1170.064771][T24316] rtnl_newlink+0xe5a/0x15a0 [ 1170.069867][T24316] ? __list_del_entry_valid+0x5f/0xe0 [ 1170.075453][T24316] ? _raw_spin_unlock+0x26/0x40 [ 1170.080418][T24316] ? __mutex_lock+0x21c/0x8d0 [ 1170.085332][T24316] ? rtnl_setlink+0x2d0/0x2d0 [ 1170.090276][T24316] rtnetlink_rcv_msg+0x807/0x8c0 [ 1170.095474][T24316] ? slab_post_alloc_hook+0x75/0x2d0 [ 1170.100877][T24316] ? xas_load+0x37c/0x390 [ 1170.105239][T24316] ? __rcu_read_unlock+0x4d/0x70 [ 1170.110204][T24316] ? xa_load+0xb9/0xe0 [ 1170.114273][T24316] ? kmem_cache_free+0x178/0x280 [ 1170.119212][T24316] ? nlmon_xmit+0x4b/0x60 [ 1170.123717][T24316] ? __kfree_skb+0x102/0x140 [ 1170.128368][T24316] ? consume_skb+0x57/0x180 [ 1170.132871][T24316] ? nlmon_xmit+0x4b/0x60 [ 1170.137335][T24316] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1170.142678][T24316] ? ref_tracker_free+0x3a1/0x400 [ 1170.147779][T24316] ? local_bh_enable+0x1f/0x20 [ 1170.152547][T24316] ? __dev_queue_xmit+0xbba/0x1e60 [ 1170.157758][T24316] netlink_rcv_skb+0x126/0x220 [ 1170.162606][T24316] ? rtnetlink_bind+0x60/0x60 [ 1170.167411][T24316] rtnetlink_rcv+0x1c/0x20 [ 1170.171881][T24316] netlink_unicast+0x56f/0x640 [ 1170.177066][T24316] netlink_sendmsg+0x665/0x770 [ 1170.181861][T24316] ? netlink_getsockopt+0x710/0x710 [ 1170.187060][T24316] ____sys_sendmsg+0x375/0x4c0 [ 1170.191827][T24316] __sys_sendmsg+0x1e3/0x270 [ 1170.196562][T24316] __x64_sys_sendmsg+0x46/0x50 [ 1170.201435][T24316] do_syscall_64+0x41/0xc0 [ 1170.205844][T24316] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1170.211743][T24316] RIP: 0033:0x7f3099bc9169 [ 1170.216150][T24316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1170.235892][T24316] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.244500][T24316] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 27) [ 1170.252560][T24316] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1170.260813][T24316] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.268791][T24316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.276754][T24316] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1170.284898][T24316] 01:03:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x98020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5800}, 0x0) [ 1170.335260][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1170.355160][T24323] ipvlan0: entered promiscuous mode [ 1170.363192][T24323] ipvlan0: left promiscuous mode 01:03:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1170.378365][T24326] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1170.399122][T24326] bond387: entered promiscuous mode [ 1170.404407][T24326] bond387: entered allmulticast mode [ 1170.409821][T24326] 8021q: adding VLAN 0 to HW filter on device bond387 [ 1170.423466][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x8400) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x400000, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f294252155b21c0012000c000100626f0400"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) [ 1170.461781][T24329] bond866: entered promiscuous mode [ 1170.467203][T24329] 8021q: adding VLAN 0 to HW filter on device bond866 [ 1170.490173][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.508015][T24333] FAULT_INJECTION: forcing a failure. [ 1170.508015][T24333] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.520866][T24333] CPU: 1 PID: 24333 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1170.531453][T24333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1170.541496][T24333] Call Trace: [ 1170.544818][T24333] [ 1170.547757][T24333] dump_stack_lvl+0xda/0x130 [ 1170.552466][T24333] dump_stack+0x15/0x20 [ 1170.556717][T24333] should_fail_ex+0x21f/0x230 [ 1170.561388][T24333] __should_failslab+0x92/0xa0 [ 1170.566142][T24333] should_failslab+0x9/0x20 [ 1170.570810][T24333] slab_pre_alloc_hook+0x38/0x180 [ 1170.575926][T24333] kmem_cache_alloc+0x58/0x260 [ 1170.580759][T24333] ? __kernfs_new_node+0x6a/0x360 [ 1170.585965][T24333] __kernfs_new_node+0x6a/0x360 [ 1170.590939][T24333] ? kernfs_add_one+0x314/0x380 [ 1170.595825][T24333] kernfs_new_node+0x5f/0xd0 [ 1170.600481][T24333] kernfs_create_link+0x6c/0x120 [ 1170.605448][T24333] sysfs_do_create_link_sd+0x6b/0xf0 [ 1170.610726][T24333] sysfs_create_link+0x51/0x70 [ 1170.615567][T24333] device_add+0x4c6/0xb30 [ 1170.619978][T24333] netdev_register_kobject+0xfc/0x230 [ 1170.625342][T24333] register_netdevice+0x903/0xcd0 [ 1170.630375][T24333] hsr_dev_finalize+0x2b5/0x440 [ 1170.635347][T24333] hsr_newlink+0x426/0x470 [ 1170.639766][T24333] ? hsr_get_node_list+0x450/0x450 [ 1170.644889][T24333] rtnl_newlink+0xe5a/0x15a0 [ 1170.649693][T24333] ? __list_del_entry_valid+0x5f/0xe0 [ 1170.655075][T24333] ? _raw_spin_unlock+0x26/0x40 [ 1170.659933][T24333] ? __mutex_lock+0x21c/0x8d0 [ 1170.664630][T24333] ? rtnl_setlink+0x2d0/0x2d0 [ 1170.669352][T24333] rtnetlink_rcv_msg+0x807/0x8c0 [ 1170.674473][T24333] ? slab_post_alloc_hook+0x75/0x2d0 [ 1170.679766][T24333] ? xas_load+0x37c/0x390 [ 1170.684083][T24333] ? __rcu_read_unlock+0x4d/0x70 [ 1170.689022][T24333] ? xa_load+0xb9/0xe0 [ 1170.693131][T24333] ? kmem_cache_free+0x178/0x280 [ 1170.698090][T24333] ? nlmon_xmit+0x4b/0x60 [ 1170.702578][T24333] ? __kfree_skb+0x102/0x140 [ 1170.707340][T24333] ? consume_skb+0x57/0x180 [ 1170.711857][T24333] ? nlmon_xmit+0x4b/0x60 [ 1170.716210][T24333] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1170.721516][T24333] ? ref_tracker_free+0x3a1/0x400 [ 1170.726619][T24333] ? local_bh_enable+0x1f/0x20 [ 1170.731445][T24333] ? __dev_queue_xmit+0xbba/0x1e60 [ 1170.736661][T24333] netlink_rcv_skb+0x126/0x220 [ 1170.741440][T24333] ? rtnetlink_bind+0x60/0x60 [ 1170.746241][T24333] rtnetlink_rcv+0x1c/0x20 [ 1170.750681][T24333] netlink_unicast+0x56f/0x640 [ 1170.755471][T24333] netlink_sendmsg+0x665/0x770 [ 1170.760222][T24333] ? netlink_getsockopt+0x710/0x710 [ 1170.765549][T24333] ____sys_sendmsg+0x375/0x4c0 [ 1170.770364][T24333] __sys_sendmsg+0x1e3/0x270 [ 1170.775228][T24333] __x64_sys_sendmsg+0x46/0x50 [ 1170.780187][T24333] do_syscall_64+0x41/0xc0 [ 1170.784624][T24333] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1170.790532][T24333] RIP: 0033:0x7f3099bc9169 [ 1170.794951][T24333] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1170.814852][T24333] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.823262][T24333] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1170.831395][T24333] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1170.839507][T24333] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.847562][T24333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.855828][T24333] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 01:03:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 28) [ 1170.863880][T24333] 01:03:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5801}, 0x0) 01:03:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9a020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1170.912102][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1170.931805][T24341] ipvlan0: entered promiscuous mode [ 1170.937632][T24341] ipvlan0: left promiscuous mode [ 1170.949537][T24344] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1170.970846][T24344] bond388: entered promiscuous mode [ 1170.976260][T24344] bond388: entered allmulticast mode [ 1170.981915][T24344] 8021q: adding VLAN 0 to HW filter on device bond388 [ 1170.995415][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1171.014760][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1171.038481][T24358] ipvlan0: entered promiscuous mode [ 1171.044251][T24358] ipvlan0: left promiscuous mode [ 1171.058134][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1171.072957][T24350] FAULT_INJECTION: forcing a failure. [ 1171.072957][T24350] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.085644][T24350] CPU: 0 PID: 24350 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1171.096074][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1171.106155][T24350] Call Trace: [ 1171.109521][T24350] [ 1171.112456][T24350] dump_stack_lvl+0xda/0x130 [ 1171.117055][T24350] dump_stack+0x15/0x20 [ 1171.121239][T24350] should_fail_ex+0x21f/0x230 [ 1171.125904][T24350] __should_failslab+0x92/0xa0 [ 1171.130760][T24350] should_failslab+0x9/0x20 [ 1171.135263][T24350] slab_pre_alloc_hook+0x38/0x180 [ 1171.140364][T24350] kmem_cache_alloc+0x58/0x260 [ 1171.145317][T24350] ? __kernfs_new_node+0x6a/0x360 [ 1171.150426][T24350] __kernfs_new_node+0x6a/0x360 [ 1171.155725][T24350] ? kernfs_add_one+0x314/0x380 [ 1171.160701][T24350] kernfs_new_node+0x5f/0xd0 [ 1171.165310][T24350] kernfs_create_link+0x6c/0x120 [ 1171.170560][T24350] sysfs_do_create_link_sd+0x6b/0xf0 [ 1171.175922][T24350] sysfs_create_link+0x51/0x70 [ 1171.180736][T24350] device_add+0x4c6/0xb30 [ 1171.185098][T24350] netdev_register_kobject+0xfc/0x230 [ 1171.190585][T24350] register_netdevice+0x903/0xcd0 [ 1171.195713][T24350] hsr_dev_finalize+0x2b5/0x440 [ 1171.200744][T24350] hsr_newlink+0x426/0x470 [ 1171.205195][T24350] ? hsr_get_node_list+0x450/0x450 [ 1171.210308][T24350] rtnl_newlink+0xe5a/0x15a0 [ 1171.214993][T24350] ? __list_del_entry_valid+0x5f/0xe0 [ 1171.220510][T24350] ? _raw_spin_unlock+0x26/0x40 [ 1171.225484][T24350] ? __mutex_lock+0x21c/0x8d0 [ 1171.230211][T24350] ? rtnl_setlink+0x2d0/0x2d0 [ 1171.234905][T24350] rtnetlink_rcv_msg+0x807/0x8c0 [ 1171.239843][T24350] ? slab_post_alloc_hook+0x75/0x2d0 [ 1171.245215][T24350] ? try_charge_memcg+0xb42/0xd20 [ 1171.250269][T24350] ? xas_load+0x37c/0x390 [ 1171.254794][T24350] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1171.260174][T24350] ? kmem_cache_free+0x178/0x280 [ 1171.265903][T24350] ? nlmon_xmit+0x4b/0x60 [ 1171.270252][T24350] ? __kfree_skb+0x102/0x140 [ 1171.274881][T24350] ? consume_skb+0x57/0x180 [ 1171.279485][T24350] ? nlmon_xmit+0x4b/0x60 [ 1171.283897][T24350] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1171.289230][T24350] ? ref_tracker_free+0x3a1/0x400 [ 1171.294267][T24350] ? local_bh_enable+0x1f/0x20 [ 1171.299087][T24350] ? __dev_queue_xmit+0xbba/0x1e60 [ 1171.304219][T24350] netlink_rcv_skb+0x126/0x220 [ 1171.309063][T24350] ? rtnetlink_bind+0x60/0x60 [ 1171.314041][T24350] rtnetlink_rcv+0x1c/0x20 [ 1171.318465][T24350] netlink_unicast+0x56f/0x640 [ 1171.323380][T24350] netlink_sendmsg+0x665/0x770 [ 1171.328266][T24350] ? netlink_getsockopt+0x710/0x710 [ 1171.333682][T24350] ____sys_sendmsg+0x375/0x4c0 [ 1171.338450][T24350] __sys_sendmsg+0x1e3/0x270 [ 1171.343056][T24350] __x64_sys_sendmsg+0x46/0x50 [ 1171.348104][T24350] do_syscall_64+0x41/0xc0 [ 1171.352589][T24350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1171.358489][T24350] RIP: 0033:0x7f3099bc9169 [ 1171.362891][T24350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1171.382798][T24350] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.391308][T24350] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1171.400207][T24350] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1171.409419][T24350] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:03:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 29) 01:03:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1171.417421][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.425497][T24350] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1171.433866][T24350] 01:03:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 01:03:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = socket(0x10, 0x803, 0x0) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x8400) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x400000, 0x2) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f294252155b21c0012000c000100626f0400"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:03:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x8400) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x400000, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f294252155b21c0012000c000100626f0400"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) 01:03:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9a030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1171.490920][T24361] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1171.528782][T24361] bond389: entered promiscuous mode [ 1171.534304][T24361] bond389: entered allmulticast mode 01:03:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1171.539796][T24361] 8021q: adding VLAN 0 to HW filter on device bond389 [ 1171.564083][T24365] ipvlan0: entered promiscuous mode [ 1171.571765][T24365] ipvlan0: left promiscuous mode [ 1171.590256][T24364] FAULT_INJECTION: forcing a failure. [ 1171.590256][T24364] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.603766][T24364] CPU: 0 PID: 24364 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1171.614363][T24364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1171.624932][T24364] Call Trace: [ 1171.628288][T24364] [ 1171.631303][T24364] dump_stack_lvl+0xda/0x130 [ 1171.635997][T24364] dump_stack+0x15/0x20 [ 1171.640295][T24364] should_fail_ex+0x21f/0x230 [ 1171.645159][T24364] __should_failslab+0x92/0xa0 [ 1171.650263][T24364] should_failslab+0x9/0x20 [ 1171.654841][T24364] slab_pre_alloc_hook+0x38/0x180 [ 1171.660152][T24364] kmem_cache_alloc+0x58/0x260 [ 1171.665150][T24364] ? __kernfs_new_node+0x6a/0x360 [ 1171.670376][T24364] __kernfs_new_node+0x6a/0x360 [ 1171.675232][T24364] ? __radix_tree_replace+0x1c1/0x1f0 [ 1171.680632][T24364] ? mutex_lock+0xd/0x30 [ 1171.684961][T24364] kernfs_new_node+0x5f/0xd0 [ 1171.689636][T24364] __kernfs_create_file+0x49/0x180 [ 1171.694894][T24364] ? dev_attr_show+0x90/0x90 [ 1171.699648][T24364] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1171.705241][T24364] internal_create_group+0x320/0x840 [ 1171.711238][T24364] sysfs_create_groups+0x3c/0xe0 [ 1171.716350][T24364] device_add_attrs+0x69/0x400 [ 1171.721255][T24364] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1171.726748][T24364] device_add+0x4ec/0xb30 [ 1171.731159][T24364] netdev_register_kobject+0xfc/0x230 [ 1171.736671][T24364] register_netdevice+0x903/0xcd0 [ 1171.741696][T24364] hsr_dev_finalize+0x2b5/0x440 [ 1171.746735][T24364] hsr_newlink+0x426/0x470 [ 1171.751348][T24364] ? hsr_get_node_list+0x450/0x450 [ 1171.756559][T24364] rtnl_newlink+0xe5a/0x15a0 [ 1171.761398][T24364] ? __list_del_entry_valid+0x5f/0xe0 [ 1171.767150][T24364] ? _raw_spin_unlock+0x26/0x40 [ 1171.772158][T24364] ? __mutex_lock+0x21c/0x8d0 [ 1171.776940][T24364] ? rtnl_setlink+0x2d0/0x2d0 [ 1171.781730][T24364] rtnetlink_rcv_msg+0x807/0x8c0 [ 1171.786833][T24364] ? slab_post_alloc_hook+0x75/0x2d0 [ 1171.792626][T24364] ? xas_load+0x37c/0x390 [ 1171.797233][T24364] ? __rcu_read_unlock+0x4d/0x70 [ 1171.802531][T24364] ? xa_load+0xb9/0xe0 [ 1171.806615][T24364] ? kmem_cache_free+0x178/0x280 [ 1171.811614][T24364] ? nlmon_xmit+0x4b/0x60 [ 1171.815942][T24364] ? __kfree_skb+0x102/0x140 [ 1171.820617][T24364] ? consume_skb+0x57/0x180 [ 1171.825176][T24364] ? nlmon_xmit+0x4b/0x60 [ 1171.829715][T24364] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1171.835402][T24364] ? ref_tracker_free+0x3a1/0x400 [ 1171.840492][T24364] ? local_bh_enable+0x1f/0x20 [ 1171.845335][T24364] ? __dev_queue_xmit+0xbba/0x1e60 [ 1171.850504][T24364] netlink_rcv_skb+0x126/0x220 [ 1171.855629][T24364] ? rtnetlink_bind+0x60/0x60 [ 1171.860492][T24364] rtnetlink_rcv+0x1c/0x20 [ 1171.865171][T24364] netlink_unicast+0x56f/0x640 [ 1171.870329][T24364] netlink_sendmsg+0x665/0x770 [ 1171.875218][T24364] ? netlink_getsockopt+0x710/0x710 [ 1171.881576][T24364] ____sys_sendmsg+0x375/0x4c0 [ 1171.886403][T24364] __sys_sendmsg+0x1e3/0x270 [ 1171.891116][T24364] __x64_sys_sendmsg+0x46/0x50 [ 1171.895955][T24364] do_syscall_64+0x41/0xc0 [ 1171.900406][T24364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1171.906311][T24364] RIP: 0033:0x7f3099bc9169 [ 1171.910733][T24364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1171.930522][T24364] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:03:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1171.939087][T24364] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1171.947081][T24364] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1171.955333][T24364] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.963672][T24364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.971935][T24364] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1171.979991][T24364] 01:03:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 30) 01:03:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5a01}, 0x0) 01:03:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9c030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1172.040154][T24381] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1172.063714][T24381] bond390: entered promiscuous mode [ 1172.069031][T24381] bond390: entered allmulticast mode [ 1172.074707][T24381] 8021q: adding VLAN 0 to HW filter on device bond390 01:03:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1172.104093][T24386] ipvlan0: entered promiscuous mode [ 1172.112585][T24386] ipvlan0: left promiscuous mode 01:03:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5a03}, 0x0) [ 1172.154235][T24390] FAULT_INJECTION: forcing a failure. [ 1172.154235][T24390] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.167215][T24390] CPU: 0 PID: 24390 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1172.177936][T24390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1172.188073][T24390] Call Trace: [ 1172.191454][T24390] [ 1172.194428][T24390] dump_stack_lvl+0xda/0x130 [ 1172.199054][T24390] dump_stack+0x15/0x20 [ 1172.203219][T24390] should_fail_ex+0x21f/0x230 [ 1172.208177][T24390] __should_failslab+0x92/0xa0 [ 1172.212931][T24390] should_failslab+0x9/0x20 [ 1172.217614][T24390] slab_pre_alloc_hook+0x38/0x180 [ 1172.222652][T24390] kmem_cache_alloc+0x58/0x260 [ 1172.227443][T24390] ? __kernfs_new_node+0x6a/0x360 [ 1172.232572][T24390] __kernfs_new_node+0x6a/0x360 [ 1172.237446][T24390] ? __radix_tree_replace+0x1c1/0x1f0 [ 1172.242928][T24390] ? mutex_lock+0xd/0x30 [ 1172.247180][T24390] kernfs_new_node+0x5f/0xd0 [ 1172.251827][T24390] __kernfs_create_file+0x49/0x180 [ 1172.256967][T24390] ? dev_attr_show+0x90/0x90 [ 1172.261652][T24390] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1172.267040][T24390] internal_create_group+0x320/0x840 [ 1172.272350][T24390] sysfs_create_groups+0x3c/0xe0 [ 1172.277333][T24390] device_add_attrs+0x69/0x400 [ 1172.282116][T24390] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1172.287807][T24390] device_add+0x4ec/0xb30 [ 1172.292150][T24390] netdev_register_kobject+0xfc/0x230 [ 1172.298231][T24390] register_netdevice+0x903/0xcd0 [ 1172.303262][T24390] hsr_dev_finalize+0x2b5/0x440 [ 1172.308201][T24390] hsr_newlink+0x426/0x470 [ 1172.312870][T24390] ? hsr_get_node_list+0x450/0x450 [ 1172.318015][T24390] rtnl_newlink+0xe5a/0x15a0 [ 1172.322891][T24390] ? __list_del_entry_valid+0x5f/0xe0 [ 1172.328309][T24390] ? _raw_spin_unlock+0x26/0x40 [ 1172.333334][T24390] ? __mutex_lock+0x21c/0x8d0 [ 1172.338381][T24390] ? rtnl_setlink+0x2d0/0x2d0 [ 1172.343263][T24390] rtnetlink_rcv_msg+0x807/0x8c0 [ 1172.348375][T24390] ? slab_post_alloc_hook+0x75/0x2d0 [ 1172.354079][T24390] ? try_charge_memcg+0xb42/0xd20 [ 1172.359267][T24390] ? xas_load+0x37c/0x390 [ 1172.363893][T24390] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1172.369301][T24390] ? kmem_cache_free+0x178/0x280 [ 1172.374423][T24390] ? nlmon_xmit+0x4b/0x60 [ 1172.378754][T24390] ? __kfree_skb+0x102/0x140 [ 1172.383412][T24390] ? consume_skb+0x57/0x180 [ 1172.388045][T24390] ? nlmon_xmit+0x4b/0x60 [ 1172.392595][T24390] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1172.398273][T24390] ? ref_tracker_free+0x3a1/0x400 [ 1172.403436][T24390] ? local_bh_enable+0x1f/0x20 [ 1172.408217][T24390] ? __dev_queue_xmit+0xbba/0x1e60 [ 1172.413357][T24390] netlink_rcv_skb+0x126/0x220 [ 1172.418183][T24390] ? rtnetlink_bind+0x60/0x60 [ 1172.422969][T24390] rtnetlink_rcv+0x1c/0x20 [ 1172.427409][T24390] netlink_unicast+0x56f/0x640 [ 1172.432311][T24390] netlink_sendmsg+0x665/0x770 [ 1172.437332][T24390] ? netlink_getsockopt+0x710/0x710 [ 1172.443052][T24390] ____sys_sendmsg+0x375/0x4c0 [ 1172.447815][T24390] __sys_sendmsg+0x1e3/0x270 [ 1172.452524][T24390] __x64_sys_sendmsg+0x46/0x50 [ 1172.457426][T24390] do_syscall_64+0x41/0xc0 [ 1172.461849][T24390] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1172.468487][T24390] RIP: 0033:0x7f3099bc9169 [ 1172.472982][T24390] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1172.492778][T24390] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:03:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 31) 01:03:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1172.501203][T24390] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1172.509171][T24390] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1172.517445][T24390] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.525506][T24390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.533602][T24390] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1172.541715][T24390] 01:03:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa2010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1172.598596][T24395] bond867: entered promiscuous mode [ 1172.604246][T24395] 8021q: adding VLAN 0 to HW filter on device bond867 [ 1172.616991][T24397] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1172.637691][T24397] bond391: entered promiscuous mode [ 1172.643645][T24397] bond391: entered allmulticast mode 01:03:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1172.649139][T24397] 8021q: adding VLAN 0 to HW filter on device bond391 01:03:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5c00}, 0x0) 01:03:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1172.693856][T24403] FAULT_INJECTION: forcing a failure. [ 1172.693856][T24403] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.706889][T24403] CPU: 1 PID: 24403 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1172.717578][T24403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1172.727879][T24403] Call Trace: [ 1172.731331][T24403] [ 1172.734263][T24403] dump_stack_lvl+0xda/0x130 [ 1172.738870][T24403] dump_stack+0x15/0x20 [ 1172.743044][T24403] should_fail_ex+0x21f/0x230 [ 1172.747813][T24403] __should_failslab+0x92/0xa0 [ 1172.752896][T24403] should_failslab+0x9/0x20 [ 1172.757673][T24403] slab_pre_alloc_hook+0x38/0x180 [ 1172.762692][T24403] kmem_cache_alloc+0x58/0x260 [ 1172.767609][T24403] ? __kernfs_new_node+0x6a/0x360 [ 1172.772709][T24403] __kernfs_new_node+0x6a/0x360 [ 1172.777818][T24403] ? up_write+0x30/0xe0 [ 1172.782152][T24403] ? kernfs_activate+0x252/0x270 [ 1172.787416][T24403] kernfs_new_node+0x5f/0xd0 [ 1172.792552][T24403] __kernfs_create_file+0x49/0x180 [ 1172.797791][T24403] ? dev_attr_show+0x90/0x90 [ 1172.802399][T24403] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1172.807761][T24403] internal_create_group+0x320/0x840 [ 1172.813126][T24403] sysfs_create_groups+0x3c/0xe0 [ 1172.818185][T24403] device_add_attrs+0x69/0x400 [ 1172.822993][T24403] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1172.828578][T24403] device_add+0x4ec/0xb30 [ 1172.832907][T24403] netdev_register_kobject+0xfc/0x230 [ 1172.838289][T24403] register_netdevice+0x903/0xcd0 [ 1172.843309][T24403] hsr_dev_finalize+0x2b5/0x440 [ 1172.848197][T24403] hsr_newlink+0x426/0x470 [ 1172.852606][T24403] ? hsr_get_node_list+0x450/0x450 [ 1172.857752][T24403] rtnl_newlink+0xe5a/0x15a0 [ 1172.862386][T24403] ? __list_del_entry_valid+0x5f/0xe0 [ 1172.867802][T24403] ? _raw_spin_unlock+0x26/0x40 [ 1172.872662][T24403] ? __mutex_lock+0x21c/0x8d0 [ 1172.877454][T24403] ? rtnl_setlink+0x2d0/0x2d0 [ 1172.882152][T24403] rtnetlink_rcv_msg+0x807/0x8c0 [ 1172.887149][T24403] ? slab_post_alloc_hook+0x75/0x2d0 [ 1172.892436][T24403] ? xas_load+0x37c/0x390 [ 1172.896761][T24403] ? __rcu_read_unlock+0x4d/0x70 [ 1172.901769][T24403] ? xa_load+0xb9/0xe0 [ 1172.905867][T24403] ? kmem_cache_free+0x178/0x280 [ 1172.910973][T24403] ? nlmon_xmit+0x4b/0x60 [ 1172.915336][T24403] ? __kfree_skb+0x102/0x140 [ 1172.919956][T24403] ? consume_skb+0x57/0x180 [ 1172.924554][T24403] ? nlmon_xmit+0x4b/0x60 [ 1172.928894][T24403] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1172.934188][T24403] ? ref_tracker_free+0x3a1/0x400 [ 1172.939411][T24403] ? local_bh_enable+0x1f/0x20 [ 1172.944282][T24403] ? __dev_queue_xmit+0xbba/0x1e60 [ 1172.949484][T24403] netlink_rcv_skb+0x126/0x220 [ 1172.954246][T24403] ? rtnetlink_bind+0x60/0x60 [ 1172.958938][T24403] rtnetlink_rcv+0x1c/0x20 [ 1172.963418][T24403] netlink_unicast+0x56f/0x640 [ 1172.968307][T24403] netlink_sendmsg+0x665/0x770 [ 1172.973147][T24403] ? netlink_getsockopt+0x710/0x710 [ 1172.978490][T24403] ____sys_sendmsg+0x375/0x4c0 [ 1172.983745][T24403] __sys_sendmsg+0x1e3/0x270 [ 1172.988433][T24403] __x64_sys_sendmsg+0x46/0x50 [ 1172.993548][T24403] do_syscall_64+0x41/0xc0 [ 1172.997996][T24403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1173.003918][T24403] RIP: 0033:0x7f3099bc9169 [ 1173.008415][T24403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1173.028413][T24403] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.037189][T24403] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1173.045709][T24403] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1173.053849][T24403] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.062348][T24403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.070389][T24403] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1173.078998][T24403] 01:03:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 32) [ 1173.095753][T24406] ipvlan0: entered promiscuous mode [ 1173.101777][T24406] ipvlan0: left promiscuous mode [ 1173.136009][T24413] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa2020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1173.157136][T24413] bond392: entered promiscuous mode [ 1173.162396][T24413] bond392: entered allmulticast mode [ 1173.169722][T24413] 8021q: adding VLAN 0 to HW filter on device bond392 01:03:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 01:03:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1173.224370][T24422] FAULT_INJECTION: forcing a failure. [ 1173.224370][T24422] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.237155][T24422] CPU: 0 PID: 24422 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1173.247579][T24422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1173.257683][T24422] Call Trace: [ 1173.261041][T24422] [ 1173.263980][T24422] dump_stack_lvl+0xda/0x130 [ 1173.268843][T24422] dump_stack+0x15/0x20 [ 1173.273100][T24422] should_fail_ex+0x21f/0x230 [ 1173.277957][T24422] __should_failslab+0x92/0xa0 [ 1173.282732][T24422] should_failslab+0x9/0x20 [ 1173.287317][T24422] slab_pre_alloc_hook+0x38/0x180 [ 1173.292452][T24422] kmem_cache_alloc+0x58/0x260 [ 1173.297316][T24422] ? __kernfs_new_node+0x6a/0x360 [ 1173.302393][T24422] __kernfs_new_node+0x6a/0x360 [ 1173.307241][T24422] ? up_write+0x30/0xe0 [ 1173.311472][T24422] ? kernfs_activate+0x252/0x270 [ 1173.316690][T24422] kernfs_new_node+0x5f/0xd0 [ 1173.321316][T24422] __kernfs_create_file+0x49/0x180 [ 1173.326448][T24422] ? dev_attr_show+0x90/0x90 [ 1173.331063][T24422] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1173.336625][T24422] internal_create_group+0x320/0x840 [ 1173.342019][T24422] sysfs_create_groups+0x3c/0xe0 [ 1173.347050][T24422] device_add_attrs+0x69/0x400 [ 1173.351848][T24422] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1173.357377][T24422] device_add+0x4ec/0xb30 [ 1173.361733][T24422] netdev_register_kobject+0xfc/0x230 [ 1173.367184][T24422] register_netdevice+0x903/0xcd0 [ 1173.372302][T24422] hsr_dev_finalize+0x2b5/0x440 [ 1173.377152][T24422] hsr_newlink+0x426/0x470 [ 1173.381861][T24422] ? hsr_get_node_list+0x450/0x450 [ 1173.386984][T24422] rtnl_newlink+0xe5a/0x15a0 [ 1173.391586][T24422] ? __list_del_entry_valid+0x5f/0xe0 [ 1173.397067][T24422] ? _raw_spin_unlock+0x26/0x40 [ 1173.401945][T24422] ? __mutex_lock+0x21c/0x8d0 [ 1173.406634][T24422] ? rtnl_setlink+0x2d0/0x2d0 [ 1173.411716][T24422] rtnetlink_rcv_msg+0x807/0x8c0 [ 1173.416678][T24422] ? slab_post_alloc_hook+0x75/0x2d0 [ 1173.422019][T24422] ? xas_load+0x37c/0x390 [ 1173.426457][T24422] ? __rcu_read_unlock+0x4d/0x70 [ 1173.431455][T24422] ? xa_load+0xb9/0xe0 [ 1173.435577][T24422] ? kmem_cache_free+0x178/0x280 [ 1173.440620][T24422] ? nlmon_xmit+0x4b/0x60 [ 1173.444962][T24422] ? __kfree_skb+0x102/0x140 [ 1173.449634][T24422] ? consume_skb+0x57/0x180 [ 1173.454139][T24422] ? nlmon_xmit+0x4b/0x60 [ 1173.458653][T24422] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1173.463939][T24422] ? ref_tracker_free+0x3a1/0x400 [ 1173.469085][T24422] ? local_bh_enable+0x1f/0x20 [ 1173.473841][T24422] ? __dev_queue_xmit+0xbba/0x1e60 [ 1173.479031][T24422] netlink_rcv_skb+0x126/0x220 [ 1173.483831][T24422] ? rtnetlink_bind+0x60/0x60 [ 1173.488526][T24422] rtnetlink_rcv+0x1c/0x20 [ 1173.493316][T24422] netlink_unicast+0x56f/0x640 [ 1173.498137][T24422] netlink_sendmsg+0x665/0x770 [ 1173.502978][T24422] ? netlink_getsockopt+0x710/0x710 [ 1173.508287][T24422] ____sys_sendmsg+0x375/0x4c0 [ 1173.513267][T24422] __sys_sendmsg+0x1e3/0x270 [ 1173.518074][T24422] __x64_sys_sendmsg+0x46/0x50 [ 1173.523038][T24422] do_syscall_64+0x41/0xc0 [ 1173.527503][T24422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1173.533504][T24422] RIP: 0033:0x7f3099bc9169 [ 1173.537909][T24422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1173.558221][T24422] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.566824][T24422] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 33) [ 1173.575099][T24422] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1173.583084][T24422] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.591201][T24422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.599236][T24422] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1173.607208][T24422] [ 1173.622230][T24426] ipvlan0: entered promiscuous mode [ 1173.628011][T24426] ipvlan0: left promiscuous mode [ 1173.653265][T24430] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa2030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1173.674546][T24430] bond393: entered promiscuous mode [ 1173.679790][T24430] bond393: entered allmulticast mode [ 1173.685725][T24430] 8021q: adding VLAN 0 to HW filter on device bond393 01:03:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6003}, 0x0) 01:03:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0xc0, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fffffff, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYRES16=r2], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xfffffffe, 0x0, 0x0, 0x300, 0x4, 0x4000000a, r6}) [ 1173.752830][T24435] bond868: entered promiscuous mode [ 1173.758296][T24435] 8021q: adding VLAN 0 to HW filter on device bond868 [ 1173.793902][T24439] FAULT_INJECTION: forcing a failure. [ 1173.793902][T24439] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.806782][T24439] CPU: 1 PID: 24439 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1173.817362][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1173.827584][T24439] Call Trace: [ 1173.830858][T24439] [ 1173.833860][T24439] dump_stack_lvl+0xda/0x130 [ 1173.839230][T24439] dump_stack+0x15/0x20 [ 1173.844098][T24439] should_fail_ex+0x21f/0x230 [ 1173.849013][T24439] __should_failslab+0x92/0xa0 [ 1173.854315][T24439] should_failslab+0x9/0x20 [ 1173.859024][T24439] slab_pre_alloc_hook+0x38/0x180 [ 1173.864053][T24439] kmem_cache_alloc+0x58/0x260 [ 1173.869020][T24439] ? __kernfs_new_node+0x6a/0x360 [ 1173.874243][T24439] __kernfs_new_node+0x6a/0x360 [ 1173.879183][T24439] ? up_write+0x30/0xe0 [ 1173.883440][T24439] ? kernfs_activate+0x252/0x270 [ 1173.888585][T24439] kernfs_new_node+0x5f/0xd0 [ 1173.893324][T24439] __kernfs_create_file+0x49/0x180 [ 1173.898430][T24439] ? dev_attr_show+0x90/0x90 [ 1173.903047][T24439] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1173.908485][T24439] internal_create_group+0x320/0x840 [ 1173.913868][T24439] sysfs_create_groups+0x3c/0xe0 [ 1173.918953][T24439] device_add_attrs+0x69/0x400 [ 1173.924166][T24439] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1173.929808][T24439] device_add+0x4ec/0xb30 [ 1173.934134][T24439] netdev_register_kobject+0xfc/0x230 [ 1173.939515][T24439] register_netdevice+0x903/0xcd0 [ 1173.944561][T24439] hsr_dev_finalize+0x2b5/0x440 [ 1173.949555][T24439] hsr_newlink+0x426/0x470 [ 1173.954068][T24439] ? hsr_get_node_list+0x450/0x450 [ 1173.959266][T24439] rtnl_newlink+0xe5a/0x15a0 [ 1173.964038][T24439] ? __list_del_entry_valid+0x5f/0xe0 [ 1173.969602][T24439] ? _raw_spin_unlock+0x26/0x40 [ 1173.974508][T24439] ? __mutex_lock+0x21c/0x8d0 [ 1173.979384][T24439] ? rtnl_setlink+0x2d0/0x2d0 [ 1173.984405][T24439] rtnetlink_rcv_msg+0x807/0x8c0 [ 1173.989555][T24439] ? slab_post_alloc_hook+0x75/0x2d0 [ 1173.994990][T24439] ? xas_load+0x37c/0x390 [ 1173.999359][T24439] ? __rcu_read_unlock+0x4d/0x70 [ 1174.004677][T24439] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1174.010230][T24439] ? xa_load+0xb9/0xe0 [ 1174.014356][T24439] ? kmem_cache_free+0x178/0x280 [ 1174.019381][T24439] ? nlmon_xmit+0x4b/0x60 [ 1174.023790][T24439] ? __kfree_skb+0x102/0x140 [ 1174.028692][T24439] ? consume_skb+0x57/0x180 [ 1174.033218][T24439] ? nlmon_xmit+0x4b/0x60 [ 1174.037805][T24439] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1174.043163][T24439] ? ref_tracker_free+0x3a1/0x400 [ 1174.048179][T24439] ? local_bh_enable+0x1f/0x20 [ 1174.052973][T24439] ? __dev_queue_xmit+0xbba/0x1e60 [ 1174.058113][T24439] netlink_rcv_skb+0x126/0x220 [ 1174.062964][T24439] ? rtnetlink_bind+0x60/0x60 [ 1174.068204][T24439] rtnetlink_rcv+0x1c/0x20 [ 1174.072622][T24439] netlink_unicast+0x56f/0x640 [ 1174.077448][T24439] netlink_sendmsg+0x665/0x770 [ 1174.082244][T24439] ? netlink_getsockopt+0x710/0x710 [ 1174.087447][T24439] ____sys_sendmsg+0x375/0x4c0 [ 1174.092970][T24439] __sys_sendmsg+0x1e3/0x270 [ 1174.097565][T24439] __x64_sys_sendmsg+0x46/0x50 [ 1174.102367][T24439] do_syscall_64+0x41/0xc0 [ 1174.106982][T24439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1174.112902][T24439] RIP: 0033:0x7f3099bc9169 [ 1174.117325][T24439] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1174.137060][T24439] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.145540][T24439] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1174.153570][T24439] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1174.161724][T24439] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.169738][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.178106][T24439] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1174.186082][T24439] 01:03:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 34) [ 1174.201923][T24442] ipvlan0: entered promiscuous mode [ 1174.213449][T24442] ipvlan0: left promiscuous mode [ 1174.224913][T24444] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1174.245991][T24444] bond394: entered promiscuous mode 01:03:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1174.251474][T24444] bond394: entered allmulticast mode [ 1174.256971][T24444] 8021q: adding VLAN 0 to HW filter on device bond394 01:03:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6201}, 0x0) 01:03:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0xc0, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fffffff, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYRES16=r2], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xfffffffe, 0x0, 0x0, 0x300, 0x4, 0x4000000a, r6}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0xc0, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fffffff, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYRES16=r2], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xfffffffe, 0x0, 0x0, 0x300, 0x4, 0x4000000a, r6}) (async) [ 1174.327367][T24457] FAULT_INJECTION: forcing a failure. [ 1174.327367][T24457] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.340120][T24457] CPU: 0 PID: 24457 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1174.350953][T24457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1174.361221][T24457] Call Trace: [ 1174.364507][T24457] [ 1174.367446][T24457] dump_stack_lvl+0xda/0x130 [ 1174.372197][T24457] dump_stack+0x15/0x20 [ 1174.376362][T24457] should_fail_ex+0x21f/0x230 [ 1174.381408][T24457] __should_failslab+0x92/0xa0 [ 1174.386310][T24457] should_failslab+0x9/0x20 [ 1174.390938][T24457] slab_pre_alloc_hook+0x38/0x180 [ 1174.396086][T24457] kmem_cache_alloc+0x58/0x260 [ 1174.401420][T24457] ? __kernfs_new_node+0x6a/0x360 [ 1174.406589][T24457] __kernfs_new_node+0x6a/0x360 [ 1174.411570][T24457] ? up_write+0x30/0xe0 [ 1174.415818][T24457] ? kernfs_activate+0x252/0x270 [ 1174.420835][T24457] kernfs_new_node+0x5f/0xd0 [ 1174.425719][T24457] __kernfs_create_file+0x49/0x180 [ 1174.430949][T24457] ? dev_attr_show+0x90/0x90 [ 1174.435755][T24457] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1174.441328][T24457] internal_create_group+0x320/0x840 [ 1174.448291][T24457] sysfs_create_groups+0x3c/0xe0 [ 1174.453236][T24457] device_add_attrs+0x69/0x400 [ 1174.458010][T24457] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1174.463493][T24457] device_add+0x4ec/0xb30 [ 1174.467925][T24457] netdev_register_kobject+0xfc/0x230 [ 1174.473368][T24457] register_netdevice+0x903/0xcd0 [ 1174.478495][T24457] hsr_dev_finalize+0x2b5/0x440 [ 1174.483415][T24457] hsr_newlink+0x426/0x470 [ 1174.487995][T24457] ? hsr_get_node_list+0x450/0x450 [ 1174.493346][T24457] rtnl_newlink+0xe5a/0x15a0 [ 1174.498131][T24457] ? __list_del_entry_valid+0x5f/0xe0 [ 1174.503675][T24457] ? _raw_spin_unlock+0x26/0x40 [ 1174.508706][T24457] ? __mutex_lock+0x21c/0x8d0 [ 1174.513505][T24457] ? rtnl_setlink+0x2d0/0x2d0 [ 1174.519143][T24457] rtnetlink_rcv_msg+0x807/0x8c0 [ 1174.524109][T24457] ? slab_post_alloc_hook+0x75/0x2d0 [ 1174.529658][T24457] ? xas_load+0x37c/0x390 [ 1174.533987][T24457] ? __rcu_read_unlock+0x4d/0x70 [ 1174.538928][T24457] ? xa_load+0xb9/0xe0 [ 1174.543020][T24457] ? kmem_cache_free+0x178/0x280 [ 1174.548125][T24457] ? nlmon_xmit+0x4b/0x60 [ 1174.552906][T24457] ? __kfree_skb+0x102/0x140 [ 1174.557879][T24457] ? consume_skb+0x57/0x180 [ 1174.563225][T24457] ? nlmon_xmit+0x4b/0x60 [ 1174.568031][T24457] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1174.573755][T24457] ? ref_tracker_free+0x3a1/0x400 [ 1174.578951][T24457] ? local_bh_enable+0x1f/0x20 [ 1174.583734][T24457] ? __dev_queue_xmit+0xbba/0x1e60 [ 1174.589010][T24457] netlink_rcv_skb+0x126/0x220 [ 1174.593983][T24457] ? rtnetlink_bind+0x60/0x60 [ 1174.599118][T24457] rtnetlink_rcv+0x1c/0x20 [ 1174.603845][T24457] netlink_unicast+0x56f/0x640 [ 1174.608805][T24457] netlink_sendmsg+0x665/0x770 [ 1174.613851][T24457] ? netlink_getsockopt+0x710/0x710 [ 1174.619896][T24457] ____sys_sendmsg+0x375/0x4c0 [ 1174.624861][T24457] __sys_sendmsg+0x1e3/0x270 [ 1174.629640][T24457] __x64_sys_sendmsg+0x46/0x50 [ 1174.634779][T24457] do_syscall_64+0x41/0xc0 [ 1174.639289][T24457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1174.645380][T24457] RIP: 0033:0x7f3099bc9169 [ 1174.650803][T24457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 01:03:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa8030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1174.671309][T24457] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.679865][T24457] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1174.687852][T24457] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1174.695893][T24457] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.704004][T24457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.712050][T24457] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1174.720270][T24457] 01:03:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 35) 01:03:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1174.734178][T24461] ipvlan0: entered promiscuous mode [ 1174.740045][T24461] ipvlan0: left promiscuous mode [ 1174.753612][T24463] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1174.782373][T24463] bond395: entered promiscuous mode [ 1174.787947][T24463] bond395: entered allmulticast mode [ 1174.794713][T24463] 8021q: adding VLAN 0 to HW filter on device bond395 01:03:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6202}, 0x0) 01:03:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0xc0, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fffffff, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0xc0, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x7fffffff, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r6, @ANYRES16=r2], 0x3c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@private2, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xfffffffe, 0x0, 0x0, 0x300, 0x4, 0x4000000a, r6}) [ 1174.834498][T24467] __nla_validate_parse: 17 callbacks suppressed [ 1174.834564][T24467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1174.869551][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1174.884012][T24490] FAULT_INJECTION: forcing a failure. [ 1174.884012][T24490] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.896786][T24490] CPU: 0 PID: 24490 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1174.907563][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1174.917922][T24490] Call Trace: [ 1174.921239][T24490] [ 1174.924364][T24490] dump_stack_lvl+0xda/0x130 [ 1174.929126][T24490] dump_stack+0x15/0x20 [ 1174.933308][T24490] should_fail_ex+0x21f/0x230 [ 1174.937993][T24490] __should_failslab+0x92/0xa0 [ 1174.942846][T24490] should_failslab+0x9/0x20 [ 1174.947534][T24490] slab_pre_alloc_hook+0x38/0x180 [ 1174.952583][T24490] kmem_cache_alloc+0x58/0x260 [ 1174.957427][T24490] ? __kernfs_new_node+0x6a/0x360 [ 1174.962558][T24490] __kernfs_new_node+0x6a/0x360 [ 1174.967679][T24490] ? up_write+0x30/0xe0 [ 1174.971859][T24490] ? kernfs_activate+0x252/0x270 [ 1174.976921][T24490] kernfs_new_node+0x5f/0xd0 [ 1174.982377][T24490] __kernfs_create_file+0x49/0x180 [ 1174.987560][T24490] ? dev_attr_show+0x90/0x90 [ 1174.992339][T24490] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1174.997830][T24490] internal_create_group+0x320/0x840 [ 1175.003668][T24490] sysfs_create_groups+0x3c/0xe0 [ 1175.008864][T24490] device_add_attrs+0x69/0x400 [ 1175.013752][T24490] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1175.019400][T24490] device_add+0x4ec/0xb30 [ 1175.023730][T24490] netdev_register_kobject+0xfc/0x230 [ 1175.029099][T24490] register_netdevice+0x903/0xcd0 [ 1175.034214][T24490] hsr_dev_finalize+0x2b5/0x440 [ 1175.039101][T24490] hsr_newlink+0x426/0x470 [ 1175.043519][T24490] ? hsr_get_node_list+0x450/0x450 [ 1175.048698][T24490] rtnl_newlink+0xe5a/0x15a0 [ 1175.053293][T24490] ? __list_del_entry_valid+0x5f/0xe0 [ 1175.058794][T24490] ? _raw_spin_unlock+0x26/0x40 [ 1175.063868][T24490] ? __mutex_lock+0x21c/0x8d0 [ 1175.068635][T24490] ? rtnl_setlink+0x2d0/0x2d0 [ 1175.073458][T24490] rtnetlink_rcv_msg+0x807/0x8c0 [ 1175.078413][T24490] ? slab_post_alloc_hook+0x75/0x2d0 [ 1175.083700][T24490] ? xas_load+0x37c/0x390 [ 1175.088048][T24490] ? __rcu_read_unlock+0x4d/0x70 [ 1175.093148][T24490] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1175.098627][T24490] ? xa_load+0xb9/0xe0 [ 1175.102815][T24490] ? kmem_cache_free+0x178/0x280 [ 1175.107961][T24490] ? nlmon_xmit+0x4b/0x60 [ 1175.112303][T24490] ? __kfree_skb+0x102/0x140 [ 1175.116908][T24490] ? consume_skb+0x57/0x180 [ 1175.121406][T24490] ? nlmon_xmit+0x4b/0x60 [ 1175.125881][T24490] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1175.131168][T24490] ? ref_tracker_free+0x3a1/0x400 [ 1175.136221][T24490] ? local_bh_enable+0x1f/0x20 [ 1175.141038][T24490] ? __dev_queue_xmit+0xbba/0x1e60 [ 1175.146157][T24490] netlink_rcv_skb+0x126/0x220 [ 1175.150934][T24490] ? rtnetlink_bind+0x60/0x60 [ 1175.155601][T24490] rtnetlink_rcv+0x1c/0x20 [ 1175.160098][T24490] netlink_unicast+0x56f/0x640 [ 1175.164905][T24490] netlink_sendmsg+0x665/0x770 [ 1175.169662][T24490] ? netlink_getsockopt+0x710/0x710 [ 1175.175006][T24490] ____sys_sendmsg+0x375/0x4c0 [ 1175.179859][T24490] __sys_sendmsg+0x1e3/0x270 [ 1175.184544][T24490] __x64_sys_sendmsg+0x46/0x50 [ 1175.189356][T24490] do_syscall_64+0x41/0xc0 [ 1175.193871][T24490] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1175.200011][T24490] RIP: 0033:0x7f3099bc9169 [ 1175.204423][T24490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1175.224350][T24490] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.232840][T24490] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1175.240886][T24490] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1175.248887][T24490] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.256916][T24490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1175.265058][T24490] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1175.273034][T24490] 01:03:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xaa000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 36) [ 1175.282893][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1175.311899][T24493] ipvlan0: entered promiscuous mode [ 1175.317627][T24493] ipvlan0: left promiscuous mode [ 1175.328486][T24495] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1175.351055][T24495] bond396: entered promiscuous mode [ 1175.356331][T24495] bond396: entered allmulticast mode [ 1175.362221][T24495] 8021q: adding VLAN 0 to HW filter on device bond396 01:03:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6203}, 0x0) [ 1175.412012][T24499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1175.434658][T24504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1175.448906][T24504] FAULT_INJECTION: forcing a failure. [ 1175.448906][T24504] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.461571][T24504] CPU: 0 PID: 24504 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1175.472056][T24504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1175.482107][T24504] Call Trace: [ 1175.485399][T24504] [ 1175.488326][T24504] dump_stack_lvl+0xda/0x130 [ 1175.492948][T24504] dump_stack+0x15/0x20 [ 1175.497136][T24504] should_fail_ex+0x21f/0x230 [ 1175.501916][T24504] __should_failslab+0x92/0xa0 [ 1175.506705][T24504] should_failslab+0x9/0x20 [ 1175.511218][T24504] slab_pre_alloc_hook+0x38/0x180 [ 1175.516306][T24504] kmem_cache_alloc+0x58/0x260 [ 1175.521144][T24504] ? __kernfs_new_node+0x6a/0x360 [ 1175.526175][T24504] __kernfs_new_node+0x6a/0x360 [ 1175.531096][T24504] ? up_write+0x30/0xe0 [ 1175.535288][T24504] ? kernfs_activate+0x252/0x270 [ 1175.540421][T24504] kernfs_new_node+0x5f/0xd0 [ 1175.545025][T24504] __kernfs_create_file+0x49/0x180 [ 1175.550197][T24504] ? dev_attr_show+0x90/0x90 [ 1175.555042][T24504] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1175.560457][T24504] internal_create_group+0x320/0x840 [ 1175.565815][T24504] sysfs_create_groups+0x3c/0xe0 [ 1175.570809][T24504] device_add_attrs+0x69/0x400 [ 1175.575666][T24504] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1175.581163][T24504] device_add+0x4ec/0xb30 [ 1175.585524][T24504] netdev_register_kobject+0xfc/0x230 [ 1175.590990][T24504] register_netdevice+0x903/0xcd0 [ 1175.596141][T24504] hsr_dev_finalize+0x2b5/0x440 [ 1175.601017][T24504] hsr_newlink+0x426/0x470 [ 1175.605666][T24504] ? hsr_get_node_list+0x450/0x450 [ 1175.610775][T24504] rtnl_newlink+0xe5a/0x15a0 [ 1175.615531][T24504] ? __list_del_entry_valid+0x5f/0xe0 [ 1175.620999][T24504] ? _raw_spin_unlock+0x26/0x40 [ 1175.625865][T24504] ? __mutex_lock+0x21c/0x8d0 [ 1175.630573][T24504] ? rtnl_setlink+0x2d0/0x2d0 [ 1175.635687][T24504] rtnetlink_rcv_msg+0x807/0x8c0 [ 1175.640665][T24504] ? slab_post_alloc_hook+0x75/0x2d0 [ 1175.647341][T24504] ? xas_load+0x37c/0x390 [ 1175.651668][T24504] ? __rcu_read_unlock+0x4d/0x70 [ 1175.656601][T24504] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1175.661915][T24504] ? xa_load+0xb9/0xe0 [ 1175.666006][T24504] ? kmem_cache_free+0x178/0x280 [ 1175.670941][T24504] ? nlmon_xmit+0x4b/0x60 [ 1175.675272][T24504] ? __kfree_skb+0x102/0x140 [ 1175.679868][T24504] ? consume_skb+0x57/0x180 [ 1175.684386][T24504] ? nlmon_xmit+0x4b/0x60 [ 1175.688889][T24504] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1175.694254][T24504] ? ref_tracker_free+0x3a1/0x400 [ 1175.699315][T24504] ? local_bh_enable+0x1f/0x20 [ 1175.704112][T24504] ? __dev_queue_xmit+0xbba/0x1e60 [ 1175.709375][T24504] netlink_rcv_skb+0x126/0x220 [ 1175.714135][T24504] ? rtnetlink_bind+0x60/0x60 [ 1175.718879][T24504] rtnetlink_rcv+0x1c/0x20 [ 1175.723342][T24504] netlink_unicast+0x56f/0x640 [ 1175.728191][T24504] netlink_sendmsg+0x665/0x770 [ 1175.732988][T24504] ? netlink_getsockopt+0x710/0x710 [ 1175.738321][T24504] ____sys_sendmsg+0x375/0x4c0 [ 1175.743095][T24504] __sys_sendmsg+0x1e3/0x270 [ 1175.747682][T24504] __x64_sys_sendmsg+0x46/0x50 [ 1175.752513][T24504] do_syscall_64+0x41/0xc0 [ 1175.756939][T24504] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1175.763119][T24504] RIP: 0033:0x7f3099bc9169 [ 1175.767523][T24504] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1175.787152][T24504] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.795664][T24504] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1175.803729][T24504] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xaa030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair(0x25, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc3, "5e9bf760aa7af035feee63decea63ba31fa4966571543542342ae41b3c9e16a82f989ba0451c7d9adc6ec80c8566ade28a17c222520300a9f101c2ea29feff07fdf18fd3058ed6042a9064f720f079b79f292a1d52de2afae17d48a09ea6fafc7a799a7cb0dbfb558aa997971cfeba39340cd2bafc0a82be54bc6a68027e0e12b8ec341a1cf2bd7040d27de2dcc5d6d7d47e5a2ef31bb177ba5f18139bc0fb652a868033a7d00aa5edeaf1edcdefbee8134cfd1ec1d9cabcb1d96889ff53e3379faafd"}, &(0x7f0000000280)=0xcb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r4}, &(0x7f0000000300)=0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@private2, 0x0, r5}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r5}) 01:03:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 37) [ 1175.811788][T24504] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.819749][T24504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1175.827935][T24504] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1175.836019][T24504] [ 1175.841959][T24511] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1175.877651][T24511] bond397: entered promiscuous mode [ 1175.883080][T24511] bond397: entered allmulticast mode [ 1175.888662][T24511] 8021q: adding VLAN 0 to HW filter on device bond397 [ 1175.901014][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1175.926001][T24508] ipvlan0: entered promiscuous mode [ 1175.931850][T24508] ipvlan0: left promiscuous mode 01:03:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 01:03:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1175.968623][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1175.999140][T24516] bond869: entered promiscuous mode [ 1176.008501][T24516] 8021q: adding VLAN 0 to HW filter on device bond869 [ 1176.033687][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1176.048387][T24520] FAULT_INJECTION: forcing a failure. [ 1176.048387][T24520] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.061162][T24520] CPU: 0 PID: 24520 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1176.071594][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1176.081723][T24520] Call Trace: [ 1176.085040][T24520] [ 1176.087958][T24520] dump_stack_lvl+0xda/0x130 [ 1176.092646][T24520] dump_stack+0x15/0x20 [ 1176.096800][T24520] should_fail_ex+0x21f/0x230 [ 1176.101514][T24520] __should_failslab+0x92/0xa0 [ 1176.106281][T24520] should_failslab+0x9/0x20 [ 1176.110950][T24520] slab_pre_alloc_hook+0x38/0x180 [ 1176.115998][T24520] kmem_cache_alloc+0x58/0x260 [ 1176.120851][T24520] ? __kernfs_new_node+0x6a/0x360 [ 1176.125896][T24520] __kernfs_new_node+0x6a/0x360 [ 1176.130828][T24520] ? up_write+0x30/0xe0 [ 1176.135188][T24520] ? kernfs_activate+0x252/0x270 [ 1176.140147][T24520] kernfs_new_node+0x5f/0xd0 [ 1176.145209][T24520] __kernfs_create_file+0x49/0x180 [ 1176.150352][T24520] ? dev_attr_show+0x90/0x90 [ 1176.155241][T24520] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1176.160660][T24520] internal_create_group+0x320/0x840 [ 1176.166003][T24520] sysfs_create_groups+0x3c/0xe0 [ 1176.171037][T24520] device_add_attrs+0x69/0x400 [ 1176.175822][T24520] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1176.181303][T24520] device_add+0x4ec/0xb30 [ 1176.185841][T24520] netdev_register_kobject+0xfc/0x230 [ 1176.191232][T24520] register_netdevice+0x903/0xcd0 [ 1176.196413][T24520] hsr_dev_finalize+0x2b5/0x440 [ 1176.201901][T24520] hsr_newlink+0x426/0x470 [ 1176.206442][T24520] ? hsr_get_node_list+0x450/0x450 [ 1176.211618][T24520] rtnl_newlink+0xe5a/0x15a0 [ 1176.216418][T24520] ? __list_del_entry_valid+0x5f/0xe0 [ 1176.221927][T24520] ? _raw_spin_unlock+0x26/0x40 [ 1176.227086][T24520] ? __mutex_lock+0x21c/0x8d0 [ 1176.232000][T24520] ? rtnl_setlink+0x2d0/0x2d0 [ 1176.236753][T24520] rtnetlink_rcv_msg+0x807/0x8c0 [ 1176.242054][T24520] ? slab_post_alloc_hook+0x75/0x2d0 [ 1176.247339][T24520] ? xas_load+0x37c/0x390 [ 1176.251676][T24520] ? __rcu_read_unlock+0x4d/0x70 [ 1176.256608][T24520] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1176.261998][T24520] ? xa_load+0xb9/0xe0 [ 1176.266188][T24520] ? kmem_cache_free+0x178/0x280 [ 1176.271371][T24520] ? nlmon_xmit+0x4b/0x60 [ 1176.275874][T24520] ? __kfree_skb+0x102/0x140 [ 1176.280540][T24520] ? consume_skb+0x57/0x180 [ 1176.285131][T24520] ? nlmon_xmit+0x4b/0x60 [ 1176.289511][T24520] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1176.294802][T24520] ? ref_tracker_free+0x3a1/0x400 [ 1176.299829][T24520] ? local_bh_enable+0x1f/0x20 [ 1176.304636][T24520] ? __dev_queue_xmit+0xbba/0x1e60 [ 1176.309793][T24520] netlink_rcv_skb+0x126/0x220 [ 1176.314550][T24520] ? rtnetlink_bind+0x60/0x60 [ 1176.319295][T24520] rtnetlink_rcv+0x1c/0x20 [ 1176.324255][T24520] netlink_unicast+0x56f/0x640 [ 1176.329362][T24520] netlink_sendmsg+0x665/0x770 [ 1176.334264][T24520] ? netlink_getsockopt+0x710/0x710 [ 1176.339926][T24520] ____sys_sendmsg+0x375/0x4c0 [ 1176.344751][T24520] __sys_sendmsg+0x1e3/0x270 [ 1176.349427][T24520] __x64_sys_sendmsg+0x46/0x50 [ 1176.354252][T24520] do_syscall_64+0x41/0xc0 [ 1176.358897][T24520] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1176.364831][T24520] RIP: 0033:0x7f3099bc9169 [ 1176.369340][T24520] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1176.389083][T24520] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1176.397482][T24520] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1176.405532][T24520] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1176.413597][T24520] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.421619][T24520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 38) 01:03:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xaa0a0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1176.429589][T24520] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1176.437625][T24520] [ 1176.450551][T24523] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair(0x25, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc3, "5e9bf760aa7af035feee63decea63ba31fa4966571543542342ae41b3c9e16a82f989ba0451c7d9adc6ec80c8566ade28a17c222520300a9f101c2ea29feff07fdf18fd3058ed6042a9064f720f079b79f292a1d52de2afae17d48a09ea6fafc7a799a7cb0dbfb558aa997971cfeba39340cd2bafc0a82be54bc6a68027e0e12b8ec341a1cf2bd7040d27de2dcc5d6d7d47e5a2ef31bb177ba5f18139bc0fb652a868033a7d00aa5edeaf1edcdefbee8134cfd1ec1d9cabcb1d96889ff53e3379faafd"}, &(0x7f0000000280)=0xcb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r4}, &(0x7f0000000300)=0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@private2, 0x0, r5}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r5}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socketpair(0x25, 0x1, 0x6, &(0x7f0000000140)) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc3, "5e9bf760aa7af035feee63decea63ba31fa4966571543542342ae41b3c9e16a82f989ba0451c7d9adc6ec80c8566ade28a17c222520300a9f101c2ea29feff07fdf18fd3058ed6042a9064f720f079b79f292a1d52de2afae17d48a09ea6fafc7a799a7cb0dbfb558aa997971cfeba39340cd2bafc0a82be54bc6a68027e0e12b8ec341a1cf2bd7040d27de2dcc5d6d7d47e5a2ef31bb177ba5f18139bc0fb652a868033a7d00aa5edeaf1edcdefbee8134cfd1ec1d9cabcb1d96889ff53e3379faafd"}, &(0x7f0000000280)=0xcb) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r4}, &(0x7f0000000300)=0x8) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@private2, 0x0, r5}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r5}) (async) [ 1176.484466][T24523] bond398: entered promiscuous mode [ 1176.489804][T24523] bond398: entered allmulticast mode [ 1176.495622][T24523] 8021q: adding VLAN 0 to HW filter on device bond398 01:03:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6800}, 0x0) [ 1176.539550][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1176.563869][T24530] ipvlan0: entered promiscuous mode [ 1176.569598][T24530] ipvlan0: left promiscuous mode [ 1176.600229][T24535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1176.615122][T24535] FAULT_INJECTION: forcing a failure. [ 1176.615122][T24535] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.628114][T24535] CPU: 0 PID: 24535 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1176.638616][T24535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1176.648884][T24535] Call Trace: [ 1176.652161][T24535] [ 1176.655116][T24535] dump_stack_lvl+0xda/0x130 [ 1176.659890][T24535] dump_stack+0x15/0x20 [ 1176.664070][T24535] should_fail_ex+0x21f/0x230 [ 1176.668743][T24535] __should_failslab+0x92/0xa0 [ 1176.673499][T24535] should_failslab+0x9/0x20 [ 1176.678108][T24535] slab_pre_alloc_hook+0x38/0x180 [ 1176.683287][T24535] kmem_cache_alloc+0x58/0x260 [ 1176.688143][T24535] ? __kernfs_new_node+0x6a/0x360 [ 1176.693210][T24535] __kernfs_new_node+0x6a/0x360 [ 1176.698075][T24535] ? up_write+0x30/0xe0 [ 1176.702386][T24535] ? kernfs_activate+0x252/0x270 [ 1176.707345][T24535] kernfs_new_node+0x5f/0xd0 [ 1176.711963][T24535] __kernfs_create_file+0x49/0x180 [ 1176.717265][T24535] ? dev_attr_show+0x90/0x90 [ 1176.721847][T24535] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1176.727223][T24535] internal_create_group+0x320/0x840 [ 1176.732498][T24535] sysfs_create_groups+0x3c/0xe0 [ 1176.737426][T24535] device_add_attrs+0x69/0x400 [ 1176.742321][T24535] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1176.747899][T24535] device_add+0x4ec/0xb30 [ 1176.752227][T24535] netdev_register_kobject+0xfc/0x230 [ 1176.757778][T24535] register_netdevice+0x903/0xcd0 [ 1176.762804][T24535] hsr_dev_finalize+0x2b5/0x440 [ 1176.767699][T24535] hsr_newlink+0x426/0x470 [ 1176.772359][T24535] ? hsr_get_node_list+0x450/0x450 [ 1176.777479][T24535] rtnl_newlink+0xe5a/0x15a0 [ 1176.782119][T24535] ? __list_del_entry_valid+0x5f/0xe0 [ 1176.787502][T24535] ? _raw_spin_unlock+0x26/0x40 [ 1176.792411][T24535] ? __mutex_lock+0x21c/0x8d0 [ 1176.797075][T24535] ? rtnl_setlink+0x2d0/0x2d0 [ 1176.801746][T24535] rtnetlink_rcv_msg+0x807/0x8c0 [ 1176.806807][T24535] ? slab_post_alloc_hook+0x75/0x2d0 [ 1176.812383][T24535] ? xas_load+0x37c/0x390 [ 1176.816868][T24535] ? __rcu_read_unlock+0x4d/0x70 [ 1176.822011][T24535] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1176.827315][T24535] ? xa_load+0xb9/0xe0 [ 1176.831467][T24535] ? kmem_cache_free+0x178/0x280 [ 1176.836493][T24535] ? nlmon_xmit+0x4b/0x60 [ 1176.841036][T24535] ? __kfree_skb+0x102/0x140 [ 1176.845998][T24535] ? consume_skb+0x57/0x180 [ 1176.850608][T24535] ? nlmon_xmit+0x4b/0x60 [ 1176.855034][T24535] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1176.860639][T24535] ? ref_tracker_free+0x3a1/0x400 [ 1176.866053][T24535] ? local_bh_enable+0x1f/0x20 [ 1176.870820][T24535] ? __dev_queue_xmit+0xbba/0x1e60 [ 1176.875985][T24535] netlink_rcv_skb+0x126/0x220 [ 1176.881136][T24535] ? rtnetlink_bind+0x60/0x60 [ 1176.885879][T24535] rtnetlink_rcv+0x1c/0x20 [ 1176.890870][T24535] netlink_unicast+0x56f/0x640 [ 1176.895729][T24535] netlink_sendmsg+0x665/0x770 [ 1176.900516][T24535] ? netlink_getsockopt+0x710/0x710 [ 1176.906572][T24535] ____sys_sendmsg+0x375/0x4c0 [ 1176.912306][T24535] __sys_sendmsg+0x1e3/0x270 [ 1176.916938][T24535] __x64_sys_sendmsg+0x46/0x50 [ 1176.921985][T24535] do_syscall_64+0x41/0xc0 [ 1176.926409][T24535] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1176.932749][T24535] RIP: 0033:0x7f3099bc9169 [ 1176.937186][T24535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1176.957660][T24535] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1176.966426][T24535] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1176.974576][T24535] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1176.982825][T24535] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.991099][T24535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:03:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 39) 01:03:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1176.999290][T24535] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1177.007412][T24535] [ 1177.035098][T24538] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:11 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) socketpair(0x25, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc3, "5e9bf760aa7af035feee63decea63ba31fa4966571543542342ae41b3c9e16a82f989ba0451c7d9adc6ec80c8566ade28a17c222520300a9f101c2ea29feff07fdf18fd3058ed6042a9064f720f079b79f292a1d52de2afae17d48a09ea6fafc7a799a7cb0dbfb558aa997971cfeba39340cd2bafc0a82be54bc6a68027e0e12b8ec341a1cf2bd7040d27de2dcc5d6d7d47e5a2ef31bb177ba5f18139bc0fb652a868033a7d00aa5edeaf1edcdefbee8134cfd1ec1d9cabcb1d96889ff53e3379faafd"}, &(0x7f0000000280)=0xcb) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc3, "5e9bf760aa7af035feee63decea63ba31fa4966571543542342ae41b3c9e16a82f989ba0451c7d9adc6ec80c8566ade28a17c222520300a9f101c2ea29feff07fdf18fd3058ed6042a9064f720f079b79f292a1d52de2afae17d48a09ea6fafc7a799a7cb0dbfb558aa997971cfeba39340cd2bafc0a82be54bc6a68027e0e12b8ec341a1cf2bd7040d27de2dcc5d6d7d47e5a2ef31bb177ba5f18139bc0fb652a868033a7d00aa5edeaf1edcdefbee8134cfd1ec1d9cabcb1d96889ff53e3379faafd"}, &(0x7f0000000280)=0xcb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={r4}, &(0x7f0000000300)=0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r5, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@private2, 0x0, r5}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@private2, 0x0, r5}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r5}) [ 1177.059232][T24538] bond399: entered promiscuous mode [ 1177.064649][T24538] bond399: entered allmulticast mode [ 1177.070529][T24538] 8021q: adding VLAN 0 to HW filter on device bond399 01:03:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6803}, 0x0) [ 1177.126394][T24558] ipvlan0: entered promiscuous mode [ 1177.136822][T24558] ipvlan0: left promiscuous mode [ 1177.152942][T24561] FAULT_INJECTION: forcing a failure. [ 1177.152942][T24561] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.165744][T24561] CPU: 0 PID: 24561 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1177.176378][T24561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1177.186437][T24561] Call Trace: [ 1177.189816][T24561] [ 1177.192866][T24561] dump_stack_lvl+0xda/0x130 [ 1177.197623][T24561] dump_stack+0x15/0x20 [ 1177.202083][T24561] should_fail_ex+0x21f/0x230 [ 1177.206785][T24561] __should_failslab+0x92/0xa0 [ 1177.211559][T24561] should_failslab+0x9/0x20 [ 1177.216054][T24561] slab_pre_alloc_hook+0x38/0x180 [ 1177.221076][T24561] kmem_cache_alloc+0x58/0x260 [ 1177.225834][T24561] ? __kernfs_new_node+0x6a/0x360 [ 1177.230954][T24561] __kernfs_new_node+0x6a/0x360 [ 1177.235826][T24561] ? up_write+0x30/0xe0 [ 1177.239975][T24561] ? kernfs_activate+0x252/0x270 [ 1177.245380][T24561] kernfs_new_node+0x5f/0xd0 [ 1177.250062][T24561] __kernfs_create_file+0x49/0x180 [ 1177.255265][T24561] ? dev_attr_show+0x90/0x90 [ 1177.259994][T24561] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1177.265392][T24561] internal_create_group+0x320/0x840 [ 1177.270728][T24561] sysfs_create_groups+0x3c/0xe0 [ 1177.275714][T24561] device_add_attrs+0x69/0x400 [ 1177.280603][T24561] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1177.286126][T24561] device_add+0x4ec/0xb30 [ 1177.290666][T24561] netdev_register_kobject+0xfc/0x230 [ 1177.296157][T24561] register_netdevice+0x903/0xcd0 [ 1177.301380][T24561] hsr_dev_finalize+0x2b5/0x440 [ 1177.306345][T24561] hsr_newlink+0x426/0x470 [ 1177.310767][T24561] ? hsr_get_node_list+0x450/0x450 [ 1177.316226][T24561] rtnl_newlink+0xe5a/0x15a0 [ 1177.321102][T24561] ? __list_del_entry_valid+0x5f/0xe0 [ 1177.326816][T24561] ? _raw_spin_unlock+0x26/0x40 [ 1177.331754][T24561] ? __mutex_lock+0x21c/0x8d0 [ 1177.336602][T24561] ? rtnl_setlink+0x2d0/0x2d0 [ 1177.341608][T24561] rtnetlink_rcv_msg+0x807/0x8c0 [ 1177.346592][T24561] ? slab_post_alloc_hook+0x75/0x2d0 [ 1177.352511][T24561] ? xas_load+0x37c/0x390 [ 1177.357484][T24561] ? __rcu_read_unlock+0x4d/0x70 [ 1177.362424][T24561] ? xa_load+0xb9/0xe0 [ 1177.366606][T24561] ? kmem_cache_free+0x178/0x280 [ 1177.371535][T24561] ? nlmon_xmit+0x4b/0x60 [ 1177.375913][T24561] ? __kfree_skb+0x102/0x140 [ 1177.380919][T24561] ? consume_skb+0x57/0x180 [ 1177.385482][T24561] ? nlmon_xmit+0x4b/0x60 [ 1177.389865][T24561] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1177.395231][T24561] ? ref_tracker_free+0x3a1/0x400 [ 1177.400365][T24561] ? local_bh_enable+0x1f/0x20 [ 1177.405117][T24561] ? __dev_queue_xmit+0xbba/0x1e60 [ 1177.410247][T24561] netlink_rcv_skb+0x126/0x220 [ 1177.415030][T24561] ? rtnetlink_bind+0x60/0x60 [ 1177.420233][T24561] rtnetlink_rcv+0x1c/0x20 [ 1177.424708][T24561] netlink_unicast+0x56f/0x640 [ 1177.429618][T24561] netlink_sendmsg+0x665/0x770 [ 1177.434586][T24561] ? netlink_getsockopt+0x710/0x710 [ 1177.439876][T24561] ____sys_sendmsg+0x375/0x4c0 [ 1177.444694][T24561] __sys_sendmsg+0x1e3/0x270 [ 1177.449312][T24561] __x64_sys_sendmsg+0x46/0x50 [ 1177.454473][T24561] do_syscall_64+0x41/0xc0 [ 1177.458961][T24561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1177.464968][T24561] RIP: 0033:0x7f3099bc9169 [ 1177.469448][T24561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1177.489582][T24561] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.498074][T24561] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1177.506234][T24561] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1177.514372][T24561] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:03:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 40) 01:03:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1177.522454][T24561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1177.530420][T24561] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1177.538591][T24561] 01:03:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1177.573703][T24567] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1177.598069][T24567] bond400: entered promiscuous mode [ 1177.603433][T24567] bond400: entered allmulticast mode [ 1177.609024][T24567] 8021q: adding VLAN 0 to HW filter on device bond400 01:03:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYRES16=r3], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockname$packet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6a00}, 0x0) [ 1177.667177][T24575] FAULT_INJECTION: forcing a failure. [ 1177.667177][T24575] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.680023][T24575] CPU: 0 PID: 24575 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1177.690481][T24575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1177.700977][T24575] Call Trace: [ 1177.704383][T24575] [ 1177.707319][T24575] dump_stack_lvl+0xda/0x130 [ 1177.712027][T24575] dump_stack+0x15/0x20 [ 1177.716171][T24575] should_fail_ex+0x21f/0x230 [ 1177.720937][T24575] __should_failslab+0x92/0xa0 [ 1177.725703][T24575] should_failslab+0x9/0x20 [ 1177.730308][T24575] slab_pre_alloc_hook+0x38/0x180 [ 1177.735352][T24575] kmem_cache_alloc+0x58/0x260 [ 1177.740147][T24575] ? __kernfs_new_node+0x6a/0x360 [ 1177.745197][T24575] __kernfs_new_node+0x6a/0x360 [ 1177.750249][T24575] ? up_write+0x30/0xe0 [ 1177.754432][T24575] ? kernfs_activate+0x252/0x270 [ 1177.759381][T24575] kernfs_new_node+0x5f/0xd0 [ 1177.763986][T24575] __kernfs_create_file+0x49/0x180 [ 1177.769156][T24575] ? dev_attr_show+0x90/0x90 [ 1177.773766][T24575] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1177.779225][T24575] internal_create_group+0x320/0x840 [ 1177.784656][T24575] sysfs_create_groups+0x3c/0xe0 [ 1177.789635][T24575] device_add_attrs+0x69/0x400 [ 1177.794480][T24575] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1177.800013][T24575] device_add+0x4ec/0xb30 [ 1177.804357][T24575] netdev_register_kobject+0xfc/0x230 [ 1177.809807][T24575] register_netdevice+0x903/0xcd0 [ 1177.814833][T24575] hsr_dev_finalize+0x2b5/0x440 [ 1177.819774][T24575] hsr_newlink+0x426/0x470 [ 1177.824355][T24575] ? hsr_get_node_list+0x450/0x450 [ 1177.829578][T24575] rtnl_newlink+0xe5a/0x15a0 [ 1177.834243][T24575] ? __list_del_entry_valid+0x5f/0xe0 [ 1177.839617][T24575] ? _raw_spin_unlock+0x26/0x40 [ 1177.844544][T24575] ? __mutex_lock+0x21c/0x8d0 [ 1177.849240][T24575] ? rtnl_setlink+0x2d0/0x2d0 [ 1177.853955][T24575] rtnetlink_rcv_msg+0x807/0x8c0 [ 1177.858893][T24575] ? slab_post_alloc_hook+0x75/0x2d0 [ 1177.864266][T24575] ? xas_load+0x37c/0x390 [ 1177.868760][T24575] ? __rcu_read_unlock+0x4d/0x70 [ 1177.873786][T24575] ? xa_load+0xb9/0xe0 [ 1177.877843][T24575] ? kmem_cache_free+0x178/0x280 [ 1177.882812][T24575] ? nlmon_xmit+0x4b/0x60 [ 1177.887142][T24575] ? __kfree_skb+0x102/0x140 [ 1177.891746][T24575] ? consume_skb+0x57/0x180 [ 1177.896250][T24575] ? nlmon_xmit+0x4b/0x60 [ 1177.900734][T24575] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1177.906108][T24575] ? ref_tracker_free+0x3a1/0x400 [ 1177.911207][T24575] ? local_bh_enable+0x1f/0x20 [ 1177.915977][T24575] ? __dev_queue_xmit+0xbba/0x1e60 [ 1177.921179][T24575] netlink_rcv_skb+0x126/0x220 [ 1177.926102][T24575] ? rtnetlink_bind+0x60/0x60 [ 1177.930780][T24575] rtnetlink_rcv+0x1c/0x20 [ 1177.935473][T24575] netlink_unicast+0x56f/0x640 [ 1177.940482][T24575] netlink_sendmsg+0x665/0x770 [ 1177.945330][T24575] ? netlink_getsockopt+0x710/0x710 [ 1177.950636][T24575] ____sys_sendmsg+0x375/0x4c0 [ 1177.955436][T24575] __sys_sendmsg+0x1e3/0x270 [ 1177.960187][T24575] __x64_sys_sendmsg+0x46/0x50 [ 1177.965008][T24575] do_syscall_64+0x41/0xc0 [ 1177.969503][T24575] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1177.975471][T24575] RIP: 0033:0x7f3099bc9169 [ 1177.979969][T24575] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1177.999764][T24575] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.008174][T24575] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1178.016325][T24575] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1178.024308][T24575] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.032277][T24575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.040450][T24575] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1178.048428][T24575] 01:03:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 41) [ 1178.067637][T24579] ipvlan0: entered promiscuous mode [ 1178.073825][T24579] ipvlan0: left promiscuous mode [ 1178.098386][T24588] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1178.118874][T24588] bond401: entered promiscuous mode [ 1178.124279][T24588] bond401: entered allmulticast mode [ 1178.129846][T24588] 8021q: adding VLAN 0 to HW filter on device bond401 01:03:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYRES16=r3], 0x3c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockname$packet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x14) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) [ 1178.182071][T24599] FAULT_INJECTION: forcing a failure. [ 1178.182071][T24599] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.194848][T24599] CPU: 0 PID: 24599 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1178.205347][T24599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1178.215604][T24599] Call Trace: [ 1178.218953][T24599] [ 1178.222148][T24599] dump_stack_lvl+0xda/0x130 [ 1178.226914][T24599] dump_stack+0x15/0x20 [ 1178.231068][T24599] should_fail_ex+0x21f/0x230 [ 1178.235746][T24599] __should_failslab+0x92/0xa0 [ 1178.240518][T24599] should_failslab+0x9/0x20 [ 1178.245024][T24599] slab_pre_alloc_hook+0x38/0x180 [ 1178.250114][T24599] kmem_cache_alloc+0x58/0x260 [ 1178.254882][T24599] ? __kernfs_new_node+0x6a/0x360 [ 1178.260011][T24599] __kernfs_new_node+0x6a/0x360 [ 1178.264892][T24599] ? up_write+0x30/0xe0 [ 1178.269068][T24599] ? kernfs_activate+0x252/0x270 [ 1178.274096][T24599] kernfs_new_node+0x5f/0xd0 [ 1178.278794][T24599] __kernfs_create_file+0x49/0x180 [ 1178.284197][T24599] ? dev_attr_show+0x90/0x90 [ 1178.288803][T24599] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1178.294353][T24599] internal_create_group+0x320/0x840 [ 1178.300008][T24599] sysfs_create_groups+0x3c/0xe0 [ 1178.304984][T24599] device_add_attrs+0x69/0x400 [ 1178.309793][T24599] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1178.315411][T24599] device_add+0x4ec/0xb30 [ 1178.319935][T24599] netdev_register_kobject+0xfc/0x230 [ 1178.325569][T24599] register_netdevice+0x903/0xcd0 [ 1178.330612][T24599] hsr_dev_finalize+0x2b5/0x440 [ 1178.335467][T24599] hsr_newlink+0x426/0x470 [ 1178.339985][T24599] ? hsr_get_node_list+0x450/0x450 [ 1178.345128][T24599] rtnl_newlink+0xe5a/0x15a0 [ 1178.350044][T24599] ? __list_del_entry_valid+0x5f/0xe0 [ 1178.356083][T24599] ? _raw_spin_unlock+0x26/0x40 [ 1178.360955][T24599] ? __mutex_lock+0x21c/0x8d0 [ 1178.365898][T24599] ? rtnl_setlink+0x2d0/0x2d0 [ 1178.370595][T24599] rtnetlink_rcv_msg+0x807/0x8c0 [ 1178.375726][T24599] ? slab_post_alloc_hook+0x75/0x2d0 [ 1178.381287][T24599] ? xas_load+0x37c/0x390 [ 1178.385658][T24599] ? __rcu_read_unlock+0x4d/0x70 [ 1178.390602][T24599] ? xa_load+0xb9/0xe0 [ 1178.394809][T24599] ? kmem_cache_free+0x178/0x280 [ 1178.399919][T24599] ? nlmon_xmit+0x4b/0x60 [ 1178.404367][T24599] ? __kfree_skb+0x102/0x140 [ 1178.409025][T24599] ? consume_skb+0x57/0x180 [ 1178.413660][T24599] ? nlmon_xmit+0x4b/0x60 [ 1178.418187][T24599] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1178.423491][T24599] ? ref_tracker_free+0x3a1/0x400 [ 1178.428632][T24599] ? local_bh_enable+0x1f/0x20 [ 1178.434212][T24599] ? __dev_queue_xmit+0xbba/0x1e60 [ 1178.439632][T24599] netlink_rcv_skb+0x126/0x220 [ 1178.444531][T24599] ? rtnetlink_bind+0x60/0x60 [ 1178.449255][T24599] rtnetlink_rcv+0x1c/0x20 [ 1178.453738][T24599] netlink_unicast+0x56f/0x640 [ 1178.458639][T24599] netlink_sendmsg+0x665/0x770 [ 1178.463586][T24599] ? netlink_getsockopt+0x710/0x710 [ 1178.468920][T24599] ____sys_sendmsg+0x375/0x4c0 [ 1178.473997][T24599] __sys_sendmsg+0x1e3/0x270 [ 1178.478699][T24599] __x64_sys_sendmsg+0x46/0x50 [ 1178.484157][T24599] do_syscall_64+0x41/0xc0 [ 1178.488575][T24599] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1178.495131][T24599] RIP: 0033:0x7f3099bc9169 [ 1178.499537][T24599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1178.519383][T24599] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.527812][T24599] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1178.535909][T24599] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1178.543994][T24599] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.552065][T24599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.560033][T24599] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1178.568168][T24599] 01:03:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 42) [ 1178.586278][T24602] ipvlan0: entered promiscuous mode [ 1178.592450][T24602] ipvlan0: left promiscuous mode 01:03:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYRES16=r3], 0x3c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockname$packet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7001}, 0x0) 01:03:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1178.641677][T24612] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1178.683405][T24612] bond402: entered promiscuous mode [ 1178.688734][T24612] bond402: entered allmulticast mode [ 1178.694506][T24612] 8021q: adding VLAN 0 to HW filter on device bond402 [ 1178.713054][T24614] FAULT_INJECTION: forcing a failure. [ 1178.713054][T24614] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.726086][T24614] CPU: 0 PID: 24614 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1178.736526][T24614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1178.746930][T24614] Call Trace: [ 1178.750287][T24614] [ 1178.753240][T24614] dump_stack_lvl+0xda/0x130 [ 1178.758085][T24614] dump_stack+0x15/0x20 [ 1178.762293][T24614] should_fail_ex+0x21f/0x230 [ 1178.767127][T24614] __should_failslab+0x92/0xa0 [ 1178.772378][T24614] should_failslab+0x9/0x20 [ 1178.777117][T24614] slab_pre_alloc_hook+0x38/0x180 [ 1178.782440][T24614] kmem_cache_alloc+0x58/0x260 [ 1178.787449][T24614] ? __kernfs_new_node+0x6a/0x360 [ 1178.792609][T24614] __kernfs_new_node+0x6a/0x360 [ 1178.797743][T24614] ? up_write+0x30/0xe0 [ 1178.802166][T24614] ? kernfs_activate+0x252/0x270 [ 1178.807181][T24614] kernfs_new_node+0x5f/0xd0 [ 1178.811914][T24614] __kernfs_create_file+0x49/0x180 [ 1178.817232][T24614] ? dev_attr_show+0x90/0x90 [ 1178.821908][T24614] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1178.827608][T24614] internal_create_group+0x320/0x840 [ 1178.832960][T24614] sysfs_create_groups+0x3c/0xe0 [ 1178.837995][T24614] device_add_attrs+0x69/0x400 [ 1178.842837][T24614] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1178.848316][T24614] device_add+0x4ec/0xb30 [ 1178.853159][T24614] netdev_register_kobject+0xfc/0x230 [ 1178.858619][T24614] register_netdevice+0x903/0xcd0 [ 1178.863847][T24614] hsr_dev_finalize+0x2b5/0x440 [ 1178.868696][T24614] hsr_newlink+0x426/0x470 [ 1178.873285][T24614] ? hsr_get_node_list+0x450/0x450 [ 1178.878418][T24614] rtnl_newlink+0xe5a/0x15a0 [ 1178.883401][T24614] ? __list_del_entry_valid+0x5f/0xe0 [ 1178.888909][T24614] ? _raw_spin_unlock+0x26/0x40 [ 1178.893856][T24614] ? __mutex_lock+0x21c/0x8d0 [ 1178.898608][T24614] ? rtnl_setlink+0x2d0/0x2d0 [ 1178.903415][T24614] rtnetlink_rcv_msg+0x807/0x8c0 [ 1178.908483][T24614] ? slab_post_alloc_hook+0x75/0x2d0 [ 1178.913798][T24614] ? xas_load+0x37c/0x390 [ 1178.918469][T24614] ? __rcu_read_unlock+0x4d/0x70 [ 1178.923539][T24614] ? xa_load+0xb9/0xe0 [ 1178.928008][T24614] ? kmem_cache_free+0x178/0x280 [ 1178.933389][T24614] ? nlmon_xmit+0x4b/0x60 [ 1178.937775][T24614] ? __kfree_skb+0x102/0x140 [ 1178.942409][T24614] ? consume_skb+0x57/0x180 [ 1178.946959][T24614] ? nlmon_xmit+0x4b/0x60 [ 1178.951295][T24614] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1178.956710][T24614] ? ref_tracker_free+0x3a1/0x400 [ 1178.961992][T24614] ? local_bh_enable+0x1f/0x20 [ 1178.966929][T24614] ? __dev_queue_xmit+0xbba/0x1e60 [ 1178.972049][T24614] netlink_rcv_skb+0x126/0x220 [ 1178.976889][T24614] ? rtnetlink_bind+0x60/0x60 [ 1178.981846][T24614] rtnetlink_rcv+0x1c/0x20 [ 1178.987531][T24614] netlink_unicast+0x56f/0x640 [ 1178.992483][T24614] netlink_sendmsg+0x665/0x770 [ 1178.997387][T24614] ? netlink_getsockopt+0x710/0x710 [ 1179.003025][T24614] ____sys_sendmsg+0x375/0x4c0 [ 1179.009093][T24614] __sys_sendmsg+0x1e3/0x270 [ 1179.013932][T24614] __x64_sys_sendmsg+0x46/0x50 [ 1179.018829][T24614] do_syscall_64+0x41/0xc0 [ 1179.023525][T24614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1179.029976][T24614] RIP: 0033:0x7f3099bc9169 [ 1179.036066][T24614] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1179.056459][T24614] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.064923][T24614] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1179.072989][T24614] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 43) [ 1179.081076][T24614] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.089147][T24614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.097495][T24614] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1179.105467][T24614] 01:03:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7202}, 0x0) 01:03:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000108deef5ed9d0ad6f4916b7300000000", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000300)=0x4) [ 1179.144606][T24620] ipvlan0: entered promiscuous mode [ 1179.150710][T24620] ipvlan0: left promiscuous mode [ 1179.179803][T24629] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1179.181252][T24635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36112 sclass=netlink_route_socket pid=24635 comm=syz-executor.0 [ 1179.203480][T24629] bond403: entered promiscuous mode [ 1179.208735][T24629] bond403: entered allmulticast mode [ 1179.214342][T24629] 8021q: adding VLAN 0 to HW filter on device bond403 01:03:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1179.243202][T24631] FAULT_INJECTION: forcing a failure. [ 1179.243202][T24631] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.257581][T24631] CPU: 0 PID: 24631 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1179.268185][T24631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1179.278577][T24631] Call Trace: [ 1179.281910][T24631] [ 1179.284846][T24631] dump_stack_lvl+0xda/0x130 [ 1179.289970][T24631] dump_stack+0x15/0x20 [ 1179.294135][T24631] should_fail_ex+0x21f/0x230 [ 1179.298936][T24631] __should_failslab+0x92/0xa0 [ 1179.303690][T24631] should_failslab+0x9/0x20 [ 1179.308506][T24631] slab_pre_alloc_hook+0x38/0x180 [ 1179.309250][T24644] sctp: [Deprecated]: syz-executor.0 (pid 24644) Use of int in maxseg socket option. [ 1179.309250][T24644] Use struct sctp_assoc_value instead [ 1179.313574][T24631] kmem_cache_alloc+0x58/0x260 [ 1179.313612][T24631] ? __kernfs_new_node+0x6a/0x360 [ 1179.338591][T24631] __kernfs_new_node+0x6a/0x360 [ 1179.343891][T24631] ? up_write+0x30/0xe0 [ 1179.349670][T24631] ? kernfs_activate+0x252/0x270 [ 1179.354981][T24631] kernfs_new_node+0x5f/0xd0 [ 1179.359752][T24631] __kernfs_create_file+0x49/0x180 [ 1179.364951][T24631] ? dev_attr_show+0x90/0x90 [ 1179.369547][T24631] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1179.375098][T24631] internal_create_group+0x320/0x840 [ 1179.380743][T24631] sysfs_create_groups+0x3c/0xe0 [ 1179.385691][T24631] device_add_attrs+0x69/0x400 [ 1179.390512][T24631] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1179.395975][T24631] device_add+0x4ec/0xb30 [ 1179.400360][T24631] netdev_register_kobject+0xfc/0x230 [ 1179.405739][T24631] register_netdevice+0x903/0xcd0 [ 1179.410863][T24631] hsr_dev_finalize+0x2b5/0x440 [ 1179.415790][T24631] hsr_newlink+0x426/0x470 [ 1179.420350][T24631] ? hsr_get_node_list+0x450/0x450 [ 1179.425647][T24631] rtnl_newlink+0xe5a/0x15a0 [ 1179.430435][T24631] ? __list_del_entry_valid+0x5f/0xe0 [ 1179.436003][T24631] ? _raw_spin_unlock+0x26/0x40 [ 1179.441065][T24631] ? __mutex_lock+0x21c/0x8d0 [ 1179.445937][T24631] ? rtnl_setlink+0x2d0/0x2d0 [ 1179.450896][T24631] rtnetlink_rcv_msg+0x807/0x8c0 [ 1179.455904][T24631] ? slab_post_alloc_hook+0x75/0x2d0 [ 1179.461500][T24631] ? xas_load+0x37c/0x390 [ 1179.465955][T24631] ? __rcu_read_unlock+0x4d/0x70 [ 1179.470961][T24631] ? xa_load+0xb9/0xe0 [ 1179.475016][T24631] ? kmem_cache_free+0x178/0x280 [ 1179.479950][T24631] ? nlmon_xmit+0x4b/0x60 [ 1179.484325][T24631] ? __kfree_skb+0x102/0x140 [ 1179.489107][T24631] ? consume_skb+0x57/0x180 [ 1179.493683][T24631] ? nlmon_xmit+0x4b/0x60 [ 1179.498010][T24631] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1179.503334][T24631] ? ref_tracker_free+0x3a1/0x400 [ 1179.508411][T24631] ? local_bh_enable+0x1f/0x20 [ 1179.513225][T24631] ? __dev_queue_xmit+0xbba/0x1e60 [ 1179.518842][T24631] netlink_rcv_skb+0x126/0x220 [ 1179.523643][T24631] ? rtnetlink_bind+0x60/0x60 [ 1179.528445][T24631] rtnetlink_rcv+0x1c/0x20 [ 1179.532860][T24631] netlink_unicast+0x56f/0x640 [ 1179.537673][T24631] netlink_sendmsg+0x665/0x770 [ 1179.542428][T24631] ? netlink_getsockopt+0x710/0x710 [ 1179.547759][T24631] ____sys_sendmsg+0x375/0x4c0 [ 1179.552512][T24631] __sys_sendmsg+0x1e3/0x270 [ 1179.557103][T24631] __x64_sys_sendmsg+0x46/0x50 [ 1179.561965][T24631] do_syscall_64+0x41/0xc0 [ 1179.566459][T24631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1179.572483][T24631] RIP: 0033:0x7f3099bc9169 [ 1179.576890][T24631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1179.596503][T24631] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.605468][T24631] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1179.613526][T24631] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1179.621662][T24631] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.629731][T24631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.637836][T24631] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 01:03:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 44) [ 1179.645962][T24631] 01:03:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7203}, 0x0) [ 1179.686877][T24647] FAULT_INJECTION: forcing a failure. [ 1179.686877][T24647] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.699836][T24647] CPU: 0 PID: 24647 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1179.710391][T24647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1179.720622][T24647] Call Trace: [ 1179.723988][T24647] [ 1179.726902][T24647] dump_stack_lvl+0xda/0x130 [ 1179.731484][T24647] dump_stack+0x15/0x20 [ 1179.735756][T24647] should_fail_ex+0x21f/0x230 [ 1179.740582][T24647] __should_failslab+0x92/0xa0 [ 1179.745461][T24647] should_failslab+0x9/0x20 [ 1179.750051][T24647] slab_pre_alloc_hook+0x38/0x180 [ 1179.755100][T24647] kmem_cache_alloc+0x58/0x260 [ 1179.760030][T24647] ? __kernfs_new_node+0x6a/0x360 [ 1179.765206][T24647] __kernfs_new_node+0x6a/0x360 [ 1179.771177][T24647] ? up_write+0x30/0xe0 [ 1179.775512][T24647] ? kernfs_activate+0x252/0x270 [ 1179.780547][T24647] kernfs_new_node+0x5f/0xd0 [ 1179.785161][T24647] __kernfs_create_file+0x49/0x180 [ 1179.790381][T24647] ? dev_attr_show+0x90/0x90 [ 1179.794986][T24647] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1179.800356][T24647] internal_create_group+0x320/0x840 [ 1179.805745][T24647] sysfs_create_groups+0x3c/0xe0 [ 1179.810718][T24647] device_add_attrs+0x69/0x400 [ 1179.815710][T24647] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1179.821227][T24647] device_add+0x4ec/0xb30 [ 1179.826529][T24647] netdev_register_kobject+0xfc/0x230 [ 1179.832083][T24647] register_netdevice+0x903/0xcd0 [ 1179.837117][T24647] hsr_dev_finalize+0x2b5/0x440 [ 1179.841987][T24647] hsr_newlink+0x426/0x470 [ 1179.846429][T24647] ? hsr_get_node_list+0x450/0x450 [ 1179.851670][T24647] rtnl_newlink+0xe5a/0x15a0 [ 1179.856527][T24647] ? mutex_spin_on_owner+0xc6/0x170 [ 1179.861725][T24647] ? __mutex_lock+0x18a/0x8d0 [ 1179.866477][T24647] ? rtnl_setlink+0x2d0/0x2d0 [ 1179.871158][T24647] rtnetlink_rcv_msg+0x807/0x8c0 [ 1179.876277][T24647] ? slab_post_alloc_hook+0x75/0x2d0 [ 1179.881568][T24647] ? xas_load+0x37c/0x390 [ 1179.885915][T24647] ? __rcu_read_unlock+0x4d/0x70 [ 1179.890866][T24647] ? xa_load+0xb9/0xe0 [ 1179.895038][T24647] ? kmem_cache_free+0x178/0x280 [ 1179.899990][T24647] ? nlmon_xmit+0x4b/0x60 [ 1179.904424][T24647] ? __kfree_skb+0x102/0x140 [ 1179.909033][T24647] ? consume_skb+0x57/0x180 [ 1179.913607][T24647] ? nlmon_xmit+0x4b/0x60 [ 1179.918016][T24647] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1179.923507][T24647] ? ref_tracker_free+0x3a1/0x400 [ 1179.928724][T24647] ? local_bh_enable+0x1f/0x20 [ 1179.933559][T24647] ? __dev_queue_xmit+0xbba/0x1e60 [ 1179.938660][T24647] netlink_rcv_skb+0x126/0x220 [ 1179.943555][T24647] ? rtnetlink_bind+0x60/0x60 [ 1179.948281][T24647] rtnetlink_rcv+0x1c/0x20 [ 1179.952839][T24647] netlink_unicast+0x56f/0x640 [ 1179.957871][T24647] netlink_sendmsg+0x665/0x770 [ 1179.962648][T24647] ? netlink_getsockopt+0x710/0x710 [ 1179.968057][T24647] ____sys_sendmsg+0x375/0x4c0 [ 1179.972881][T24647] __sys_sendmsg+0x1e3/0x270 [ 1179.977594][T24647] __x64_sys_sendmsg+0x46/0x50 [ 1179.982737][T24647] do_syscall_64+0x41/0xc0 [ 1179.987146][T24647] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1179.993258][T24647] RIP: 0033:0x7f3099bc9169 [ 1179.997749][T24647] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1180.018513][T24647] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.026926][T24647] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 45) [ 1180.035225][T24647] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1180.043275][T24647] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.051384][T24647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1180.060354][T24647] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1180.068567][T24647] 01:03:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000108deef5ed9d0ad6f4916b7300000000", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000300)=0x4) [ 1180.093643][T24651] __nla_validate_parse: 15 callbacks suppressed [ 1180.093655][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.115277][T24654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36112 sclass=netlink_route_socket pid=24654 comm=syz-executor.0 [ 1180.115456][T24651] FAULT_INJECTION: forcing a failure. [ 1180.115456][T24651] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.141675][T24651] CPU: 0 PID: 24651 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1180.152357][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1180.162481][T24651] Call Trace: [ 1180.165834][T24651] [ 1180.168800][T24651] dump_stack_lvl+0xda/0x130 [ 1180.173821][T24651] dump_stack+0x15/0x20 [ 1180.178060][T24651] should_fail_ex+0x21f/0x230 [ 1180.183078][T24651] __should_failslab+0x92/0xa0 [ 1180.188127][T24651] should_failslab+0x9/0x20 [ 1180.192771][T24651] slab_pre_alloc_hook+0x38/0x180 [ 1180.197885][T24651] kmem_cache_alloc+0x58/0x260 [ 1180.202645][T24651] ? __kernfs_new_node+0x6a/0x360 [ 1180.207666][T24651] __kernfs_new_node+0x6a/0x360 [ 1180.212692][T24651] ? up_write+0x30/0xe0 [ 1180.216977][T24651] ? kernfs_activate+0x252/0x270 [ 1180.222148][T24651] kernfs_new_node+0x5f/0xd0 [ 1180.226771][T24651] __kernfs_create_file+0x49/0x180 [ 1180.231934][T24651] ? dev_attr_show+0x90/0x90 [ 1180.234108][T24655] sctp: [Deprecated]: syz-executor.0 (pid 24655) Use of int in maxseg socket option. [ 1180.234108][T24655] Use struct sctp_assoc_value instead [ 1180.236631][T24651] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1180.236698][T24651] internal_create_group+0x320/0x840 [ 1180.262420][T24651] sysfs_create_groups+0x3c/0xe0 [ 1180.267480][T24651] device_add_attrs+0x69/0x400 [ 1180.272480][T24651] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1180.278052][T24651] device_add+0x4ec/0xb30 [ 1180.283042][T24651] netdev_register_kobject+0xfc/0x230 [ 1180.288910][T24651] register_netdevice+0x903/0xcd0 [ 1180.294124][T24651] hsr_dev_finalize+0x2b5/0x440 [ 1180.299447][T24651] hsr_newlink+0x426/0x470 [ 1180.304280][T24651] ? hsr_get_node_list+0x450/0x450 [ 1180.309441][T24651] rtnl_newlink+0xe5a/0x15a0 [ 1180.314135][T24651] ? __mutex_lock+0x54/0x8d0 [ 1180.318728][T24651] ? rtnl_setlink+0x2d0/0x2d0 [ 1180.323501][T24651] rtnetlink_rcv_msg+0x807/0x8c0 [ 1180.328642][T24651] ? slab_post_alloc_hook+0x75/0x2d0 [ 1180.334101][T24651] ? xas_load+0x37c/0x390 [ 1180.338609][T24651] ? __rcu_read_unlock+0x4d/0x70 [ 1180.343673][T24651] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1180.349126][T24651] ? xa_load+0xb9/0xe0 [ 1180.353204][T24651] ? kmem_cache_free+0x178/0x280 [ 1180.358225][T24651] ? nlmon_xmit+0x4b/0x60 [ 1180.362566][T24651] ? __kfree_skb+0x102/0x140 [ 1180.367266][T24651] ? consume_skb+0x57/0x180 [ 1180.371825][T24651] ? nlmon_xmit+0x4b/0x60 [ 1180.376372][T24651] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1180.381748][T24651] ? ref_tracker_free+0x3a1/0x400 [ 1180.387030][T24651] ? local_bh_enable+0x1f/0x20 [ 1180.392183][T24651] ? __dev_queue_xmit+0xbba/0x1e60 [ 1180.398418][T24651] netlink_rcv_skb+0x126/0x220 [ 1180.403203][T24651] ? rtnetlink_bind+0x60/0x60 [ 1180.408043][T24651] rtnetlink_rcv+0x1c/0x20 [ 1180.412590][T24651] netlink_unicast+0x56f/0x640 [ 1180.417374][T24651] netlink_sendmsg+0x665/0x770 [ 1180.422166][T24651] ? netlink_getsockopt+0x710/0x710 [ 1180.427382][T24651] ____sys_sendmsg+0x375/0x4c0 [ 1180.432501][T24651] __sys_sendmsg+0x1e3/0x270 [ 1180.437456][T24651] __x64_sys_sendmsg+0x46/0x50 [ 1180.442414][T24651] do_syscall_64+0x41/0xc0 [ 1180.446959][T24651] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1180.453085][T24651] RIP: 0033:0x7f3099bc9169 [ 1180.457567][T24651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1180.477385][T24651] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.485948][T24651] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1180.494085][T24651] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1180.502071][T24651] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.510115][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1180.518575][T24651] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1180.526700][T24651] [ 1180.535581][T24642] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 46) 01:03:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 01:03:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000108deef5ed9d0ad6f4916b7300000000", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000300)=0x4) 01:03:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1180.547592][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1180.570753][T24643] ipvlan0: entered promiscuous mode [ 1180.576913][T24643] ipvlan0: left promiscuous mode 01:03:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb4020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1180.636916][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.650548][T24668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36112 sclass=netlink_route_socket pid=24668 comm=syz-executor.0 [ 1180.661175][T24662] ipvlan0: entered promiscuous mode [ 1180.669504][T24662] ipvlan0: left promiscuous mode [ 1180.684639][T24661] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1180.705139][T24661] bond404: entered promiscuous mode [ 1180.710470][T24661] bond404: entered allmulticast mode [ 1180.716103][T24661] 8021q: adding VLAN 0 to HW filter on device bond404 [ 1180.722248][T24670] sctp: [Deprecated]: syz-executor.0 (pid 24670) Use of int in maxseg socket option. 01:03:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1100, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 47) [ 1180.722248][T24670] Use struct sctp_assoc_value instead [ 1180.728263][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1180.766931][T24667] ipvlan0: entered promiscuous mode [ 1180.772886][T24667] ipvlan0: left promiscuous mode 01:03:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7402}, 0x0) 01:03:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @empty, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, r5}) 01:03:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x13460000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1180.822088][T24676] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1180.855544][T24676] bond405: entered promiscuous mode [ 1180.860866][T24676] bond405: entered allmulticast mode 01:03:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb4030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1200, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1180.866686][T24676] 8021q: adding VLAN 0 to HW filter on device bond405 [ 1180.879387][T24677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.894752][T24677] FAULT_INJECTION: forcing a failure. [ 1180.894752][T24677] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.907529][T24677] CPU: 1 PID: 24677 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1180.918158][T24677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1180.928224][T24677] Call Trace: [ 1180.931564][T24677] [ 1180.934572][T24677] dump_stack_lvl+0xda/0x130 [ 1180.939194][T24677] dump_stack+0x15/0x20 [ 1180.943343][T24677] should_fail_ex+0x21f/0x230 [ 1180.948043][T24677] __should_failslab+0x92/0xa0 [ 1180.953028][T24677] should_failslab+0x9/0x20 [ 1180.957564][T24677] slab_pre_alloc_hook+0x38/0x180 [ 1180.962673][T24677] kmem_cache_alloc+0x58/0x260 [ 1180.967510][T24677] ? __kernfs_new_node+0x6a/0x360 [ 1180.972603][T24677] __kernfs_new_node+0x6a/0x360 [ 1180.977514][T24677] ? up_write+0x30/0xe0 [ 1180.981802][T24677] ? kernfs_activate+0x252/0x270 [ 1180.986998][T24677] kernfs_new_node+0x5f/0xd0 [ 1180.992272][T24677] __kernfs_create_file+0x49/0x180 [ 1180.997485][T24677] ? dev_attr_show+0x90/0x90 [ 1181.002278][T24677] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1181.007843][T24677] internal_create_group+0x320/0x840 [ 1181.013621][T24677] sysfs_create_groups+0x3c/0xe0 [ 1181.018853][T24677] device_add_attrs+0x69/0x400 [ 1181.023641][T24677] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1181.029108][T24677] device_add+0x4ec/0xb30 [ 1181.033465][T24677] netdev_register_kobject+0xfc/0x230 [ 1181.039487][T24677] register_netdevice+0x903/0xcd0 [ 1181.044745][T24677] hsr_dev_finalize+0x2b5/0x440 [ 1181.049599][T24677] hsr_newlink+0x426/0x470 [ 1181.054126][T24677] ? hsr_get_node_list+0x450/0x450 [ 1181.059917][T24677] rtnl_newlink+0xe5a/0x15a0 [ 1181.064616][T24677] ? __list_del_entry_valid+0x5f/0xe0 [ 1181.070079][T24677] ? _raw_spin_unlock+0x26/0x40 [ 1181.074990][T24677] ? __mutex_lock+0x21c/0x8d0 [ 1181.079702][T24677] ? rtnl_setlink+0x2d0/0x2d0 [ 1181.084556][T24677] rtnetlink_rcv_msg+0x807/0x8c0 [ 1181.089606][T24677] ? slab_post_alloc_hook+0x75/0x2d0 [ 1181.094901][T24677] ? xas_load+0x37c/0x390 [ 1181.099392][T24677] ? __rcu_read_unlock+0x4d/0x70 [ 1181.104469][T24677] ? xa_load+0xb9/0xe0 [ 1181.108621][T24677] ? kmem_cache_free+0x178/0x280 [ 1181.113800][T24677] ? nlmon_xmit+0x4b/0x60 [ 1181.118165][T24677] ? __kfree_skb+0x102/0x140 [ 1181.122777][T24677] ? consume_skb+0x57/0x180 [ 1181.127399][T24677] ? nlmon_xmit+0x4b/0x60 [ 1181.131887][T24677] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1181.137380][T24677] ? ref_tracker_free+0x3a1/0x400 [ 1181.142479][T24677] ? local_bh_enable+0x1f/0x20 [ 1181.147450][T24677] ? __dev_queue_xmit+0xbba/0x1e60 [ 1181.152576][T24677] netlink_rcv_skb+0x126/0x220 [ 1181.157407][T24677] ? rtnetlink_bind+0x60/0x60 [ 1181.162169][T24677] rtnetlink_rcv+0x1c/0x20 [ 1181.167386][T24677] netlink_unicast+0x56f/0x640 [ 1181.172157][T24677] netlink_sendmsg+0x665/0x770 [ 1181.177803][T24677] ? netlink_getsockopt+0x710/0x710 [ 1181.183099][T24677] ____sys_sendmsg+0x375/0x4c0 [ 1181.187867][T24677] __sys_sendmsg+0x1e3/0x270 [ 1181.192664][T24677] __x64_sys_sendmsg+0x46/0x50 [ 1181.197511][T24677] do_syscall_64+0x41/0xc0 [ 1181.202304][T24677] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1181.208281][T24677] RIP: 0033:0x7f3099bc9169 [ 1181.212941][T24677] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1181.233462][T24677] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.241950][T24677] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1181.250215][T24677] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1181.258472][T24677] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 48) [ 1181.266532][T24677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.274546][T24677] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1181.282525][T24677] 01:03:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 1181.315579][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1181.344814][T24683] bond870: entered promiscuous mode [ 1181.350539][T24683] 8021q: adding VLAN 0 to HW filter on device bond870 [ 1181.362969][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1181.381563][T24685] ipvlan0: entered promiscuous mode [ 1181.387290][T24685] ipvlan0: left promiscuous mode 01:03:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @empty, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, r5}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @empty, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, r5}) (async) 01:03:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1181.410743][T24690] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2200, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1181.439500][T24690] bond406: entered promiscuous mode [ 1181.444797][T24690] bond406: entered allmulticast mode [ 1181.451379][T24690] 8021q: adding VLAN 0 to HW filter on device bond406 [ 1181.463617][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:03:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb6030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1181.486313][T24693] FAULT_INJECTION: forcing a failure. [ 1181.486313][T24693] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.499297][T24693] CPU: 0 PID: 24693 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1181.510000][T24693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1181.520108][T24693] Call Trace: [ 1181.523384][T24693] [ 1181.526705][T24693] dump_stack_lvl+0xda/0x130 [ 1181.531354][T24693] dump_stack+0x15/0x20 [ 1181.535561][T24693] should_fail_ex+0x21f/0x230 [ 1181.540253][T24693] __should_failslab+0x92/0xa0 [ 1181.545065][T24693] should_failslab+0x9/0x20 [ 1181.549560][T24693] slab_pre_alloc_hook+0x38/0x180 [ 1181.554694][T24693] kmem_cache_alloc+0x58/0x260 [ 1181.559518][T24693] ? __kernfs_new_node+0x6a/0x360 [ 1181.564591][T24693] __kernfs_new_node+0x6a/0x360 [ 1181.569450][T24693] ? up_write+0x30/0xe0 [ 1181.573597][T24693] ? kernfs_activate+0x252/0x270 [ 1181.578603][T24693] kernfs_new_node+0x5f/0xd0 [ 1181.583321][T24693] __kernfs_create_file+0x49/0x180 [ 1181.588646][T24693] ? dev_attr_show+0x90/0x90 [ 1181.593581][T24693] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1181.599215][T24693] internal_create_group+0x320/0x840 [ 1181.604525][T24693] sysfs_create_groups+0x3c/0xe0 [ 1181.609808][T24693] device_add_attrs+0x69/0x400 [ 1181.614575][T24693] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1181.620152][T24693] device_add+0x4ec/0xb30 [ 1181.624499][T24693] netdev_register_kobject+0xfc/0x230 [ 1181.629876][T24693] register_netdevice+0x903/0xcd0 [ 1181.634995][T24693] hsr_dev_finalize+0x2b5/0x440 [ 1181.639854][T24693] hsr_newlink+0x426/0x470 [ 1181.644342][T24693] ? hsr_get_node_list+0x450/0x450 [ 1181.649528][T24693] rtnl_newlink+0xe5a/0x15a0 [ 1181.654629][T24693] ? __list_del_entry_valid+0x5f/0xe0 [ 1181.660015][T24693] ? _raw_spin_unlock+0x26/0x40 [ 1181.664971][T24693] ? __mutex_lock+0x21c/0x8d0 [ 1181.669857][T24693] ? rtnl_setlink+0x2d0/0x2d0 [ 1181.674630][T24693] rtnetlink_rcv_msg+0x807/0x8c0 [ 1181.679650][T24693] ? slab_post_alloc_hook+0x75/0x2d0 [ 1181.685111][T24693] ? xas_load+0x37c/0x390 [ 1181.689465][T24693] ? __rcu_read_unlock+0x4d/0x70 [ 1181.694414][T24693] ? xa_load+0xb9/0xe0 [ 1181.698568][T24693] ? kmem_cache_free+0x178/0x280 [ 1181.703684][T24693] ? nlmon_xmit+0x4b/0x60 [ 1181.708073][T24693] ? __kfree_skb+0x102/0x140 [ 1181.712784][T24693] ? consume_skb+0x57/0x180 [ 1181.717397][T24693] ? nlmon_xmit+0x4b/0x60 [ 1181.721720][T24693] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1181.727032][T24693] ? netlink_rcv_skb+0x95/0x220 [ 1181.731982][T24693] netlink_rcv_skb+0x126/0x220 [ 1181.736830][T24693] ? rtnetlink_bind+0x60/0x60 [ 1181.741504][T24693] rtnetlink_rcv+0x1c/0x20 [ 1181.746221][T24693] netlink_unicast+0x56f/0x640 [ 1181.751198][T24693] netlink_sendmsg+0x665/0x770 [ 1181.756039][T24693] ? netlink_getsockopt+0x710/0x710 [ 1181.761262][T24693] ____sys_sendmsg+0x375/0x4c0 [ 1181.766059][T24693] __sys_sendmsg+0x1e3/0x270 [ 1181.770678][T24693] __x64_sys_sendmsg+0x46/0x50 [ 1181.775486][T24693] do_syscall_64+0x41/0xc0 [ 1181.779990][T24693] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1181.786075][T24693] RIP: 0033:0x7f3099bc9169 [ 1181.790610][T24693] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1181.810652][T24693] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.819081][T24693] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1181.827172][T24693] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 49) [ 1181.835308][T24693] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.843270][T24693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.851371][T24693] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1181.859785][T24693] 01:03:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7a03}, 0x0) [ 1181.893344][T24699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1181.909353][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1181.926621][T24701] ipvlan0: entered promiscuous mode [ 1181.932917][T24701] ipvlan0: left promiscuous mode 01:03:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @empty, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, r5}) 01:03:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d09ef0fbc8", @ANYRES32, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r9, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@private2, 0x0, r9}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpuset.memory_migrate\x00', 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=@delchain={0x2308, 0x65, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xc, 0xffe0}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x22dc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x54ef}, @TCA_U32_ACT={0x22d0, 0x7, [@m_mirred={0x1130, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x9, 0x10000000, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0xffffffffffffffff, 0x400, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0xffffffffffffffff, 0x3ff, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7fff, 0x4, 0x1, 0x40}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0x10000000, 0x100, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x20000000, 0x5, 0x7}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x767, 0x8001, 0x7, 0x7, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x1, 0x6, 0x1, 0x712}, 0x4, r9}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1070, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0xffffffffffffffff, 0x5, 0x200}}, @TCA_DEF_PARMS={0x18, 0x2, {0x20, 0x0, 0x3, 0x101, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x58, 0xd, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x25, 0x6, "a2337a93cbf1b366c0fd8c91e617c2f1bcd030393ca8ff02190c789e76a8379fcd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_simple={0xd4, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x10000000, 0x9, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x0, 0x4e1}}]}, {0x78, 0x6, "704d96b54be6d30a96e45a745a73aa4c546622b96842a4d3ae18c6c146b3b236ea80225aaca3731ae19a6dbc90a892b180125f57ffc466afcf41debb24c547d0299e2498c3e0e2091c2cb9df98bbea089e19df19bb90e4a537473ec8d27211db68de004648400b6a80799320e8a7443371ec185f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2308}, 0x1, 0x0, 0x0, 0x8080}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x88) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt(r13, 0x8, 0x7, &(0x7f00000001c0)="4e84a680584f6a222fd51a74c01dae9106838c74a17587845c18db24b78e50a0f92767d8687eb030eff66d5ab6", 0x2d) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8, 0x1, 0x5, 0x2, 0xc3c, 0x9}, 0x1c) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1181.944022][T24705] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1181.980098][T24705] bond407: entered promiscuous mode [ 1181.985538][T24705] bond407: entered allmulticast mode 01:03:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2500, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1181.991229][T24705] 8021q: adding VLAN 0 to HW filter on device bond407 [ 1182.042535][T24712] FAULT_INJECTION: forcing a failure. [ 1182.042535][T24712] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.055201][T24712] CPU: 0 PID: 24712 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1182.065765][T24712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1182.075816][T24712] Call Trace: [ 1182.079086][T24712] [ 1182.082063][T24712] dump_stack_lvl+0xda/0x130 [ 1182.086726][T24712] dump_stack+0x15/0x20 [ 1182.090890][T24712] should_fail_ex+0x21f/0x230 [ 1182.095754][T24712] __should_failslab+0x92/0xa0 [ 1182.100579][T24712] should_failslab+0x9/0x20 [ 1182.105254][T24712] slab_pre_alloc_hook+0x38/0x180 [ 1182.110316][T24712] kmem_cache_alloc+0x58/0x260 [ 1182.115175][T24712] ? __kernfs_new_node+0x6a/0x360 [ 1182.120424][T24712] __kernfs_new_node+0x6a/0x360 [ 1182.125330][T24712] ? up_write+0x30/0xe0 [ 1182.129586][T24712] ? kernfs_activate+0x252/0x270 [ 1182.134571][T24712] kernfs_new_node+0x5f/0xd0 [ 1182.139249][T24712] __kernfs_create_file+0x49/0x180 [ 1182.144471][T24712] ? dev_attr_show+0x90/0x90 [ 1182.149139][T24712] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1182.154637][T24712] internal_create_group+0x320/0x840 [ 1182.159918][T24712] sysfs_create_groups+0x3c/0xe0 [ 1182.164900][T24712] device_add_attrs+0x69/0x400 [ 1182.169739][T24712] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1182.175366][T24712] device_add+0x4ec/0xb30 [ 1182.179704][T24712] netdev_register_kobject+0xfc/0x230 [ 1182.185109][T24712] register_netdevice+0x903/0xcd0 [ 1182.190342][T24712] hsr_dev_finalize+0x2b5/0x440 [ 1182.195247][T24712] hsr_newlink+0x426/0x470 [ 1182.199806][T24712] ? hsr_get_node_list+0x450/0x450 [ 1182.204948][T24712] rtnl_newlink+0xe5a/0x15a0 [ 1182.209721][T24712] ? __list_del_entry_valid+0x5f/0xe0 [ 1182.215143][T24712] ? _raw_spin_unlock+0x26/0x40 [ 1182.220041][T24712] ? __mutex_lock+0x21c/0x8d0 [ 1182.224986][T24712] ? rtnl_setlink+0x2d0/0x2d0 [ 1182.229692][T24712] rtnetlink_rcv_msg+0x807/0x8c0 [ 1182.234644][T24712] ? slab_post_alloc_hook+0x75/0x2d0 [ 1182.239989][T24712] ? xas_load+0x37c/0x390 [ 1182.244323][T24712] ? __rcu_read_unlock+0x4d/0x70 [ 1182.249316][T24712] ? xa_load+0xb9/0xe0 [ 1182.253387][T24712] ? kmem_cache_free+0x178/0x280 [ 1182.258334][T24712] ? nlmon_xmit+0x4b/0x60 [ 1182.262672][T24712] ? __kfree_skb+0x102/0x140 [ 1182.267286][T24712] ? consume_skb+0x57/0x180 [ 1182.271786][T24712] ? nlmon_xmit+0x4b/0x60 [ 1182.276168][T24712] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1182.281541][T24712] ? ref_tracker_free+0x3a1/0x400 [ 1182.286576][T24712] ? local_bh_enable+0x1f/0x20 [ 1182.291415][T24712] ? __dev_queue_xmit+0xbba/0x1e60 [ 1182.296650][T24712] netlink_rcv_skb+0x126/0x220 [ 1182.301506][T24712] ? rtnetlink_bind+0x60/0x60 [ 1182.306185][T24712] rtnetlink_rcv+0x1c/0x20 [ 1182.310596][T24712] netlink_unicast+0x56f/0x640 [ 1182.315411][T24712] netlink_sendmsg+0x665/0x770 [ 1182.320171][T24712] ? netlink_getsockopt+0x710/0x710 [ 1182.325408][T24712] ____sys_sendmsg+0x375/0x4c0 [ 1182.330194][T24712] __sys_sendmsg+0x1e3/0x270 [ 1182.334929][T24712] __x64_sys_sendmsg+0x46/0x50 [ 1182.339722][T24712] do_syscall_64+0x41/0xc0 [ 1182.344192][T24712] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1182.350262][T24712] RIP: 0033:0x7f3099bc9169 [ 1182.354763][T24712] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1182.374619][T24712] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.383230][T24712] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb8020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 50) 01:03:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7c02}, 0x0) [ 1182.391270][T24712] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1182.399308][T24712] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1182.407436][T24712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1182.415492][T24712] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1182.423575][T24712] [ 1182.479256][T24726] bond871: entered promiscuous mode [ 1182.484934][T24726] 8021q: adding VLAN 0 to HW filter on device bond871 [ 1182.506034][T24728] ipvlan0: entered promiscuous mode [ 1182.511955][T24728] ipvlan0: left promiscuous mode [ 1182.522543][T24731] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1182.544926][T24731] bond408: entered promiscuous mode [ 1182.550304][T24731] bond408: entered allmulticast mode [ 1182.555968][T24731] 8021q: adding VLAN 0 to HW filter on device bond408 01:03:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1182.576338][T24733] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1182.617349][T24733] bond872: entered promiscuous mode [ 1182.622922][T24733] 8021q: adding VLAN 0 to HW filter on device bond872 01:03:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d09ef0fbc8", @ANYRES32, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r9, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@private2, 0x0, r9}) (async) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@private2, 0x0, r9}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpuset.memory_migrate\x00', 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=@delchain={0x2308, 0x65, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xc, 0xffe0}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x22dc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x54ef}, @TCA_U32_ACT={0x22d0, 0x7, [@m_mirred={0x1130, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x9, 0x10000000, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0xffffffffffffffff, 0x400, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0xffffffffffffffff, 0x3ff, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7fff, 0x4, 0x1, 0x40}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0x10000000, 0x100, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x20000000, 0x5, 0x7}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x767, 0x8001, 0x7, 0x7, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x1, 0x6, 0x1, 0x712}, 0x4, r9}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1070, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0xffffffffffffffff, 0x5, 0x200}}, @TCA_DEF_PARMS={0x18, 0x2, {0x20, 0x0, 0x3, 0x101, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x58, 0xd, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x25, 0x6, "a2337a93cbf1b366c0fd8c91e617c2f1bcd030393ca8ff02190c789e76a8379fcd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_simple={0xd4, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x10000000, 0x9, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x0, 0x4e1}}]}, {0x78, 0x6, "704d96b54be6d30a96e45a745a73aa4c546622b96842a4d3ae18c6c146b3b236ea80225aaca3731ae19a6dbc90a892b180125f57ffc466afcf41debb24c547d0299e2498c3e0e2091c2cb9df98bbea089e19df19bb90e4a537473ec8d27211db68de004648400b6a80799320e8a7443371ec185f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2308}, 0x1, 0x0, 0x0, 0x8080}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=@delchain={0x2308, 0x65, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xc, 0xffe0}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x22dc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x54ef}, @TCA_U32_ACT={0x22d0, 0x7, [@m_mirred={0x1130, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x9, 0x10000000, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0xffffffffffffffff, 0x400, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0xffffffffffffffff, 0x3ff, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7fff, 0x4, 0x1, 0x40}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0x10000000, 0x100, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x20000000, 0x5, 0x7}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x767, 0x8001, 0x7, 0x7, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x1, 0x6, 0x1, 0x712}, 0x4, r9}}]}, {0x1004, 0x6, "a36bab08207b3ead2b8b44b9563598880539c606ce053fdc6dbcbcd7002a8c731616b0cad1f75a40d888f154ce6f4f10040c4221966826e2a6a99a34f6db896cadd76867c4b1841126134b3c4e561e9a6852f4356170adcd84246c4d085fc6d123530817b41da1fbbcaaff1b3b60eecf0a590aeb010567d36f191cdeec66639a1cf9c76069e456568e44ea27576c6e31d29a1ddc5ac6e0ae0879b715c88874a07d89d1df8152b63afc6a4d22eebd484af6a239619317badb52a161fb7c126266c79ae39ae8fb2cca1514986a51a8962b41a965752c3d3af880d1eee01a8fb4946b52fc9c7c32674ec791cef25d6db9153a4c488afeb402f5d4ada7ecbc83d8f7d227756ccee693a86405d038fc6ced5a1cc95a0348ef739b162d182f41db97b272c3815c01ac2bdbd8448923a3df308fed0d1cfc0feb364561f3c220d513d9accd94b92e089636caaa18c2cf0626d3fce2dcdc5da5db31cd976a7dd2bbe8eff14f84c13632263b5d52f84b34ff7b44cb2a6c8af0d3b24e52ba12a610ee85b02e11752bc60d5c3137d95a7ddd39244df2b871410b14f2fea5b896a676607d97dd2c4f3c3677c43f1ae21ef6c7f6f2520e56daeb82722cc645b958c9c37842251746623342226c242b782e799d1002dade7afd2049943a9f69f0fa2b4afd49011e88def22ade30e1dadac65ed32af2a3cfbec714bc3597d34c877f8129c34dbe52b50099e8059b77fc5d22208e41c9eef75694de7e8415d184e9853d1384e5de6ea4f1c5aece285e1d8971cf9fa6fbbdc74adfe24ac0757995c699feae2b3832769c3ad908600e7d03cde4dc6c4bd4f51d5d6a716f00b083c7fd34e0b04d7c1976688de5fdd8e3885c59dc24d4075470f42b168b903c7203a81a0fd04b5e8cee5be1da365be82df327dbac6674803d96b43a5396c22e333ed7e0738e73b8c390faca20d905bc990325b903d3f4cc7f17003021859da72492c43e4e6cff27bcc376625ef19f9f132882f0b974042367123071514d3448893f9445950d6503749df7d7425e892eeb902eaedb2183b66c7ad4b9a5ba4cf1bfdfea5492dc265b9f9221598fa6950fecd1d0b7d5a26fe70c98b4f5ee622c00bf76c99ebe1d9ca0a42fb6923a2ec67ab1e0e69882f08fbb1a101f180a66f2ec0920deee7752e92f5b8f281a467b5e7d28c44026958c5c1be54e6dc2e5c4d7bc630351b074d199ef24cbc845d3d740559459e8cdce6ddc1d3ad6353fc3912dec4b7f9e89710b66af9e06e3b7ac728c3c674ddceda333742b8f1cdc68fed746471e72541b9dcc3c885aea6349f4829f5865fde9f0a243959a8cc072d7a77d7ee1ed679a8f36d68fddbb706785f157b8c4e282e5bc8a836c7b6b87ede2ec4ec452ee66e39596ca6289d39623a59c175b9179c118efc272478950675669184d737b2d9149c5555182004e49a723f5dc321030d9c1084b59d318aeade9fb441218c2d5328b2880981bb20c24de172830849925ebeef8175b2e9f7b83a9b4b283c3001a1bd0e1c4cdeed8bd3898fd0a354523cee4fba54c4a7cdcd22b4eef2f03b1f651754bc0a7bf50aada38036d5ccdc972335f6073d0021362dd1b225c23525c552618436d0ae2f1c2fba97b26057160564b6908105911b2616c6651c29af73302b5fc1475ec515fad5d05b91742063754c4213f39f80918107e7748ceba638250dc2dfb1ed0539011b4022900bca45662694ac077b30adee34db09c7d1181942ac78b9df48dd6e2f86ac669c8194836f24516418ffc0b4aa01f88d1773b5e458ed050a18c7d362a0a1a4b3176421e090c7f524a4d98491e01174f79c8a9938357a3f41710754b808fdc240f47ede4b12cea5823449d84bb83c43d952f655d780ed8b93083057d5ea33c725aec123cb2ae9148caab0347835a5391f23eb857260402b8398d8273a61c6ff384dd95c5129dc8212c216317a65c428f2df1d089ce89e9fdfd1f916ca3b79294ae5c8beacc0e350db1c55e999e0cd31bc1868df75d69762a57806243400df19481973df8755cc7f622a902486d44fbcac89edb19c29a5816d2b40a92f93cdc46bd1ba6fab916a9c4faca8cad71cae8ea42ec91ea91a2e108d432821aba7dea316848f09ebdfb78a378402802017114472f679f5f8f55659a31df5c3894a48b83d1c5f9dbb6aa8cb94044cf13d1b7cb8c22d8f4c0fff7731ae180232726d9727fd56b1f615765da88b1a293e1c6ec17c907fc96b237a092ceeeb90f000e8f19e7e23247c0eef1cff1a9f3f64c07af0a92db733985b7df3fdb0d1ffd8647d2a4fab5e71aeb6857ddc4c184e7558c54c958efc8efae87e8d0534aacb97ec9b38121a656225522f375d7f5147ac00b1e3b3c4961df4eeae62906ef75924c725b446b18ccbbd31a2b4e71cfa4cadf1f12383f84b09beeefc6d113b6ca6852f2477cfe38256ca58cf6f9b989a2b71ef4d758fea3e06e0250e02fec3205ac7d6f6c736411475df140dc0bea182d43357b26e43bf3024024a073f88c19649187af5e77cd5e716dd7b45377a4d429e97448121cd3518b297b2b93d787d811975f2585b9f48cdf7c4b2369413391958b010b748a0ffde6edb48b1ef0777c3f7876d931b280912144cda57cb6d35deac559a02e17ea5e1e908c4fbe42717e2629215621fb3b091e92439236318928a6691b875f211ec25e7b9e420b4cf5d436d068e56879d9a0ddaca1da7241f398e73175018df016510cb39a63fbada65bfa92d963489196285b9d92fd7c2ff4b1f2bc16a6c5ed37aad124e2d71ce487ff521771fb8f06bc1d1975ae8cb7e7fd341ae10eaf35d6aaf008ae3a2f75f3f7d81b0f5ad6876b075a2eca3a1085eee0b2909e4b89428735ea9e3ebb5bb606626a7b7083436cbb65d331fbb58068691a351badffccab29406c3a8a30710d6a4959dfbbe2b12559daeff886e291d457d25264be082a0d70fbe11ec90ded0471156513af457ff5a5f257ee84abaf03c269b7a5417ae8ee78e1e73180d3220a17e8b2ba2359fe2cb1e8b058f94737db7883b54e3afbd822ad1e14fedf913a0550130a4bcd8ff5fadef689e2bfd2041c93fe9768179654fc3280d5368fe4426c402faca7e740041b75d34898cca18c33ed5699524699896edb6d0a61e154713c573c13ae7804e84abfa21ec4bc8c3ab5e1a50ce7a7a3c5c5e7f5850cc8fc965c0a31aaee98aac130567d00125ed12da44de80c53dc1a7911c3b4683a7db5213a8cdd5644dc11a7ceaea002a67159e7aa28d606345a90967cab3f156e20ea7c527b20e49d6ea04648aa6165d8df17266bc6f3eb10fdb0b90a23fcba5efad6c2c1c08ad7fee22e759e7281423f100aeaf8ee8a43a8492b6c633099f59812241ea78fdbce492cf1d95fbcd7535508352799afec129c2f6c6c1bff0374d9d324da0f6350944dad5f8191173afe914902fb7c39e1a9964dd9047f09dbdc76964bf1f593103d10def1c8077dc4a119033561f9409e197201886e1b05d4f2d9241b60cfa56b7dc3739dbb84aae48b9ca5738ba3c67fe37cca0063096882019a62ff9886aab5dbdc4f8c0c3e9e87d232aea26ed74fa219dc639938b147a789b4adc2ccda4aa9e29e2c3f630ba7ec1005cc7a32502e3dcf135b82d79405587226894976cb3128281ea5561f9c38c8598a1caca1634fb03ac6ac1ed51df39a6a14120f8c1a629f0ffa6bd33825117e2b85990b5cb1a1721a764a6b71fdd35c1f81fa6cc1f05b5805b42c8c9727c803caf04d938d88c2c5f77b48f89d029f2811de867a4291e308cbce7ee191c6f5effbfabb65f932e1b5b45356d86cf18df858c89f36066c929ff559dccdceaa7261ca6022464eb45e4ab57f8ac7e040e865f522ec263f78e1f3583dccffb42004b52ceb205cf7d8525bb9b7be4bbf68a3bee36a2ee079dbb7d1cbb10cbffa4200f264c16c661b2b84421ef373a3893ebf73bd6216f10faf06fc49001c67b4ae858f3f565639f5ba31e4fb2938b5ae3e78b14ef25a3eb78a8d42ec471743cd9637241d2fb2c3fe57703e0fcfc26b1b0791bed52187b209ac95fa9ed3706e4e2b9bf4acc9e53fb3da026ef2eb15e5e4fcda79b8a93bba46e88ef8b7f787f13a1f9ed50391dae216e9c6628d6044c2084366dd72ebdbc9e508a9a763661b8f4147640500f0f5ace50985ce19c87f38ebb5c3b04ef6d07e26babcb8b49682cc76df72d03768d2892ff5f7d5483e844830fe4367f9dd8541edde8f2c94e27164269c173cbafd5714bfee65f48f88a9381ab423788f0010fb6b5a28e7a867163fddd7a3a1502d6c295cb3bd6167198a113f041edc69fb0c5e5baf3cc253fde53bab0602618dc19777ea4f4d206f4a898b83ba8277696472b6099b25aea76fc6f33a5823044df366e5e27d0a70bfb7487a4d361939be7f2e4a4aa90d4c1b5f5cceaab98e64f184c4f68a594faed6016da91f96d325a8598bb21afe83e50d1e2b78f08ce8eb7e85236e0b75265d0b127a5e86407811fc8cdb51ad4812ee8033b6645e410cbf688e987c2d35b9e46d0f84f1ad34e1cf1912ff82c748a894c9849bb75dfc33ee35e7022d2fc82dd62efe02f3ca493c925232d4937a8a4efc8a74cb1c6ff8020e57477012cab0a487a8dcda0e66c6c4281a40789aa5a3f730c20e693bff10a41f734a660a2e4d0fdd3aff3f83306bcffc69ef637396ef52b3ba44e658bcb166e83d8b415b12bafaf241ddc4c57c936bf8847ae7d7f0cc43a65d3b4a3dab8770af6389c1698f5bf6df6565bb865cde17066f7cd3e0c1994ed521cc7642bd4d287dfa2be64976cfeb2b408f03e50d6a2d4cc60776d3a5915599aff2692257a526127bfe93806c4be27f0e45d4d9b7693d36ddd9c3dbf898b713a5225647f5bd659540ae50d9a81e8622be429fd16bf000e2e1f041a129c32f57b7de7dd21c48298e98ff52b35ccab79a80df6a80b33875eb9871a14815bdc0e4ceb6ef3d13681f3f242d14eb7d41ecdc5dcf37d45fd6d674fa3211561b735707edc46c1c55cbccc5190fed5da32a7210f8414654f0c2c0f21643c98cc4ea06c473bcccb662a23c07643b7993698dc59af13f8c175700185fc5c3cc2e3aa2e68ed5b342eb6194cf26f6dc8ea7c655c0d22e077465f2cf00ffb074852dc3b7429f467ca4985dff806733dca530937ffab6efabdeb547db2a9179078942f9b3913e2825cbaeec10cbbb0e5e7f6023f3b1c5e4397decdcda1c8f77edb49c1b92f98aeed5390f32da6e8b2a44bea658020977caed9da47d0ef724156ef99b82b56ba2811b114a8bfa54f166a5e6ccfb7871055925879d69ef6ed1e723b16cb2dfafc4b9ac585b0c9c23f471bcdfacbd3b1bccf74814757d8b7a1bccff7ec2338f306c10133395156c963f0392af3e8bd558c51771b51951369ae6d71991b4a54bbf3b9594f8a45123b1f6d91870f855f1c134c276b096009e348e3939cef31db88a4f0fbd5bfc10590e6fa736d696dfde298f6bb0c1a9b226bdea666e76334abd8582e19842737596ef734a167eb37ad3957d9e86ffd5042dfbea5797503c1fe532b5fbd6049a67adc4681cba629cfcf3a6d31cedeb474257085035f536702d66990f002e7629734d897f19385643f812715fefa95c96ed49e0dd07fd24803fa7d82b4341305af1a58cf14ffbb8706a6ee1ab3185001fb4b9471bf9dc788c5d511121f8c347de438f02e9cf7ba41eb8955ebe0a8e860fc54ad201cd3597d745754fc1ee4e8f0a33e221baca1dd927e0bab2eeafafe59f86154e772f4434d802bb2d10a39544d2627ac433e5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1070, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0xffffffffffffffff, 0x5, 0x200}}, @TCA_DEF_PARMS={0x18, 0x2, {0x20, 0x0, 0x3, 0x101, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x58, 0xd, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x25, 0x6, "a2337a93cbf1b366c0fd8c91e617c2f1bcd030393ca8ff02190c789e76a8379fcd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_simple={0xd4, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x10000000, 0x9, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x0, 0x4e1}}]}, {0x78, 0x6, "704d96b54be6d30a96e45a745a73aa4c546622b96842a4d3ae18c6c146b3b236ea80225aaca3731ae19a6dbc90a892b180125f57ffc466afcf41debb24c547d0299e2498c3e0e2091c2cb9df98bbea089e19df19bb90e4a537473ec8d27211db68de004648400b6a80799320e8a7443371ec185f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2308}, 0x1, 0x0, 0x0, 0x8080}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x88) socket(0x10, 0x803, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt(r13, 0x8, 0x7, &(0x7f00000001c0)="4e84a680584f6a222fd51a74c01dae9106838c74a17587845c18db24b78e50a0f92767d8687eb030eff66d5ab6", 0x2d) (async) setsockopt(r13, 0x8, 0x7, &(0x7f00000001c0)="4e84a680584f6a222fd51a74c01dae9106838c74a17587845c18db24b78e50a0f92767d8687eb030eff66d5ab6", 0x2d) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8, 0x1, 0x5, 0x2, 0xc3c, 0x9}, 0x1c) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1182.673049][T24735] bond872: (slave bridge3141): making interface the new active one [ 1182.680987][T24735] bridge3141: entered promiscuous mode [ 1182.692823][T24735] bond872: (slave bridge3141): Enslaving as an active interface with an up link [ 1182.709835][T24739] FAULT_INJECTION: forcing a failure. [ 1182.709835][T24739] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.722855][T24739] CPU: 1 PID: 24739 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1182.733282][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1182.743487][T24739] Call Trace: [ 1182.746774][T24739] [ 1182.749724][T24739] dump_stack_lvl+0xda/0x130 [ 1182.754330][T24739] dump_stack+0x15/0x20 [ 1182.758568][T24739] should_fail_ex+0x21f/0x230 [ 1182.763307][T24739] __should_failslab+0x92/0xa0 [ 1182.768066][T24739] should_failslab+0x9/0x20 [ 1182.772553][T24739] slab_pre_alloc_hook+0x38/0x180 [ 1182.777655][T24739] kmem_cache_alloc+0x58/0x260 [ 1182.782465][T24739] ? __kernfs_new_node+0x6a/0x360 [ 1182.787606][T24739] __kernfs_new_node+0x6a/0x360 [ 1182.792557][T24739] ? up_write+0x30/0xe0 [ 1182.796780][T24739] ? kernfs_activate+0x252/0x270 [ 1182.801757][T24739] kernfs_new_node+0x5f/0xd0 [ 1182.806372][T24739] __kernfs_create_file+0x49/0x180 [ 1182.811470][T24739] ? dev_attr_show+0x90/0x90 [ 1182.816133][T24739] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1182.821516][T24739] internal_create_group+0x320/0x840 [ 1182.826934][T24739] sysfs_create_groups+0x3c/0xe0 [ 1182.831969][T24739] device_add_attrs+0x69/0x400 [ 1182.836762][T24739] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1182.842284][T24739] device_add+0x4ec/0xb30 [ 1182.846699][T24739] netdev_register_kobject+0xfc/0x230 [ 1182.852162][T24739] register_netdevice+0x903/0xcd0 [ 1182.857304][T24739] hsr_dev_finalize+0x2b5/0x440 [ 1182.862242][T24739] hsr_newlink+0x426/0x470 [ 1182.866789][T24739] ? hsr_get_node_list+0x450/0x450 [ 1182.871924][T24739] rtnl_newlink+0xe5a/0x15a0 [ 1182.876573][T24739] ? __list_del_entry_valid+0x5f/0xe0 [ 1182.882027][T24739] ? _raw_spin_unlock+0x26/0x40 [ 1182.886950][T24739] ? __mutex_lock+0x21c/0x8d0 [ 1182.891692][T24739] ? rtnl_setlink+0x2d0/0x2d0 [ 1182.896394][T24739] rtnetlink_rcv_msg+0x807/0x8c0 [ 1182.901389][T24739] ? slab_post_alloc_hook+0x75/0x2d0 [ 1182.906777][T24739] ? xas_load+0x37c/0x390 [ 1182.911117][T24739] ? __rcu_read_unlock+0x4d/0x70 [ 1182.916127][T24739] ? xa_load+0xb9/0xe0 [ 1182.920274][T24739] ? kmem_cache_free+0x178/0x280 [ 1182.925213][T24739] ? nlmon_xmit+0x4b/0x60 [ 1182.929533][T24739] ? __kfree_skb+0x102/0x140 [ 1182.934198][T24739] ? consume_skb+0x57/0x180 [ 1182.938833][T24739] ? nlmon_xmit+0x4b/0x60 [ 1182.943171][T24739] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1182.948551][T24739] ? ref_tracker_free+0x3a1/0x400 [ 1182.953623][T24739] ? local_bh_enable+0x1f/0x20 [ 1182.958380][T24739] ? __dev_queue_xmit+0xbba/0x1e60 [ 1182.963560][T24739] netlink_rcv_skb+0x126/0x220 [ 1182.968658][T24739] ? rtnetlink_bind+0x60/0x60 [ 1182.973325][T24739] rtnetlink_rcv+0x1c/0x20 [ 1182.977804][T24739] netlink_unicast+0x56f/0x640 [ 1182.982572][T24739] netlink_sendmsg+0x665/0x770 [ 1182.987461][T24739] ? netlink_getsockopt+0x710/0x710 [ 1182.992923][T24739] ____sys_sendmsg+0x375/0x4c0 [ 1182.997838][T24739] __sys_sendmsg+0x1e3/0x270 [ 1183.002437][T24739] __x64_sys_sendmsg+0x46/0x50 [ 1183.007238][T24739] do_syscall_64+0x41/0xc0 [ 1183.012075][T24739] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1183.018030][T24739] RIP: 0033:0x7f3099bc9169 [ 1183.022431][T24739] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1183.042212][T24739] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.050724][T24739] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1183.058837][T24739] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1183.066811][T24739] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 01:03:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 51) [ 1183.074946][T24739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.082966][T24739] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1183.091030][T24739] 01:03:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 01:03:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb80a0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1183.145529][T24750] ipvlan0: entered promiscuous mode [ 1183.152024][T24750] ipvlan0: left promiscuous mode [ 1183.167231][T24749] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1183.188143][T24749] bond409: entered promiscuous mode 01:03:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81ffffff, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3a00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d09ef0fbc8", @ANYRES32, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r9, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@private2, 0x0, r9}) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='cpuset.memory_migrate\x00', 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=@delchain={0x2308, 0x65, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xc, 0xffe0}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x22dc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x54ef}, @TCA_U32_ACT={0x22d0, 0x7, [@m_mirred={0x1130, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x9, 0x10000000, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0xffffffffffffffff, 0x400, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x8, 0xffffffffffffffff, 0x3ff, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7fff, 0x4, 0x1, 0x40}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0x10000000, 0x100, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x20000000, 0x5, 0x7}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x767, 0x8001, 0x7, 0x7, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x1, 0x6, 0x1, 0x712}, 0x4, r9}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x1070, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0xffffffffffffffff, 0x5, 0x200}}, @TCA_DEF_PARMS={0x18, 0x2, {0x20, 0x0, 0x3, 0x101, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1004, 0x6, "f8734c39f49e651afb3ab1b8db9442ba956db114b9ad2db7ff3a5ec7d721f778361c3705f8d93eb124fbad0ad1fc33ed2f8074557a793d9c7f0f16f55a75af23b85f1e79d78418c0b0b21f4c94449db8e933d5fc458cdbf0da4eec1aae8cf20d182a063628c4b85bdc4b5c3309c1f97099db07b51c16102f5173c186352b33adc1d04bac56979680cd2e22a0ec735b214800bb800547271fc2d1e2ced7ff28304f793baa583a1058db6476a5fb51dca7276926d19b51f718c762fcfe8808f11e4d0f64c3f08b0972651ef86413bdcc3e56e62b611d280bf8345fb55a7eea013d01acce6e9af4c4487254338fe14f85fdb5a9efb5bf0280c87c6772ed2c48078b7499fce46da2f7e7b94c701a6159e809ffe7e696507252dfee90b7503fdb6946e7915708ac09e94c9d31ef5a9edbbc5e26fa8554bf5b753ba4cacfc9f7bc44754538d0a94ab0e96a02191f1624d19e237042df37b12ec810d222110ff6f0da8a02ca11ddfa690d1b98b27a305bdfe6e4b3a51c5632e13522cabdf78eb80ae0ae2ae0f7019295a36e806395b94a7c09763dc4ba1b28fbb54f152ced2c2e7383206c1b0189b59d1f6d941193d11c670a5c13703306c73161f1128d532655e0f062bd75e15616cf2af9d3f473a093cdda5498124249eebe7988cf4b5e13642869a805653093dc7faec20e0befa00c31ae005ddf058abdbe40f951073c52d5720b58e484b2916e4cf48aff637fc6c5f85f7c096070f53939bc55a388ca34424e8c1d3f87ec9ea9f3b5f0608599f1bb7c3ee1861cf27dd9d7c3b3311d55e4e28c3756dd3383b13da8f9b31e26465628d0092087c337fd6de7acaf583ce1368bb83a9796bd7cd3d61749c34a84dbeda438aa70f7b3dfcb8b28210c56f67a515253571c01eaaa152f7092591e77c7c88becf8102e9e36717acf31237d9659f02ff9a0c2d65b3e919f40bb660135798271cb2b6c5442184615918df9bb812b425d0e7422871aa65ccb808d3d3d6ec15de74f518a3ec42bfd6d27fe7c6d947ba8cbc77b9c25e3bf99e1843e46b7f1eb4b87c04ab2a8c1e636db049e7094f1d9c7a03562fd7a988a5dc5ce161c5ec8ad37a3b21a32c20b564de36564bcedfb6108cfb616ad8b6e23608142ab21749becdef20e8de2046be90ac6b5ebea5015df18dcbcb93f8e558a8c729e1f360864ac3733678aedffcce943b3be71751b9113729e2f5b7db983a8a49f64cf66fbc957429073c1397f7d53cc4629f7375402d41bc90d7e92024fbc8cd57474be3e4550182d0eb17d17863e6a71a5ab3624ed40bf85cf613d48ff488022633a343c9cac7dc2ce1c1105b593efc067508d8912456f724b552e37651f12b023ac25ab36b1872143f327c8a370d93d00a257fb34fd7a68c8fd7b6b35c5bd9310957fdf034ec525d53eb861dffee79496d45473a51e1abe0ae1b7cda94a9cd3fa71328227c2f52eaa91756dad9f518f26bf29aab1ee02189414d7a8a3616c1d0e5f38b0619bf5d5a90bafbfceb8111ffacb7a6dd2af51075bb7934835fec6897478faf640b6ec4a8abd171e94e0484bb397713d45b682a93ec06e71b15e5790a84970d99a58d86bfeac65dd2979e1de5bba72efc6fe9a911d9100c16c1bfdc0fc1a57bceef4909707ef05aef4cc96639928a6db942a33a464648fb19b377c136b58ca5d6a44698f8ff0e9007ffcb668cf1393701ed33835fc65b3ce81896a07092b9b126400e9a71dbb4de11631aa3ad130021c258704da7960f41172b9a04ad059c1cec3fd886760d82c1aa1a7408cc433121539f37dbfc59714139f719e274ffdd58aec278fe5ea7735f9e6f0602d61f42db4ae691f04a2cd188f140a6ad21c64fd986c0fd6526a1f529cd3a1ce941b8acdcd2c0a67bd504630937f6799965d41826c591e3711520e5f542e6bd9ca28e50cebcf075621ac8837afa8f2a51662cff539ea7d5a34c471827ac8fe41bdf564376c3aa2278f82ab37d3018afb24897d2e0edca5f0a81f00966baa76e2b3abe76b6d9c06d04d51467d5a39813f3483cf310a88cb5d9a2e52645c9adfeb3b84e0745c70dde299eb0da96da9249c1b37360f5cc76163abf736e531224ecf93fe40809ee780c9f726afbd9c9ea2061faf906e486d3eb4128cf7777a50dd2a45f5077daf0f828257c89d212c6321c9a3c7f870afc2b6b64cdbd69dcaa78f310578dd86e8cf5b9ada3a18ae9b18f8a183da879f6366368b63f7ca95bc00ed486a7473603295e6779e50e68a88619035df299a6ad11bf12f3cfb09a7109266fc306bb2b4278a73dd41f309dc099eca3fd43c5a6833aec53500b222f6e54efa81cbd68b7aa727ed95ef499b1a26db341c4f1c2e1498072f78d19a316b068c13a9f5ef04eb01be2dac4c5fb248cb6a7100572ba6ddab2388505b0b6865113a81cdf2ccf40c76c10a759c5b9dc315baf26f9384f4ba0fb44849e14550ebd3e78a02f8d5aa25d65a61f3803cf8f7514c1f0eccae56fd6e927718d1e62b5eb26935069f48556c0372a0e219771ca912b2cdf0959ec064e8f379121148b29ea1291a8a98b75a698f82faecb2b28ea51f5411963b3113efebe8b903b79688fac4ccc33372b3dda3c5eb6a1104c4ebdb0875a13718c33542232f1d4dd7767d012b2fa11df9123cb0a3c599b0f5d4101c4681308e4c2d403ca04e1958c7b82802c2fafff8a0c8690e179dcdc9d8cdcbb20af0b9cc9d2fd324e6b7fe3f000e9b37eec8aac937daeafb41a26eedc917cbc4ea6d25aa07367270441ff53ffe5abf067736443c283d3792acb279aafde342180d03e09730c1c22df7f31c3f390edd178b14fcaf64f7bb61f4b2dbd7cb8c7c24ec5ee2af8c7503b9017b4b0a1281d264a2c82fd3bab319c3997563c56a1764869734a869896e7960f4ced03b116bdb7843f19d087576121cd4c6d612fd1ef21f47c5c535c2cec7b730f0e5a6e4e897bfc76e24a5947bb1b1d76bb2b0296753259967d3e3e30322261103a07d9dfc3b662ce5a0e62d1f41e552a6b275167498a9654df845e5f283eb725a7be58ccc71dbc4d6b3360629b3280bfce9f493e067c41bbb9b82d22868cd744d2831c1a26387b2f8382341119005b9cc2e9c90e69823997ffd89f2d244bb1633d2abe8d2bfdb56516a5515b9ea99fbb8fd37320736c9a54176187883a56b4071e87a5c1fd928670885ab6dbc3b6955e5890b88d42804f3c0304ccc920c5469242aac72fdf882b00008d79f906105772f27976ac4c99dcf13c886fe6090c4e622c6bed0d37c76c118019a367d7bf021ff446d96ae2ff1333661318c6a3021d11c0fb7574d09c506d2c8be0b6df49d1192e466e2dce0e80ce67cf054ea7820444e83839655c6068ece6d722c396f2599b1e6b9f5baa54e18f9d63685ee8429d8ccb8c4bdc81339d37fd791fd3f5b126d6d462d971b71902fd66cee671a199e11c500a08a1bda2b90deee0e36b0cc2db8df5e2df5ad7e6cfd533051e77754b335d71a06130de7c3533b9cf79c2f83e880b0e4c77ff8ef065c87dfb68256f58be81411c5f05b09f8c3a43a17e1e292bc080e3bc04828d1e41820d522db40e0222153258919240c16cd9d8a6826b68e4df6d811f4c43dc2e2f0d5ab0f0e1101a6256d6f26f229ca40d41350f1c336f33c7760ccc3a212eb8a79a1af315cf8ab73e33d3e7d7b74c6bb0530e5c62848cb25d3adf4da44d471f624e88154330f26f6185d9df6e7b54183b03cb937a36dae1296a713ed9bfbdb5d3a3738f6e1a69964f469ecf725d033e940b6014bad980b58efaedeb6e3afe85afe98b59a60c4f68c0353132a162edb38fe537c016a19ccf009c4752908de40739363c2d21159d6dd31585cfc2a3013aa519e3a5d71285ca75ae84c317babb74c104b8182e91f1af642fb957093f0d4b3dc10bde6e0367e0188d108a4a5571f25b35f270d3f49af070a313ffd62abb084dc504416346b4699ee4ff0b56fb148a695cb277c3b6b72a580c883fac6841818335a2bc1c8f9abfc5e22a5a22d29f370824a2cc87569a233ae5fda29e37c3a5393ff4c1ded986201596c49c652a478b97c367cb159359c3449fe5966d83c5722f72cc020e595149e2640f407bab153109679c2b898333294345c66e3c018719c753bd26e745d96bb6338d782a655c1671fa2e78eb5deb9dc75ff663504ed75ef2cc756c0075462081fe7b9f607f716e71f7b43d0ece33a113f8d480c7fcee4cf4201d6ee0b817f6f8e171251b6cf7f2ca328d4c04cf552347313ac0afa8ee48acce8dd7ec14432886388292d8b0481038a48fe2501f9d490c6887293c08083b004a26d5ebd0b7768e6685f34aae017add80da12b8d881f7c70095503c357759be132c2c3acbe53f355649002f2b68a75a01311ad17be84941170e795fe3722b714bc610eab0826aa42ea1f2251b56053746821285ecdba83547ef562ea5fbb4657069ea368e783920c5bf21ea49a1e47f7a33bce31e73b390c9666e73185f22824e66b85ef8b70a9f5012009f6aca3eb3d256d2f661fd079f9a1b653f66c11c797046810d681038d896adaaa0976e499d7ae1b8acf2e4b7b65bcdda1ac497ac623d9b2e73d9af5d0b8537ae3075a2b1f077af8b894a4e574d97b0e3722e9b9c0e2a5748258574d42e351c990b9e2e8e32381823d43b8d135db77b3405b663d8057064a683fcdeade543cb27b7101f41614c6747fb894e8a8c043658965bd8b694b136b1254e92f7a64bd3bd1af7aa385e662b4ace3c6b595efebd524f3c66a66855dfaf1e396c00c661a148dec1d5cd6163ccaa1575a0f30dc81e882ce01393da3b87e5594a467a9d345346514320551117f83d90eda8c045b8f55b9a2bcb352a2236404c7dde39a5cb139941025f5747351afe0ef91bf1f08cf2b048631ff36ea8a425bc8c9202ae6426808f76f268dfd14b6c14672b54d8ce3d0b2e76198dbc598ce0120e3cd71bb5ac49853ff5a1140e6914b1b702f2a2c1f373bfc78f7a15ad9e96c152a6048acb0fdb58de450d862ca332a601234c3424986ce7d2fd115aa7a418a92a5c1f01c956dbb37724e5cfb9bd6364c79df296b9d48314a56d13617eab57f01370377c0d2941b58e4e92e9220d3b708a71ea28d11c7355f93046f6ec3e176f1154f181d1918612875caf4af8483fbeab8268794d8add50d70ce6078849a87accfc3f5993bb59262e6af124a45e40cdeb421d8b32948f7bc89cde683d4432f9861cee268eb92486f2d325366b4d07cc34c71f50a434637cc32dc0a31d45f5ae8153b010a28f27cb9e684739e0cb3a029824c75a9dca55267b3b57e949cb71ea9c904c2a87f02754c05a8907e016600e85b1dd9082242f51d45287ff8ab6c80d68b19242c4d292de79f6335c7c809508ce6a459ea6203f4219eabe8ddcbdb09ab64a0bd2d1cf4904461c8a9c3c60411b8dd2027acf9371904b2397235ae8214d04149977de681508c7675d8b110a34924e6abdcf2cf0ab70512a5ccd406a32b0e55ea01f357a18118477727f1f001252fc24a2a8fd15973c866f521fafaedc2c9d5977bc347541fd70187e227ed04521b95778339fec41a50ed4ffb25b55838f60d2e8695eefaf872600fb449388126f64df6bdcd3e10850fda94b8b160a5b4128458d70f1fd133552809f346fb75b7b5f7451882f2aac07ef324282c1d614745902c20badd41ba856d04c7fd1776c5f936cd6051fe39a532ff584bb3e3062eddccf5798b41b7521b13b99bd0a78b5b1195ab22f35751af5fe7d64ec00923d119ac108b9c526bfb63482ca9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x58, 0xd, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x25, 0x6, "a2337a93cbf1b366c0fd8c91e617c2f1bcd030393ca8ff02190c789e76a8379fcd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_simple={0xd4, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x10000000, 0x9, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x0, 0x4e1}}]}, {0x78, 0x6, "704d96b54be6d30a96e45a745a73aa4c546622b96842a4d3ae18c6c146b3b236ea80225aaca3731ae19a6dbc90a892b180125f57ffc466afcf41debb24c547d0299e2498c3e0e2091c2cb9df98bbea089e19df19bb90e4a537473ec8d27211db68de004648400b6a80799320e8a7443371ec185f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2308}, 0x1, 0x0, 0x0, 0x8080}, 0x10) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x88) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) setsockopt(r13, 0x8, 0x7, &(0x7f00000001c0)="4e84a680584f6a222fd51a74c01dae9106838c74a17587845c18db24b78e50a0f92767d8687eb030eff66d5ab6", 0x2d) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8, 0x1, 0x5, 0x2, 0xc3c, 0x9}, 0x1c) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1183.193540][T24749] bond409: entered allmulticast mode [ 1183.198983][T24749] 8021q: adding VLAN 0 to HW filter on device bond409 [ 1183.213408][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bond872: link becomes ready [ 1183.253566][T24757] FAULT_INJECTION: forcing a failure. [ 1183.253566][T24757] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.266415][T24757] CPU: 1 PID: 24757 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1183.276851][T24757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1183.286895][T24757] Call Trace: [ 1183.290170][T24757] [ 1183.293097][T24757] dump_stack_lvl+0xda/0x130 [ 1183.297788][T24757] dump_stack+0x15/0x20 [ 1183.302037][T24757] should_fail_ex+0x21f/0x230 [ 1183.306756][T24757] __should_failslab+0x92/0xa0 [ 1183.311631][T24757] should_failslab+0x9/0x20 [ 1183.316277][T24757] slab_pre_alloc_hook+0x38/0x180 [ 1183.321552][T24757] kmem_cache_alloc+0x58/0x260 [ 1183.326410][T24757] ? __kernfs_new_node+0x6a/0x360 [ 1183.331572][T24757] __kernfs_new_node+0x6a/0x360 [ 1183.336641][T24757] ? up_write+0x30/0xe0 [ 1183.340825][T24757] ? kernfs_activate+0x252/0x270 [ 1183.345785][T24757] kernfs_new_node+0x5f/0xd0 [ 1183.350400][T24757] __kernfs_create_file+0x49/0x180 [ 1183.355571][T24757] ? dev_attr_show+0x90/0x90 [ 1183.360520][T24757] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1183.365996][T24757] internal_create_group+0x320/0x840 [ 1183.371465][T24757] sysfs_create_groups+0x3c/0xe0 [ 1183.376573][T24757] device_add_attrs+0x69/0x400 [ 1183.381443][T24757] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1183.387016][T24757] device_add+0x4ec/0xb30 [ 1183.391440][T24757] netdev_register_kobject+0xfc/0x230 [ 1183.396938][T24757] register_netdevice+0x903/0xcd0 [ 1183.402071][T24757] hsr_dev_finalize+0x2b5/0x440 [ 1183.406948][T24757] hsr_newlink+0x426/0x470 [ 1183.411468][T24757] ? hsr_get_node_list+0x450/0x450 [ 1183.416692][T24757] rtnl_newlink+0xe5a/0x15a0 [ 1183.421318][T24757] ? __list_del_entry_valid+0x5f/0xe0 [ 1183.426861][T24757] ? _raw_spin_unlock+0x26/0x40 [ 1183.431726][T24757] ? __mutex_lock+0x21c/0x8d0 [ 1183.436403][T24757] ? rtnl_setlink+0x2d0/0x2d0 [ 1183.441258][T24757] rtnetlink_rcv_msg+0x807/0x8c0 [ 1183.446333][T24757] ? slab_post_alloc_hook+0x75/0x2d0 [ 1183.451838][T24757] ? xas_load+0x37c/0x390 [ 1183.456215][T24757] ? __rcu_read_unlock+0x4d/0x70 [ 1183.461210][T24757] ? xa_load+0xb9/0xe0 [ 1183.465528][T24757] ? kmem_cache_free+0x178/0x280 [ 1183.470491][T24757] ? nlmon_xmit+0x4b/0x60 [ 1183.474992][T24757] ? __kfree_skb+0x102/0x140 [ 1183.479677][T24757] ? consume_skb+0x57/0x180 [ 1183.484262][T24757] ? nlmon_xmit+0x4b/0x60 [ 1183.488651][T24757] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1183.494168][T24757] ? ref_tracker_free+0x3a1/0x400 [ 1183.499450][T24757] ? local_bh_enable+0x1f/0x20 [ 1183.504262][T24757] ? __dev_queue_xmit+0xbba/0x1e60 [ 1183.509457][T24757] netlink_rcv_skb+0x126/0x220 [ 1183.514279][T24757] ? rtnetlink_bind+0x60/0x60 [ 1183.519291][T24757] rtnetlink_rcv+0x1c/0x20 [ 1183.523876][T24757] netlink_unicast+0x56f/0x640 [ 1183.529261][T24757] netlink_sendmsg+0x665/0x770 [ 1183.534104][T24757] ? netlink_getsockopt+0x710/0x710 [ 1183.539460][T24757] ____sys_sendmsg+0x375/0x4c0 [ 1183.544392][T24757] __sys_sendmsg+0x1e3/0x270 [ 1183.549069][T24757] __x64_sys_sendmsg+0x46/0x50 [ 1183.554359][T24757] do_syscall_64+0x41/0xc0 [ 1183.558796][T24757] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1183.564706][T24757] RIP: 0033:0x7f3099bc9169 [ 1183.569203][T24757] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1183.589315][T24757] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:03:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 52) [ 1183.597814][T24757] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1183.605905][T24757] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1183.613985][T24757] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.621961][T24757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.630333][T24757] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1183.638307][T24757] 01:03:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8200}, 0x0) 01:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xba010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1183.684589][T24765] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1183.709693][T24765] bond410: entered promiscuous mode [ 1183.715031][T24765] bond410: entered allmulticast mode [ 1183.720794][T24765] 8021q: adding VLAN 0 to HW filter on device bond410 01:03:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3c96, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r4, 0x107, 0xbc7542bb99250dcd, &(0x7f00000001c0)=""/134, &(0x7f0000000280)=0x86) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={@remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) [ 1183.742217][T24768] ipvlan0: entered promiscuous mode [ 1183.748406][T24768] ipvlan0: left promiscuous mode 01:03:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88470000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3db2, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1183.787771][T24782] bond411: entered promiscuous mode [ 1183.793053][T24782] bond411: entered allmulticast mode [ 1183.798756][T24782] 8021q: adding VLAN 0 to HW filter on device bond411 [ 1183.818396][T24774] FAULT_INJECTION: forcing a failure. [ 1183.818396][T24774] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.831268][T24774] CPU: 0 PID: 24774 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1183.841700][T24774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1183.852033][T24774] Call Trace: [ 1183.855758][T24774] [ 1183.858818][T24774] dump_stack_lvl+0xda/0x130 [ 1183.863589][T24774] dump_stack+0x15/0x20 [ 1183.867934][T24774] should_fail_ex+0x21f/0x230 [ 1183.872682][T24774] __should_failslab+0x92/0xa0 [ 1183.877519][T24774] should_failslab+0x9/0x20 [ 1183.882061][T24774] slab_pre_alloc_hook+0x38/0x180 [ 1183.887223][T24774] kmem_cache_alloc+0x58/0x260 [ 1183.892007][T24774] ? __kernfs_new_node+0x6a/0x360 [ 1183.897135][T24774] __kernfs_new_node+0x6a/0x360 [ 1183.902090][T24774] ? up_write+0x30/0xe0 [ 1183.906305][T24774] ? kernfs_activate+0x252/0x270 [ 1183.911278][T24774] kernfs_new_node+0x5f/0xd0 [ 1183.915944][T24774] __kernfs_create_file+0x49/0x180 [ 1183.921128][T24774] ? dev_attr_show+0x90/0x90 [ 1183.925800][T24774] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1183.931292][T24774] internal_create_group+0x320/0x840 [ 1183.936864][T24774] sysfs_create_groups+0x3c/0xe0 [ 1183.941885][T24774] device_add_attrs+0x69/0x400 [ 1183.946678][T24774] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1183.952346][T24774] device_add+0x4ec/0xb30 [ 1183.956876][T24774] netdev_register_kobject+0xfc/0x230 [ 1183.962431][T24774] register_netdevice+0x903/0xcd0 [ 1183.967646][T24774] hsr_dev_finalize+0x2b5/0x440 [ 1183.972504][T24774] hsr_newlink+0x426/0x470 [ 1183.976927][T24774] ? hsr_get_node_list+0x450/0x450 [ 1183.982140][T24774] rtnl_newlink+0xe5a/0x15a0 [ 1183.986741][T24774] ? __list_del_entry_valid+0x5f/0xe0 [ 1183.992313][T24774] ? _raw_spin_unlock+0x26/0x40 [ 1183.997327][T24774] ? __mutex_lock+0x21c/0x8d0 [ 1184.002184][T24774] ? rtnl_setlink+0x2d0/0x2d0 [ 1184.007367][T24774] rtnetlink_rcv_msg+0x807/0x8c0 [ 1184.012404][T24774] ? slab_post_alloc_hook+0x75/0x2d0 [ 1184.017866][T24774] ? xas_load+0x37c/0x390 [ 1184.022203][T24774] ? __rcu_read_unlock+0x4d/0x70 [ 1184.027330][T24774] ? cgroup_rstat_updated+0x8c/0x1c0 [ 1184.032801][T24774] ? xa_load+0xb9/0xe0 [ 1184.036899][T24774] ? kmem_cache_free+0x178/0x280 [ 1184.042048][T24774] ? nlmon_xmit+0x4b/0x60 [ 1184.046676][T24774] ? __kfree_skb+0x102/0x140 [ 1184.051304][T24774] ? consume_skb+0x57/0x180 [ 1184.055840][T24774] ? nlmon_xmit+0x4b/0x60 [ 1184.060175][T24774] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1184.065650][T24774] ? ref_tracker_free+0x3a1/0x400 [ 1184.070666][T24774] ? local_bh_enable+0x1f/0x20 [ 1184.075550][T24774] ? __dev_queue_xmit+0xbba/0x1e60 [ 1184.080891][T24774] netlink_rcv_skb+0x126/0x220 [ 1184.085695][T24774] ? rtnetlink_bind+0x60/0x60 [ 1184.090467][T24774] rtnetlink_rcv+0x1c/0x20 [ 1184.094985][T24774] netlink_unicast+0x56f/0x640 [ 1184.099793][T24774] netlink_sendmsg+0x665/0x770 [ 1184.104700][T24774] ? netlink_getsockopt+0x710/0x710 [ 1184.110117][T24774] ____sys_sendmsg+0x375/0x4c0 [ 1184.114888][T24774] __sys_sendmsg+0x1e3/0x270 [ 1184.120036][T24774] __x64_sys_sendmsg+0x46/0x50 [ 1184.124851][T24774] do_syscall_64+0x41/0xc0 [ 1184.129300][T24774] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1184.135313][T24774] RIP: 0033:0x7f3099bc9169 [ 1184.139786][T24774] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1184.160863][T24774] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.169651][T24774] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1184.177618][T24774] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 01:03:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 53) [ 1184.185630][T24774] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1184.193845][T24774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1184.201879][T24774] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1184.209848][T24774] 01:03:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8202}, 0x0) 01:03:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xba020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1184.279045][T24786] bond873: entered promiscuous mode [ 1184.284835][T24786] 8021q: adding VLAN 0 to HW filter on device bond873 [ 1184.316432][T24788] ipvlan0: entered promiscuous mode [ 1184.322291][T24788] ipvlan0: left promiscuous mode 01:03:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88480000, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r4, 0x107, 0xbc7542bb99250dcd, &(0x7f00000001c0)=""/134, &(0x7f0000000280)=0x86) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={@remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) 01:03:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4788, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1184.333535][T24790] validate_nla: 1 callbacks suppressed [ 1184.333544][T24790] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1184.360122][T24790] bond412: entered promiscuous mode [ 1184.365340][T24790] bond412: entered allmulticast mode [ 1184.371075][T24790] 8021q: adding VLAN 0 to HW filter on device bond412 [ 1184.419336][T24794] FAULT_INJECTION: forcing a failure. [ 1184.419336][T24794] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.432099][T24794] CPU: 0 PID: 24794 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1184.442675][T24794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1184.452729][T24794] Call Trace: [ 1184.456004][T24794] [ 1184.458987][T24794] dump_stack_lvl+0xda/0x130 [ 1184.463574][T24794] dump_stack+0x15/0x20 [ 1184.467738][T24794] should_fail_ex+0x21f/0x230 [ 1184.472459][T24794] __should_failslab+0x92/0xa0 [ 1184.477308][T24794] should_failslab+0x9/0x20 [ 1184.481991][T24794] slab_pre_alloc_hook+0x38/0x180 [ 1184.487067][T24794] kmem_cache_alloc+0x58/0x260 [ 1184.491840][T24794] ? __kernfs_new_node+0x6a/0x360 [ 1184.496908][T24794] __kernfs_new_node+0x6a/0x360 [ 1184.501870][T24794] ? up_write+0x30/0xe0 [ 1184.507060][T24794] ? kernfs_activate+0x252/0x270 [ 1184.512005][T24794] kernfs_new_node+0x5f/0xd0 [ 1184.516751][T24794] __kernfs_create_file+0x49/0x180 [ 1184.521891][T24794] ? dev_attr_show+0x90/0x90 [ 1184.526472][T24794] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1184.531944][T24794] internal_create_group+0x320/0x840 [ 1184.537294][T24794] sysfs_create_groups+0x3c/0xe0 [ 1184.542239][T24794] device_add_attrs+0x69/0x400 [ 1184.547014][T24794] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1184.552562][T24794] device_add+0x4ec/0xb30 [ 1184.556881][T24794] netdev_register_kobject+0xfc/0x230 [ 1184.562275][T24794] register_netdevice+0x903/0xcd0 [ 1184.567371][T24794] hsr_dev_finalize+0x2b5/0x440 [ 1184.572224][T24794] hsr_newlink+0x426/0x470 [ 1184.576645][T24794] ? hsr_get_node_list+0x450/0x450 [ 1184.581806][T24794] rtnl_newlink+0xe5a/0x15a0 [ 1184.586465][T24794] ? __list_del_entry_valid+0x5f/0xe0 [ 1184.591882][T24794] ? _raw_spin_unlock+0x26/0x40 [ 1184.596999][T24794] ? __mutex_lock+0x21c/0x8d0 [ 1184.601755][T24794] ? rtnl_setlink+0x2d0/0x2d0 [ 1184.606530][T24794] rtnetlink_rcv_msg+0x807/0x8c0 [ 1184.611940][T24794] ? kmem_cache_free+0x178/0x280 [ 1184.617087][T24794] ? packet_rcv+0xc2/0x950 [ 1184.621533][T24794] ? __kfree_skb+0x102/0x140 [ 1184.626736][T24794] ? consume_skb+0x57/0x180 [ 1184.631247][T24794] ? packet_rcv+0xc2/0x950 [ 1184.635702][T24794] ? kmem_cache_free+0x178/0x280 [ 1184.640781][T24794] ? nlmon_xmit+0x4b/0x60 [ 1184.645107][T24794] ? __kfree_skb+0x102/0x140 [ 1184.649774][T24794] ? consume_skb+0x57/0x180 [ 1184.654456][T24794] ? nlmon_xmit+0x4b/0x60 [ 1184.658900][T24794] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1184.664200][T24794] ? ref_tracker_free+0x3a1/0x400 [ 1184.669262][T24794] ? local_bh_enable+0x1f/0x20 [ 1184.674462][T24794] ? __dev_queue_xmit+0xbba/0x1e60 [ 1184.679756][T24794] netlink_rcv_skb+0x126/0x220 [ 1184.684569][T24794] ? rtnetlink_bind+0x60/0x60 [ 1184.689467][T24794] rtnetlink_rcv+0x1c/0x20 [ 1184.694027][T24794] netlink_unicast+0x56f/0x640 [ 1184.698926][T24794] netlink_sendmsg+0x665/0x770 [ 1184.703916][T24794] ? netlink_getsockopt+0x710/0x710 [ 1184.709340][T24794] ____sys_sendmsg+0x375/0x4c0 [ 1184.714128][T24794] __sys_sendmsg+0x1e3/0x270 [ 1184.718801][T24794] __x64_sys_sendmsg+0x46/0x50 [ 1184.723748][T24794] do_syscall_64+0x41/0xc0 [ 1184.728271][T24794] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1184.734522][T24794] RIP: 0033:0x7f3099bc9169 [ 1184.738970][T24794] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1184.758668][T24794] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:03:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 54) [ 1184.767445][T24794] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1184.775620][T24794] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1184.783743][T24794] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1184.791702][T24794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1184.799744][T24794] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1184.807733][T24794] 01:03:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8847}, 0x0) 01:03:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xba030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1184.862639][T24803] ipvlan0: entered promiscuous mode [ 1184.868645][T24803] ipvlan0: left promiscuous mode [ 1184.885488][T24809] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r4, 0x107, 0xbc7542bb99250dcd, &(0x7f00000001c0)=""/134, &(0x7f0000000280)=0x86) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={@remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={@remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) [ 1184.911241][T24809] bond413: entered promiscuous mode [ 1184.916472][T24809] bond413: entered allmulticast mode [ 1184.922221][T24809] 8021q: adding VLAN 0 to HW filter on device bond413 [ 1184.955301][T24812] FAULT_INJECTION: forcing a failure. [ 1184.955301][T24812] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.968051][T24812] CPU: 1 PID: 24812 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1184.978470][T24812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1184.988606][T24812] Call Trace: [ 1184.991882][T24812] [ 1184.994803][T24812] dump_stack_lvl+0xda/0x130 [ 1184.999448][T24812] dump_stack+0x15/0x20 [ 1185.003624][T24812] should_fail_ex+0x21f/0x230 [ 1185.008384][T24812] __should_failslab+0x92/0xa0 [ 1185.013182][T24812] should_failslab+0x9/0x20 [ 1185.017677][T24812] slab_pre_alloc_hook+0x38/0x180 [ 1185.022831][T24812] kmem_cache_alloc+0x58/0x260 [ 1185.027618][T24812] ? __kernfs_new_node+0x6a/0x360 [ 1185.032804][T24812] __kernfs_new_node+0x6a/0x360 [ 1185.037793][T24812] ? up_write+0x30/0xe0 [ 1185.041953][T24812] ? kernfs_activate+0x252/0x270 [ 1185.046886][T24812] kernfs_new_node+0x5f/0xd0 [ 1185.051465][T24812] __kernfs_create_file+0x49/0x180 [ 1185.056572][T24812] ? dev_attr_show+0x90/0x90 [ 1185.061183][T24812] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1185.066613][T24812] internal_create_group+0x320/0x840 [ 1185.071911][T24812] sysfs_create_groups+0x3c/0xe0 [ 1185.076883][T24812] device_add_attrs+0x69/0x400 [ 1185.081726][T24812] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1185.087184][T24812] device_add+0x4ec/0xb30 [ 1185.091590][T24812] netdev_register_kobject+0xfc/0x230 [ 1185.097078][T24812] register_netdevice+0x903/0xcd0 [ 1185.102108][T24812] hsr_dev_finalize+0x2b5/0x440 [ 1185.107032][T24812] hsr_newlink+0x426/0x470 [ 1185.111538][T24812] ? hsr_get_node_list+0x450/0x450 [ 1185.116752][T24812] rtnl_newlink+0xe5a/0x15a0 [ 1185.121346][T24812] ? __mmdrop+0x22d/0x330 [ 1185.125679][T24812] ? __list_del_entry_valid+0x5f/0xe0 [ 1185.131049][T24812] ? _raw_spin_unlock+0x26/0x40 [ 1185.135943][T24812] ? __mutex_lock+0x21c/0x8d0 [ 1185.140649][T24812] ? rtnl_setlink+0x2d0/0x2d0 [ 1185.145340][T24812] rtnetlink_rcv_msg+0x807/0x8c0 [ 1185.150411][T24812] ? kmem_cache_free+0x178/0x280 [ 1185.155531][T24812] ? packet_rcv+0xc2/0x950 [ 1185.159974][T24812] ? __kfree_skb+0x102/0x140 [ 1185.164612][T24812] ? consume_skb+0x57/0x180 [ 1185.169237][T24812] ? packet_rcv+0xc2/0x950 [ 1185.173675][T24812] ? kmem_cache_free+0x178/0x280 [ 1185.178687][T24812] ? nlmon_xmit+0x4b/0x60 [ 1185.183036][T24812] ? __kfree_skb+0x102/0x140 [ 1185.187809][T24812] ? consume_skb+0x57/0x180 [ 1185.192652][T24812] ? nlmon_xmit+0x4b/0x60 [ 1185.197076][T24812] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1185.202393][T24812] ? ref_tracker_free+0x3a1/0x400 [ 1185.207433][T24812] ? local_bh_enable+0x1f/0x20 [ 1185.212339][T24812] ? __dev_queue_xmit+0xbba/0x1e60 [ 1185.217818][T24812] netlink_rcv_skb+0x126/0x220 [ 1185.222605][T24812] ? rtnetlink_bind+0x60/0x60 [ 1185.227296][T24812] rtnetlink_rcv+0x1c/0x20 [ 1185.231795][T24812] netlink_unicast+0x56f/0x640 [ 1185.236739][T24812] netlink_sendmsg+0x665/0x770 [ 1185.241619][T24812] ? netlink_getsockopt+0x710/0x710 [ 1185.246828][T24812] ____sys_sendmsg+0x375/0x4c0 [ 1185.251758][T24812] __sys_sendmsg+0x1e3/0x270 [ 1185.256438][T24812] __x64_sys_sendmsg+0x46/0x50 [ 1185.261275][T24812] do_syscall_64+0x41/0xc0 [ 1185.265755][T24812] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1185.271783][T24812] RIP: 0033:0x7f3099bc9169 [ 1185.276193][T24812] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1185.296801][T24812] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:03:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 55) [ 1185.305396][T24812] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1185.313456][T24812] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1185.321425][T24812] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.329676][T24812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.337739][T24812] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1185.345892][T24812] 01:03:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x0) [ 1185.378815][T24832] __nla_validate_parse: 16 callbacks suppressed [ 1185.378829][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.400217][T24832] FAULT_INJECTION: forcing a failure. [ 1185.400217][T24832] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.412985][T24832] CPU: 1 PID: 24832 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1185.423651][T24832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1185.434080][T24832] Call Trace: [ 1185.437355][T24832] [ 1185.440324][T24832] dump_stack_lvl+0xda/0x130 [ 1185.445099][T24832] dump_stack+0x15/0x20 [ 1185.449297][T24832] should_fail_ex+0x21f/0x230 [ 1185.454152][T24832] __should_failslab+0x92/0xa0 [ 1185.459050][T24832] should_failslab+0x9/0x20 [ 1185.463663][T24832] slab_pre_alloc_hook+0x38/0x180 [ 1185.468713][T24832] kmem_cache_alloc+0x58/0x260 [ 1185.473690][T24832] ? __kernfs_new_node+0x6a/0x360 [ 1185.479344][T24832] __kernfs_new_node+0x6a/0x360 [ 1185.484315][T24832] ? up_write+0x30/0xe0 [ 1185.488472][T24832] ? kernfs_activate+0x252/0x270 [ 1185.493444][T24832] kernfs_new_node+0x5f/0xd0 [ 1185.498050][T24832] __kernfs_create_file+0x49/0x180 [ 1185.503160][T24832] ? dev_attr_show+0x90/0x90 [ 1185.508103][T24832] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1185.513907][T24832] internal_create_group+0x320/0x840 [ 1185.519318][T24832] sysfs_create_groups+0x3c/0xe0 [ 1185.524294][T24832] device_add_attrs+0x69/0x400 [ 1185.529064][T24832] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1185.534663][T24832] device_add+0x4ec/0xb30 [ 1185.539000][T24832] netdev_register_kobject+0xfc/0x230 [ 1185.544414][T24832] register_netdevice+0x903/0xcd0 [ 1185.549502][T24832] hsr_dev_finalize+0x2b5/0x440 [ 1185.554573][T24832] hsr_newlink+0x426/0x470 [ 1185.559000][T24832] ? hsr_get_node_list+0x450/0x450 [ 1185.564224][T24832] rtnl_newlink+0xe5a/0x15a0 [ 1185.568809][T24832] ? mutex_spin_on_owner+0xc6/0x170 [ 1185.574026][T24832] ? __mutex_lock+0x18a/0x8d0 [ 1185.578707][T24832] ? rtnl_setlink+0x2d0/0x2d0 [ 1185.583438][T24832] rtnetlink_rcv_msg+0x807/0x8c0 [ 1185.588381][T24832] ? kmem_cache_free+0x178/0x280 [ 1185.593476][T24832] ? packet_rcv+0xc2/0x950 [ 1185.597884][T24832] ? __kfree_skb+0x102/0x140 [ 1185.602580][T24832] ? consume_skb+0x57/0x180 [ 1185.607192][T24832] ? packet_rcv+0xc2/0x950 [ 1185.611615][T24832] ? kmem_cache_free+0x178/0x280 [ 1185.616567][T24832] ? nlmon_xmit+0x4b/0x60 [ 1185.620903][T24832] ? __kfree_skb+0x102/0x140 [ 1185.625525][T24832] ? consume_skb+0x57/0x180 [ 1185.630093][T24832] ? nlmon_xmit+0x4b/0x60 [ 1185.634575][T24832] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1185.640121][T24832] ? ref_tracker_free+0x3a1/0x400 [ 1185.645133][T24832] ? local_bh_enable+0x1f/0x20 [ 1185.649957][T24832] ? __dev_queue_xmit+0xbba/0x1e60 [ 1185.655160][T24832] netlink_rcv_skb+0x126/0x220 [ 1185.659981][T24832] ? rtnetlink_bind+0x60/0x60 [ 1185.664650][T24832] rtnetlink_rcv+0x1c/0x20 [ 1185.669282][T24832] netlink_unicast+0x56f/0x640 [ 1185.674086][T24832] netlink_sendmsg+0x665/0x770 [ 1185.678972][T24832] ? netlink_getsockopt+0x710/0x710 [ 1185.684331][T24832] ____sys_sendmsg+0x375/0x4c0 [ 1185.689373][T24832] __sys_sendmsg+0x1e3/0x270 [ 1185.693983][T24832] __x64_sys_sendmsg+0x46/0x50 [ 1185.698807][T24832] do_syscall_64+0x41/0xc0 [ 1185.703259][T24832] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1185.709143][T24832] RIP: 0033:0x7f3099bc9169 [ 1185.713553][T24832] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1185.733199][T24832] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.741760][T24832] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1185.749735][T24832] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1185.757697][T24832] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.765776][T24832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:03:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 56) [ 1185.773849][T24832] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1185.781860][T24832] 01:03:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc2000000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1185.808647][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1185.826304][T24822] ipvlan0: entered promiscuous mode [ 1185.832158][T24822] ipvlan0: left promiscuous mode [ 1185.846471][T24824] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4888, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xeaffffff, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1185.856480][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1185.874795][T24842] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1185.896881][T24842] bond414: entered promiscuous mode [ 1185.902193][T24842] bond414: entered allmulticast mode 01:03:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1185.907632][T24842] 8021q: adding VLAN 0 to HW filter on device bond414 01:03:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8a03}, 0x0) [ 1185.965254][T24836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.980939][T24836] FAULT_INJECTION: forcing a failure. [ 1185.980939][T24836] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.994231][T24836] CPU: 0 PID: 24836 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1186.004816][T24836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1186.015025][T24836] Call Trace: [ 1186.018566][T24836] [ 1186.021562][T24836] dump_stack_lvl+0xda/0x130 [ 1186.026180][T24836] dump_stack+0x15/0x20 [ 1186.030334][T24836] should_fail_ex+0x21f/0x230 [ 1186.035023][T24836] __should_failslab+0x92/0xa0 [ 1186.039799][T24836] should_failslab+0x9/0x20 [ 1186.044308][T24836] slab_pre_alloc_hook+0x38/0x180 [ 1186.049345][T24836] kmem_cache_alloc+0x58/0x260 [ 1186.054158][T24836] ? __kernfs_new_node+0x6a/0x360 [ 1186.059256][T24836] __kernfs_new_node+0x6a/0x360 [ 1186.064242][T24836] ? up_write+0x30/0xe0 [ 1186.068408][T24836] ? kernfs_activate+0x252/0x270 [ 1186.073421][T24836] kernfs_new_node+0x5f/0xd0 [ 1186.078047][T24836] __kernfs_create_file+0x49/0x180 [ 1186.083255][T24836] ? dev_attr_show+0x90/0x90 [ 1186.087978][T24836] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1186.093338][T24836] internal_create_group+0x320/0x840 [ 1186.098705][T24836] sysfs_create_groups+0x3c/0xe0 [ 1186.103645][T24836] device_add_attrs+0x69/0x400 [ 1186.108417][T24836] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1186.113962][T24836] device_add+0x4ec/0xb30 [ 1186.118487][T24836] netdev_register_kobject+0xfc/0x230 [ 1186.123870][T24836] register_netdevice+0x903/0xcd0 [ 1186.129086][T24836] hsr_dev_finalize+0x2b5/0x440 [ 1186.134086][T24836] hsr_newlink+0x426/0x470 [ 1186.138556][T24836] ? hsr_get_node_list+0x450/0x450 [ 1186.143779][T24836] rtnl_newlink+0xe5a/0x15a0 [ 1186.148455][T24836] ? __list_del_entry_valid+0x5f/0xe0 [ 1186.153864][T24836] ? _raw_spin_unlock+0x26/0x40 [ 1186.158757][T24836] ? __mutex_lock+0x21c/0x8d0 [ 1186.163522][T24836] ? rtnl_setlink+0x2d0/0x2d0 [ 1186.168253][T24836] rtnetlink_rcv_msg+0x807/0x8c0 [ 1186.173189][T24836] ? kmem_cache_free+0x178/0x280 [ 1186.178123][T24836] ? packet_rcv+0xc2/0x950 [ 1186.182648][T24836] ? __kfree_skb+0x102/0x140 [ 1186.187241][T24836] ? consume_skb+0x57/0x180 [ 1186.191773][T24836] ? packet_rcv+0xc2/0x950 [ 1186.196298][T24836] ? kmem_cache_free+0x178/0x280 [ 1186.201672][T24836] ? nlmon_xmit+0x4b/0x60 [ 1186.206052][T24836] ? __kfree_skb+0x102/0x140 [ 1186.210684][T24836] ? consume_skb+0x57/0x180 [ 1186.215365][T24836] ? nlmon_xmit+0x4b/0x60 [ 1186.219785][T24836] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1186.225080][T24836] ? ref_tracker_free+0x3a1/0x400 [ 1186.230178][T24836] ? local_bh_enable+0x1f/0x20 [ 1186.235077][T24836] ? __dev_queue_xmit+0xbba/0x1e60 [ 1186.240338][T24836] netlink_rcv_skb+0x126/0x220 [ 1186.245233][T24836] ? rtnetlink_bind+0x60/0x60 [ 1186.250013][T24836] rtnetlink_rcv+0x1c/0x20 [ 1186.254582][T24836] netlink_unicast+0x56f/0x640 [ 1186.259361][T24836] netlink_sendmsg+0x665/0x770 [ 1186.264178][T24836] ? netlink_getsockopt+0x710/0x710 [ 1186.269382][T24836] ____sys_sendmsg+0x375/0x4c0 [ 1186.274248][T24836] __sys_sendmsg+0x1e3/0x270 [ 1186.278889][T24836] __x64_sys_sendmsg+0x46/0x50 [ 1186.283681][T24836] do_syscall_64+0x41/0xc0 [ 1186.288105][T24836] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1186.294074][T24836] RIP: 0033:0x7f3099bc9169 [ 1186.298486][T24836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1186.318172][T24836] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.326605][T24836] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1186.334567][T24836] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1186.342612][T24836] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.350585][T24836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.358680][T24836] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 01:03:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 57) [ 1186.366802][T24836] 01:03:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc2030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1186.388941][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1186.408048][T24847] ipvlan0: entered promiscuous mode [ 1186.413903][T24847] ipvlan0: left promiscuous mode [ 1186.425365][T24851] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1186.446565][T24851] bond415: entered promiscuous mode [ 1186.452010][T24851] bond415: entered allmulticast mode [ 1186.457481][T24851] 8021q: adding VLAN 0 to HW filter on device bond415 01:03:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async, rerun: 64) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) (rerun: 64) 01:03:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9202}, 0x0) [ 1186.500619][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.519575][T24856] FAULT_INJECTION: forcing a failure. [ 1186.519575][T24856] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.532366][T24856] CPU: 1 PID: 24856 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1186.542846][T24856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1186.552906][T24856] Call Trace: [ 1186.556257][T24856] [ 1186.559184][T24856] dump_stack_lvl+0xda/0x130 [ 1186.563866][T24856] dump_stack+0x15/0x20 [ 1186.568053][T24856] should_fail_ex+0x21f/0x230 [ 1186.572749][T24856] __should_failslab+0x92/0xa0 [ 1186.577725][T24856] should_failslab+0x9/0x20 [ 1186.582256][T24856] slab_pre_alloc_hook+0x38/0x180 [ 1186.587543][T24856] kmem_cache_alloc+0x58/0x260 [ 1186.592483][T24856] ? __kernfs_new_node+0x6a/0x360 [ 1186.597509][T24856] __kernfs_new_node+0x6a/0x360 [ 1186.602461][T24856] ? up_write+0x30/0xe0 [ 1186.606695][T24856] ? kernfs_activate+0x252/0x270 [ 1186.611771][T24856] kernfs_new_node+0x5f/0xd0 [ 1186.616377][T24856] __kernfs_create_file+0x49/0x180 [ 1186.621485][T24856] ? dev_attr_show+0x90/0x90 [ 1186.626190][T24856] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1186.631685][T24856] internal_create_group+0x320/0x840 [ 1186.636989][T24856] sysfs_create_groups+0x3c/0xe0 [ 1186.642150][T24856] device_add_attrs+0x69/0x400 [ 1186.646905][T24856] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1186.652542][T24856] device_add+0x4ec/0xb30 [ 1186.656884][T24856] netdev_register_kobject+0xfc/0x230 [ 1186.662436][T24856] register_netdevice+0x903/0xcd0 [ 1186.667561][T24856] hsr_dev_finalize+0x2b5/0x440 [ 1186.672448][T24856] hsr_newlink+0x426/0x470 [ 1186.676985][T24856] ? hsr_get_node_list+0x450/0x450 [ 1186.682245][T24856] rtnl_newlink+0xe5a/0x15a0 [ 1186.687037][T24856] ? __list_del_entry_valid+0x5f/0xe0 [ 1186.692767][T24856] ? _raw_spin_unlock+0x26/0x40 [ 1186.697874][T24856] ? __mutex_lock+0x21c/0x8d0 [ 1186.702556][T24856] ? rtnl_setlink+0x2d0/0x2d0 [ 1186.707310][T24856] rtnetlink_rcv_msg+0x807/0x8c0 [ 1186.712259][T24856] ? slab_post_alloc_hook+0x75/0x2d0 [ 1186.717596][T24856] ? xas_load+0x37c/0x390 [ 1186.722014][T24856] ? __rcu_read_unlock+0x4d/0x70 [ 1186.727135][T24856] ? xa_load+0xb9/0xe0 [ 1186.731298][T24856] ? kmem_cache_free+0x178/0x280 [ 1186.736282][T24856] ? nlmon_xmit+0x4b/0x60 [ 1186.740605][T24856] ? __kfree_skb+0x102/0x140 [ 1186.745274][T24856] ? consume_skb+0x57/0x180 [ 1186.749807][T24856] ? nlmon_xmit+0x4b/0x60 [ 1186.754123][T24856] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1186.759548][T24856] ? ref_tracker_free+0x3a1/0x400 [ 1186.764630][T24856] ? local_bh_enable+0x1f/0x20 [ 1186.769486][T24856] ? __dev_queue_xmit+0xbba/0x1e60 [ 1186.774706][T24856] netlink_rcv_skb+0x126/0x220 [ 1186.779556][T24856] ? rtnetlink_bind+0x60/0x60 [ 1186.784420][T24856] rtnetlink_rcv+0x1c/0x20 [ 1186.788981][T24856] netlink_unicast+0x56f/0x640 [ 1186.793908][T24856] netlink_sendmsg+0x665/0x770 [ 1186.798672][T24856] ? netlink_getsockopt+0x710/0x710 [ 1186.804721][T24856] ____sys_sendmsg+0x375/0x4c0 [ 1186.809536][T24856] __sys_sendmsg+0x1e3/0x270 [ 1186.814218][T24856] __x64_sys_sendmsg+0x46/0x50 [ 1186.819003][T24856] do_syscall_64+0x41/0xc0 [ 1186.823932][T24856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1186.829845][T24856] RIP: 0033:0x7f3099bc9169 [ 1186.834242][T24856] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1186.853951][T24856] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.862545][T24856] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1186.870598][T24856] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1186.878654][T24856] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.886692][T24856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.894700][T24856] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 01:03:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 58) [ 1186.902793][T24856] 01:03:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc4010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1186.929553][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1186.946941][T24861] ipvlan0: entered promiscuous mode [ 1186.952588][T24861] ipvlan0: left promiscuous mode [ 1186.963222][T24863] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfeffffff, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) [ 1186.986868][T24863] bond416: entered promiscuous mode [ 1186.992386][T24863] bond416: entered allmulticast mode [ 1186.997767][T24863] 8021q: adding VLAN 0 to HW filter on device bond416 01:03:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9203}, 0x0) [ 1187.041585][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1187.061882][T24871] FAULT_INJECTION: forcing a failure. [ 1187.061882][T24871] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.074750][T24871] CPU: 0 PID: 24871 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1187.085166][T24871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1187.095597][T24871] Call Trace: [ 1187.098875][T24871] [ 1187.101801][T24871] dump_stack_lvl+0xda/0x130 [ 1187.106482][T24871] dump_stack+0x15/0x20 [ 1187.110621][T24871] should_fail_ex+0x21f/0x230 [ 1187.115303][T24871] __should_failslab+0x92/0xa0 [ 1187.120104][T24871] should_failslab+0x9/0x20 [ 1187.124604][T24871] slab_pre_alloc_hook+0x38/0x180 [ 1187.129886][T24871] kmem_cache_alloc+0x58/0x260 [ 1187.134710][T24871] ? __kernfs_new_node+0x6a/0x360 [ 1187.139851][T24871] __kernfs_new_node+0x6a/0x360 [ 1187.144744][T24871] ? up_write+0x30/0xe0 [ 1187.148909][T24871] ? kernfs_activate+0x252/0x270 [ 1187.153938][T24871] kernfs_new_node+0x5f/0xd0 [ 1187.158547][T24871] __kernfs_create_file+0x49/0x180 [ 1187.163652][T24871] ? dev_attr_show+0x90/0x90 [ 1187.168346][T24871] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1187.173805][T24871] internal_create_group+0x320/0x840 [ 1187.179919][T24871] sysfs_create_groups+0x3c/0xe0 [ 1187.184919][T24871] device_add_attrs+0x69/0x400 [ 1187.189695][T24871] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1187.195174][T24871] device_add+0x4ec/0xb30 [ 1187.199522][T24871] netdev_register_kobject+0xfc/0x230 [ 1187.204925][T24871] register_netdevice+0x903/0xcd0 [ 1187.210096][T24871] hsr_dev_finalize+0x2b5/0x440 [ 1187.214966][T24871] hsr_newlink+0x426/0x470 [ 1187.219500][T24871] ? hsr_get_node_list+0x450/0x450 [ 1187.224710][T24871] rtnl_newlink+0xe5a/0x15a0 [ 1187.229324][T24871] ? __list_del_entry_valid+0x5f/0xe0 [ 1187.234997][T24871] ? _raw_spin_unlock+0x26/0x40 [ 1187.240086][T24871] ? __mutex_lock+0x21c/0x8d0 [ 1187.244850][T24871] ? rtnl_setlink+0x2d0/0x2d0 [ 1187.249541][T24871] rtnetlink_rcv_msg+0x807/0x8c0 [ 1187.254547][T24871] ? slab_post_alloc_hook+0x75/0x2d0 [ 1187.259954][T24871] ? xas_load+0x37c/0x390 [ 1187.264460][T24871] ? __rcu_read_unlock+0x4d/0x70 [ 1187.269385][T24871] ? xa_load+0xb9/0xe0 [ 1187.273541][T24871] ? kmem_cache_free+0x178/0x280 [ 1187.278490][T24871] ? nlmon_xmit+0x4b/0x60 [ 1187.283059][T24871] ? __kfree_skb+0x102/0x140 [ 1187.287692][T24871] ? consume_skb+0x57/0x180 [ 1187.292209][T24871] ? nlmon_xmit+0x4b/0x60 [ 1187.296537][T24871] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1187.301976][T24871] ? netlink_rcv_skb+0x40/0x220 [ 1187.307111][T24871] netlink_rcv_skb+0x126/0x220 [ 1187.312283][T24871] ? rtnetlink_bind+0x60/0x60 [ 1187.316991][T24871] rtnetlink_rcv+0x1c/0x20 [ 1187.321521][T24871] netlink_unicast+0x56f/0x640 [ 1187.326456][T24871] netlink_sendmsg+0x665/0x770 [ 1187.331318][T24871] ? netlink_getsockopt+0x710/0x710 [ 1187.336629][T24871] ____sys_sendmsg+0x375/0x4c0 [ 1187.341572][T24871] __sys_sendmsg+0x1e3/0x270 [ 1187.346241][T24871] __x64_sys_sendmsg+0x46/0x50 [ 1187.351196][T24871] do_syscall_64+0x41/0xc0 [ 1187.355613][T24871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1187.361579][T24871] RIP: 0033:0x7f3099bc9169 [ 1187.366142][T24871] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 01:03:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 59) [ 1187.386189][T24871] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.394795][T24871] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1187.402858][T24871] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1187.410935][T24871] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.419007][T24871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.427257][T24871] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1187.435408][T24871] [ 1187.460601][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1187.481249][T24876] ipvlan0: entered promiscuous mode [ 1187.486977][T24876] ipvlan0: left promiscuous mode [ 1187.498229][T24879] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc51a0000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1187.520775][T24879] bond417: entered promiscuous mode [ 1187.526140][T24879] bond417: entered allmulticast mode [ 1187.531651][T24879] 8021q: adding VLAN 0 to HW filter on device bond417 01:03:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYRESOCT=r3], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9401}, 0x0) [ 1187.579724][T24886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1187.597584][T24886] FAULT_INJECTION: forcing a failure. [ 1187.597584][T24886] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.610493][T24886] CPU: 1 PID: 24886 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1187.621046][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1187.631220][T24886] Call Trace: [ 1187.634491][T24886] [ 1187.637560][T24886] dump_stack_lvl+0xda/0x130 [ 1187.642140][T24886] dump_stack+0x15/0x20 [ 1187.646429][T24886] should_fail_ex+0x21f/0x230 [ 1187.651274][T24886] __should_failslab+0x92/0xa0 [ 1187.656096][T24886] should_failslab+0x9/0x20 [ 1187.660600][T24886] slab_pre_alloc_hook+0x38/0x180 [ 1187.665712][T24886] kmem_cache_alloc+0x58/0x260 [ 1187.670493][T24886] ? __kernfs_new_node+0x6a/0x360 [ 1187.675625][T24886] __kernfs_new_node+0x6a/0x360 [ 1187.680516][T24886] ? up_write+0x30/0xe0 [ 1187.684819][T24886] ? kernfs_activate+0x252/0x270 [ 1187.689910][T24886] kernfs_new_node+0x5f/0xd0 [ 1187.694628][T24886] __kernfs_create_file+0x49/0x180 [ 1187.699882][T24886] ? dev_attr_show+0x90/0x90 [ 1187.704975][T24886] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1187.710408][T24886] internal_create_group+0x320/0x840 [ 1187.715691][T24886] sysfs_create_groups+0x3c/0xe0 [ 1187.721077][T24886] device_add_attrs+0x69/0x400 [ 1187.726033][T24886] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1187.731503][T24886] device_add+0x4ec/0xb30 [ 1187.735913][T24886] netdev_register_kobject+0xfc/0x230 [ 1187.741296][T24886] register_netdevice+0x903/0xcd0 [ 1187.746529][T24886] hsr_dev_finalize+0x2b5/0x440 [ 1187.752023][T24886] hsr_newlink+0x426/0x470 [ 1187.756608][T24886] ? hsr_get_node_list+0x450/0x450 [ 1187.761728][T24886] rtnl_newlink+0xe5a/0x15a0 [ 1187.766340][T24886] ? __list_del_entry_valid+0x5f/0xe0 [ 1187.771720][T24886] ? _raw_spin_unlock+0x26/0x40 [ 1187.776571][T24886] ? __mutex_lock+0x21c/0x8d0 [ 1187.781280][T24886] ? rtnl_setlink+0x2d0/0x2d0 [ 1187.786101][T24886] rtnetlink_rcv_msg+0x807/0x8c0 [ 1187.791088][T24886] ? slab_post_alloc_hook+0x75/0x2d0 [ 1187.796736][T24886] ? xas_load+0x37c/0x390 [ 1187.801205][T24886] ? __rcu_read_unlock+0x4d/0x70 [ 1187.806220][T24886] ? xa_load+0xb9/0xe0 [ 1187.810483][T24886] ? kmem_cache_free+0x178/0x280 [ 1187.815567][T24886] ? nlmon_xmit+0x4b/0x60 [ 1187.819899][T24886] ? __kfree_skb+0x102/0x140 [ 1187.824685][T24886] ? consume_skb+0x57/0x180 [ 1187.829197][T24886] ? nlmon_xmit+0x4b/0x60 [ 1187.833603][T24886] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1187.838936][T24886] ? ref_tracker_free+0x3a1/0x400 [ 1187.844054][T24886] ? local_bh_enable+0x1f/0x20 [ 1187.848916][T24886] ? __dev_queue_xmit+0xbba/0x1e60 [ 1187.854401][T24886] netlink_rcv_skb+0x126/0x220 [ 1187.859377][T24886] ? rtnetlink_bind+0x60/0x60 [ 1187.864238][T24886] rtnetlink_rcv+0x1c/0x20 [ 1187.868699][T24886] netlink_unicast+0x56f/0x640 [ 1187.873597][T24886] netlink_sendmsg+0x665/0x770 [ 1187.878361][T24886] ? netlink_getsockopt+0x710/0x710 [ 1187.884393][T24886] ____sys_sendmsg+0x375/0x4c0 [ 1187.889245][T24886] __sys_sendmsg+0x1e3/0x270 [ 1187.893844][T24886] __x64_sys_sendmsg+0x46/0x50 [ 1187.898674][T24886] do_syscall_64+0x41/0xc0 [ 1187.903085][T24886] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1187.908989][T24886] RIP: 0033:0x7f3099bc9169 [ 1187.913412][T24886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1187.933151][T24886] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.941577][T24886] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1187.950135][T24886] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1187.958288][T24886] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.966388][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:03:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 60) [ 1187.974451][T24886] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1187.982523][T24886] [ 1188.003178][T24891] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1188.025793][T24891] bond418: entered promiscuous mode [ 1188.031207][T24891] bond418: entered allmulticast mode [ 1188.036705][T24891] 8021q: adding VLAN 0 to HW filter on device bond418 01:03:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc8020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1188.060880][T24893] ipvlan0: entered promiscuous mode [ 1188.068172][T24893] ipvlan0: left promiscuous mode 01:03:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYRESOCT=r3], 0x3c}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9802}, 0x0) [ 1188.110616][T24902] FAULT_INJECTION: forcing a failure. [ 1188.110616][T24902] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.124019][T24902] CPU: 0 PID: 24902 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1188.134535][T24902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1188.144719][T24902] Call Trace: [ 1188.148175][T24902] [ 1188.152061][T24902] dump_stack_lvl+0xda/0x130 [ 1188.156768][T24902] dump_stack+0x15/0x20 [ 1188.161028][T24902] should_fail_ex+0x21f/0x230 [ 1188.166233][T24902] __should_failslab+0x92/0xa0 [ 1188.171019][T24902] should_failslab+0x9/0x20 [ 1188.175556][T24902] slab_pre_alloc_hook+0x38/0x180 [ 1188.180846][T24902] kmem_cache_alloc+0x58/0x260 [ 1188.185766][T24902] ? __kernfs_new_node+0x6a/0x360 [ 1188.190876][T24902] __kernfs_new_node+0x6a/0x360 [ 1188.196041][T24902] ? make_kgid+0x115/0x310 [ 1188.200497][T24902] ? net_ns_get_ownership+0xae/0xd0 [ 1188.207445][T24902] ? net_namespace+0x20/0x20 [ 1188.212201][T24902] kernfs_create_dir_ns+0x62/0x150 [ 1188.217400][T24902] internal_create_group+0x17d/0x840 [ 1188.222750][T24902] sysfs_create_groups+0x3c/0xe0 [ 1188.227906][T24902] device_add_attrs+0xf5/0x400 [ 1188.232961][T24902] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1188.238461][T24902] device_add+0x4ec/0xb30 [ 1188.242877][T24902] netdev_register_kobject+0xfc/0x230 [ 1188.248718][T24902] register_netdevice+0x903/0xcd0 [ 1188.253844][T24902] hsr_dev_finalize+0x2b5/0x440 [ 1188.258754][T24902] hsr_newlink+0x426/0x470 [ 1188.263271][T24902] ? hsr_get_node_list+0x450/0x450 [ 1188.268427][T24902] rtnl_newlink+0xe5a/0x15a0 [ 1188.273044][T24902] ? __list_del_entry_valid+0x5f/0xe0 [ 1188.278496][T24902] ? _raw_spin_unlock+0x26/0x40 [ 1188.283391][T24902] ? __mutex_lock+0x21c/0x8d0 [ 1188.288226][T24902] ? rtnl_setlink+0x2d0/0x2d0 [ 1188.293046][T24902] rtnetlink_rcv_msg+0x807/0x8c0 [ 1188.298020][T24902] ? slab_post_alloc_hook+0x75/0x2d0 [ 1188.303415][T24902] ? xas_load+0x37c/0x390 [ 1188.307750][T24902] ? __rcu_read_unlock+0x4d/0x70 [ 1188.312805][T24902] ? xa_load+0xb9/0xe0 [ 1188.316930][T24902] ? kmem_cache_free+0x178/0x280 [ 1188.321889][T24902] ? nlmon_xmit+0x4b/0x60 [ 1188.326359][T24902] ? __kfree_skb+0x102/0x140 [ 1188.331142][T24902] ? consume_skb+0x57/0x180 [ 1188.335857][T24902] ? nlmon_xmit+0x4b/0x60 [ 1188.340348][T24902] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1188.346426][T24902] ? ref_tracker_free+0x3a1/0x400 [ 1188.351484][T24902] ? local_bh_enable+0x1f/0x20 [ 1188.356272][T24902] ? __dev_queue_xmit+0xbba/0x1e60 [ 1188.361572][T24902] netlink_rcv_skb+0x126/0x220 [ 1188.366349][T24902] ? rtnetlink_bind+0x60/0x60 [ 1188.371129][T24902] rtnetlink_rcv+0x1c/0x20 [ 1188.375593][T24902] netlink_unicast+0x56f/0x640 [ 1188.380391][T24902] netlink_sendmsg+0x665/0x770 [ 1188.385248][T24902] ? netlink_getsockopt+0x710/0x710 [ 1188.390467][T24902] ____sys_sendmsg+0x375/0x4c0 [ 1188.395327][T24902] __sys_sendmsg+0x1e3/0x270 [ 1188.399912][T24902] __x64_sys_sendmsg+0x46/0x50 [ 1188.404692][T24902] do_syscall_64+0x41/0xc0 [ 1188.409097][T24902] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1188.415052][T24902] RIP: 0033:0x7f3099bc9169 [ 1188.419552][T24902] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1188.439196][T24902] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1188.447787][T24902] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 61) 01:03:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1188.456016][T24902] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1188.464073][T24902] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.472081][T24902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.480050][T24902] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1188.488041][T24902] [ 1188.506969][T24906] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xca020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1188.535614][T24906] bond419: entered promiscuous mode [ 1188.540961][T24906] bond419: entered allmulticast mode [ 1188.546538][T24906] 8021q: adding VLAN 0 to HW filter on device bond419 01:03:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYRESOCT=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYRESOCT=r3], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@private2, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r3}) 01:03:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9803}, 0x0) [ 1188.605867][T24916] FAULT_INJECTION: forcing a failure. [ 1188.605867][T24916] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.618843][T24916] CPU: 0 PID: 24916 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1188.629588][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1188.639655][T24916] Call Trace: [ 1188.643006][T24916] [ 1188.646108][T24916] dump_stack_lvl+0xda/0x130 [ 1188.650778][T24916] dump_stack+0x15/0x20 [ 1188.654959][T24916] should_fail_ex+0x21f/0x230 [ 1188.659674][T24916] __should_failslab+0x92/0xa0 [ 1188.664511][T24916] should_failslab+0x9/0x20 [ 1188.669084][T24916] slab_pre_alloc_hook+0x38/0x180 [ 1188.674174][T24916] kmem_cache_alloc+0x58/0x260 [ 1188.678958][T24916] ? __kernfs_new_node+0x6a/0x360 [ 1188.684149][T24916] __kernfs_new_node+0x6a/0x360 [ 1188.689027][T24916] ? up_write+0x30/0xe0 [ 1188.693181][T24916] ? kernfs_activate+0x252/0x270 [ 1188.698223][T24916] kernfs_new_node+0x5f/0xd0 [ 1188.702804][T24916] __kernfs_create_file+0x49/0x180 [ 1188.708001][T24916] ? dev_attr_show+0x90/0x90 [ 1188.712761][T24916] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1188.718206][T24916] internal_create_group+0x320/0x840 [ 1188.723515][T24916] sysfs_create_groups+0x3c/0xe0 [ 1188.728584][T24916] device_add_attrs+0x69/0x400 [ 1188.733341][T24916] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1188.738831][T24916] device_add+0x4ec/0xb30 [ 1188.743169][T24916] netdev_register_kobject+0xfc/0x230 [ 1188.748539][T24916] register_netdevice+0x903/0xcd0 [ 1188.753643][T24916] hsr_dev_finalize+0x2b5/0x440 [ 1188.758509][T24916] hsr_newlink+0x426/0x470 [ 1188.762971][T24916] ? hsr_get_node_list+0x450/0x450 [ 1188.768145][T24916] rtnl_newlink+0xe5a/0x15a0 [ 1188.772739][T24916] ? __list_del_entry_valid+0x5f/0xe0 [ 1188.778284][T24916] ? _raw_spin_unlock+0x26/0x40 [ 1188.783137][T24916] ? __mutex_lock+0x21c/0x8d0 [ 1188.787919][T24916] ? rtnl_setlink+0x2d0/0x2d0 [ 1188.792869][T24916] rtnetlink_rcv_msg+0x807/0x8c0 [ 1188.797930][T24916] ? slab_post_alloc_hook+0x75/0x2d0 [ 1188.803393][T24916] ? xas_load+0x37c/0x390 [ 1188.807922][T24916] ? __rcu_read_unlock+0x4d/0x70 [ 1188.813066][T24916] ? xa_load+0xb9/0xe0 [ 1188.817123][T24916] ? kmem_cache_free+0x178/0x280 [ 1188.822179][T24916] ? nlmon_xmit+0x4b/0x60 [ 1188.826980][T24916] ? __kfree_skb+0x102/0x140 [ 1188.831596][T24916] ? consume_skb+0x57/0x180 [ 1188.836194][T24916] ? nlmon_xmit+0x4b/0x60 [ 1188.840856][T24916] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1188.846348][T24916] ? ref_tracker_free+0x3a1/0x400 [ 1188.851682][T24916] ? local_bh_enable+0x1f/0x20 [ 1188.856463][T24916] ? __dev_queue_xmit+0xbba/0x1e60 [ 1188.861918][T24916] netlink_rcv_skb+0x126/0x220 [ 1188.866736][T24916] ? rtnetlink_bind+0x60/0x60 [ 1188.871428][T24916] rtnetlink_rcv+0x1c/0x20 [ 1188.875902][T24916] netlink_unicast+0x56f/0x640 [ 1188.880754][T24916] netlink_sendmsg+0x665/0x770 [ 1188.885708][T24916] ? netlink_getsockopt+0x710/0x710 [ 1188.891078][T24916] ____sys_sendmsg+0x375/0x4c0 [ 1188.895856][T24916] __sys_sendmsg+0x1e3/0x270 [ 1188.900543][T24916] __x64_sys_sendmsg+0x46/0x50 [ 1188.906683][T24916] do_syscall_64+0x41/0xc0 [ 1188.911090][T24916] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1188.917091][T24916] RIP: 0033:0x7f3099bc9169 [ 1188.921522][T24916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1188.941513][T24916] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1188.949931][T24916] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1188.957986][T24916] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1188.966077][T24916] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.974101][T24916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.982333][T24916] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1188.990744][T24916] 01:03:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 62) [ 1189.012431][T24919] ipvlan0: entered promiscuous mode [ 1189.018411][T24919] ipvlan0: left promiscuous mode [ 1189.041842][T24924] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff81, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xca030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7400, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1189.065122][T24924] bond420: entered promiscuous mode [ 1189.070611][T24924] bond420: entered allmulticast mode [ 1189.077923][T24924] 8021q: adding VLAN 0 to HW filter on device bond420 01:03:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x71) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x61, r4}) 01:03:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9a02}, 0x0) [ 1189.136074][T24934] FAULT_INJECTION: forcing a failure. [ 1189.136074][T24934] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.148859][T24934] CPU: 0 PID: 24934 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1189.159278][T24934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1189.169552][T24934] Call Trace: [ 1189.172849][T24934] [ 1189.175846][T24934] dump_stack_lvl+0xda/0x130 [ 1189.181555][T24934] dump_stack+0x15/0x20 [ 1189.185856][T24934] should_fail_ex+0x21f/0x230 [ 1189.190529][T24934] __should_failslab+0x92/0xa0 [ 1189.195312][T24934] should_failslab+0x9/0x20 [ 1189.200405][T24934] slab_pre_alloc_hook+0x38/0x180 [ 1189.205497][T24934] kmem_cache_alloc+0x58/0x260 [ 1189.210647][T24934] ? __kernfs_new_node+0x6a/0x360 [ 1189.215704][T24934] __kernfs_new_node+0x6a/0x360 [ 1189.220582][T24934] ? idr_alloc_cyclic+0x294/0x310 [ 1189.225625][T24934] ? rb_insert_color+0x6c/0x2a0 [ 1189.230496][T24934] ? security_kernfs_init_security+0x4e/0x70 [ 1189.236631][T24934] kernfs_new_node+0x5f/0xd0 [ 1189.241315][T24934] __kernfs_create_file+0x49/0x180 [ 1189.246455][T24934] ? dev_attr_show+0x90/0x90 [ 1189.251054][T24934] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1189.256548][T24934] internal_create_group+0x320/0x840 [ 1189.261949][T24934] sysfs_create_groups+0x3c/0xe0 [ 1189.266941][T24934] device_add_attrs+0xf5/0x400 [ 1189.271811][T24934] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1189.277282][T24934] device_add+0x4ec/0xb30 [ 1189.281635][T24934] netdev_register_kobject+0xfc/0x230 [ 1189.287220][T24934] register_netdevice+0x903/0xcd0 [ 1189.292366][T24934] hsr_dev_finalize+0x2b5/0x440 [ 1189.297330][T24934] hsr_newlink+0x426/0x470 [ 1189.301785][T24934] ? hsr_get_node_list+0x450/0x450 [ 1189.306975][T24934] rtnl_newlink+0xe5a/0x15a0 [ 1189.311941][T24934] ? __list_del_entry_valid+0x5f/0xe0 [ 1189.317415][T24934] ? _raw_spin_unlock+0x26/0x40 [ 1189.322367][T24934] ? __mutex_lock+0x21c/0x8d0 [ 1189.327115][T24934] ? rtnl_setlink+0x2d0/0x2d0 [ 1189.331799][T24934] rtnetlink_rcv_msg+0x807/0x8c0 [ 1189.336784][T24934] ? slab_post_alloc_hook+0x75/0x2d0 [ 1189.342174][T24934] ? xas_load+0x37c/0x390 [ 1189.346501][T24934] ? __rcu_read_unlock+0x4d/0x70 [ 1189.351494][T24934] ? xa_load+0xb9/0xe0 [ 1189.355632][T24934] ? kmem_cache_free+0x178/0x280 [ 1189.360629][T24934] ? nlmon_xmit+0x4b/0x60 [ 1189.365039][T24934] ? __kfree_skb+0x102/0x140 [ 1189.369700][T24934] ? consume_skb+0x57/0x180 [ 1189.374285][T24934] ? nlmon_xmit+0x4b/0x60 [ 1189.378659][T24934] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1189.384101][T24934] ? ref_tracker_free+0x3a1/0x400 [ 1189.389233][T24934] ? local_bh_enable+0x1f/0x20 [ 1189.394201][T24934] ? __dev_queue_xmit+0xbba/0x1e60 [ 1189.399329][T24934] netlink_rcv_skb+0x126/0x220 [ 1189.404185][T24934] ? rtnetlink_bind+0x60/0x60 [ 1189.408913][T24934] rtnetlink_rcv+0x1c/0x20 [ 1189.413370][T24934] netlink_unicast+0x56f/0x640 [ 1189.418135][T24934] netlink_sendmsg+0x665/0x770 [ 1189.422918][T24934] ? netlink_getsockopt+0x710/0x710 [ 1189.428194][T24934] ____sys_sendmsg+0x375/0x4c0 [ 1189.433042][T24934] __sys_sendmsg+0x1e3/0x270 [ 1189.437703][T24934] __x64_sys_sendmsg+0x46/0x50 [ 1189.442561][T24934] do_syscall_64+0x41/0xc0 [ 1189.447072][T24934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1189.453039][T24934] RIP: 0033:0x7f3099bc9169 [ 1189.457441][T24934] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1189.477297][T24934] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.486247][T24934] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1189.494399][T24934] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1189.502371][T24934] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.510340][T24934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.518756][T24934] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1189.526736][T24934] 01:03:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 63) [ 1189.538463][T24937] ipvlan0: entered promiscuous mode [ 1189.544705][T24937] ipvlan0: left promiscuous mode [ 1189.569331][T24942] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffea, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd0010000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 01:03:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1189.589138][T24942] bond421: entered promiscuous mode [ 1189.594470][T24942] bond421: entered allmulticast mode [ 1189.600940][T24942] 8021q: adding VLAN 0 to HW filter on device bond421 [ 1189.638785][T24945] bond874: entered promiscuous mode [ 1189.649500][T24945] 8021q: adding VLAN 0 to HW filter on device bond874 01:03:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa200}, 0x0) [ 1189.687063][T24949] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1189.712399][T24949] bond875: entered promiscuous mode [ 1189.717795][T24949] 8021q: adding VLAN 0 to HW filter on device bond875 01:03:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x71) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x61, r4}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x71) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x61, r4}) (async) [ 1189.735952][T24953] FAULT_INJECTION: forcing a failure. [ 1189.735952][T24953] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.748625][T24953] CPU: 1 PID: 24953 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1189.759089][T24953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1189.769322][T24953] Call Trace: [ 1189.772604][T24953] [ 1189.775543][T24953] dump_stack_lvl+0xda/0x130 [ 1189.780152][T24953] dump_stack+0x15/0x20 [ 1189.784359][T24953] should_fail_ex+0x21f/0x230 [ 1189.789137][T24953] __should_failslab+0x92/0xa0 [ 1189.794002][T24953] should_failslab+0x9/0x20 [ 1189.798496][T24953] slab_pre_alloc_hook+0x38/0x180 [ 1189.803534][T24953] kmem_cache_alloc+0x58/0x260 [ 1189.808443][T24953] ? __kernfs_new_node+0x6a/0x360 [ 1189.813462][T24953] __kernfs_new_node+0x6a/0x360 [ 1189.818394][T24953] ? up_write+0x30/0xe0 [ 1189.822565][T24953] ? kernfs_activate+0x252/0x270 [ 1189.827918][T24953] kernfs_new_node+0x5f/0xd0 [ 1189.832769][T24953] __kernfs_create_file+0x49/0x180 [ 1189.838051][T24953] ? dev_attr_show+0x90/0x90 [ 1189.842759][T24953] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1189.848317][T24953] internal_create_group+0x320/0x840 [ 1189.853888][T24953] sysfs_create_groups+0x3c/0xe0 [ 1189.858996][T24953] device_add_attrs+0x69/0x400 [ 1189.865566][T24953] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1189.871244][T24953] device_add+0x4ec/0xb30 [ 1189.875582][T24953] netdev_register_kobject+0xfc/0x230 [ 1189.881022][T24953] register_netdevice+0x903/0xcd0 [ 1189.886140][T24953] hsr_dev_finalize+0x2b5/0x440 [ 1189.891042][T24953] hsr_newlink+0x426/0x470 [ 1189.895524][T24953] ? hsr_get_node_list+0x450/0x450 [ 1189.900753][T24953] rtnl_newlink+0xe5a/0x15a0 [ 1189.905409][T24953] ? __list_del_entry_valid+0x5f/0xe0 [ 1189.911006][T24953] ? _raw_spin_unlock+0x26/0x40 [ 1189.915848][T24953] ? __mutex_lock+0x21c/0x8d0 [ 1189.920667][T24953] ? rtnl_setlink+0x2d0/0x2d0 [ 1189.925450][T24953] rtnetlink_rcv_msg+0x807/0x8c0 [ 1189.930395][T24953] ? slab_post_alloc_hook+0x75/0x2d0 [ 1189.935848][T24953] ? xas_load+0x37c/0x390 [ 1189.940367][T24953] ? __rcu_read_unlock+0x4d/0x70 [ 1189.945316][T24953] ? xa_load+0xb9/0xe0 [ 1189.949391][T24953] ? kmem_cache_free+0x178/0x280 [ 1189.954343][T24953] ? nlmon_xmit+0x4b/0x60 [ 1189.958840][T24953] ? __kfree_skb+0x102/0x140 [ 1189.963434][T24953] ? consume_skb+0x57/0x180 [ 1189.968064][T24953] ? nlmon_xmit+0x4b/0x60 [ 1189.972435][T24953] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1189.977788][T24953] ? ref_tracker_free+0x3a1/0x400 [ 1189.982921][T24953] ? local_bh_enable+0x1f/0x20 [ 1189.987752][T24953] ? __dev_queue_xmit+0xbba/0x1e60 [ 1189.993039][T24953] netlink_rcv_skb+0x126/0x220 [ 1189.997828][T24953] ? rtnetlink_bind+0x60/0x60 [ 1190.002678][T24953] rtnetlink_rcv+0x1c/0x20 [ 1190.007089][T24953] netlink_unicast+0x56f/0x640 [ 1190.012199][T24953] netlink_sendmsg+0x665/0x770 [ 1190.017216][T24953] ? netlink_getsockopt+0x710/0x710 [ 1190.022511][T24953] ____sys_sendmsg+0x375/0x4c0 [ 1190.027377][T24953] __sys_sendmsg+0x1e3/0x270 [ 1190.031992][T24953] __x64_sys_sendmsg+0x46/0x50 [ 1190.037108][T24953] do_syscall_64+0x41/0xc0 [ 1190.041538][T24953] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1190.047445][T24953] RIP: 0033:0x7f3099bc9169 [ 1190.051867][T24953] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1190.071503][T24953] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.079965][T24953] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 64) [ 1190.087937][T24953] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1190.095920][T24953] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.103994][T24953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1190.112030][T24953] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1190.120016][T24953] [ 1190.152184][T24956] ipvlan0: entered promiscuous mode [ 1190.157953][T24956] ipvlan0: left promiscuous mode [ 1190.178959][T24961] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) 01:03:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1190.200529][T24961] bond422: entered promiscuous mode [ 1190.205798][T24961] bond422: entered allmulticast mode [ 1190.211246][T24961] 8021q: adding VLAN 0 to HW filter on device bond422 01:03:24 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x71) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r4, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r4}) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r8, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private2, 0x0, r8}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x61, r4}) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x61, r4}) 01:03:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa202}, 0x0) 01:03:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2020000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1190.271214][T24971] FAULT_INJECTION: forcing a failure. [ 1190.271214][T24971] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.283901][T24971] CPU: 0 PID: 24971 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1190.294376][T24971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1190.304468][T24971] Call Trace: [ 1190.307755][T24971] [ 1190.310738][T24971] dump_stack_lvl+0xda/0x130 [ 1190.315434][T24971] dump_stack+0x15/0x20 [ 1190.319611][T24971] should_fail_ex+0x21f/0x230 [ 1190.324324][T24971] __should_failslab+0x92/0xa0 [ 1190.329161][T24971] should_failslab+0x9/0x20 [ 1190.333654][T24971] slab_pre_alloc_hook+0x38/0x180 [ 1190.338680][T24971] kmem_cache_alloc+0x58/0x260 [ 1190.343472][T24971] ? __kernfs_new_node+0x6a/0x360 [ 1190.348533][T24971] __kernfs_new_node+0x6a/0x360 [ 1190.353479][T24971] ? up_write+0x30/0xe0 [ 1190.357804][T24971] ? kernfs_activate+0x252/0x270 [ 1190.362746][T24971] kernfs_new_node+0x5f/0xd0 [ 1190.367386][T24971] __kernfs_create_file+0x49/0x180 [ 1190.372596][T24971] ? dev_attr_show+0x90/0x90 [ 1190.377184][T24971] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1190.382571][T24971] internal_create_group+0x320/0x840 [ 1190.387848][T24971] sysfs_create_groups+0x3c/0xe0 [ 1190.392921][T24971] device_add_attrs+0xf5/0x400 [ 1190.397676][T24971] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1190.403194][T24971] device_add+0x4ec/0xb30 [ 1190.407532][T24971] netdev_register_kobject+0xfc/0x230 [ 1190.412891][T24971] register_netdevice+0x903/0xcd0 [ 1190.417925][T24971] hsr_dev_finalize+0x2b5/0x440 [ 1190.422870][T24971] hsr_newlink+0x426/0x470 [ 1190.427301][T24971] ? hsr_get_node_list+0x450/0x450 [ 1190.432525][T24971] rtnl_newlink+0xe5a/0x15a0 [ 1190.437145][T24971] ? __list_del_entry_valid+0x5f/0xe0 [ 1190.442502][T24971] ? _raw_spin_unlock+0x26/0x40 [ 1190.447334][T24971] ? __mutex_lock+0x21c/0x8d0 [ 1190.452063][T24971] ? rtnl_setlink+0x2d0/0x2d0 [ 1190.456731][T24971] rtnetlink_rcv_msg+0x807/0x8c0 [ 1190.461761][T24971] ? slab_post_alloc_hook+0x75/0x2d0 [ 1190.467125][T24971] ? xas_load+0x37c/0x390 [ 1190.471494][T24971] ? __rcu_read_unlock+0x4d/0x70 [ 1190.476493][T24971] ? xa_load+0xb9/0xe0 [ 1190.480547][T24971] ? kmem_cache_free+0x178/0x280 [ 1190.485493][T24971] ? nlmon_xmit+0x4b/0x60 [ 1190.489808][T24971] ? __kfree_skb+0x102/0x140 [ 1190.494436][T24971] ? consume_skb+0x57/0x180 [ 1190.498938][T24971] ? nlmon_xmit+0x4b/0x60 [ 1190.503279][T24971] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1190.508704][T24971] ? ref_tracker_free+0x3a1/0x400 [ 1190.513719][T24971] ? local_bh_enable+0x1f/0x20 [ 1190.518474][T24971] ? __dev_queue_xmit+0xbba/0x1e60 [ 1190.523593][T24971] netlink_rcv_skb+0x126/0x220 [ 1190.528407][T24971] ? rtnetlink_bind+0x60/0x60 [ 1190.533165][T24971] rtnetlink_rcv+0x1c/0x20 [ 1190.537603][T24971] netlink_unicast+0x56f/0x640 [ 1190.542405][T24971] netlink_sendmsg+0x665/0x770 [ 1190.547267][T24971] ? netlink_getsockopt+0x710/0x710 [ 1190.552473][T24971] ____sys_sendmsg+0x375/0x4c0 [ 1190.557373][T24971] __sys_sendmsg+0x1e3/0x270 [ 1190.561983][T24971] __x64_sys_sendmsg+0x46/0x50 [ 1190.566843][T24971] do_syscall_64+0x41/0xc0 [ 1190.571264][T24971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1190.577290][T24971] RIP: 0033:0x7f3099bc9169 [ 1190.581690][T24971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1190.601288][T24971] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.609810][T24971] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 01:03:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 65) [ 1190.617865][T24971] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1190.625913][T24971] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.633935][T24971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1190.641965][T24971] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 [ 1190.649994][T24971] [ 1190.655383][T24974] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:03:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8847, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1190.681166][T24974] bond423: entered promiscuous mode [ 1190.686419][T24974] bond423: entered allmulticast mode [ 1190.692221][T24974] 8021q: adding VLAN 0 to HW filter on device bond423 [ 1190.704413][T24978] __nla_validate_parse: 15 callbacks suppressed [ 1190.704427][T24978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:03:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffe, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa803}, 0x0) [ 1190.731415][T24978] ipvlan0: entered promiscuous mode [ 1190.737150][T24978] ipvlan0: left promiscuous mode [ 1190.748633][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@deltaction={0x20c, 0x31, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff00}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa88}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x662}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa7b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004101}, 0x24000000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r2}) 01:03:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2030000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) [ 1190.812030][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1190.832157][T24991] FAULT_INJECTION: forcing a failure. [ 1190.832157][T24991] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.844951][T24991] CPU: 1 PID: 24991 Comm: syz-executor.5 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0 [ 1190.855480][T24991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1190.865679][T24991] Call Trace: [ 1190.869110][T24991] [ 1190.872058][T24991] dump_stack_lvl+0xda/0x130 [ 1190.876668][T24991] dump_stack+0x15/0x20 [ 1190.880856][T24991] should_fail_ex+0x21f/0x230 [ 1190.885635][T24991] __should_failslab+0x92/0xa0 [ 1190.890404][T24991] should_failslab+0x9/0x20 [ 1190.894894][T24991] slab_pre_alloc_hook+0x38/0x180 [ 1190.899980][T24991] kmem_cache_alloc+0x58/0x260 [ 1190.904818][T24991] ? __kernfs_new_node+0x6a/0x360 [ 1190.909969][T24991] __kernfs_new_node+0x6a/0x360 [ 1190.915096][T24991] ? up_write+0x30/0xe0 [ 1190.919239][T24991] ? kernfs_activate+0x252/0x270 [ 1190.924310][T24991] kernfs_new_node+0x5f/0xd0 [ 1190.929085][T24991] __kernfs_create_file+0x49/0x180 [ 1190.934276][T24991] ? dev_attr_show+0x90/0x90 [ 1190.938916][T24991] sysfs_add_file_mode_ns+0x136/0x1b0 [ 1190.944383][T24991] internal_create_group+0x320/0x840 [ 1190.949797][T24991] sysfs_create_groups+0x3c/0xe0 [ 1190.954795][T24991] device_add_attrs+0xf5/0x400 [ 1190.959618][T24991] ? sysfs_do_create_link_sd+0xc3/0xf0 [ 1190.965271][T24991] device_add+0x4ec/0xb30 [ 1190.969735][T24991] netdev_register_kobject+0xfc/0x230 [ 1190.975256][T24991] register_netdevice+0x903/0xcd0 [ 1190.980979][T24991] hsr_dev_finalize+0x2b5/0x440 [ 1190.985836][T24991] hsr_newlink+0x426/0x470 [ 1190.990317][T24991] ? hsr_get_node_list+0x450/0x450 [ 1190.995431][T24991] rtnl_newlink+0xe5a/0x15a0 [ 1191.000039][T24991] ? __list_del_entry_valid+0x5f/0xe0 [ 1191.005425][T24991] ? _raw_spin_unlock+0x26/0x40 [ 1191.010293][T24991] ? __mutex_lock+0x21c/0x8d0 [ 1191.015087][T24991] ? rtnl_setlink+0x2d0/0x2d0 [ 1191.019788][T24991] rtnetlink_rcv_msg+0x807/0x8c0 [ 1191.024766][T24991] ? slab_post_alloc_hook+0x75/0x2d0 [ 1191.030196][T24991] ? xas_load+0x37c/0x390 [ 1191.034557][T24991] ? __rcu_read_unlock+0x4d/0x70 [ 1191.039577][T24991] ? xa_load+0xb9/0xe0 [ 1191.043659][T24991] ? kmem_cache_free+0x178/0x280 [ 1191.048580][T24991] ? nlmon_xmit+0x4b/0x60 [ 1191.052917][T24991] ? __kfree_skb+0x102/0x140 [ 1191.057547][T24991] ? consume_skb+0x57/0x180 [ 1191.062036][T24991] ? nlmon_xmit+0x4b/0x60 [ 1191.066362][T24991] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1191.071660][T24991] ? ref_tracker_free+0x3a1/0x400 [ 1191.076684][T24991] ? local_bh_enable+0x1f/0x20 [ 1191.081437][T24991] ? __dev_queue_xmit+0xbba/0x1e60 [ 1191.086576][T24991] netlink_rcv_skb+0x126/0x220 [ 1191.091336][T24991] ? rtnetlink_bind+0x60/0x60 [ 1191.096086][T24991] rtnetlink_rcv+0x1c/0x20 [ 1191.100606][T24991] netlink_unicast+0x56f/0x640 [ 1191.105363][T24991] netlink_sendmsg+0x665/0x770 [ 1191.110204][T24991] ? netlink_getsockopt+0x710/0x710 [ 1191.115419][T24991] ____sys_sendmsg+0x375/0x4c0 [ 1191.120271][T24991] __sys_sendmsg+0x1e3/0x270 [ 1191.124899][T24991] __x64_sys_sendmsg+0x46/0x50 [ 1191.129664][T24991] do_syscall_64+0x41/0xc0 [ 1191.134086][T24991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1191.140064][T24991] RIP: 0033:0x7f3099bc9169 [ 1191.144633][T24991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.164432][T24991] RSP: 002b:00007f3098f3c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.172899][T24991] RAX: ffffffffffffffda RBX: 00007f3099ce8f80 RCX: 00007f3099bc9169 [ 1191.180868][T24991] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1191.188852][T24991] RBP: 00007f3098f3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.196914][T24991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.205068][T24991] R13: 00007fffa507d18f R14: 00007f3098f3c300 R15: 0000000000022000 01:03:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) (fail_nth: 66) [ 1191.213048][T24991] [ 1191.227007][T24994] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1191.248859][T24994] bond424: entered promiscuous mode [ 1191.254256][T24994] bond424: entered allmulticast mode 01:03:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8848, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252b55b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) [ 1191.259739][T24994] 8021q: adding VLAN 0 to HW filter on device bond424 [ 1191.271799][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1191.290812][T24997] ipvlan0: entered promiscuous mode [ 1191.298851][T24997] ipvlan0: left promiscuous mode 01:03:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="0f00000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) 01:03:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001600)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xaa00}, 0x0) 01:03:25 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@deltaction={0x20c, 0x31, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff00}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa88}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x662}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa7b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004101}, 0x24000000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r2, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private2, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000440)={@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, r2}) 01:03:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="1000000010000305000000000000000000400000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}}, 0x0) [ 1191.348383][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.358189][ T2745] ==================================================================