&(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:32 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:44:32 executing program 5: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 252.571834][ T9593] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:44:33 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:33 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 252.655497][ T9619] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 252.663946][ T9619] FAULT_INJECTION: forcing a failure. [ 252.663946][ T9619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.677067][ T9619] CPU: 1 PID: 9619 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 252.685739][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.695792][ T9619] Call Trace: [ 252.699074][ T9619] dump_stack_lvl+0xd6/0x122 22:44:33 executing program 5: pipe(&(0x7f0000000040)) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0x0, 0x9, [{0xfffffffeffffffff, 0x4df, 0x7fffffff}, {0x0, 0x101, 0x6}, {0x1, 0xff, 0x1000, '\x00', 0x2108}, {0x3, 0x3, 0x6, '\x00', 0x2000}, {0x7, 0x7, 0x7, '\x00', 0xa00}, {0x8001, 0x5, 0x81, '\x00', 0x400}, {0x1, 0x100000001, 0xc6f4}, {0x20, 0xfe000, 0x101, '\x00', 0x200}, {0x5, 0x6, 0x92ab101600000000, '\x00', 0x80}]}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) [ 252.703669][ T9619] dump_stack+0x11/0x1b [ 252.707826][ T9619] should_fail+0x23c/0x250 [ 252.712320][ T9619] should_fail_usercopy+0x16/0x20 [ 252.717341][ T9619] _copy_from_user+0x1c/0xd0 [ 252.721940][ T9619] iovec_from_user+0xc4/0x2e0 [ 252.726691][ T9619] ? _kstrtoull+0x301/0x320 [ 252.731197][ T9619] __import_iovec+0x57/0x2c0 [ 252.735871][ T9619] import_iovec+0x69/0x80 [ 252.740206][ T9619] do_writev+0x13c/0x440 [ 252.744525][ T9619] ? vfs_write+0x61a/0x900 [ 252.748950][ T9619] __x64_sys_writev+0x41/0x50 [ 252.753637][ T9619] do_syscall_64+0x44/0xa0 [ 252.758077][ T9619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.763975][ T9619] RIP: 0033:0x7f5cdb0a4739 [ 252.768400][ T9619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.788072][ T9619] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 252.796489][ T9619] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 252.804453][ T9619] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 252.812407][ T9619] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.820358][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.828309][ T9619] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:44:35 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x20) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:44:35 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x0, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:35 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:35 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)='fS\a', 0x3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 255.608657][ T9649] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 255.618261][ T9649] FAULT_INJECTION: forcing a failure. [ 255.618261][ T9649] name failslab, interval 1, probability 0, space 0, times 1 [ 255.630901][ T9649] CPU: 0 PID: 9649 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 255.639574][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.649715][ T9649] Call Trace: [ 255.653006][ T9649] dump_stack_lvl+0xd6/0x122 22:44:36 executing program 5: r0 = socket(0x10, 0x803, 0x4) r1 = socket$inet(0x2, 0x3, 0xff) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x7, &(0x7f0000000000), 0x20a154cc) 22:44:36 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:44:36 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x0, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 255.657713][ T9649] dump_stack+0x11/0x1b [ 255.661972][ T9649] should_fail+0x23c/0x250 [ 255.666435][ T9649] __should_failslab+0x81/0x90 [ 255.671206][ T9649] should_failslab+0x5/0x20 [ 255.675753][ T9649] kmem_cache_alloc_node+0x61/0x2c0 [ 255.680956][ T9649] ? rmqueue+0x4a/0xcd0 [ 255.685182][ T9649] ? __alloc_skb+0xed/0x420 [ 255.689744][ T9649] __alloc_skb+0xed/0x420 [ 255.694075][ T9649] netlink_sendmsg+0x4d5/0x7d0 [ 255.698842][ T9649] sock_write_iter+0x1a3/0x200 [ 255.703619][ T9649] do_iter_readv_writev+0x2de/0x380 22:44:36 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000002a250000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000007695e0c295d06359093322eb00000000"]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) [ 255.708893][ T9649] do_iter_write+0x192/0x5c0 [ 255.713584][ T9649] do_writev+0x210/0x440 [ 255.717899][ T9649] ? vfs_write+0x61a/0x900 [ 255.722324][ T9649] __x64_sys_writev+0x41/0x50 [ 255.727017][ T9649] do_syscall_64+0x44/0xa0 [ 255.731446][ T9649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.737353][ T9649] RIP: 0033:0x7f5cdb0a4739 22:44:36 executing program 5: mkdir(&(0x7f0000000080)='./file0/file0\x00', 0xf8) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='incremental-fs\x00', 0x1810008, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) getcwd(0x0, 0x0) 22:44:36 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x0, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 255.741767][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.761372][ T9649] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 255.769829][ T9649] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 255.777837][ T9649] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 255.785802][ T9649] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.793777][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.801778][ T9649] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:36 executing program 5: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x30]}}}}]}) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x880000, 0x0) 22:44:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:44:38 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:38 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'vcan0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xffffff80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000240)="d639a009b13e462f3d98f69aba736cbaa86024cf417f03bcdbde583b25e19e5d9308ee4e61c6d12d4439a5ab23d39bc2d2333656b33e6701bea5cdea94d4abc4e58ee9ec266efcd293cd9398ea1c3170fa0f739376e8572591ab3de86ed5a30fe9548ac9a17ea0c57f033f020fb472070c4d688f6fe1fa1f3477f3f8a13cdee85596ebd11b904d9ee171baff31e4689ea152013daec826", 0x97}, {&(0x7f0000000300)="bd1ced680bbc882420db83e9782fe5cd520a3c6d6880ace0179136200538e3d6173296bc6ed7b03e7d1a5bb476bbb118c92f04228716a619e181cd59b7738903bfc3ba7f4b4bff08d8f3f1d63d70abbbe97b29c00b992ec4083577afa65d8e2192e3958726957f41d77e211d8e4f2504324205b04874b21e40d3885eec71c0bf080592c7fe547f333004b7f0856baaf1ec2aab101b1a0d67110ef5df65d325eb5df23b29fc02b2a42a4dc9134d7954c86fd76cc1066c", 0xb6}, {&(0x7f00000003c0)="18afecabd4f314584dcedc742e48d40b5368c9d07266a281d064e5e52cabcc10ab8f5c66c6691791de21cd9a36ffeff2742bdedce7186a686026a61ae9", 0x3d}, {&(0x7f0000000400)="1c609211ca3b1294ac4672ff01e75ea6f660da0b21e683e7fe21c1d486fc0d5634bfeb8da5533d89049e5b6a58edaf5f5a827b8d9c8dd43ffc0edd6419848930d9fcfc2b590e766bd10db53180c8135441c1765480b7101c84036369f9c7e3c8b5a456a4c68a91e27256f87de1b7de86253d6adc9a1a06767509107743962616fa111e361a7f50ceb35615fbb38cf5e32fe88250c2571f82389b6f35780e734b1fccdac5dab341b51c183fb74252f898cf7f8c69d85b46260065f643b60d76b46a8bceb726f49abbec9f1d58dca61871ef56f51be86ce9ae13c03a971d8e6ca44dd36b86ab51bfdda7b103427835991a7171608aab000ec2b4b2bc8f6d6a3645a5b393df9a8ce654fc34d26bff7772a6338b5c65a497cfab7fc977e2f9105af11ddeb8009ccd236c56d3c5d1bedb86d7f7b260b00ca9933f99b9106277a6563fce3b7c9ac21481cce039ecc6baaf705b4c694a9a0dcbc9769db57553d3d2ca500309e802dd36742d0aed0e20f21ee7bf4b9e1d858993dd9c1ee0be7829c2ce6fbd4643a2c07132380c3178e72781134172af88d9e8324980d2d6de2ca2cc6e76b0899ff5dac616e33cb7e6bb3581e6663cf6094b71969cbddfdd24d9e6075b2d0f7f26e9f7faed2abc888b8bc2f7e4f4d688191edd2a26dcc09de8920bfbe6ebfa4d4366dca874ef41dbbf8f1751bf715c3e58d7309d3eea89b8cc1e50df46a80f51d734af965e00feddaebf421295830fb9010c3363fbbdc1bd3b3ee367b58b561f373158b9f01c795b3da62bcd1cad5ae6af2b673f4ff3d13cb8f17c8beb32675419261a233a7160665447626698ca6bac1763b32c7ce1f28753d64e74bb8cbbde7b14d61f6076bc0fb4763b3279c0b0de1509e9611e734fcbc1951cff751c7f372bc2d9c71de23a794a1765d92129f239d3e03094b02f46ea96916bb1b2ed3d6edae2e85e9d1a8d88075ff4b521af3827dd1faceae39be79f21df8219499b0a939ad0d602790f14d75b0690c48e806b7a5cc103fe706233ccffce22e90edf06f4bf339e2df9da33d5999c1f00df16d47c9d06befc2bac8ab011379d8a9cde3d3604338a71525a02c86f0f70487816289bbbb08ff6bc5f65f42165ccb9c6ff0edd702701cd1ee85ddf1617e4fbd9a4e24c3b209d416803ddb4f35b3498726980c56c5b7d271df6a5d47f302716a65da4c8dfc42728e6ef231df6c1b198ab3e7eff8bb2f09a817916c5f2524dc11bef1818431faba5cadf3f34f2ad869524969f68dfb2d70cce7446149c8071a2d76ccfdfe8386b6c06b69b4bdcc1bdbc19f0656ed396f4b160916833b05041db0cfe578808e7aeb2d43ad002dcdb31be0624b9202abb552118ed88f6bf13fe6ad8953a27192463b39e97efd25084c85e344bc6ae1c1c3235367d94abb32750352a808e8fcea765e8adccb111023b688d778f9f737277ccd4e06764706b46b983f0d9d4478275c9272f313827a15616cb7688964e85b3aa7d2079e7f180e45cb1ae9d8828fc4d5228a9df8546712213cbe7d3f125b217c81230a9df9c430aacf309cea7d99c9cf8bb11a6ae72f2cf106ebeb6af7bfc8f5a8628e5cdd2dc39d4461bbbf77f0bbf16ec5842375103d6ba024c720e4f499cd99cc1433b7dda1e7ba3437e7d4e9447f126009fb1fe06190b5cd53ec1e806025ca6dd671df0923f275686849c7dd287c371935318bc09ffc5fc68c8dcd29ddf060e29904a8479170dab7fb702cf2a131c749468b94a8bdc13738657cc66eaf2eb8195d91139eab65eea8826859a8e4db0e3647c672b3c1fd9022268ef6971b70503023b55b971f7f18a3cb0b77d931f62af6fc707864fee5f021ffb6c6e17587842364308932d321aa54ce102f21088b11bdf5445e7bfa2cd6b91b492475c9a7b4b03dcb51fe29023f2e1bb508f2b7113f4bfbb5af0d3e09549d14705ab0c270e4a16146f1e8263178984e7526a2c8c8517e58edaef37a9f29a462a9967a70c8d35d4b6224d69e8d194a72ebe4a70e7de41a09ef72ed80eb6ed0cc443e9aa116e0f1da673302f2d30b2ba7906a0ad2e2a4396018513b244d7d39404832830c32244eaa9180b0e56c0e1ec81e020f24984d1ee69c43c3100ad31411e20e2810120eae8db7c55cafc7feae05537b49e565ef1373124eefba87277dbed95593082fe1175cdaf187c7dfae5007af1f8511f6ada3ed33e3294a2b6f8aef6d0e138e9417b9df8bdc79a4e583897592285927b0b17da26165818f6914ff1138f1f0f42bee7987400f90e10d8f8ec1f4461eec2822918b4eeb75b4b1e9b82812ec307f746f45b242bc5368c648523a58e8721d64e3d7c4e3b1174992e8d111b35d71dd709a691cc7f5ad3945ba038ce5295b5f93536155afc93707db4b8679953716138f90eea7f3a3a398502c0bcb49de086a2cc7fb6cc1866ff409cee6869f5032f07b4532864d4624d868bf38f8b848fe846af7a8721fa1ce1c9590c53fad129bccbe5451429e69f5bada3f1b0bf6cb4297328208a9ada836fd6595428a13d3db6fbfd3c595421b72d23fff9fb786a68e0f3f491648e89b918417a63aedd4c8ed7582e936a8857b74aa14e35afb1c5faf5555dd6e3564249a3adc1de8f64c00d787efca0f0ec60000f76e1197676ae1e6cc0262364009f3c18e812fb61db89b518f3c585646d6d5fae4cd55b4b3afec1e369a7b6bb63aa7bb3968f83808f14a5df9918858084e269438f3e7b6f130d4660cff2e9fbd6b43ffda100ec55ca15ae3030453813ca7adf24936f9673b8287fe2752db9c9446f0e1bceced308c160aa0895ede29425eb9bc917c921d6bad4218fb51f99e102530c0b3f21d11d28f32b9c757c8431a96f6405b35d013b114541119a0c85e40c58bfad129bb0b5f4a816c5978345c6fdca0ab19f8813ce2e42ea6be13e933ede68d4fb05f693fd7fa19a2b0338de3a7d9a980fd92366e48efd3ed75b291cfc2fc589b8f7d38f53cf9347fc154045b160ac0c462398a233c6185e64d76f33d215da5ba981edbd060ccfdea16ad19bf014191bba13ce137552d3dad583ce0358a29f0102644484511b1c37ab24e444ae792b44c90cce27dca315a720eab0f3ac96ddfa60d5df2f8eff331c891eb68b5dfbcfc350d599ec0c992c0470b2595dec0181d52b422ef217a27b2f77286988ddf50aa69b7f54f1799648818056d36931d0376034f8a5da3c0b91f1f8995cb166615d26a066e059a070bea825d1ab91df2e3de0e1b96bc59a8e83a77a0ba9f6041e479245b0d2576453d42fb991173912df63c94a4d8ef07cc33171f21f3466f71340b55a87f9851f820f89e1da7ec00035997c6169e67661b5b8ba09bca13d46e3ce20365be8834fc083bcba2435cadf8ce31be39f77c1437104cf596113c988f4cd087ea87ae9357174b0d295fc362979cd315d35767cf0c1e0ab330416388cb059e9a3509af4361716118c08fbc89bf0c2cef28aea5d8b9db18d251c8ba1df0c97ec7142ee55a53c1d9fddaf411b8bfd38e8ab63d1fbc8954f44f83638bdca59613021019d7a2c16645f991ede25ec8870be3c2a02d5818d3c271b99dc54ee133a7bf0727314ee4951f1c1eb8257871ba15bc8a0523624b61feed96a09bf5b590e6273514fdf7dc30e651da7c4733a732c62611383db18c5fedcc5a674ab5ffd7a2de1136e64aa50e4c12712b916694b1f4cf57b5817ae13adabfe5d5eaf6a709a9f2fbf6a2188a6f6c9541541854a9ea37c32d10c9e78f8d749543d6afcc8aa9695bb6bb345f0865c6fb098f552a7f0c8c80e753c7869d60ba0b30b7337b4c411dd0a809c5b0aeeffb7065c211368513911e177e0edc3c95e1226cd4ead2847fc09f18a2c1e24a4fc156594505eb7ba67416e5ffff561741bbe0aae4b322fa418f3fb7976464d9b7025c8c63a90606a5b63956686ef96484d0f847e638c9e17cd39ca0a52df7897355d12cc8c88ebcb0e9b50cfa102132166da0f7876e05257def231628d5ed050ba8fa133c8f5c1dd2e39a5a2436682f9f2858d862fa268451ac7e1b505fd7260477e33980fa57b965eae2586eeaa703b42dd5b83c42078c772c0b2d5d5f9876dbbd37daaee3edda7507b589b8405b00b4e70d4fe0c45a49130e82c052970f24c2790da6b777ddc2c74e1e24a5c300822f84f8fe5feed65e8a6235008fb5bfa785fec7a31cb746c4e407346f0f7fe11c3a80973a79a67f73771706dcafb2fad478619375c972e390c63e0a8694b709028745676785ed85284c3e6e9e8483567d625ee5306e575acfcd6752872f667072d46a32adfffc641ba53feb42f5abc07ac5ada177f46fe7c61e6bfc4b568de7c2a255a7a9e6d6b9582b87fdd3f25473f30c1438a519302dd8a3f8a55025d55f42095b3c6d9f1934f220d503b421c707de6588ba46cac1c2ad80356f2e48b868baf88621810edfdb8b5114e20999addf4c22d04c9deda4b3b19223a60050cfab0a65b953d86694a97eb0ac3cda77b02c8be716b17987147b9d1f392fcb0e04136f029ed364e17d67b565955f451ae0781ede31f6249fb683885349b9fa91faa6ea8245e4ad9e135e407ed6f32b11280a5078cfd1fb52de4059ab3a442796873278490da57a25960d8cfa11e4b5caf3cf6ed9824ee6ccb06c81b4dd25b2561b20b7376d8fac73d9939bed9e1f6c5cd015507e54dff4bf267177bcc3476941c1e8666bf80a7652c6e46796ad84af0d38d82783f8aefcafc2426fdc427dedd3587bb5aefcbf2d583c2a7f67d3b03cb48aaf164455e79006a51fdaa86a3b6c132b2b8caf6dc0a07f84b33f712ce6044c4031ec00c9a2ea499d8c9c651611dc29baeff5a9d3d7c3fbe2da31a0c539ced64dc4b6b36fdc8067c2b27c525af66100efdfbbb43fef2473ada8cd399d54801ae53a27d6f5c8646f4926cd9057fdbe3fb1f43c4cb3ea22669732faa45e77175a2a6172a7ba1083917bedd3482450ab7b7c28bf37861fb2bfad1763682e0a96bea5bc04f156a46ce1f358c4cb08368a88cb85eee3d270aec5931ee6e3e9dda57815b2a6b5ff10ac63baae8793120d2eec3dec4fd1158f59ab2ea9f89eb39ff71c4ca650d7ff7dd3f93657ba9591341966164b5f7ceb6034da24ea9e9e3ad1027129c5de04942d1d84b2fbe7d6ca6adfa3250d83807703d78c6ab0b51a93ad2117e395f13a50d5c500674ac19b6d683c923402d431a86389c102e5b82452ea04309dadec09e278e0f419cb8e3a46156f94258fce11efcd6b999cc4d351560f282808be35447e76a9e6365b390298bbad38839022ae0876d7344ac487e27261875c1f0e170c8941c7d72a58d51e4a5ec7d6f524d73c0b9277283afaae7f850ec85b97f80fc5e90fa6c73b4a269c97f918aad204ce93c4bb95da59a8ce5a1a5d517af0da5410ea070055491b6230add46f901f0044ec9aacaebfb20b1d5e864d2e46e68e651fa300d237eb884522e2eb367e4eb4ff5e7d799379f6c351cc7a56ff0d258514d1cbd22ce536b69f6bb3fd371d91e0fd3b9430a0e7284ed985f626c7afb8858bd8507bb30e0de26d7861fcfef2f049f1f934d7388bf4cee16f101c75656a5b96dcd095135c1362b1fa9240cd6cac535cd8b91fd12d1e992361ea82d9fa434bc423f98fd410a9776d3d9cc2224353956d93151ef63e9975cc55e8ad07ed7a6fa0ec50e2c064b0e7399df45e8b423c04b7ead44d4dbaa16c099a58193515ababe847088bfa49dab74cf965e60fb82b43ac4fb50d73547ff883c3f11803fdd4f9ebb46c292adf0117391657c89d137f2d271", 0x1000}, {&(0x7f0000001400)="da78843cfb0a7b52e9a0181b7ff0d1e3e2aad954341af31b89a7f95c5eb2f55c08f4f4ef0733d7999dc3a43a64602ea6b96c2cb8e5a0304dfba830468f7526a97b0041daa893959654cd04896fc4c30945b95afe1fb831502f59bf8669167ba16e1a7f681211859193ba94111f16718d07ed3af54729339728bb0c9d8823d056f3846a1f0fccb94b1f7227a67f105d6949429066ffdccca25ff07c6cc3b27c10c3ed16e9200eabdea05e944cfce78da1f5d895b0139be154f3bf05ea1595feab3c35a691b9c8", 0xc6}, {&(0x7f0000001500)="8e0281e9a63c54167862fa65fafc7bd6a9569cdc8146425970ebe08a3089e1e187660981ab66ee3b9afa90b1c7fae40879df7a7e43b336d65a398f9bb77df24ac118639a069d2e398006d620a1f7f9c23cee8bdb381744669154c14d840779d50827f6baefac62cfbd975eb886c46246be0f8e77af198b4b53f8125a8b7548fd094e72552fe52bfe0db665e485da8e9845d15352198faf05656a2fe7848a16bf983f108099249e20279fd29640c4ed757e098af9f7b0a92d732257bded99246a810c5ab945459faa5fed60db4ea02b253d81fb5fc31a6bdcce3029c66249479de8483af1ca6eacf1a113ee6f40dd9b0ea5fd", 0xf2}, {&(0x7f0000001600)="5b156142c6aca2146338aa997972b71ee6336c7260c63addd55653b7c4d00c7ba44f26ff0a98180d279b1f0a6599db747e884df0e7beb95752ad161bdd403ad39bc9d8d2f6bfee3c98", 0x49}, {&(0x7f0000001680)="73ee3f8d70ba81e5cdd36fe19f31160b0c9710deda79d94f419f7ba23448537dfa72fb64f8bce111062358ace502fc8a43ecf20ac7e1aacf45d39eca070340965ccbd43a42c77c5dc78a77d714467ff0dbc0f306f5c0a48349b2705fd8c32fb060514324fc7259dfba9e4adaa013bdb9f49ec376f52d931517a7066eda62b01ab96dea289d6915592c08f7ee3a94cd9ac79bcfdfefc19fec3996f470e5f4f829c6f0c023cc602436cc50e1f7b378a0", 0xaf}], 0x8, &(0x7f00000018c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @dstopts_2292={{0x178, 0x29, 0x4, {0xf67ee13874d628ba, 0x2b, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @generic={0x7f, 0xf4, "28f4c97a5d43e069e5ed91b6660a75e5b0878b9c76294c5885427563d907cd6536f30bab68d928c77490a16e830a5bd0918c37c09988833d38acef2876879cf06992c0198cf63e4d33f0f13c49a69a781d0bf2a919d6f442a6512cccf29153e18dc6896393c59858f9027ba45ff79b98ae107c2010db0f88701922b5ed6241f4ca5f08985375c690342f41aa596a5367589aff1d3c3c8a5b686304ada008235154751ce5afaf8d6fd9c4ea2a73cf2ecad02120c0a8311d04b4e8bc0e6b87946c37389e1b0c1ccab50beecf56511d1bceff7d39c97d190a4fd2d2c68f66b3d46c0e7211e06eef4b750a8c046644a067c3e347ef5e"}, @calipso={0x7, 0x58, {0x3, 0x14, 0x1f, 0x9, [0x4, 0x4, 0x4, 0x0, 0x0, 0xd89, 0x80000000, 0x5, 0x3, 0x3ff]}}, @pad1, @enc_lim={0x4, 0x1, 0xa6}]}}}, @hopopts_2292={{0x10c0, 0x29, 0x36, {0x8, 0x214, '\x00', [@ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0xe0, 0x1, [0x3, 0x5, 0x5]}}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x1, [0xffffffffffff8000, 0x1000000000000]}}, @generic={0x1f, 0x1000, "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"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x48, {0x0, 0x10, 0x1b, 0x1000, [0xd3, 0x9, 0x9, 0x8001, 0x80, 0x5, 0x8, 0x4]}}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x3b, 0x5, '\x00', [@generic={0x5, 0x11, "eabf9991ec989e3853f0e2b4ee024701e5"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}, @dstopts={{0x48, 0x29, 0x37, {0xc, 0x5, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @empty}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}]}}}], 0x1330}}, {{&(0x7f0000002c00)={0xa, 0x4e23, 0xdd3, @private0, 0x7fffffff}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000002c40)="fd42ec5053e8dd257f6491af5da54160c5034dddffadd0f6dd120963fb3577025a353fd2ea612fc18f606b37", 0x2c}, {&(0x7f0000002c80)="11672f6a4fc4d79112a6979519a85cf64e310f872063daa962419f0502e47531d2", 0x21}, {&(0x7f0000002cc0)="e844bdc013cd4beb19332d789b590c7f22588db1018a52747dd5a676b556", 0x1e}, {&(0x7f0000002d00)="4dbdef4ff19e92301cb04c7e2f1fb4d4b98dd28924a010da77ef2d32c2186e1a0b1b0a68323dfc667ae2bff17a6913a22efb67d37c52c0a0cbb3217360cb325e91bc19196d8565f36f1cdb72e8ccfa54ed9d0b5a4463b1ad678c779a6f2ad8e3a7e6d171cd902b7c44f24269a5e13c9b4a1d41ff5d70284c969958f841a5f211d3975eb2ca4ce49146dd90f91717493fb90ca6a5e1eb0f56589681be7a1e67c5f812909b9c81a977", 0xa8}, {&(0x7f0000003080)="e5002dba01d8e80f040ef413f229584772d64e2bc0f880dffbb7d98d1d8774b8b1c3438e149219c9fb50714617f91a54eac71f72736c9ccade2a812050c7e217516f742cf501e57df42024b0592c3056545db1f3dd94cccbd5c9b34b42c20942ee9f1bfa8b193e02fbd00a5c7cd2563263a84b67b04ef3ab1cf5b1bdbf527e8702adf52ad60a01dd9d5387f95fc30e24c938ec449b796e78fcc594d2c11f8dde53db92f4ccfa82fc0f3d800310a02235918b22dadcf4c7f729935e9aa707b8d534410d3bc3a34178be0a6bc87e6c27a6316bece221951a44483c1979e2eba128a29ae1d96dfa54275f3484d12ed30e2d39109577f327fd53b37ce38daced317319559951bf2fcd6eafdc92bbc1f99d9da39b48bd4cc483d5a4ef94c3ef4dd003527c39832a73f67e9a3df57342505593b3fca525ac3fdd8400bd2f82cde37346512cb46fc65c49c14942bb317df60942dd55bd512ba2d1dc5a062a88ac8fa433b1899d83dd3fc48d5a3535ea5b3ee31baa1d096abe63ab51a992652404d8c9a563732f6bcb8bf755edbbfbb3a134845006fbccdd6f94ca15abe93fa02c8c3baa7ed6b70e9d292a6f024e3911a8689642348bb43a4289ead1edaed0b11fc1eca165b040f69369c6501bc9a438119634ea984caf2747deadaaaafb07d243602c19219a7e8f111cfcedc09bfdb945950d15886dcc406b29136d95e49a77404baf8016060be96490325898172d91f53964cce3442e7cf8a6013f3c3f070f00b33b064385d8e4086a0582321418e15a88a6c945f86f4a57c1d2a849e62287b91fe04fabcb46e4deb9e68266ebcd85db636432c170947a67d9ece45ecbec336d88b6ee420b0fbf2914b2d6ea4e1a1db204d6160900b55d7c5e1ebf4534c25372cff795deedac1dfcd72ca7a11ad97d1d1e2db36c82e5a3d76855d6806fdc4b7b844cd6c07b27c1df5411bf35d09a98cc5de28f072fc995a369f4ff39b59a7bd3b2aa85e14f853f54818ce5a2f80a4c8375f3504ab018f0448615e246cd87638b901e37988d77863248bc4bfd32f566965185f6510ddf1a087f95f9b3546dbed8d27360f01b62993bee2522ab15e7aa186381400b38e0e8de2c885cebf6b2d498ad0f980df080f120391fc04aa808857c275a6d723068f97922ae4ebf4b8efaccfcb1486327d1dc44abe931ddcdb8515bc74c1a604142390cdc0d9aff4a7879720dd77e875ac154a935479cc1f186ad2c0a26598a8bc95c83ade956c57f120a6a820828934384dfd173ddb8fd3aa705a3c763ab928313595dda5c2d64d19da76091647edf20f1ac00202a9e183ba15a4184c62a2b7dcc5264b1306cc66059462770909419a4b3a6d467f74f356fa0f5bab7cd54a3ebba43a200d23678081c0e254c1a56c37a1be47b3cdc039e4180289810e02432646be61bfd5e68353cd222f2d1fc03cc091c7c4333ef9848ed6615266f15a7eba556a42325c013d17bc7076c0504e6f14b2e7351a57ca426902fc46bcd98a7e5bd18c7d0cde4c9bc517a4be6a9417b07f1bf791676106fe9bc04d38fd9113ab530673d0658187e157745f89c0a4763206b2ba7ca3e34a5b12cdb6eb3d7d9bbc2b5d7bafbab7483dbc8018660681169df626fd2c689301b6ade606c93104c4d20028ddba0a31b279f1fc2602484170f76d868f212435dc3183156780bc4c326ee739a5885ec05896a046e0ee2f87209363b3df66616871bbae07d0b4bfd879994ce023005f3263c84f7c213c5b24cab424f08b71bcfa773505185392c520087d8a91ef34cd1125c727a8dfcade5e6a09f5a254a3b2dbc9438cfd59f7fd5610333959ebfe53833294de26939c7d1f4f7f771e5ab25af0b620bdbc74b7d5f554f960a3c72fa6788c271adf4bb54890430355c444a108d19e1fcb1b8109d6c9f9289e70bc8f9ab70c4c3567adda5033a025517c9a32b2c7bc394fd215d5c1e4a539b015309d3539b209b6301741bc270e6ac42a7f7f41a6bbf2ce34e7daebbd5839a475ce9f474d7ef67f8d92d684458af74f2dfd2868ad4f8f457701d28719f7750b91274ce1fdd5c0d91abc986e2424b80b0c8448ecd88c67af0b29b190951fd950097c0a34f6c4d9accebe78e53261add18add3a3e3ac23762cfd66db295ddf2f55a8659178fc0c44eef8e5cb91d0e0a8ca551e1476702b9814d5ce807310121e6cac89fc6b9982f49115fc100f697ba8e73c7327dc886898eed824f1952697e2b1b488abf7e5836a27e9ec9897b519c9b2eeb8afd66a2704f2d68ccb34ae3795a1435f486ef54e1ecfd3aae299706c9ca6644efbe844b9b12a6ca14cbaab26a8acbcecc9eb3f4c3f5c058e6360043c9fca74a5ae50f7c2b0cb286d41b36a56a4c40a78c5d8e32710a62f3426ef37dd7459c0726005e3c1ab6bcc68077a7e0edfdc2fe52b9f09ea6f3a500d276fd4bfe27b61ddb302c48e89e9ff5ea15f9e0501586bc3f00351648f7c7613042a73305f05d25d4ad36bd72bfb397ef8daa1471c6af44e77bf0a4c43398c21ebf239d4b79848bba8ee3b153d9b6604a98fb7bf544222db0a19ffda2f0622b7c6f37d474d5b6213a083875463719d61fa97a9fe49aa1842664e180c605b019ed63d4068e7ea68d057536b36d5ef61163e981e8ec2e7a53a89c133dda191ee8372b1d54e91bbec7e8d04022e1df36e527f449da3023a6649872e12919c1b63347241b1a2978d57e29bd44e4a2706a782edb8b09a46db3d6f0d37136970a4867cf645e4a0b3e80f1a05dfbae0d9c8b7cda1c682c1c58021b91ed1c9a7182649716c417dd426a8805b11a6639ee89198ac2b72c270c0368535304f2360f28a5d1b2111464a47a9505fdd5bc27d48ddf924cedaae0d78bbeec7d222c2d2d00428a2c250891639fb3d7bd94cb8ffa3b456b4938a698a8dca0c16da864a49a7e965ece6ecda38701c87b1a893e07acae2a23cc118f01247e51c06630cd022214e592bb420b18617f77ebb2612718f385dc1ddc7341c70be8f50fa49535fb024ced52da80f78c7581805b9b0f9eccbf1775f6ff783c4f4ba3e45e8ea2787f6c033f07f62e9bf458b3fae8d260f96aa80743f54c998d994534c1503da8158b87211f33f1aa3d1794d3494ec45775e175b473151b1a57d7941f6485788fb2dd9afac739a6611331e6729cf1da2628a7bd184c7962c17682581e294494650f2a2faee1ffb0d30af623a35dc34852811d32b1af89ece8b67ea0e52211638c183d2247812201405b82267382e4fccb6e36e3e9c6d301c415f69f369e1681ae2372839f4c17e24674a4c05efa7c0199f15d332a747064c85f2db91dbdf77b4faf86ff641f5a66634495017194366dacee4fb1d5acc51065668cef10b46f67b305eb5c9c57eaccf0008d408064af9e884689d4c8bd27fbc60cecc097bf310d3b0d41cd2142e266375ca124f1d51e56b727beb685d94eb160be708f0a38114db3f1bf605821216920a01c07ebc1d6c5646b82da8d42831d739329460f26f1dad795400a84acba40386f30e342d75d55c8b2a4bcc1efff3de04b43559cd73564cb4f4269735b83ad7ddb9ffb2d8c5301e959b19a9a2700db3bdcbf53d77a4e96b99918278b297efe4b22b1bd21e6c27f5f3a15c9bdc45b3e796c67da389f14c20965efb94870ed9719916851174c4f20e7e8120b9d1a0edf1e7d80b828b24d70f3c00085e8fc2691892cf3a84e13bbcd37677404cf066c4811441c10b06e016889ca1b40046fc8fa28f6da1ca2e861f42333002691f7a1136388b969e151d257f33ce0f86b178b96b96993fe8912c9ca4b32a9ffe7450f03f548711f76c23b5f23c949c39c189490cc892fe006f5fa7274dcf5353c75fda4aaf7ac050cfb666c0b6f6dcfb7d01d14050008aac66ab20179a44467708bac227c77bad4d7a1560fce481ea7ebd9d61dc9d4a4075075b9a65e25f759ad78a81d2b1710d4cc8db9fb2764d0e2b9ce18ab08537182ad263ea61cab0edc9aa044894612c6d111b76f42322cc50080f76acc41ab52ea672a693afaa12307f5b1e3af0dabf9768a6bd0b4301217b0ed9ccae1ea04912415fbfaaff21102b22572d90f4807cde8ca6f8747d57499bb95f107ac93937a9fa3955adcc6c0adf516d7619d101f8600bab97a102795b69f72b9d9e798185918545d536c4950700b6ceb8c43e5e722a1ac809e0969c2320e0f41bb62489a49f2b3bd2fd83d637b2f706128fa07496830a4765dbd886029819d2732fdb538383c69ac89feb29534368cdfcbd310f1d0a06a0777fd0ecb6165aa62f1d37f1d9caca9f5f81d278cfe94713a8b36cc4a63ae4f61b36da80d964f7aded1d8cd471f0ca693432e56aa4f6e253ceb9c3e219980a99f01163b5ca5938944e08cf876f619a87f1d37f4d6d996f080254b079500efc1ac8f248a3d1a9663895f618aada72702ed6dca0df1bca1d7ee6806ce995878ae6482b4391a389deba461143209b4ffcf8ceed671fb3e478fe12f81190b6db32ec8675442b679e675f46e8b2e8870ad4d09ea620839a153b98188e86518c081caa1de472c49d668f7937d1560d98f70c5684dd560ddd701147b89ccb664ab0a50c515b9a248b38f8f396b41f0d1660b29166a70e08896cb893e4aa6866e92298e3c048d3b938daf5e0866854cb4e059b323c1b32fa8bb58baa966f72bf02d136ee5451bd661509abd05cb47cfec3a7a9439e4384a9d42d2c578838cc0794c1c081cff5e8dc479f73e3240f09c46dc6feb6b907aba8fb4162f25775d04a35bddbb0e7edb70137ec560c69def2fab9c51557b42dd5a7186b81f0ba68a78ab7263a4bcd8853eeed4667ff099705a302bf59eed0a9f5f47f6d33e202da73708dad6b73edf1103370bcf3eeaad713c6bf5d4dd8803620575be7fa859937c2727fefb092dbe1a741ffa8ef0846362ecf64cd67dc551d0682f0c0bdbd0a2c52d3ec249d04ca0234a0a996cf21c182d5030f45eafbb91ec7a504dca56f0c67b6176e210c4a3269216a72809755315e2bedf76f686e1a84dddab9efa8ada5c4c6c6f569cea513d2b8561b6caaa661bbf8165e2e0c09ecd827f5190c10bd5ffd291282cdee0e1f77ca8742ed009f86638c508a5b5c8821ba1e3c1faf6d70a1561f27ce7366753689f462bf56e792108e67a915005c3b31b96687eb7fffffc0d6a398359ebc318e8eaeae0c10196e0e463c187a818f6f7eb3f3f7e4d09a35b8cd7a1f3b0d5949ff345fbf4eb80282ead162e3d128345c466d3e7eccdfc4f6435b5063d4bb7815cbc8daf100c11f8f7bb1e19ce4f01d876f7cc0c30b1d27d588b220c457eeb3b00798afa90bcf7a03cf4d4ced23e91c6bf23121e8852195e21ad3138cde41317171fe492f446b3bec57bf503d2243f1aaf052edbb7fae18afe4b7b0b8f5131985538c497a414969e07ffcd25ebe02bf52836ae095c62cb362432d2243c7043a5e6586fdb32d1100a6727f0a3f73345e54b62d8053f3fa81e54aeec97573233f1cd1f47357161490f3d8f5216d2c6aa6a29168847f184a007e01824e6a7b4cefb08cef207b9096505cb43cd56640dee25a75123883dc3867a1a7db4dd1da3a035f64678f3a9758b4bf44c291e8e53ac31251abdd5b01b0ab59f8ba1c98a0add81b49fe6e766a22eb2dd435560a29e9132c43a06ff35d81b2daf8223b99c31f3ceb0fc26aae0a731c306d8e552284b1dc845afd8d2f173fb17cde42beda9b8e5c095d026492a478103fb92d99d2ea2c1ab1a79155a5163ef1d5241a32cf2dd3d6cd8b9894ec646fb65fe6138714855d", 0x1000}, {&(0x7f0000002dc0)="590f3a3afe07730cd1cfbe825b078955b70a892c954e75e519303188b1fff47c2d2c018fd3800d0e28967960807e91bed898f2d48a50b24375dbc1e5db9259a1aecf2d46bfc235b89ebc17d7fa0fba7549bea0ecc3f16239f999ac988856db88b4e53988a154b059dd4f57332eed01d23f9a7a71dcd8ed05332cd82c37c3241a82a3afe904c8551663e95f5c4caff99c450e9cb1e942bbe85f643198fce80ad5b0855a", 0xa3}], 0x6, &(0x7f0000002f00)=[@rthdr_2292={{0x48, 0x29, 0x39, {0xe, 0x6, 0x2, 0x6, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x0, 0x6, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @pad1, @pad1]}}}], 0x90}}], 0x2, 0x840) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) socket$inet6(0xa, 0x6, 0x1000) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xff, 0xfffffffffffff8e5, 0x2, 0x3e, 0x6, 0x3b1, 0x40, 0x217, 0x0, 0x9, 0x38, 0x1, 0xff, 0x3, 0x5}, [{0x2, 0xf077, 0x912, 0x6, 0x8, 0x2, 0x81, 0xfffffffffffffffc}], "ea89bf46c984b6149800ac6fa4b06280e56b9e03b2e30c6484332f3170e1346b124d66019160b464ad8654e1dfe151303921e1c3f44fed8cd6d9ab142cb07904b581d1c403f13a08d61b9e9d26055f25d7ac47e4e3f35c1d54de1fed50f13b180ed326445eba16bf435604fb391a35bf96d8b02cb54d0936a3e3e6666b5d1666ed3fdcf4742918067d6bf9f5f752805c44e81be26279a606081aee9ff819146eb0ff3785402b50fd592d426894d350481a5812796e92ba625321300c4404fc7a5f4cd70214a89dbe65518a2267130195ae972bdc660ef09bd14e4b1b801dfb7521062388b2de6838e4de88e66032edf300d926d2"}, 0x16c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000004080)={0xfffffffffffffffe, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x68, 0x4, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xfa}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 22:44:38 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:44:39 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 258.622803][ T9702] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 258.635926][ T9702] FAULT_INJECTION: forcing a failure. [ 258.635926][ T9702] name failslab, interval 1, probability 0, space 0, times 0 [ 258.648571][ T9702] CPU: 1 PID: 9702 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 258.657321][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.667906][ T9702] Call Trace: 22:44:39 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:44:39 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 258.671239][ T9702] dump_stack_lvl+0xd6/0x122 [ 258.675841][ T9702] dump_stack+0x11/0x1b [ 258.680001][ T9702] should_fail+0x23c/0x250 [ 258.684417][ T9702] __should_failslab+0x81/0x90 [ 258.689189][ T9702] should_failslab+0x5/0x20 [ 258.693709][ T9702] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 258.699433][ T9702] ? __kmalloc_node_track_caller+0x30/0x40 [ 258.705280][ T9702] __kmalloc_node_track_caller+0x30/0x40 [ 258.710937][ T9702] ? netlink_sendmsg+0x4d5/0x7d0 [ 258.715898][ T9702] __alloc_skb+0x187/0x420 22:44:39 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 258.720386][ T9702] netlink_sendmsg+0x4d5/0x7d0 [ 258.725146][ T9702] sock_write_iter+0x1a3/0x200 [ 258.729955][ T9702] do_iter_readv_writev+0x2de/0x380 [ 258.735167][ T9702] do_iter_write+0x192/0x5c0 [ 258.739768][ T9702] do_writev+0x210/0x440 [ 258.744014][ T9702] ? vfs_write+0x61a/0x900 [ 258.748456][ T9702] __x64_sys_writev+0x41/0x50 [ 258.753129][ T9702] do_syscall_64+0x44/0xa0 [ 258.757575][ T9702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.763524][ T9702] RIP: 0033:0x7f5cdb0a4739 22:44:39 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x5, "e3e1ff"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:39 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x5, "e3e1ff"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 258.767934][ T9702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.787542][ T9702] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 258.795975][ T9702] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 258.803949][ T9702] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 258.811921][ T9702] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:44:39 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x5, "e3e1ff"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 258.819913][ T9702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.827892][ T9702] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:41 executing program 1 (fault-call:2 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:44:41 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x44044000) 22:44:41 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x7, "e3e1ff374c"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 261.648173][ T9759] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 261.656958][ T9759] FAULT_INJECTION: forcing a failure. [ 261.656958][ T9759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.670054][ T9759] CPU: 1 PID: 9759 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 261.678732][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.688776][ T9759] Call Trace: [ 261.692051][ T9759] dump_stack_lvl+0xd6/0x122 [ 261.696650][ T9759] dump_stack+0x11/0x1b [ 261.700811][ T9759] should_fail+0x23c/0x250 [ 261.705232][ T9759] should_fail_usercopy+0x16/0x20 [ 261.710326][ T9759] _copy_from_iter+0x131/0x980 [ 261.715157][ T9759] ? check_stack_object+0x61/0x70 [ 261.720182][ T9759] ? __virt_addr_valid+0x15a/0x1a0 [ 261.725298][ T9759] ? __check_object_size+0x253/0x310 [ 261.730583][ T9759] netlink_sendmsg+0x58d/0x7d0 [ 261.735351][ T9759] sock_write_iter+0x1a3/0x200 [ 261.740123][ T9759] do_iter_readv_writev+0x2de/0x380 22:44:42 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:44:42 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:44:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fstat(r2, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0xffffff96, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRESHEX=r1, @ANYRESOCT], 0x18}}, 0x0) 22:44:42 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x7, "e3e1ff374c"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:42 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000818}, 0x4000000) syz_mount_image$tmpfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'data=ordered'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) [ 261.745331][ T9759] do_iter_write+0x192/0x5c0 [ 261.749967][ T9759] do_writev+0x210/0x440 [ 261.754267][ T9759] ? vfs_write+0x61a/0x900 [ 261.758692][ T9759] __x64_sys_writev+0x41/0x50 [ 261.763373][ T9759] do_syscall_64+0x44/0xa0 [ 261.767924][ T9759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.773866][ T9759] RIP: 0033:0x7f5cdb0a4739 [ 261.778320][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:44:42 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x7, "e3e1ff374c"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 261.797929][ T9759] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 261.805814][ T9786] tmpfs: Unknown parameter 'smackfsdef' [ 261.806399][ T9759] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 261.806415][ T9759] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 261.827926][ T9759] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.835961][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:44:42 executing program 1 (fault-call:2 fault-nth:4): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 261.843962][ T9759] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:42 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 261.875156][ T9801] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 261.885124][ T9801] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 261.897225][ T9801] FAULT_INJECTION: forcing a failure. [ 261.897225][ T9801] name failslab, interval 1, probability 0, space 0, times 0 [ 261.906306][ T9805] tmpfs: Unknown parameter 'smackfsdef' [ 261.909914][ T9801] CPU: 1 PID: 9801 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 261.924117][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.934324][ T9801] Call Trace: [ 261.937621][ T9801] dump_stack_lvl+0xd6/0x122 [ 261.942265][ T9801] dump_stack+0x11/0x1b [ 261.946419][ T9801] should_fail+0x23c/0x250 [ 261.950925][ T9801] __should_failslab+0x81/0x90 [ 261.955736][ T9801] should_failslab+0x5/0x20 [ 261.960238][ T9801] kmem_cache_alloc_node+0x61/0x2c0 [ 261.965418][ T9801] ? console_unlock+0xb5b/0xbb0 [ 261.970355][ T9801] ? __alloc_skb+0xed/0x420 [ 261.974851][ T9801] __alloc_skb+0xed/0x420 [ 261.979167][ T9801] rtmsg_ifinfo_build_skb+0x61/0x130 [ 261.984442][ T9801] rtnetlink_event+0xb6/0x120 [ 261.989252][ T9801] raw_notifier_call_chain+0x53/0xb0 [ 261.994563][ T9801] dev_set_mtu_ext+0x3dc/0x5f0 [ 261.999393][ T9801] do_setlink+0x58a/0x2410 [ 262.003796][ T9801] ? __nla_validate_parse+0x108f/0x1760 [ 262.009323][ T9801] ? __nla_parse+0x3c/0x50 [ 262.013720][ T9801] rtnl_setlink+0x257/0x2a0 [ 262.018406][ T9801] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 262.023425][ T9801] rtnetlink_rcv_msg+0x711/0x7c0 [ 262.028363][ T9801] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 262.034250][ T9801] ? __wake_up+0x8d/0xc0 [ 262.038556][ T9801] ? __d_rehash+0x125/0x180 [ 262.043059][ T9801] ? __d_add+0x3bf/0x490 [ 262.047286][ T9801] ? should_fail+0x2a/0x250 [ 262.051776][ T9801] ? avc_has_perm_noaudit+0x1c0/0x270 [ 262.057135][ T9801] ? rhashtable_jhash2+0x13a/0x1a0 [ 262.062261][ T9801] ? jhash+0x2b0/0x2b0 [ 262.066314][ T9801] netlink_rcv_skb+0x14e/0x250 [ 262.071178][ T9801] ? rtnetlink_bind+0x60/0x60 [ 262.075833][ T9801] rtnetlink_rcv+0x18/0x20 [ 262.080230][ T9801] netlink_unicast+0x5ec/0x6b0 [ 262.085049][ T9801] netlink_sendmsg+0x6ea/0x7d0 [ 262.089872][ T9801] sock_write_iter+0x1a3/0x200 [ 262.094623][ T9801] do_iter_readv_writev+0x2de/0x380 [ 262.099810][ T9801] do_iter_write+0x192/0x5c0 [ 262.104466][ T9801] do_writev+0x210/0x440 [ 262.108738][ T9801] ? vfs_write+0x61a/0x900 [ 262.113160][ T9801] __x64_sys_writev+0x41/0x50 [ 262.117884][ T9801] do_syscall_64+0x44/0xa0 [ 262.122313][ T9801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.128195][ T9801] RIP: 0033:0x7f5cdb0a4739 [ 262.132590][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.152180][ T9801] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 262.160579][ T9801] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 262.168561][ T9801] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 22:44:42 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 262.176531][ T9801] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.184486][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.192519][ T9801] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:45 executing program 1 (fault-call:2 fault-nth:5): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:45 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:44:45 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 264.646710][ T9833] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 264.656400][ T9833] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 264.667044][ T9837] loop5: detected capacity change from 0 to 224 [ 264.670537][ T9833] FAULT_INJECTION: forcing a failure. [ 264.670537][ T9833] name failslab, interval 1, probability 0, space 0, times 0 [ 264.685941][ T9833] CPU: 0 PID: 9833 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 264.694611][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.704761][ T9833] Call Trace: [ 264.708093][ T9833] dump_stack_lvl+0xd6/0x122 [ 264.712811][ T9833] dump_stack+0x11/0x1b [ 264.716976][ T9833] should_fail+0x23c/0x250 [ 264.721383][ T9833] __should_failslab+0x81/0x90 [ 264.726152][ T9833] should_failslab+0x5/0x20 [ 264.730646][ T9833] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 264.736350][ T9833] ? __kmalloc_node_track_caller+0x30/0x40 [ 264.742155][ T9833] __kmalloc_node_track_caller+0x30/0x40 [ 264.747773][ T9833] ? rtmsg_ifinfo_build_skb+0x61/0x130 [ 264.753238][ T9833] __alloc_skb+0x187/0x420 [ 264.757919][ T9833] rtmsg_ifinfo_build_skb+0x61/0x130 [ 264.763248][ T9833] rtnetlink_event+0xb6/0x120 [ 264.767907][ T9833] raw_notifier_call_chain+0x53/0xb0 [ 264.773181][ T9833] dev_set_mtu_ext+0x3dc/0x5f0 [ 264.777974][ T9833] do_setlink+0x58a/0x2410 [ 264.782369][ T9833] ? __nla_validate_parse+0x108f/0x1760 [ 264.787897][ T9833] ? __nla_parse+0x3c/0x50 [ 264.792329][ T9833] rtnl_setlink+0x257/0x2a0 [ 264.796840][ T9833] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 264.801900][ T9833] rtnetlink_rcv_msg+0x711/0x7c0 [ 264.807290][ T9833] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 264.813080][ T9833] ? __wake_up+0x8d/0xc0 [ 264.817326][ T9833] ? __d_rehash+0x125/0x180 [ 264.821822][ T9833] ? __d_add+0x3bf/0x490 [ 264.826144][ T9833] ? should_fail+0x2a/0x250 [ 264.830637][ T9833] ? avc_has_perm_noaudit+0x1c0/0x270 [ 264.836063][ T9833] ? rhashtable_jhash2+0x13a/0x1a0 [ 264.841161][ T9833] ? jhash+0x2b0/0x2b0 22:44:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:44:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:45 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 264.845226][ T9833] netlink_rcv_skb+0x14e/0x250 [ 264.849992][ T9833] ? rtnetlink_bind+0x60/0x60 [ 264.854693][ T9833] rtnetlink_rcv+0x18/0x20 [ 264.859092][ T9833] netlink_unicast+0x5ec/0x6b0 [ 264.863885][ T9833] netlink_sendmsg+0x6ea/0x7d0 [ 264.868632][ T9833] sock_write_iter+0x1a3/0x200 [ 264.873396][ T9833] do_iter_readv_writev+0x2de/0x380 [ 264.878605][ T9833] do_iter_write+0x192/0x5c0 [ 264.883200][ T9833] do_writev+0x210/0x440 [ 264.887443][ T9833] ? vfs_write+0x61a/0x900 [ 264.891862][ T9833] __x64_sys_writev+0x41/0x50 [ 264.896547][ T9833] do_syscall_64+0x44/0xa0 [ 264.900982][ T9833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.906884][ T9833] RIP: 0033:0x7f5cdb0a4739 [ 264.911348][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.931001][ T9833] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 264.939399][ T9833] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 264.947354][ T9833] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 264.955305][ T9833] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 264.963255][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.971219][ T9833] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:45 executing program 1 (fault-call:2 fault-nth:6): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:45 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 264.999579][ T9860] loop5: detected capacity change from 0 to 224 [ 265.025817][ T9869] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 265.036050][ T9869] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 265.049963][ T9869] FAULT_INJECTION: forcing a failure. [ 265.049963][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 265.062575][ T9869] CPU: 0 PID: 9869 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 265.071233][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.081280][ T9869] Call Trace: [ 265.084543][ T9869] dump_stack_lvl+0xd6/0x122 [ 265.089118][ T9869] dump_stack+0x11/0x1b [ 265.093291][ T9869] should_fail+0x23c/0x250 [ 265.097692][ T9869] __should_failslab+0x81/0x90 [ 265.102514][ T9869] should_failslab+0x5/0x20 [ 265.107018][ T9869] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 265.112722][ T9869] ? __kmalloc_node_track_caller+0x30/0x40 [ 265.118510][ T9869] ? netlink_trim+0x112/0x140 [ 265.123177][ T9869] __kmalloc_node_track_caller+0x30/0x40 [ 265.128809][ T9869] pskb_expand_head+0xc9/0x920 [ 265.133557][ T9869] ? skb_trim+0x8c/0xb0 [ 265.137699][ T9869] ? rtnl_fill_ifinfo+0x240f/0x2540 [ 265.142902][ T9869] netlink_trim+0x112/0x140 [ 265.147388][ T9869] netlink_broadcast_filtered+0x47/0xb60 [ 265.153206][ T9869] ? rtmsg_ifinfo_build_skb+0xa8/0x130 [ 265.158787][ T9869] nlmsg_notify+0xcc/0x180 [ 265.163186][ T9869] rtnetlink_event+0x105/0x120 [ 265.167966][ T9869] raw_notifier_call_chain+0x53/0xb0 [ 265.173231][ T9869] dev_set_mtu_ext+0x3dc/0x5f0 [ 265.178091][ T9869] do_setlink+0x58a/0x2410 [ 265.182494][ T9869] ? __nla_validate_parse+0x108f/0x1760 [ 265.188041][ T9869] ? __nla_parse+0x3c/0x50 [ 265.192556][ T9869] rtnl_setlink+0x257/0x2a0 [ 265.197051][ T9869] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 265.202056][ T9869] rtnetlink_rcv_msg+0x711/0x7c0 [ 265.206978][ T9869] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 265.212767][ T9869] ? __wake_up+0x8d/0xc0 [ 265.216996][ T9869] ? __d_rehash+0x125/0x180 [ 265.221485][ T9869] ? __d_add+0x3bf/0x490 [ 265.225782][ T9869] ? should_fail+0x2a/0x250 [ 265.230271][ T9869] ? avc_has_perm_noaudit+0x1c0/0x270 [ 265.235629][ T9869] ? rhashtable_jhash2+0x13a/0x1a0 [ 265.240762][ T9869] ? jhash+0x2b0/0x2b0 [ 265.244960][ T9869] netlink_rcv_skb+0x14e/0x250 [ 265.249708][ T9869] ? rtnetlink_bind+0x60/0x60 [ 265.254380][ T9869] rtnetlink_rcv+0x18/0x20 [ 265.258785][ T9869] netlink_unicast+0x5ec/0x6b0 [ 265.263595][ T9869] netlink_sendmsg+0x6ea/0x7d0 [ 265.268357][ T9869] sock_write_iter+0x1a3/0x200 [ 265.273116][ T9869] do_iter_readv_writev+0x2de/0x380 [ 265.278303][ T9869] do_iter_write+0x192/0x5c0 [ 265.282876][ T9869] do_writev+0x210/0x440 [ 265.287112][ T9869] ? vfs_write+0x61a/0x900 [ 265.291509][ T9869] __x64_sys_writev+0x41/0x50 [ 265.296248][ T9869] do_syscall_64+0x44/0xa0 [ 265.300707][ T9869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.306762][ T9869] RIP: 0033:0x7f5cdb0a4739 [ 265.311187][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.331063][ T9869] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.339521][ T9869] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 265.347476][ T9869] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 265.355433][ T9869] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 265.363503][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.371454][ T9869] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:45 executing program 1 (fault-call:2 fault-nth:7): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:45 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:45 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 265.409979][ T9869] syz-executor.1 (9869) used greatest stack depth: 10352 bytes left [ 265.420605][ T9888] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 265.430192][ T9888] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 265.438049][ T9890] loop5: detected capacity change from 0 to 224 [ 265.442034][ T9888] FAULT_INJECTION: forcing a failure. [ 265.442034][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 265.457530][ T9888] CPU: 0 PID: 9888 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 265.466224][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.476282][ T9888] Call Trace: [ 265.479671][ T9888] dump_stack_lvl+0xd6/0x122 [ 265.484278][ T9888] dump_stack+0x11/0x1b [ 265.488414][ T9888] should_fail+0x23c/0x250 [ 265.492832][ T9888] __should_failslab+0x81/0x90 [ 265.497623][ T9888] ? inetdev_init+0x6d/0x350 [ 265.502214][ T9888] should_failslab+0x5/0x20 [ 265.506761][ T9888] kmem_cache_alloc_trace+0x52/0x320 [ 265.512029][ T9888] inetdev_init+0x6d/0x350 [ 265.516519][ T9888] inetdev_event+0x15d/0xad0 [ 265.521091][ T9888] ? rt_cache_flush+0x9/0x20 [ 265.525749][ T9888] raw_notifier_call_chain+0x53/0xb0 [ 265.531019][ T9888] dev_set_mtu_ext+0x3dc/0x5f0 [ 265.535767][ T9888] do_setlink+0x58a/0x2410 [ 265.540173][ T9888] ? __nla_validate_parse+0x108f/0x1760 [ 265.545703][ T9888] ? __nla_parse+0x3c/0x50 [ 265.550106][ T9888] rtnl_setlink+0x257/0x2a0 [ 265.554689][ T9888] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 265.559815][ T9888] rtnetlink_rcv_msg+0x711/0x7c0 [ 265.564735][ T9888] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 265.570542][ T9888] ? __wake_up+0x8d/0xc0 [ 265.574793][ T9888] ? kcsan_setup_watchpoint+0x241/0x3f0 [ 265.580383][ T9888] ? __d_rehash+0x125/0x180 [ 265.584865][ T9888] ? __d_add+0x3bf/0x490 [ 265.589154][ T9888] ? should_fail+0x2a/0x250 [ 265.593634][ T9888] ? avc_has_perm_noaudit+0x1c0/0x270 [ 265.599063][ T9888] ? rhashtable_jhash2+0x13a/0x1a0 [ 265.604156][ T9888] ? jhash+0x2b0/0x2b0 [ 265.608270][ T9888] netlink_rcv_skb+0x14e/0x250 [ 265.613013][ T9888] ? rtnetlink_bind+0x60/0x60 [ 265.617711][ T9888] rtnetlink_rcv+0x18/0x20 [ 265.622210][ T9888] netlink_unicast+0x5ec/0x6b0 [ 265.627046][ T9888] netlink_sendmsg+0x6ea/0x7d0 [ 265.631833][ T9888] sock_write_iter+0x1a3/0x200 [ 265.636628][ T9888] do_iter_readv_writev+0x2de/0x380 [ 265.641810][ T9888] do_iter_write+0x192/0x5c0 [ 265.646399][ T9888] do_writev+0x210/0x440 [ 265.650625][ T9888] ? vfs_write+0x61a/0x900 [ 265.655024][ T9888] __x64_sys_writev+0x41/0x50 [ 265.659693][ T9888] do_syscall_64+0x44/0xa0 [ 265.664098][ T9888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.669998][ T9888] RIP: 0033:0x7f5cdb0a4739 [ 265.674528][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.694189][ T9888] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 265.702763][ T9888] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 22:44:46 executing program 1 (fault-call:2 fault-nth:8): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 265.710719][ T9888] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 265.718697][ T9888] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 265.726653][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.734618][ T9888] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 265.769457][ T9900] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 265.790905][ T9900] FAULT_INJECTION: forcing a failure. [ 265.790905][ T9900] name failslab, interval 1, probability 0, space 0, times 0 [ 265.803550][ T9900] CPU: 1 PID: 9900 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 265.812234][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.822288][ T9900] Call Trace: [ 265.825557][ T9900] dump_stack_lvl+0xd6/0x122 [ 265.830153][ T9900] dump_stack+0x11/0x1b [ 265.834309][ T9900] should_fail+0x23c/0x250 [ 265.838731][ T9900] ? neigh_parms_alloc+0x52/0x2d0 [ 265.843791][ T9900] __should_failslab+0x81/0x90 [ 265.848538][ T9900] should_failslab+0x5/0x20 [ 265.853022][ T9900] __kmalloc_track_caller+0x6d/0x350 [ 265.858368][ T9900] ? should_fail+0xd6/0x250 [ 265.862868][ T9900] kmemdup+0x21/0x50 [ 265.866747][ T9900] neigh_parms_alloc+0x52/0x2d0 [ 265.871619][ T9900] inetdev_init+0xe2/0x350 [ 265.876021][ T9900] inetdev_event+0x15d/0xad0 [ 265.880653][ T9900] ? rt_cache_flush+0x9/0x20 [ 265.885224][ T9900] raw_notifier_call_chain+0x53/0xb0 [ 265.890500][ T9900] dev_set_mtu_ext+0x3dc/0x5f0 [ 265.895310][ T9900] do_setlink+0x58a/0x2410 [ 265.899786][ T9900] ? __nla_validate_parse+0x108f/0x1760 [ 265.905315][ T9900] ? __nla_parse+0x3c/0x50 [ 265.909731][ T9900] rtnl_setlink+0x257/0x2a0 [ 265.914215][ T9900] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 265.919286][ T9900] rtnetlink_rcv_msg+0x711/0x7c0 [ 265.924204][ T9900] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 265.930046][ T9900] ? __wake_up+0x8d/0xc0 [ 265.934298][ T9900] ? __d_rehash+0x125/0x180 [ 265.938882][ T9900] ? __d_add+0x3bf/0x490 [ 265.943119][ T9900] ? should_fail+0x2a/0x250 [ 265.947687][ T9900] ? avc_has_perm_noaudit+0x1c0/0x270 [ 265.953073][ T9900] ? rhashtable_jhash2+0x13a/0x1a0 [ 265.958231][ T9900] ? jhash+0x2b0/0x2b0 [ 265.962359][ T9900] netlink_rcv_skb+0x14e/0x250 [ 265.967101][ T9900] ? rtnetlink_bind+0x60/0x60 [ 265.971822][ T9900] rtnetlink_rcv+0x18/0x20 [ 265.976263][ T9900] netlink_unicast+0x5ec/0x6b0 [ 265.981011][ T9900] netlink_sendmsg+0x6ea/0x7d0 [ 265.985775][ T9900] sock_write_iter+0x1a3/0x200 [ 265.990612][ T9900] do_iter_readv_writev+0x2de/0x380 [ 265.995809][ T9900] do_iter_write+0x192/0x5c0 [ 266.000531][ T9900] do_writev+0x210/0x440 [ 266.004759][ T9900] ? vfs_write+0x61a/0x900 [ 266.009166][ T9900] __x64_sys_writev+0x41/0x50 [ 266.013841][ T9900] do_syscall_64+0x44/0xa0 [ 266.018296][ T9900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 266.024232][ T9900] RIP: 0033:0x7f5cdb0a4739 [ 266.028650][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 266.048237][ T9900] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 266.056721][ T9900] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 266.064705][ T9900] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 266.072669][ T9900] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 266.080618][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.088580][ T9900] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:44:48 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 267.683900][ T9914] loop5: detected capacity change from 0 to 224 22:44:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:44:48 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:48 executing program 1 (fault-call:2 fault-nth:9): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:48 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:44:48 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 267.932702][ T9927] loop5: detected capacity change from 0 to 224 [ 267.934653][ T9929] validate_nla: 1 callbacks suppressed [ 267.934665][ T9929] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 267.956484][ T9929] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 267.965596][ T9929] FAULT_INJECTION: forcing a failure. [ 267.965596][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 267.978210][ T9929] CPU: 1 PID: 9929 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 267.986867][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.996901][ T9929] Call Trace: [ 268.000169][ T9929] dump_stack_lvl+0xd6/0x122 [ 268.004744][ T9929] dump_stack+0x11/0x1b [ 268.008900][ T9929] should_fail+0x23c/0x250 [ 268.013317][ T9929] ? neigh_sysctl_register+0x60/0x450 [ 268.018673][ T9929] __should_failslab+0x81/0x90 [ 268.023505][ T9929] should_failslab+0x5/0x20 [ 268.028050][ T9929] __kmalloc_track_caller+0x6d/0x350 [ 268.033313][ T9929] ? __kfree_skb+0xfe/0x150 [ 268.037796][ T9929] ? ___cache_free+0x3c/0x300 [ 268.042450][ T9929] kmemdup+0x21/0x50 [ 268.046400][ T9929] neigh_sysctl_register+0x60/0x450 [ 268.051652][ T9929] ? __kmalloc_track_caller+0x247/0x350 [ 268.057439][ T9929] ? neigh_parms_alloc+0x52/0x2d0 [ 268.062557][ T9929] ? __list_add_valid+0x28/0x90 [ 268.067406][ T9929] devinet_sysctl_register+0x75/0x130 [ 268.072846][ T9929] inetdev_init+0x1db/0x350 [ 268.077336][ T9929] inetdev_event+0x15d/0xad0 [ 268.081911][ T9929] ? rt_cache_flush+0x9/0x20 [ 268.086559][ T9929] raw_notifier_call_chain+0x53/0xb0 [ 268.091823][ T9929] dev_set_mtu_ext+0x3dc/0x5f0 [ 268.096597][ T9929] do_setlink+0x58a/0x2410 [ 268.100993][ T9929] ? __nla_validate_parse+0x108f/0x1760 [ 268.106561][ T9929] ? __nla_parse+0x3c/0x50 [ 268.110956][ T9929] rtnl_setlink+0x257/0x2a0 [ 268.115444][ T9929] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 268.120452][ T9929] rtnetlink_rcv_msg+0x711/0x7c0 [ 268.125382][ T9929] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 268.131330][ T9929] ? __wake_up+0x8d/0xc0 [ 268.135651][ T9929] ? __d_rehash+0x125/0x180 [ 268.140136][ T9929] ? __d_add+0x3bf/0x490 [ 268.144365][ T9929] ? should_fail+0x2a/0x250 [ 268.148854][ T9929] ? avc_has_perm_noaudit+0x1c0/0x270 [ 268.154213][ T9929] ? rhashtable_jhash2+0x13a/0x1a0 [ 268.159318][ T9929] ? jhash+0x2b0/0x2b0 [ 268.163395][ T9929] netlink_rcv_skb+0x14e/0x250 [ 268.168198][ T9929] ? rtnetlink_bind+0x60/0x60 [ 268.172857][ T9929] rtnetlink_rcv+0x18/0x20 [ 268.177255][ T9929] netlink_unicast+0x5ec/0x6b0 [ 268.182005][ T9929] netlink_sendmsg+0x6ea/0x7d0 [ 268.186749][ T9929] sock_write_iter+0x1a3/0x200 [ 268.191500][ T9929] do_iter_readv_writev+0x2de/0x380 [ 268.196686][ T9929] do_iter_write+0x192/0x5c0 [ 268.201260][ T9929] do_writev+0x210/0x440 [ 268.205511][ T9929] ? vfs_write+0x61a/0x900 [ 268.209911][ T9929] __x64_sys_writev+0x41/0x50 [ 268.214569][ T9929] do_syscall_64+0x44/0xa0 [ 268.218978][ T9929] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.224876][ T9929] RIP: 0033:0x7f5cdb0a4739 [ 268.229270][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.248854][ T9929] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 268.257404][ T9929] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 268.265353][ T9929] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 268.273366][ T9929] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:44:48 executing program 1 (fault-call:2 fault-nth:10): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 268.281330][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.289292][ T9929] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 268.314772][ T9939] loop5: detected capacity change from 0 to 224 22:44:48 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:48 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 268.335632][ T9951] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 268.345294][ T9951] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 268.353557][ T9951] FAULT_INJECTION: forcing a failure. [ 268.353557][ T9951] name failslab, interval 1, probability 0, space 0, times 0 [ 268.366204][ T9951] CPU: 0 PID: 9951 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 268.374969][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.385012][ T9951] Call Trace: [ 268.388359][ T9951] dump_stack_lvl+0xd6/0x122 [ 268.392932][ T9951] dump_stack+0x11/0x1b [ 268.397075][ T9951] should_fail+0x23c/0x250 [ 268.401520][ T9951] ? kzalloc+0x16/0x20 [ 268.405569][ T9951] __should_failslab+0x81/0x90 [ 268.410310][ T9951] should_failslab+0x5/0x20 [ 268.414793][ T9951] __kmalloc+0x6f/0x350 [ 268.418928][ T9951] kzalloc+0x16/0x20 [ 268.422800][ T9951] __register_sysctl_table+0x8c/0xda0 [ 268.428152][ T9951] ? neigh_sysctl_register+0x450/0x450 [ 268.433595][ T9951] ? __module_address+0x1a/0x1d0 [ 268.438532][ T9951] register_net_sysctl+0x17c/0x190 [ 268.443676][ T9951] ? neigh_sysctl_register+0x450/0x450 [ 268.449184][ T9951] neigh_sysctl_register+0x3d9/0x450 [ 268.454746][ T9951] ? __list_add_valid+0x28/0x90 [ 268.459575][ T9951] devinet_sysctl_register+0x75/0x130 [ 268.464928][ T9951] inetdev_init+0x1db/0x350 [ 268.469416][ T9951] inetdev_event+0x15d/0xad0 [ 268.474013][ T9951] ? rt_cache_flush+0x9/0x20 [ 268.478637][ T9951] raw_notifier_call_chain+0x53/0xb0 [ 268.483921][ T9951] dev_set_mtu_ext+0x3dc/0x5f0 [ 268.488665][ T9951] do_setlink+0x58a/0x2410 [ 268.493059][ T9951] ? __nla_validate_parse+0x108f/0x1760 [ 268.498639][ T9951] ? __nla_parse+0x3c/0x50 [ 268.503128][ T9951] rtnl_setlink+0x257/0x2a0 [ 268.507623][ T9951] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 268.512638][ T9951] rtnetlink_rcv_msg+0x711/0x7c0 [ 268.517603][ T9951] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 268.523494][ T9951] ? __wake_up+0x8d/0xc0 [ 268.527790][ T9951] ? __d_rehash+0x125/0x180 [ 268.532344][ T9951] ? kvm_sched_clock_read+0xd/0x20 [ 268.537513][ T9951] ? sched_clock_cpu+0xe/0x180 [ 268.542260][ T9951] ? select_idle_sibling+0x4cd/0x6d0 [ 268.547525][ T9951] ? rhashtable_jhash2+0x13a/0x1a0 [ 268.552682][ T9951] ? jhash+0x2b0/0x2b0 [ 268.556734][ T9951] netlink_rcv_skb+0x14e/0x250 [ 268.561509][ T9951] ? rtnetlink_bind+0x60/0x60 [ 268.566254][ T9951] rtnetlink_rcv+0x18/0x20 [ 268.570649][ T9951] netlink_unicast+0x5ec/0x6b0 [ 268.575460][ T9951] netlink_sendmsg+0x6ea/0x7d0 [ 268.580234][ T9951] sock_write_iter+0x1a3/0x200 [ 268.585002][ T9951] do_iter_readv_writev+0x2de/0x380 [ 268.590230][ T9951] do_iter_write+0x192/0x5c0 [ 268.594800][ T9951] do_writev+0x210/0x440 [ 268.599049][ T9951] ? vfs_write+0x61a/0x900 [ 268.603464][ T9951] __x64_sys_writev+0x41/0x50 [ 268.608120][ T9951] do_syscall_64+0x44/0xa0 [ 268.612524][ T9951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.618464][ T9951] RIP: 0033:0x7f5cdb0a4739 [ 268.622868][ T9951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.642560][ T9951] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 268.650955][ T9951] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 268.658912][ T9951] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 268.666879][ T9951] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 268.674834][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:44:49 executing program 1 (fault-call:2 fault-nth:11): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 268.682802][ T9951] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 268.703140][ T9951] syz-executor.1 (9951) used greatest stack depth: 10208 bytes left [ 268.717872][ T9966] loop5: detected capacity change from 0 to 224 [ 268.732451][ T9971] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 268.741240][ T9971] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 268.749612][ T9971] FAULT_INJECTION: forcing a failure. [ 268.749612][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 268.762260][ T9971] CPU: 1 PID: 9971 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 268.770935][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.780987][ T9971] Call Trace: [ 268.784269][ T9971] dump_stack_lvl+0xd6/0x122 [ 268.788963][ T9971] dump_stack+0x11/0x1b [ 268.793124][ T9971] should_fail+0x23c/0x250 [ 268.797524][ T9971] ? kzalloc+0x16/0x20 [ 268.801613][ T9971] __should_failslab+0x81/0x90 [ 268.806387][ T9971] should_failslab+0x5/0x20 [ 268.810973][ T9971] __kmalloc+0x6f/0x350 [ 268.815164][ T9971] ? drop_sysctl_table+0x68/0x2e0 [ 268.820237][ T9971] kzalloc+0x16/0x20 [ 268.824163][ T9971] __register_sysctl_table+0x797/0xda0 [ 268.829621][ T9971] register_net_sysctl+0x17c/0x190 [ 268.834716][ T9971] ? neigh_sysctl_register+0x450/0x450 [ 268.840169][ T9971] neigh_sysctl_register+0x3d9/0x450 [ 268.845446][ T9971] ? __list_add_valid+0x28/0x90 [ 268.850339][ T9971] devinet_sysctl_register+0x75/0x130 [ 268.855723][ T9971] inetdev_init+0x1db/0x350 [ 268.860240][ T9971] inetdev_event+0x15d/0xad0 [ 268.864832][ T9971] ? rt_cache_flush+0x9/0x20 [ 268.869422][ T9971] raw_notifier_call_chain+0x53/0xb0 [ 268.874757][ T9971] dev_set_mtu_ext+0x3dc/0x5f0 [ 268.879524][ T9971] do_setlink+0x58a/0x2410 [ 268.883921][ T9971] ? __nla_validate_parse+0x108f/0x1760 [ 268.889445][ T9971] ? __nla_parse+0x3c/0x50 [ 268.893857][ T9971] rtnl_setlink+0x257/0x2a0 [ 268.898338][ T9971] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 268.903340][ T9971] rtnetlink_rcv_msg+0x711/0x7c0 [ 268.908260][ T9971] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 268.914048][ T9971] ? __wake_up+0x8d/0xc0 [ 268.918318][ T9971] ? __d_rehash+0x125/0x180 [ 268.922828][ T9971] ? __d_add+0x3bf/0x490 [ 268.927087][ T9971] ? should_fail+0x2a/0x250 [ 268.931590][ T9971] ? avc_has_perm_noaudit+0x1c0/0x270 [ 268.936949][ T9971] ? rhashtable_jhash2+0x13a/0x1a0 [ 268.942057][ T9971] ? jhash+0x2b0/0x2b0 [ 268.946105][ T9971] netlink_rcv_skb+0x14e/0x250 [ 268.950851][ T9971] ? rtnetlink_bind+0x60/0x60 [ 268.955516][ T9971] rtnetlink_rcv+0x18/0x20 [ 268.959918][ T9971] netlink_unicast+0x5ec/0x6b0 [ 268.964718][ T9971] netlink_sendmsg+0x6ea/0x7d0 [ 268.969459][ T9971] sock_write_iter+0x1a3/0x200 [ 268.974232][ T9971] do_iter_readv_writev+0x2de/0x380 [ 268.979413][ T9971] do_iter_write+0x192/0x5c0 [ 268.983985][ T9971] do_writev+0x210/0x440 [ 268.988287][ T9971] ? vfs_write+0x61a/0x900 [ 268.992682][ T9971] __x64_sys_writev+0x41/0x50 [ 268.997340][ T9971] do_syscall_64+0x44/0xa0 [ 269.001741][ T9971] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.007617][ T9971] RIP: 0033:0x7f5cdb0a4739 [ 269.012007][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.031591][ T9971] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 269.039981][ T9971] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 269.047933][ T9971] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 269.055904][ T9971] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 269.063856][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.071808][ T9971] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 269.079798][ T9971] sysctl could not get directory: /net/ipv4/neigh//lo -12 [ 269.087057][ T9971] CPU: 1 PID: 9971 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 269.095732][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.105773][ T9971] Call Trace: [ 269.109032][ T9971] dump_stack_lvl+0xd6/0x122 [ 269.113627][ T9971] dump_stack+0x11/0x1b [ 269.117762][ T9971] __register_sysctl_table+0xce7/0xda0 [ 269.123230][ T9971] register_net_sysctl+0x17c/0x190 [ 269.128339][ T9971] ? neigh_sysctl_register+0x450/0x450 [ 269.133791][ T9971] neigh_sysctl_register+0x3d9/0x450 [ 269.139073][ T9971] ? __list_add_valid+0x28/0x90 [ 269.143903][ T9971] devinet_sysctl_register+0x75/0x130 [ 269.149255][ T9971] inetdev_init+0x1db/0x350 [ 269.153744][ T9971] inetdev_event+0x15d/0xad0 [ 269.158328][ T9971] ? rt_cache_flush+0x9/0x20 [ 269.162934][ T9971] raw_notifier_call_chain+0x53/0xb0 [ 269.168208][ T9971] dev_set_mtu_ext+0x3dc/0x5f0 [ 269.172986][ T9971] do_setlink+0x58a/0x2410 [ 269.177408][ T9971] ? __nla_validate_parse+0x108f/0x1760 [ 269.182974][ T9971] ? __nla_parse+0x3c/0x50 [ 269.187371][ T9971] rtnl_setlink+0x257/0x2a0 [ 269.191856][ T9971] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 269.196866][ T9971] rtnetlink_rcv_msg+0x711/0x7c0 [ 269.201790][ T9971] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 269.207637][ T9971] ? __wake_up+0x8d/0xc0 [ 269.211931][ T9971] ? __d_rehash+0x125/0x180 [ 269.216423][ T9971] ? __d_add+0x3bf/0x490 [ 269.220730][ T9971] ? should_fail+0x2a/0x250 [ 269.225274][ T9971] ? avc_has_perm_noaudit+0x1c0/0x270 [ 269.230795][ T9971] ? rhashtable_jhash2+0x13a/0x1a0 [ 269.236016][ T9971] ? jhash+0x2b0/0x2b0 [ 269.240164][ T9971] netlink_rcv_skb+0x14e/0x250 [ 269.244921][ T9971] ? rtnetlink_bind+0x60/0x60 [ 269.249647][ T9971] rtnetlink_rcv+0x18/0x20 [ 269.254041][ T9971] netlink_unicast+0x5ec/0x6b0 [ 269.258792][ T9971] netlink_sendmsg+0x6ea/0x7d0 [ 269.263611][ T9971] sock_write_iter+0x1a3/0x200 [ 269.268358][ T9971] do_iter_readv_writev+0x2de/0x380 [ 269.273552][ T9971] do_iter_write+0x192/0x5c0 [ 269.278133][ T9971] do_writev+0x210/0x440 [ 269.282375][ T9971] ? vfs_write+0x61a/0x900 [ 269.286773][ T9971] __x64_sys_writev+0x41/0x50 [ 269.291485][ T9971] do_syscall_64+0x44/0xa0 [ 269.295894][ T9971] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.301897][ T9971] RIP: 0033:0x7f5cdb0a4739 [ 269.306294][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.325877][ T9971] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 269.334268][ T9971] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 269.342217][ T9971] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 269.350188][ T9971] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 269.358151][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.366273][ T9971] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:51 executing program 1 (fault-call:2 fault-nth:12): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:51 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 270.695302][ T9984] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 270.704750][ T9984] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 270.712958][ T9984] FAULT_INJECTION: forcing a failure. [ 270.712958][ T9984] name failslab, interval 1, probability 0, space 0, times 0 [ 270.725673][ T9984] CPU: 1 PID: 9984 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 270.734864][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.744910][ T9984] Call Trace: [ 270.748203][ T9984] dump_stack_lvl+0xd6/0x122 [ 270.752867][ T9984] dump_stack+0x11/0x1b [ 270.757002][ T9984] should_fail+0x23c/0x250 [ 270.761468][ T9984] ? __devinet_sysctl_register+0x61/0x280 [ 270.767228][ T9984] __should_failslab+0x81/0x90 [ 270.771972][ T9984] should_failslab+0x5/0x20 [ 270.776555][ T9984] __kmalloc_track_caller+0x6d/0x350 [ 270.781830][ T9984] kmemdup+0x21/0x50 [ 270.785738][ T9984] __devinet_sysctl_register+0x61/0x280 [ 270.791379][ T9984] ? __list_add_valid+0x28/0x90 [ 270.796208][ T9984] devinet_sysctl_register+0xee/0x130 [ 270.801559][ T9984] inetdev_init+0x1db/0x350 [ 270.806067][ T9984] inetdev_event+0x15d/0xad0 [ 270.810636][ T9984] ? rt_cache_flush+0x9/0x20 [ 270.815284][ T9984] raw_notifier_call_chain+0x53/0xb0 [ 270.820624][ T9984] dev_set_mtu_ext+0x3dc/0x5f0 [ 270.825366][ T9984] do_setlink+0x58a/0x2410 [ 270.829853][ T9984] ? __nla_validate_parse+0x108f/0x1760 [ 270.835375][ T9984] ? __nla_parse+0x3c/0x50 [ 270.839766][ T9984] rtnl_setlink+0x257/0x2a0 [ 270.844337][ T9984] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 270.849342][ T9984] rtnetlink_rcv_msg+0x711/0x7c0 [ 270.854258][ T9984] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 270.860047][ T9984] ? __wake_up+0x8d/0xc0 [ 270.864269][ T9984] ? __d_rehash+0x125/0x180 [ 270.868768][ T9984] ? __d_add+0x3bf/0x490 [ 270.872989][ T9984] ? should_fail+0x2a/0x250 [ 270.877469][ T9984] ? avc_has_perm_noaudit+0x1c0/0x270 [ 270.882910][ T9984] ? rhashtable_jhash2+0x13a/0x1a0 [ 270.888004][ T9984] ? jhash+0x2b0/0x2b0 [ 270.892113][ T9984] netlink_rcv_skb+0x14e/0x250 [ 270.896878][ T9984] ? rtnetlink_bind+0x60/0x60 [ 270.901540][ T9984] rtnetlink_rcv+0x18/0x20 [ 270.905933][ T9984] netlink_unicast+0x5ec/0x6b0 [ 270.910760][ T9984] netlink_sendmsg+0x6ea/0x7d0 [ 270.915502][ T9984] sock_write_iter+0x1a3/0x200 [ 270.920249][ T9984] do_iter_readv_writev+0x2de/0x380 [ 270.925509][ T9984] do_iter_write+0x192/0x5c0 [ 270.930101][ T9984] do_writev+0x210/0x440 [ 270.934345][ T9984] ? vfs_write+0x61a/0x900 [ 270.938765][ T9984] __x64_sys_writev+0x41/0x50 22:44:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:44:51 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) tkill(0x0, 0xd) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 22:44:51 executing program 4: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:51 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:44:51 executing program 0: clone(0xbc4d9e47e48eb1fe, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x0) clone(0xa0484000, &(0x7f00000001c0)="24c061390e7de995a97868274808dd75f92f07a2e5344ccb486e2e47bd1dddcbb9bda40cb40087a9362d6a30e432a1916f566408b3cc77022233af0a19d737b2b96b9e1df969c24deb38d36c3b84aa1452a2c21fea30b697f350d5fc85b9ec4b4a", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="195a00f3fe272e73930beb28ffb0bcb3a550fff49395a0efd42df722a499fbd60a786cb6a0c35064800037899c50d15928716fa31c6d31f0dd1bb136d333045adc33314fde9fba3e5321da0d07b8d0c30104f079724db2e81c3b00e5745d6250d4dd5a5cce9ab4e171ee8b01acf13a4e83b5496e6802deeae3418a4b94658810b972e70f1202e82174f9f1fe446460d90ff83da956babd582b35f5639ef0c5135649c87c9e17fdb89fb0faf7143862c5109d372757c7854c22236ecc3ee5") [ 270.943524][ T9984] do_syscall_64+0x44/0xa0 [ 270.947951][ T9984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 270.953854][ T9984] RIP: 0033:0x7f5cdb0a4739 [ 270.958271][ T9984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 270.967896][ T9993] loop5: detected capacity change from 0 to 224 [ 270.977876][ T9984] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 22:44:51 executing program 0: migrate_pages(0x0, 0x5, &(0x7f0000000100)=0x96, &(0x7f0000000000)=0x10000) gettid() 22:44:51 executing program 4: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:51 executing program 1 (fault-call:2 fault-nth:13): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 270.977904][ T9984] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 271.000492][ T9984] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 271.008499][ T9984] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.016466][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.024441][ T9984] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 271.028169][T10000] loop4: detected capacity change from 0 to 224 22:44:51 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) tkill(0x0, 0xd) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 22:44:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000040)={'netdevsim0\x00', @ifru_hwaddr=@multicast}) [ 271.095335][T10022] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 271.115447][T10029] loop4: detected capacity change from 0 to 224 [ 271.127358][T10022] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 271.139446][T10030] loop5: detected capacity change from 0 to 224 22:44:51 executing program 4: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:51 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 271.149123][T10022] FAULT_INJECTION: forcing a failure. [ 271.149123][T10022] name failslab, interval 1, probability 0, space 0, times 0 [ 271.162163][T10022] CPU: 1 PID: 10022 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 271.170919][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.181085][T10022] Call Trace: [ 271.184348][T10022] dump_stack_lvl+0xd6/0x122 [ 271.188942][T10022] dump_stack+0x11/0x1b [ 271.193091][T10022] should_fail+0x23c/0x250 [ 271.197547][T10022] ? kzalloc+0x16/0x20 [ 271.201599][T10022] __should_failslab+0x81/0x90 [ 271.206343][T10022] should_failslab+0x5/0x20 [ 271.210833][T10022] __kmalloc+0x6f/0x350 [ 271.214985][T10022] kzalloc+0x16/0x20 [ 271.218883][T10022] __register_sysctl_table+0x8c/0xda0 [ 271.224346][T10022] ? __module_address+0x1a/0x1d0 [ 271.229293][T10022] register_net_sysctl+0x17c/0x190 [ 271.234402][T10022] __devinet_sysctl_register+0x1f2/0x280 [ 271.240213][T10022] ? __list_add_valid+0x28/0x90 [ 271.245048][T10022] devinet_sysctl_register+0xee/0x130 [ 271.250415][T10022] inetdev_init+0x1db/0x350 [ 271.254902][T10022] inetdev_event+0x15d/0xad0 [ 271.259472][T10022] ? rt_cache_flush+0x9/0x20 [ 271.264121][T10022] raw_notifier_call_chain+0x53/0xb0 [ 271.269417][T10022] dev_set_mtu_ext+0x3dc/0x5f0 [ 271.274218][T10022] do_setlink+0x58a/0x2410 [ 271.278651][T10022] ? __nla_validate_parse+0x108f/0x1760 [ 271.280557][T10055] loop4: detected capacity change from 0 to 224 [ 271.284191][T10022] ? __nla_parse+0x3c/0x50 [ 271.284213][T10022] rtnl_setlink+0x257/0x2a0 [ 271.284236][T10022] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 271.304516][T10022] rtnetlink_rcv_msg+0x711/0x7c0 [ 271.309455][T10022] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 271.315273][T10022] ? __wake_up+0x8d/0xc0 [ 271.319523][T10022] ? __d_rehash+0x125/0x180 [ 271.324076][T10022] ? __d_add+0x3bf/0x490 [ 271.328301][T10022] ? should_fail+0x2a/0x250 [ 271.332785][T10022] ? avc_has_perm_noaudit+0x1c0/0x270 [ 271.338158][T10022] ? rhashtable_jhash2+0x13a/0x1a0 [ 271.343252][T10022] ? jhash+0x2b0/0x2b0 [ 271.347548][T10022] netlink_rcv_skb+0x14e/0x250 [ 271.352303][T10022] ? rtnetlink_bind+0x60/0x60 [ 271.356959][T10022] rtnetlink_rcv+0x18/0x20 [ 271.361361][T10022] netlink_unicast+0x5ec/0x6b0 [ 271.366106][T10022] netlink_sendmsg+0x6ea/0x7d0 [ 271.370852][T10022] sock_write_iter+0x1a3/0x200 [ 271.375712][T10022] do_iter_readv_writev+0x2de/0x380 [ 271.380895][T10022] do_iter_write+0x192/0x5c0 [ 271.385481][T10022] do_writev+0x210/0x440 [ 271.389705][T10022] ? vfs_write+0x61a/0x900 [ 271.394281][T10022] __x64_sys_writev+0x41/0x50 [ 271.398945][T10022] do_syscall_64+0x44/0xa0 [ 271.403341][T10022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 271.409328][T10022] RIP: 0033:0x7f5cdb0a4739 [ 271.413749][T10022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 271.433335][T10022] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 271.441727][T10022] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 271.449688][T10022] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 271.457637][T10022] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.465586][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.473634][T10022] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:54 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:44:54 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:54 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) tkill(0x0, 0xd) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 22:44:54 executing program 1 (fault-call:2 fault-nth:14): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:54 executing program 4: gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/162, 0xa2}], 0x2, 0x77, 0x0) 22:44:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') syz_mount_image$vfat(0x0, 0x0, 0x0, 0x5, &(0x7f0000001080)=[{&(0x7f0000000100)="780f2a28dacf2290347aecb8d04c9e6454b6cee0b1fa083e493abd915d5b2cb63f46d66246a1232935e439e6139cdc2511122f0f2022fd2f74685d86d258876dfbf4911bdf", 0x45}, {&(0x7f0000000180)="c2315139d8e9662413753404146f41e8028785d64c32b0a558cf5b5898b36e33ea377b201427ed74a50b25be9ab109dbe29a0719f49eb67df3ab7c343af03008c276ca32b49935bdc34df3005b478e6c5712d8eb6662e7b675309c4312d81bc9aa475da92b70279b2ac2ae4b174485bf8d538096282e8b06eeadd585b8720f1526a0356c1214d3f2839d980440c5f1ae513ca6d3e0d0d677c9c2fb3dc8f3c8dad934fbdf62129cab8abb77e532a623586cdb6ec5ba505975da6a5ae665ef01307f9cb44b4204c92e1901f2fa1bf88033df2ac2", 0xd3}, {&(0x7f0000000280)="30547ede9b57ff0dc3bba72c4dc6475fba65ef3632110573d53cf591193a5e4ef8f3c5bc4d5cba5b84d6e2fe918f7156b24356cf9010e20b6c625ce954a9aac7643340604386be3873daf1cda0556a15f6cb62cce3dbefe25dbd81a950e8f05e95160ed1997b1bf5da73bc9c01d9af58bbf4696f8cd990e6abbbec9f76a76b057014c7875acd96bf1e5ff62632776d8ef25c61dcf401e81c4e8861bac4ab052954942e1631870989dc86c1d9a855a3c97c461dcac88124651b5b6e6a68f16dc1432503d113b48543a9a4c1965e72a0748072f4e7fb82e29b7648eb3d4f2e5b3a28c91f78b4195e23ae287c521d0a", 0xee}, {&(0x7f00000003c0)="f4822227da9099050ac73458eca2326aaefebccdb41fa6d19ffb261c2e7536c13a430ee45ce8f40122c59dbb6f3cfe7f4a3d386fc37e9ffa30b17669c00101f58ccda1cc4e1864c6f29de12a20e916ea6c8f9c898bcae0ca5dc82ca1de1268cf", 0x60}, {&(0x7f0000000440)="f2cf054ef68ddf064260904c149fda5d7011b063fd5e669203b5842489ddbaac4fe04192b3d9fe511931b85bf2c909d2925ae4eb9feca6915a36c6fbb5b24d9b3b9e2e592c0e0b9ee41500fed5951a4689accb35b087523a2f6afff38f6b74a3c2541162b42bc10358a0c05efe91b1ee90a2b69950e5e39f73de1607a153cdf8b0ef3bb62cc49264d3ae28e266bcaa12b16b78916304c3bf6a5d8d82c0f689063b46d10c38e43634dd179ebfae3b9e51d3db51df1e2b6334f962f3f64b18", 0xbe}], 0x0, 0x0) chdir(&(0x7f0000000380)='./file1\x00') ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000700)={{}, {0x80000001}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x3e8}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) setgroups(0x0, &(0x7f0000000500)) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000002a40)=""/4112, 0x1010}], 0x1, 0x0, 0x0) 22:44:54 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) preadv(r0, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) r4 = syz_io_uring_complete(0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000004000) 22:44:54 executing program 4: r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r1, r0, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7fffffff, 0x4) clock_getres(0x3, &(0x7f0000000000)) futex(&(0x7f0000000040), 0x81, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x2, 0x1) [ 273.981945][T10077] loop5: detected capacity change from 0 to 224 [ 274.007501][T10084] validate_nla: 1 callbacks suppressed [ 274.007513][T10084] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 274.030439][T10084] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 274.046000][T10084] FAULT_INJECTION: forcing a failure. [ 274.046000][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 274.058637][T10084] CPU: 1 PID: 10084 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 274.067402][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.077470][T10084] Call Trace: 22:44:54 executing program 4: unshare(0x62000200) r0 = io_uring_setup(0x45db, &(0x7f00000009c0)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x20000400) 22:44:54 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 274.080758][T10084] dump_stack_lvl+0xd6/0x122 [ 274.085355][T10084] dump_stack+0x11/0x1b [ 274.089512][T10084] should_fail+0x23c/0x250 [ 274.093942][T10084] ? kzalloc+0x16/0x20 [ 274.098061][T10084] __should_failslab+0x81/0x90 [ 274.102848][T10084] should_failslab+0x5/0x20 [ 274.107361][T10084] __kmalloc+0x6f/0x350 [ 274.111574][T10084] ? kcsan_setup_watchpoint+0x241/0x3f0 [ 274.117113][T10084] ? drop_sysctl_table+0x68/0x2e0 [ 274.122132][T10084] kzalloc+0x16/0x20 [ 274.126082][T10084] __register_sysctl_table+0x797/0xda0 [ 274.131564][T10084] register_net_sysctl+0x17c/0x190 [ 274.136750][T10084] __devinet_sysctl_register+0x1f2/0x280 [ 274.138012][T10115] loop5: detected capacity change from 0 to 224 [ 274.142390][T10084] ? __list_add_valid+0x28/0x90 [ 274.142414][T10084] devinet_sysctl_register+0xee/0x130 [ 274.158822][T10084] inetdev_init+0x1db/0x350 [ 274.163334][T10084] inetdev_event+0x15d/0xad0 [ 274.167983][T10084] ? rt_cache_flush+0x9/0x20 [ 274.172570][T10084] raw_notifier_call_chain+0x53/0xb0 [ 274.177836][T10084] dev_set_mtu_ext+0x3dc/0x5f0 [ 274.182613][T10084] do_setlink+0x58a/0x2410 [ 274.187011][T10084] ? __nla_validate_parse+0x108f/0x1760 [ 274.192597][T10084] ? __nla_parse+0x3c/0x50 [ 274.196989][T10084] rtnl_setlink+0x257/0x2a0 [ 274.201477][T10084] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 274.206514][T10084] rtnetlink_rcv_msg+0x711/0x7c0 [ 274.211432][T10084] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 274.217344][T10084] ? __wake_up+0x8d/0xc0 [ 274.221568][T10084] ? __d_rehash+0x125/0x180 [ 274.226067][T10084] ? __d_add+0x3bf/0x490 [ 274.230307][T10084] ? kcsan_setup_watchpoint+0x241/0x3f0 [ 274.235849][T10084] ? should_fail+0x2a/0x250 [ 274.240340][T10084] ? avc_has_perm_noaudit+0x1c0/0x270 [ 274.245695][T10084] ? rhashtable_jhash2+0x13a/0x1a0 [ 274.250803][T10084] ? jhash+0x2b0/0x2b0 [ 274.254853][T10084] netlink_rcv_skb+0x14e/0x250 [ 274.259685][T10084] ? rtnetlink_bind+0x60/0x60 [ 274.264358][T10084] rtnetlink_rcv+0x18/0x20 [ 274.268769][T10084] netlink_unicast+0x5ec/0x6b0 [ 274.273533][T10084] netlink_sendmsg+0x6ea/0x7d0 [ 274.278421][T10084] sock_write_iter+0x1a3/0x200 [ 274.283189][T10084] do_iter_readv_writev+0x2de/0x380 [ 274.288379][T10084] do_iter_write+0x192/0x5c0 [ 274.292953][T10084] do_writev+0x210/0x440 [ 274.297235][T10084] ? vfs_write+0x61a/0x900 [ 274.301648][T10084] __x64_sys_writev+0x41/0x50 [ 274.306317][T10084] do_syscall_64+0x44/0xa0 [ 274.310716][T10084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 274.316602][T10084] RIP: 0033:0x7f5cdb0a4739 [ 274.321001][T10084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 274.340608][T10084] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 274.349025][T10084] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 274.357023][T10084] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 274.365173][T10084] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 274.373141][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.381113][T10084] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 274.389255][T10084] sysctl could not get directory: /net/ipv4/conf//lo -12 [ 274.396321][T10084] CPU: 1 PID: 10084 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 274.405130][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.415186][T10084] Call Trace: [ 274.418448][T10084] dump_stack_lvl+0xd6/0x122 [ 274.423090][T10084] dump_stack+0x11/0x1b [ 274.427293][T10084] __register_sysctl_table+0xce7/0xda0 [ 274.432739][T10084] register_net_sysctl+0x17c/0x190 [ 274.437834][T10084] __devinet_sysctl_register+0x1f2/0x280 [ 274.443543][T10084] ? __list_add_valid+0x28/0x90 [ 274.448372][T10084] devinet_sysctl_register+0xee/0x130 [ 274.453802][T10084] inetdev_init+0x1db/0x350 [ 274.458286][T10084] inetdev_event+0x15d/0xad0 [ 274.462913][T10084] ? rt_cache_flush+0x9/0x20 [ 274.467504][T10084] raw_notifier_call_chain+0x53/0xb0 [ 274.472785][T10084] dev_set_mtu_ext+0x3dc/0x5f0 [ 274.477634][T10084] do_setlink+0x58a/0x2410 [ 274.482128][T10084] ? __nla_validate_parse+0x108f/0x1760 [ 274.487661][T10084] ? __nla_parse+0x3c/0x50 [ 274.492068][T10084] rtnl_setlink+0x257/0x2a0 [ 274.496604][T10084] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 274.501700][T10084] rtnetlink_rcv_msg+0x711/0x7c0 [ 274.506794][T10084] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 274.512594][T10084] ? __wake_up+0x8d/0xc0 [ 274.516849][T10084] ? __d_rehash+0x125/0x180 [ 274.521348][T10084] ? __d_add+0x3bf/0x490 [ 274.525578][T10084] ? kcsan_setup_watchpoint+0x241/0x3f0 [ 274.531107][T10084] ? should_fail+0x2a/0x250 [ 274.535604][T10084] ? avc_has_perm_noaudit+0x1c0/0x270 [ 274.540979][T10084] ? rhashtable_jhash2+0x13a/0x1a0 [ 274.546134][T10084] ? jhash+0x2b0/0x2b0 [ 274.550207][T10084] netlink_rcv_skb+0x14e/0x250 [ 274.554960][T10084] ? rtnetlink_bind+0x60/0x60 [ 274.559645][T10084] rtnetlink_rcv+0x18/0x20 [ 274.564043][T10084] netlink_unicast+0x5ec/0x6b0 [ 274.568851][T10084] netlink_sendmsg+0x6ea/0x7d0 [ 274.573639][T10084] sock_write_iter+0x1a3/0x200 [ 274.578426][T10084] do_iter_readv_writev+0x2de/0x380 [ 274.583622][T10084] do_iter_write+0x192/0x5c0 [ 274.588191][T10084] do_writev+0x210/0x440 [ 274.592426][T10084] ? vfs_write+0x61a/0x900 [ 274.596847][T10084] __x64_sys_writev+0x41/0x50 [ 274.601516][T10084] do_syscall_64+0x44/0xa0 [ 274.605958][T10084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 274.611856][T10084] RIP: 0033:0x7f5cdb0a4739 22:44:55 executing program 1 (fault-call:2 fault-nth:15): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 274.616316][T10084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 274.636027][T10084] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 274.644440][T10084] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 274.652409][T10084] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 274.660369][T10084] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 274.668325][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.676291][T10084] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001180)={0x0, 0xfffffffffffffffb, 0x56, 0x5, @buffer, &(0x7f0000000100)="c7b93107dd7b298d130eac160a40212547c03e14ca3578aedad90408ec59d725746457579a369b85d6b03959985c175b5b733ca65c46daa257678b7b3e35caac6c5ac3a22fb38bb8abe69d88e563293f72e9556c5acd", &(0x7f0000000180)=""/4096, 0x800, 0x10001, 0x3, &(0x7f0000000040)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x1d}) [ 274.726605][T10136] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 274.739929][T10136] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 274.755392][T10137] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.762592][T10136] FAULT_INJECTION: forcing a failure. [ 274.762592][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 274.765766][T10141] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.777581][T10136] CPU: 0 PID: 10136 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 274.795839][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.805919][T10136] Call Trace: [ 274.809368][T10136] dump_stack_lvl+0xd6/0x122 [ 274.813971][T10136] dump_stack+0x11/0x1b [ 274.818114][T10136] should_fail+0x23c/0x250 [ 274.822506][T10136] __should_failslab+0x81/0x90 [ 274.827300][T10136] should_failslab+0x5/0x20 [ 274.831783][T10136] kmem_cache_alloc_node+0x61/0x2c0 [ 274.837036][T10136] ? __alloc_skb+0xed/0x420 [ 274.841520][T10136] __alloc_skb+0xed/0x420 [ 274.845890][T10136] inet_netconf_notify_devconf+0x163/0x220 [ 274.851742][T10136] __devinet_sysctl_register+0x234/0x280 [ 274.857379][T10136] ? __list_add_valid+0x28/0x90 [ 274.862212][T10136] devinet_sysctl_register+0xee/0x130 [ 274.867565][T10136] inetdev_init+0x1db/0x350 [ 274.872136][T10136] inetdev_event+0x15d/0xad0 [ 274.876760][T10136] ? rt_cache_flush+0x9/0x20 [ 274.881331][T10136] raw_notifier_call_chain+0x53/0xb0 [ 274.886599][T10136] dev_set_mtu_ext+0x3dc/0x5f0 [ 274.891352][T10136] do_setlink+0x58a/0x2410 [ 274.895749][T10136] ? __nla_validate_parse+0x108f/0x1760 [ 274.901278][T10136] ? __nla_parse+0x3c/0x50 [ 274.905675][T10136] rtnl_setlink+0x257/0x2a0 [ 274.910184][T10136] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 274.915186][T10136] rtnetlink_rcv_msg+0x711/0x7c0 [ 274.920101][T10136] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 274.925942][T10136] ? __wake_up+0x8d/0xc0 [ 274.930163][T10136] ? __d_rehash+0x125/0x180 [ 274.934649][T10136] ? __d_add+0x3bf/0x490 [ 274.938911][T10136] ? should_fail+0x2a/0x250 [ 274.943394][T10136] ? avc_has_perm_noaudit+0x1c0/0x270 [ 274.948750][T10136] ? rhashtable_jhash2+0x13a/0x1a0 [ 274.953898][T10136] ? jhash+0x2b0/0x2b0 [ 274.957946][T10136] netlink_rcv_skb+0x14e/0x250 [ 274.962730][T10136] ? rtnetlink_bind+0x60/0x60 [ 274.967399][T10136] rtnetlink_rcv+0x18/0x20 [ 274.971794][T10136] netlink_unicast+0x5ec/0x6b0 [ 274.976614][T10136] netlink_sendmsg+0x6ea/0x7d0 [ 274.981375][T10136] sock_write_iter+0x1a3/0x200 [ 274.986137][T10136] do_iter_readv_writev+0x2de/0x380 [ 274.991319][T10136] do_iter_write+0x192/0x5c0 [ 274.995888][T10136] do_writev+0x210/0x440 [ 275.000109][T10136] ? vfs_write+0x61a/0x900 [ 275.004510][T10136] __x64_sys_writev+0x41/0x50 [ 275.009168][T10136] do_syscall_64+0x44/0xa0 [ 275.013599][T10136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.019479][T10136] RIP: 0033:0x7f5cdb0a4739 [ 275.023875][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.043535][T10136] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 275.052072][T10136] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 275.060025][T10136] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 275.067984][T10136] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.075935][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.083902][T10136] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:57 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:44:57 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:44:57 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:44:57 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r1, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/71, 0x47}], 0x5, 0x200, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="f2f0f0"], 0x10) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 22:44:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') clock_gettime(0x0, &(0x7f00000000c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r1, 0x0, 0x800100020600) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x5345506e58909828) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1) 22:44:57 executing program 1 (fault-call:2 fault-nth:16): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:57 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 277.010931][T10152] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 277.019991][T10154] loop5: detected capacity change from 0 to 224 [ 277.028592][T10152] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 277.037094][T10152] FAULT_INJECTION: forcing a failure. [ 277.037094][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 277.049812][T10152] CPU: 1 PID: 10152 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 277.058572][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.068731][T10152] Call Trace: [ 277.072156][T10152] dump_stack_lvl+0xd6/0x122 [ 277.076778][T10152] dump_stack+0x11/0x1b [ 277.080913][T10152] should_fail+0x23c/0x250 [ 277.085306][T10152] __should_failslab+0x81/0x90 [ 277.090093][T10152] should_failslab+0x5/0x20 [ 277.094613][T10152] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 277.100332][T10152] ? __kmalloc_node_track_caller+0x30/0x40 [ 277.106121][T10152] __kmalloc_node_track_caller+0x30/0x40 [ 277.111738][T10152] ? inet_netconf_notify_devconf+0x163/0x220 [ 277.117703][T10152] __alloc_skb+0x187/0x420 [ 277.122110][T10152] inet_netconf_notify_devconf+0x163/0x220 [ 277.127900][T10152] __devinet_sysctl_register+0x234/0x280 [ 277.133517][T10152] ? __list_add_valid+0x28/0x90 [ 277.138351][T10152] devinet_sysctl_register+0xee/0x130 [ 277.143774][T10152] inetdev_init+0x1db/0x350 [ 277.148266][T10152] inetdev_event+0x15d/0xad0 [ 277.152869][T10152] ? rt_cache_flush+0x9/0x20 [ 277.157442][T10152] raw_notifier_call_chain+0x53/0xb0 [ 277.162710][T10152] dev_set_mtu_ext+0x3dc/0x5f0 [ 277.167469][T10152] do_setlink+0x58a/0x2410 [ 277.171868][T10152] ? __nla_validate_parse+0x108f/0x1760 [ 277.177396][T10152] ? __nla_parse+0x3c/0x50 [ 277.181790][T10152] rtnl_setlink+0x257/0x2a0 [ 277.186324][T10152] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 277.191330][T10152] rtnetlink_rcv_msg+0x711/0x7c0 [ 277.196261][T10152] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 277.202065][T10152] ? __wake_up+0x8d/0xc0 [ 277.206288][T10152] ? __d_rehash+0x125/0x180 [ 277.210772][T10152] ? __d_add+0x3bf/0x490 [ 277.215045][T10152] ? should_fail+0x2a/0x250 [ 277.219595][T10152] ? avc_has_perm_noaudit+0x1c0/0x270 [ 277.224993][T10152] ? rhashtable_jhash2+0x13a/0x1a0 [ 277.230097][T10152] ? jhash+0x2b0/0x2b0 [ 277.234164][T10152] netlink_rcv_skb+0x14e/0x250 [ 277.238908][T10152] ? rtnetlink_bind+0x60/0x60 [ 277.243566][T10152] rtnetlink_rcv+0x18/0x20 [ 277.248002][T10152] netlink_unicast+0x5ec/0x6b0 [ 277.252759][T10152] netlink_sendmsg+0x6ea/0x7d0 [ 277.257506][T10152] sock_write_iter+0x1a3/0x200 [ 277.262319][T10152] do_iter_readv_writev+0x2de/0x380 [ 277.267515][T10152] do_iter_write+0x192/0x5c0 [ 277.272128][T10152] do_writev+0x210/0x440 [ 277.276417][T10152] ? vfs_write+0x61a/0x900 [ 277.280835][T10152] __x64_sys_writev+0x41/0x50 [ 277.285589][T10152] do_syscall_64+0x44/0xa0 [ 277.290046][T10152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.295922][T10152] RIP: 0033:0x7f5cdb0a4739 [ 277.300332][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 277.319918][T10152] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 277.328341][T10152] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 277.336294][T10152] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 277.344260][T10152] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 277.352266][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:44:57 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 277.360294][T10152] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:44:57 executing program 1 (fault-call:2 fault-nth:17): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:44:57 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000580)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendfile(r2, r0, &(0x7f0000000180)=0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048000}, 0xc011) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4220}, 0x0, 0x0, r3, 0x8) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x2cf9, &(0x7f0000000240)={0x0, 0xdc7, 0x10, 0x2, 0x1ed, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0xfffffffffffffff8) ftruncate(r4, 0x800) lseek(r4, 0x10000, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendfile(r0, r7, 0x0, 0x80000001) 22:44:57 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 277.408567][T10174] loop5: detected capacity change from 0 to 224 [ 277.426800][T10183] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 277.451127][T10183] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 277.459718][T10183] FAULT_INJECTION: forcing a failure. [ 277.459718][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 277.472374][T10183] CPU: 0 PID: 10183 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 277.481230][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.491365][T10183] Call Trace: [ 277.494816][T10183] dump_stack_lvl+0xd6/0x122 [ 277.499411][T10183] dump_stack+0x11/0x1b [ 277.503644][T10183] should_fail+0x23c/0x250 [ 277.508101][T10183] __should_failslab+0x81/0x90 [ 277.512935][T10183] should_failslab+0x5/0x20 [ 277.517448][T10183] kmem_cache_alloc_node+0x61/0x2c0 [ 277.522650][T10183] ? __dev_open+0x314/0x3a0 [ 277.527234][T10183] ? __alloc_skb+0xed/0x420 [ 277.531753][T10183] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 277.537570][T10183] __alloc_skb+0xed/0x420 [ 277.541907][T10183] rtmsg_ifinfo_build_skb+0x61/0x130 [ 277.547332][T10183] rtmsg_ifinfo+0x58/0xc0 [ 277.551758][T10183] __dev_notify_flags+0x63/0x3b0 [ 277.556701][T10183] dev_change_flags+0xa2/0xc0 [ 277.561376][T10183] do_setlink+0x810/0x2410 [ 277.565789][T10183] ? __nla_validate_parse+0x108f/0x1760 [ 277.571346][T10183] ? __nla_parse+0x3c/0x50 [ 277.575766][T10183] rtnl_setlink+0x257/0x2a0 [ 277.580272][T10183] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 277.585324][T10183] rtnetlink_rcv_msg+0x711/0x7c0 [ 277.590260][T10183] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 277.596168][T10183] ? __wake_up+0x8d/0xc0 [ 277.600393][T10183] ? __d_rehash+0x125/0x180 [ 277.604955][T10183] ? __d_add+0x3bf/0x490 [ 277.609201][T10183] ? should_fail+0x2a/0x250 [ 277.613714][T10183] ? avc_has_perm_noaudit+0x1c0/0x270 [ 277.619179][T10183] ? rhashtable_jhash2+0x13a/0x1a0 [ 277.624295][T10183] ? jhash+0x2b0/0x2b0 [ 277.628368][T10183] netlink_rcv_skb+0x14e/0x250 [ 277.633133][T10183] ? rtnetlink_bind+0x60/0x60 [ 277.637886][T10183] rtnetlink_rcv+0x18/0x20 [ 277.642386][T10183] netlink_unicast+0x5ec/0x6b0 [ 277.647177][T10183] netlink_sendmsg+0x6ea/0x7d0 [ 277.651941][T10183] sock_write_iter+0x1a3/0x200 [ 277.656747][T10183] do_iter_readv_writev+0x2de/0x380 [ 277.662031][T10183] do_iter_write+0x192/0x5c0 [ 277.666623][T10183] do_writev+0x210/0x440 [ 277.671005][T10183] ? vfs_write+0x61a/0x900 [ 277.675450][T10183] __x64_sys_writev+0x41/0x50 [ 277.680193][T10183] do_syscall_64+0x44/0xa0 [ 277.684616][T10183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.690532][T10183] RIP: 0033:0x7f5cdb0a4739 [ 277.694946][T10183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 277.714857][T10183] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 277.723272][T10183] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 277.731249][T10183] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 277.739223][T10183] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 277.747194][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:44:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 277.755164][T10183] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 277.811896][T10201] loop5: detected capacity change from 0 to 224 22:45:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:00 executing program 1 (fault-call:2 fault-nth:18): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:00 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:00 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:00 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0xf5) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1c0}]) set_mempolicy(0x0, &(0x7f0000000000)=0x5, 0x114400000000) 22:45:00 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000580)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendfile(r2, r0, &(0x7f0000000180)=0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048000}, 0xc011) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4220}, 0x0, 0x0, r3, 0x8) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x2cf9, &(0x7f0000000240)={0x0, 0xdc7, 0x10, 0x2, 0x1ed, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0xfffffffffffffff8) ftruncate(r4, 0x800) lseek(r4, 0x10000, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendfile(r0, r7, 0x0, 0x80000001) 22:45:00 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif, &(0x7f0000000100)=0x80, 0x800) setsockopt$inet6_mreq(r0, 0x29, 0x748f9e28f9c3950f, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0xc7, 0x3, 0x0, @empty, @empty, 0x20, 0x80, 0x100, 0x7}}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000280)={@mcast2, r1}, 0x14) set_mempolicy(0x3, &(0x7f0000000140)=0x800, 0x1000000000005) r2 = socket(0x11, 0x800, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x2}, {0x6}]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x150) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r1, 0x2f, 0x9, 0x12, 0x0, 0x28, @loopback, @loopback, 0x700, 0x10, 0x81, 0x1c00000}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:45:00 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 280.026123][T10228] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 280.039273][T10225] loop5: detected capacity change from 0 to 224 [ 280.059021][T10228] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:00 executing program 0: set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x7fffffff, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) acct(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r1, r0, 0x0, 0x800100020600) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x10000000) acct(&(0x7f0000000080)='./file0\x00') [ 280.076349][T10228] FAULT_INJECTION: forcing a failure. [ 280.076349][T10228] name failslab, interval 1, probability 0, space 0, times 0 [ 280.088998][T10228] CPU: 1 PID: 10228 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 280.097821][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.107882][T10228] Call Trace: [ 280.111154][T10228] dump_stack_lvl+0xd6/0x122 [ 280.114443][T10243] Process accounting resumed [ 280.115829][T10228] dump_stack+0x11/0x1b 22:45:00 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2881090, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x101e0a4, &(0x7f0000000200)=ANY=[@ANYBLOB="646174615f657226799c723d69676e6f72652c695f76657273696f"]) [ 280.121454][T10243] Process accounting resumed [ 280.124547][T10228] should_fail+0x23c/0x250 [ 280.124570][T10228] __should_failslab+0x81/0x90 [ 280.138277][T10228] should_failslab+0x5/0x20 [ 280.142787][T10228] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 280.145848][T10249] Process accounting resumed [ 280.148504][T10228] ? __kmalloc_node_track_caller+0x30/0x40 [ 280.158931][T10228] __kmalloc_node_track_caller+0x30/0x40 [ 280.164625][T10228] ? rtmsg_ifinfo_build_skb+0x61/0x130 [ 280.170083][T10228] __alloc_skb+0x187/0x420 [ 280.172559][T10252] EXT4-fs (sda1): Unrecognized mount option "data_er&yœr=ignore" or missing value [ 280.174499][T10228] rtmsg_ifinfo_build_skb+0x61/0x130 [ 280.188971][T10228] rtmsg_ifinfo+0x58/0xc0 [ 280.193298][T10228] __dev_notify_flags+0x63/0x3b0 [ 280.198243][T10228] dev_change_flags+0xa2/0xc0 [ 280.202959][T10228] do_setlink+0x810/0x2410 [ 280.207473][T10228] ? __nla_validate_parse+0x108f/0x1760 [ 280.212999][T10228] ? __nla_parse+0x3c/0x50 [ 280.217436][T10228] rtnl_setlink+0x257/0x2a0 [ 280.221917][T10228] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 280.226956][T10228] rtnetlink_rcv_msg+0x711/0x7c0 [ 280.231919][T10228] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 280.237704][T10228] ? __wake_up+0x8d/0xc0 [ 280.241924][T10228] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 280.247879][T10228] ? __perf_event_task_sched_in+0x7e7/0x850 [ 280.253791][T10228] ? rb_erase+0x623/0x750 [ 280.258097][T10228] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 280.264055][T10228] ? __perf_event_task_sched_in+0x7e7/0x850 [ 280.269985][T10228] ? rb_erase+0x4bb/0x750 [ 280.274293][T10228] ? save_fpregs_to_fpstate+0xd8/0x110 [ 280.279728][T10228] ? rhashtable_jhash2+0x13a/0x1a0 [ 280.284820][T10228] ? jhash+0x2b0/0x2b0 [ 280.288866][T10228] netlink_rcv_skb+0x14e/0x250 [ 280.293621][T10228] ? rtnetlink_bind+0x60/0x60 [ 280.298281][T10228] rtnetlink_rcv+0x18/0x20 [ 280.302683][T10228] netlink_unicast+0x5ec/0x6b0 [ 280.307423][T10228] netlink_sendmsg+0x6ea/0x7d0 [ 280.312257][T10228] sock_write_iter+0x1a3/0x200 [ 280.317001][T10228] do_iter_readv_writev+0x2de/0x380 [ 280.322261][T10228] do_iter_write+0x192/0x5c0 [ 280.326839][T10228] do_writev+0x210/0x440 [ 280.331120][T10228] ? vfs_write+0x61a/0x900 [ 280.335527][T10228] __x64_sys_writev+0x41/0x50 [ 280.340278][T10228] do_syscall_64+0x44/0xa0 [ 280.344758][T10228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.350708][T10228] RIP: 0033:0x7f5cdb0a4739 [ 280.355100][T10228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 280.374757][T10228] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 280.383161][T10228] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 280.391113][T10228] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 280.399080][T10228] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 280.407157][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.415105][T10228] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:00 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:00 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)='~', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x14) madvise(&(0x7f0000a7f000/0x2000)=nil, 0x2000, 0x64) [ 280.439479][T10252] EXT4-fs (sda1): Unrecognized mount option "data_er&yœr=ignore" or missing value [ 280.482892][T10259] loop5: detected capacity change from 0 to 224 22:45:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:03 executing program 1 (fault-call:2 fault-nth:19): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:03 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = gettid() tkill(r3, 0xd) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r3, 0x12) 22:45:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800006, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x100000000, 0x2, 0x2, 0x4, 0x1, [{0x2ec, 0x6a7d, 0x9ea, '\x00', 0x600}]}) splice(r0, &(0x7f00000001c0)=0x9, r0, &(0x7f0000000280)=0x2, 0x9, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/190, 0xbe}], 0x6, 0xd9f, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61}) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {&(0x7f0000000300)="ed41000000040000d1f4655fd2f4655fd2f4655f0000000000000400020e1d92613e741e", 0x24, 0x8c81}], 0x18040, &(0x7f0000000040)=ANY=[@ANYBLOB="0a352e435aa89fae3329080be16a1f67a29864a278d1d22ce20d559adac71a2ceffd69af3086f1ee59e1e02c3ce212f8766bb34e49cd0bcc4ca081f5570b8e0789662e2a3c8f95d9c309afdc97d73cd5a9689d19000a6782b5ce2f8a09d54aac669e8760f08ca45119437f"]) signalfd(r2, &(0x7f0000000540)={[0x6]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800006, 0x12, r3, 0x0) 22:45:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:03 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000580)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendfile(r2, r0, &(0x7f0000000180)=0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048000}, 0xc011) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4220}, 0x0, 0x0, r3, 0x8) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x2cf9, &(0x7f0000000240)={0x0, 0xdc7, 0x10, 0x2, 0x1ed, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0xfffffffffffffff8) ftruncate(r4, 0x800) lseek(r4, 0x10000, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendfile(r0, r7, 0x0, 0x80000001) 22:45:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x80, 0x6, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000015c0)={[{@journal_dev}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) [ 283.050113][T10286] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 283.061666][T10285] loop5: detected capacity change from 0 to 224 [ 283.086263][T10286] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 283.094920][T10286] FAULT_INJECTION: forcing a failure. 22:45:03 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = getegid() lchown(&(0x7f0000000080)='./file0\x00', r1, r2) r3 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0xc) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) dup3(r4, r3, 0x0) setuid(r1) io_setup(0x3f, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)=',', 0x1}]) [ 283.094920][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 283.107610][T10286] CPU: 1 PID: 10286 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 283.116367][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.126415][T10286] Call Trace: [ 283.129694][T10286] dump_stack_lvl+0xd6/0x122 [ 283.134306][T10286] dump_stack+0x11/0x1b [ 283.138457][T10286] should_fail+0x23c/0x250 [ 283.142869][T10286] __should_failslab+0x81/0x90 [ 283.147628][T10286] should_failslab+0x5/0x20 [ 283.152123][T10286] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 283.157832][T10286] ? __kmalloc_node_track_caller+0x30/0x40 [ 283.163652][T10286] ? netlink_trim+0x112/0x140 [ 283.168337][T10286] __kmalloc_node_track_caller+0x30/0x40 [ 283.173961][T10286] pskb_expand_head+0xc9/0x920 [ 283.178764][T10286] ? skb_trim+0x8c/0xb0 [ 283.182911][T10286] ? rtnl_fill_ifinfo+0x240f/0x2540 [ 283.188096][T10286] netlink_trim+0x112/0x140 [ 283.192627][T10286] netlink_broadcast_filtered+0x47/0xb60 [ 283.198253][T10286] ? rtmsg_ifinfo_build_skb+0xa8/0x130 [ 283.203699][T10286] nlmsg_notify+0xcc/0x180 [ 283.208151][T10286] rtmsg_ifinfo+0xa4/0xc0 [ 283.212466][T10286] __dev_notify_flags+0x63/0x3b0 [ 283.217446][T10286] dev_change_flags+0xa2/0xc0 [ 283.222112][T10286] do_setlink+0x810/0x2410 [ 283.226519][T10286] ? __nla_validate_parse+0x108f/0x1760 [ 283.232054][T10286] ? __nla_parse+0x3c/0x50 [ 283.236460][T10286] rtnl_setlink+0x257/0x2a0 [ 283.240954][T10286] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 283.245968][T10286] rtnetlink_rcv_msg+0x711/0x7c0 [ 283.250908][T10286] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 283.256762][T10286] ? __wake_up+0x8d/0xc0 [ 283.260996][T10286] ? __d_rehash+0x125/0x180 [ 283.265570][T10286] ? __d_add+0x3bf/0x490 [ 283.269807][T10286] ? should_fail+0x2a/0x250 [ 283.274366][T10286] ? avc_has_perm_noaudit+0x1c0/0x270 [ 283.279726][T10286] ? rhashtable_jhash2+0x13a/0x1a0 [ 283.284829][T10286] ? jhash+0x2b0/0x2b0 [ 283.288912][T10286] netlink_rcv_skb+0x14e/0x250 [ 283.293665][T10286] ? rtnetlink_bind+0x60/0x60 [ 283.298348][T10286] rtnetlink_rcv+0x18/0x20 [ 283.302755][T10286] netlink_unicast+0x5ec/0x6b0 [ 283.307536][T10286] netlink_sendmsg+0x6ea/0x7d0 [ 283.312288][T10286] sock_write_iter+0x1a3/0x200 [ 283.317052][T10286] do_iter_readv_writev+0x2de/0x380 [ 283.322279][T10286] do_iter_write+0x192/0x5c0 [ 283.326910][T10286] do_writev+0x210/0x440 [ 283.331152][T10286] ? vfs_write+0x61a/0x900 [ 283.335582][T10286] __x64_sys_writev+0x41/0x50 [ 283.340308][T10286] do_syscall_64+0x44/0xa0 [ 283.344788][T10286] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 283.350674][T10286] RIP: 0033:0x7f5cdb0a4739 [ 283.355088][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 283.374687][T10286] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 283.383087][T10286] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 283.391048][T10286] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 22:45:03 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r3}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 283.399011][T10286] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 283.406968][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.414928][T10286] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 283.437184][T10302] new mount options do not match the existing superblock, will be ignored 22:45:03 executing program 1 (fault-call:2 fault-nth:20): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:03 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = gettid() tkill(r3, 0xd) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r3, 0x12) 22:45:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x24}, {0x1c}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x1400, &(0x7f0000000100)='\'\xc9%\'!:\\,\'\x00') [ 283.506543][T10313] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 283.524549][T10313] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 283.535512][T10320] loop5: detected capacity change from 0 to 224 [ 283.544529][T10313] FAULT_INJECTION: forcing a failure. [ 283.544529][T10313] name failslab, interval 1, probability 0, space 0, times 0 [ 283.557333][T10313] CPU: 0 PID: 10313 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 283.566093][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.576148][T10313] Call Trace: [ 283.579417][T10313] dump_stack_lvl+0xd6/0x122 [ 283.584011][T10313] dump_stack+0x11/0x1b [ 283.588167][T10313] should_fail+0x23c/0x250 [ 283.592581][T10313] __should_failslab+0x81/0x90 [ 283.597335][T10313] ? inetdev_event+0x73d/0xad0 [ 283.602230][T10313] should_failslab+0x5/0x20 [ 283.606800][T10313] kmem_cache_alloc_trace+0x52/0x320 [ 283.612098][T10313] inetdev_event+0x73d/0xad0 [ 283.616696][T10313] raw_notifier_call_chain+0x53/0xb0 [ 283.622020][T10313] __dev_notify_flags+0x1d3/0x3b0 [ 283.627050][T10313] dev_change_flags+0xa2/0xc0 [ 283.631786][T10313] do_setlink+0x810/0x2410 [ 283.636215][T10313] ? __nla_validate_parse+0x108f/0x1760 [ 283.641760][T10313] ? __nla_parse+0x3c/0x50 [ 283.646180][T10313] rtnl_setlink+0x257/0x2a0 [ 283.650686][T10313] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 283.655806][T10313] rtnetlink_rcv_msg+0x711/0x7c0 [ 283.660756][T10313] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 283.666574][T10313] ? __wake_up+0x8d/0xc0 [ 283.671041][T10313] ? __d_rehash+0x125/0x180 [ 283.675551][T10313] ? __d_add+0x3bf/0x490 [ 283.679828][T10313] ? should_fail+0x2a/0x250 [ 283.684317][T10313] ? avc_has_perm_noaudit+0x1c0/0x270 [ 283.689747][T10313] ? rhashtable_jhash2+0x13a/0x1a0 [ 283.694858][T10313] ? jhash+0x2b0/0x2b0 [ 283.698911][T10313] netlink_rcv_skb+0x14e/0x250 [ 283.703663][T10313] ? rtnetlink_bind+0x60/0x60 [ 283.708345][T10313] rtnetlink_rcv+0x18/0x20 [ 283.712767][T10313] netlink_unicast+0x5ec/0x6b0 [ 283.717577][T10313] netlink_sendmsg+0x6ea/0x7d0 [ 283.722373][T10313] sock_write_iter+0x1a3/0x200 [ 283.727182][T10313] do_iter_readv_writev+0x2de/0x380 [ 283.732452][T10313] do_iter_write+0x192/0x5c0 [ 283.737049][T10313] do_writev+0x210/0x440 [ 283.741299][T10313] ? vfs_write+0x61a/0x900 [ 283.745720][T10313] __x64_sys_writev+0x41/0x50 [ 283.750409][T10313] do_syscall_64+0x44/0xa0 [ 283.754834][T10313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 283.760815][T10313] RIP: 0033:0x7f5cdb0a4739 [ 283.765230][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 283.784846][T10313] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 283.793264][T10313] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 283.801236][T10313] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 283.809209][T10313] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 283.817304][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.825727][T10313] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:06 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:06 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = gettid() tkill(r3, 0xd) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300)=r3, 0x12) 22:45:06 executing program 1 (fault-call:2 fault-nth:21): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0xee00) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@privport}], [{@euid_lt={'euid<', r5}}, {@uid_eq={'uid', 0x3d, r6}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, 0x7, 0x200) 22:45:06 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="0201a9ffffff0a000000ff45ac0080ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72023007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x3ff, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)="52fc2b487527e1b2c7e71760111f6c44", 0x10, 0x5}, {&(0x7f0000000180)="0499b07c1501d8d25868f17453fa49042f7541c8570ded8f9737126a0a67a284f272a2717c533905292fcee050ba43e2c32340f7226d5789d5549635e0dd08091d619f8cdd932f1f84516f6a4f2352b40e89303f5da9e4cb0ba98558ad682c4b60642a543e40ae40891409a6d0534122bb9914a58b3876b1dd28622092ca925ed20f6ee21ade2a56c0275b03f0f09a69c1b48428202e62f8b97bf4ea6df98d74b0d6292ce0997c2689c7b91e5a85bfbe", 0xb0, 0x4}, {&(0x7f00000000c0)="ee2476e886f7d78ed34f11198dd18ee8d6513d7afb8d39bb94196f122fca40ca66", 0x21, 0xecf4}, {&(0x7f0000000280)="e45df2f017c58f896bea9f2ad962545c374d3f34e6e30d19100c3fc228fe46693ca1f26887b4a42fa203e1eeceeff60c8d06ecd923e35f7466c88da639e17cd29a4dabe5bcaf2d6cc59c513539d9e15b037959e5ad57e14aee17e6de6a8b62f157dec620211bec40bd986b16a520ef864e0ab115d2fdd25c3e4be8b4cc2ef1b13ccfeb1bd5500a86c97c705dbea6e5e6b0056ab0550ab7c4598bc5e17e654f1ecb8d9087922888", 0xa7, 0x40}], 0x100000, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@journal_path={'journal_path', 0x3d, './file0'}}], [{@obj_role}, {@obj_user={'obj_user', 0x3d, '{'}}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@permit_directio}]}) [ 286.069418][T10340] loop4: detected capacity change from 0 to 1 [ 286.077360][T10345] loop5: detected capacity change from 0 to 224 [ 286.084711][T10346] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 286.105880][T10346] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1a0d2, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582b, &(0x7f0000000040)=0x700) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x618) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) close(r0) close(r1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)) [ 286.117721][T10346] FAULT_INJECTION: forcing a failure. [ 286.117721][T10346] name failslab, interval 1, probability 0, space 0, times 0 [ 286.130454][T10346] CPU: 1 PID: 10346 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 286.139224][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.149302][T10346] Call Trace: [ 286.152580][T10346] dump_stack_lvl+0xd6/0x122 [ 286.157181][T10346] dump_stack+0x11/0x1b [ 286.161340][T10346] should_fail+0x23c/0x250 [ 286.165757][T10346] __should_failslab+0x81/0x90 [ 286.170523][T10346] should_failslab+0x5/0x20 [ 286.175024][T10346] kmem_cache_alloc_node+0x61/0x2c0 [ 286.180364][T10346] ? __queue_work+0x830/0xaa0 [ 286.185046][T10346] ? __alloc_skb+0xed/0x420 [ 286.189550][T10346] __alloc_skb+0xed/0x420 [ 286.193878][T10346] rtmsg_ifa+0xc3/0x170 [ 286.198047][T10346] __inet_insert_ifa+0x4e9/0x5e0 [ 286.202993][T10346] ? inetdev_event+0x73d/0xad0 [ 286.207750][T10346] inetdev_event+0x8ee/0xad0 [ 286.212363][T10346] raw_notifier_call_chain+0x53/0xb0 22:45:06 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 286.217647][T10346] __dev_notify_flags+0x1d3/0x3b0 [ 286.222700][T10346] dev_change_flags+0xa2/0xc0 [ 286.227418][T10346] do_setlink+0x810/0x2410 [ 286.231867][T10346] ? __nla_validate_parse+0x108f/0x1760 [ 286.237409][T10346] ? __nla_parse+0x3c/0x50 [ 286.241889][T10346] rtnl_setlink+0x257/0x2a0 [ 286.246412][T10346] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 286.251513][T10346] rtnetlink_rcv_msg+0x711/0x7c0 [ 286.256448][T10346] ? __schedule+0x435/0x680 [ 286.260964][T10346] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 286.266795][T10346] ? __wake_up+0x8d/0xc0 [ 286.270706][T10373] loop5: detected capacity change from 0 to 224 [ 286.271120][T10346] ? __d_rehash+0x125/0x180 [ 286.281838][T10346] ? __d_add+0x3bf/0x490 [ 286.286088][T10346] ? should_fail+0x2a/0x250 [ 286.290663][T10346] ? avc_has_perm_noaudit+0x1c0/0x270 [ 286.296036][T10346] ? rhashtable_jhash2+0x13a/0x1a0 [ 286.301157][T10346] ? jhash+0x2b0/0x2b0 [ 286.305231][T10346] netlink_rcv_skb+0x14e/0x250 [ 286.310126][T10346] ? rtnetlink_bind+0x60/0x60 [ 286.314807][T10346] rtnetlink_rcv+0x18/0x20 [ 286.319227][T10346] netlink_unicast+0x5ec/0x6b0 [ 286.323994][T10346] netlink_sendmsg+0x6ea/0x7d0 [ 286.328792][T10346] sock_write_iter+0x1a3/0x200 [ 286.333546][T10346] do_iter_readv_writev+0x2de/0x380 [ 286.338727][T10346] do_iter_write+0x192/0x5c0 [ 286.343380][T10346] do_writev+0x210/0x440 [ 286.347768][T10346] ? vfs_write+0x61a/0x900 [ 286.352192][T10346] __x64_sys_writev+0x41/0x50 [ 286.356861][T10346] do_syscall_64+0x44/0xa0 [ 286.361354][T10346] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.367233][T10346] RIP: 0033:0x7f5cdb0a4739 [ 286.371714][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 286.391365][T10346] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 286.399810][T10346] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 286.407772][T10346] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 22:45:06 executing program 1 (fault-call:2 fault-nth:22): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 286.415735][T10346] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 286.423685][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.431646][T10346] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001a65888642af4613683f013a2", 0x31, 0x3}, {0x0, 0x0, 0x4003}], 0x2020400, &(0x7f0000011300)) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x4) 22:45:06 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:06 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 286.475142][T10381] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 286.488235][T10381] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 286.506537][T10340] loop4: detected capacity change from 0 to 1 [ 286.515476][T10381] FAULT_INJECTION: forcing a failure. [ 286.515476][T10381] name failslab, interval 1, probability 0, space 0, times 0 [ 286.528110][T10381] CPU: 1 PID: 10381 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 286.529139][T10396] loop5: detected capacity change from 0 to 224 [ 286.536870][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.536883][T10381] Call Trace: [ 286.536890][T10381] dump_stack_lvl+0xd6/0x122 [ 286.536915][T10381] dump_stack+0x11/0x1b [ 286.565309][T10381] should_fail+0x23c/0x250 [ 286.569732][T10381] __should_failslab+0x81/0x90 [ 286.574502][T10381] should_failslab+0x5/0x20 [ 286.579028][T10381] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 286.584733][T10381] ? __kmalloc_node_track_caller+0x30/0x40 [ 286.590542][T10381] __kmalloc_node_track_caller+0x30/0x40 [ 286.596156][T10381] ? rtmsg_ifa+0xc3/0x170 [ 286.600473][T10381] __alloc_skb+0x187/0x420 [ 286.604871][T10381] rtmsg_ifa+0xc3/0x170 [ 286.609008][T10381] __inet_insert_ifa+0x4e9/0x5e0 [ 286.613932][T10381] ? inetdev_event+0x73d/0xad0 [ 286.618726][T10381] inetdev_event+0x8ee/0xad0 [ 286.623298][T10381] raw_notifier_call_chain+0x53/0xb0 [ 286.628567][T10381] __dev_notify_flags+0x1d3/0x3b0 [ 286.633590][T10381] dev_change_flags+0xa2/0xc0 [ 286.638336][T10381] do_setlink+0x810/0x2410 [ 286.642762][T10381] ? __nla_validate_parse+0x108f/0x1760 [ 286.648326][T10381] ? __nla_parse+0x3c/0x50 [ 286.652726][T10381] rtnl_setlink+0x257/0x2a0 [ 286.657212][T10381] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 286.662215][T10381] rtnetlink_rcv_msg+0x711/0x7c0 [ 286.667158][T10381] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 286.672963][T10381] ? __wake_up+0x8d/0xc0 [ 286.677250][T10381] ? __d_rehash+0x125/0x180 [ 286.681816][T10381] ? __d_add+0x3bf/0x490 [ 286.686091][T10381] ? should_fail+0x2a/0x250 [ 286.690637][T10381] ? avc_has_perm_noaudit+0x1c0/0x270 [ 286.696035][T10381] ? rhashtable_jhash2+0x13a/0x1a0 [ 286.701144][T10381] ? jhash+0x2b0/0x2b0 [ 286.705231][T10381] netlink_rcv_skb+0x14e/0x250 [ 286.709993][T10381] ? rtnetlink_bind+0x60/0x60 [ 286.714661][T10381] rtnetlink_rcv+0x18/0x20 [ 286.719056][T10381] netlink_unicast+0x5ec/0x6b0 [ 286.723824][T10381] netlink_sendmsg+0x6ea/0x7d0 [ 286.728598][T10381] sock_write_iter+0x1a3/0x200 [ 286.733396][T10381] do_iter_readv_writev+0x2de/0x380 [ 286.738599][T10381] do_iter_write+0x192/0x5c0 [ 286.743270][T10381] do_writev+0x210/0x440 [ 286.747497][T10381] ? vfs_write+0x61a/0x900 [ 286.751896][T10381] __x64_sys_writev+0x41/0x50 [ 286.756583][T10381] do_syscall_64+0x44/0xa0 [ 286.761025][T10381] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.766900][T10381] RIP: 0033:0x7f5cdb0a4739 [ 286.771311][T10381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 286.790908][T10381] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 286.799304][T10381] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 286.807292][T10381] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 286.815340][T10381] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 286.823300][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.831256][T10381] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:09 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:09 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:09 executing program 4: unshare(0x48040480) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) unshare(0x20080) 22:45:09 executing program 1 (fault-call:2 fault-nth:23): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:09 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:09 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 289.083663][T10420] loop5: detected capacity change from 0 to 224 [ 289.090352][T10422] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 289.117530][T10422] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 289.128759][T10422] FAULT_INJECTION: forcing a failure. [ 289.128759][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 289.141409][T10422] CPU: 0 PID: 10422 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 289.150257][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.160313][T10422] Call Trace: [ 289.163593][T10422] dump_stack_lvl+0xd6/0x122 [ 289.168260][T10422] dump_stack+0x11/0x1b [ 289.172419][T10422] should_fail+0x23c/0x250 [ 289.176906][T10422] __should_failslab+0x81/0x90 [ 289.181721][T10422] should_failslab+0x5/0x20 [ 289.186323][T10422] kmem_cache_alloc_node+0x61/0x2c0 [ 289.188096][T10449] loop5: detected capacity change from 0 to 224 [ 289.191524][T10422] ? __queue_work+0x830/0xaa0 [ 289.191553][T10422] ? __alloc_skb+0xed/0x420 [ 289.206982][T10422] __alloc_skb+0xed/0x420 [ 289.211294][T10422] rtmsg_ifa+0xc3/0x170 [ 289.215454][T10422] __inet_insert_ifa+0x4e9/0x5e0 [ 289.220372][T10422] ? inetdev_event+0x73d/0xad0 [ 289.225115][T10422] inetdev_event+0x8ee/0xad0 [ 289.229692][T10422] raw_notifier_call_chain+0x53/0xb0 [ 289.235014][T10422] __dev_notify_flags+0x1d3/0x3b0 [ 289.240180][T10422] dev_change_flags+0xa2/0xc0 [ 289.244851][T10422] do_setlink+0x810/0x2410 [ 289.249269][T10422] ? __nla_validate_parse+0x108f/0x1760 [ 289.254812][T10422] ? __nla_parse+0x3c/0x50 [ 289.259247][T10422] rtnl_setlink+0x257/0x2a0 [ 289.263751][T10422] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 289.268763][T10422] rtnetlink_rcv_msg+0x711/0x7c0 [ 289.273686][T10422] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 289.279513][T10422] ? __wake_up+0x8d/0xc0 [ 289.283809][T10422] ? __d_rehash+0x125/0x180 [ 289.288568][T10422] ? __d_add+0x3bf/0x490 [ 289.292896][T10422] ? should_fail+0x2a/0x250 [ 289.297404][T10422] ? avc_has_perm_noaudit+0x1c0/0x270 [ 289.302756][T10422] ? rhashtable_jhash2+0x13a/0x1a0 [ 289.307910][T10422] ? jhash+0x2b0/0x2b0 [ 289.311963][T10422] netlink_rcv_skb+0x14e/0x250 [ 289.316732][T10422] ? rtnetlink_bind+0x60/0x60 [ 289.321391][T10422] rtnetlink_rcv+0x18/0x20 [ 289.325786][T10422] netlink_unicast+0x5ec/0x6b0 [ 289.330531][T10422] netlink_sendmsg+0x6ea/0x7d0 [ 289.335277][T10422] sock_write_iter+0x1a3/0x200 [ 289.340047][T10422] do_iter_readv_writev+0x2de/0x380 [ 289.345244][T10422] do_iter_write+0x192/0x5c0 [ 289.349831][T10422] do_writev+0x210/0x440 [ 289.354056][T10422] ? vfs_write+0x61a/0x900 [ 289.358468][T10422] __x64_sys_writev+0x41/0x50 [ 289.363226][T10422] do_syscall_64+0x44/0xa0 [ 289.367626][T10422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 289.373553][T10422] RIP: 0033:0x7f5cdb0a4739 [ 289.377959][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 289.397549][T10422] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.405945][T10422] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 289.414019][T10422] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 289.421992][T10422] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:09 executing program 4: set_mempolicy(0x4003, &(0x7f0000000140)=0x3, 0x33) set_mempolicy(0x4000, &(0x7f0000000180)=0x1, 0x1) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) clone(0x0, &(0x7f0000000240)="e36ca12935e71b1b3fd16c9b50e3836e3bef46af3995ede34170b90849bd7bb30c627591311ff55031485662043f6fda84d8981514cea8a5a2a5464139e51a5ce6bebdac59df18722d88790c91070ba92dc09bf2637cbc0e5e6e95401faa6c03b87549ad6f", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="0fc5f4fce37016d2f82b2ef51e44bc021c3027a33ac746ef98e8582e1948a70c84704c2730eb14886009a7") write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a40003003e000839a59434d90a2742a64e000000000000000000deeb14b60028cc7ebdfd74dafc20380003"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) splice(r0, &(0x7f00000001c0)=0x7ff, r0, &(0x7f0000000200), 0x7, 0x86b5d10d41d19fd0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xd87, 0x4, 0xa96}) 22:45:09 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:09 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 289.429953][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.437905][T10422] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:09 executing program 1 (fault-call:2 fault-nth:24): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 289.530935][T10485] loop5: detected capacity change from 0 to 224 [ 289.541784][T10489] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 289.572741][T10489] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 289.615071][T10489] FAULT_INJECTION: forcing a failure. [ 289.615071][T10489] name failslab, interval 1, probability 0, space 0, times 0 [ 289.627747][T10489] CPU: 0 PID: 10489 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 289.636560][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.646611][T10489] Call Trace: [ 289.649943][T10489] dump_stack_lvl+0xd6/0x122 [ 289.654546][T10489] dump_stack+0x11/0x1b [ 289.658697][T10489] should_fail+0x23c/0x250 [ 289.663109][T10489] ? fib_table_insert+0x468/0x10b0 [ 289.668264][T10489] __should_failslab+0x81/0x90 [ 289.673025][T10489] should_failslab+0x5/0x20 [ 289.677523][T10489] kmem_cache_alloc+0x4f/0x300 [ 289.682284][T10489] ? xlate_dir+0x1ed/0x210 [ 289.686696][T10489] fib_table_insert+0x468/0x10b0 [ 289.691724][T10489] ? ___cache_free+0x3c/0x300 [ 289.696395][T10489] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 289.702252][T10489] fib_add_ifaddr+0x1b7/0x690 [ 289.706935][T10489] ? skb_put+0xb9/0xf0 [ 289.711027][T10489] fib_inetaddr_event+0xb5/0x210 [ 289.715962][T10489] blocking_notifier_call_chain+0x73/0xf0 [ 289.721672][T10489] __inet_insert_ifa+0x4fd/0x5e0 [ 289.726594][T10489] ? inetdev_event+0x73d/0xad0 [ 289.731350][T10489] inetdev_event+0x8ee/0xad0 [ 289.735933][T10489] raw_notifier_call_chain+0x53/0xb0 [ 289.741218][T10489] __dev_notify_flags+0x1d3/0x3b0 [ 289.746227][T10489] dev_change_flags+0xa2/0xc0 [ 289.750965][T10489] do_setlink+0x810/0x2410 [ 289.755382][T10489] ? __nla_validate_parse+0x108f/0x1760 [ 289.760930][T10489] ? __nla_parse+0x3c/0x50 [ 289.765326][T10489] rtnl_setlink+0x257/0x2a0 [ 289.769857][T10489] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 289.774885][T10489] rtnetlink_rcv_msg+0x711/0x7c0 [ 289.779818][T10489] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 289.785607][T10489] ? __wake_up+0x8d/0xc0 [ 289.789850][T10489] ? __d_rehash+0x125/0x180 [ 289.794396][T10489] ? __d_add+0x3bf/0x490 [ 289.798626][T10489] ? should_fail+0x2a/0x250 [ 289.803203][T10489] ? avc_has_perm_noaudit+0x1c0/0x270 [ 289.808552][T10489] ? rhashtable_jhash2+0x13a/0x1a0 [ 289.813653][T10489] ? jhash+0x2b0/0x2b0 [ 289.817730][T10489] netlink_rcv_skb+0x14e/0x250 [ 289.822541][T10489] ? rtnetlink_bind+0x60/0x60 [ 289.827203][T10489] rtnetlink_rcv+0x18/0x20 [ 289.831600][T10489] netlink_unicast+0x5ec/0x6b0 [ 289.836371][T10489] netlink_sendmsg+0x6ea/0x7d0 [ 289.841117][T10489] sock_write_iter+0x1a3/0x200 [ 289.845883][T10489] do_iter_readv_writev+0x2de/0x380 [ 289.851068][T10489] do_iter_write+0x192/0x5c0 [ 289.855682][T10489] do_writev+0x210/0x440 [ 289.859916][T10489] ? vfs_write+0x61a/0x900 [ 289.864315][T10489] __x64_sys_writev+0x41/0x50 [ 289.868972][T10489] do_syscall_64+0x44/0xa0 [ 289.873418][T10489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 289.879302][T10489] RIP: 0033:0x7f5cdb0a4739 [ 289.883694][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 289.903283][T10489] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.911677][T10489] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 289.919628][T10489] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 289.927742][T10489] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 289.935756][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.943730][T10489] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 289.973949][T10489] syz-executor.1 (10489) used greatest stack depth: 9872 bytes left 22:45:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:12 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:12 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) 22:45:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x101}, 0x14}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x373) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RFLUSH(r4, &(0x7f0000000380)={0x796e6564}, 0x7) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r5 = fork() perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x2, 0x5, 0x8, 0xc4, 0x0, 0x8419, 0x80020, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2, 0x53, 0x0, 0x2, 0x2003, 0x1, 0x6, 0x0, 0xffff2cea, 0x0, 0x7}, r5, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7, 0xfd, 0x1, 0x8, 0x0, 0x3ff, 0x22000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x80000000000}, 0xc1c0, 0xfffffffffffffffd, 0x2, 0x9, 0x8, 0x5, 0x4, 0x0, 0x6, 0x0, 0x8}, r5, 0x3, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'syz_tun\x00'}) sendto$inet(r1, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x41, 0x3f, 0x1, 0x0, 0x34491933, 0x80, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x24a, 0x4, @perf_config_ext={0x5, 0x1c}, 0x195a2, 0x800, 0x1, 0x6, 0x4, 0x9, 0x400, 0x0, 0x10000, 0x0, 0x7}, r5, 0xb, r0, 0xe) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, &(0x7f00000004c0)="9ad45e5164f97bd6730551a36494e85e1f605a520dc8933d6dafdf21ad1ff22933f782a915a84d6f5935b9e81dd999da6fabaa6263201ae07405ebfcf3f965a77343cd6d1c1dc5da0d10b35de227232631bae9c9876be712306bb703ce51ea141ad2c40dc2752cf705b400d64df1b3961f62d41f51bf7c7eb200bf01d3c525bcd53f9ce3085621eb7ea069a4d19824133d5329d7bf0867ca519f479ad4cd25a17b84f540196ea5c6ec9c32f8c93b9eb25769", 0xfffffffffffffedb, 0xc8c0, 0x0, 0x0) 22:45:12 executing program 1 (fault-call:2 fault-nth:25): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:12 executing program 0: clone3(&(0x7f00000008c0)={0x260000100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpid() ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0xffff, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000540)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x2080, 0x0) clone3(&(0x7f00000004c0)={0x1000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x23}, &(0x7f0000000180)=""/58, 0x3a, &(0x7f00000001c0)=""/183, &(0x7f0000000440)=[r1, r2], 0x2, {r4}}, 0x58) ftruncate(r0, 0x2007fff) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x3f, 0x81, 0x40, 0x0, 0x0, 0x9, 0x40720, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8c25, 0x60cc, 0x3, 0x3, 0xfff, 0xbc00, 0x1, 0x0, 0x8, 0x0, 0x9}, r0, 0xf, r0, 0x0) 22:45:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:12 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 292.124875][T10520] loop5: detected capacity change from 0 to 224 [ 292.131592][T10524] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 292.140500][T10519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 22:45:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x8, 0xb) set_mempolicy(0x2, &(0x7f0000000100)=0x10000, 0x10001) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, '\x00', [{}, {0xffffffff}]}) set_mempolicy(0x1, &(0x7f0000000000)=0x10001, 0x8) set_mempolicy(0x8000, &(0x7f0000000040)=0x800fff, 0x1f) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x428000, 0x0) [ 292.173866][T10524] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 292.223325][T10524] FAULT_INJECTION: forcing a failure. [ 292.223325][T10524] name failslab, interval 1, probability 0, space 0, times 0 [ 292.235967][T10524] CPU: 0 PID: 10524 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 292.236402][T10543] loop5: detected capacity change from 0 to 224 [ 292.244724][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.244736][T10524] Call Trace: [ 292.244743][T10524] dump_stack_lvl+0xd6/0x122 [ 292.244767][T10524] dump_stack+0x11/0x1b 22:45:12 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='de,context=staff_u,defcontext=']) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cifs\x00', 0x48002, &(0x7f0000000140)='\x00') [ 292.244784][T10524] should_fail+0x23c/0x250 [ 292.244800][T10524] ? fib_insert_alias+0x168/0x7a0 [ 292.282425][T10524] __should_failslab+0x81/0x90 [ 292.287193][T10524] should_failslab+0x5/0x20 [ 292.291700][T10524] kmem_cache_alloc+0x4f/0x300 [ 292.296498][T10524] fib_insert_alias+0x168/0x7a0 [ 292.301434][T10524] ? kmem_cache_alloc+0x20d/0x300 [ 292.306581][T10524] ? fib_table_insert+0x468/0x10b0 [ 292.311721][T10524] fib_table_insert+0x564/0x10b0 [ 292.316716][T10524] fib_add_ifaddr+0x1b7/0x690 [ 292.318215][T10565] SELinux: duplicate or incompatible mount options [ 292.321404][T10524] ? skb_put+0xb9/0xf0 [ 292.321430][T10524] fib_inetaddr_event+0xb5/0x210 [ 292.336951][T10524] blocking_notifier_call_chain+0x73/0xf0 [ 292.342673][T10524] __inet_insert_ifa+0x4fd/0x5e0 [ 292.347647][T10524] ? inetdev_event+0x73d/0xad0 [ 292.352518][T10524] inetdev_event+0x8ee/0xad0 [ 292.357096][T10524] raw_notifier_call_chain+0x53/0xb0 [ 292.362422][T10524] __dev_notify_flags+0x1d3/0x3b0 [ 292.367458][T10524] dev_change_flags+0xa2/0xc0 [ 292.372137][T10524] do_setlink+0x810/0x2410 [ 292.376550][T10524] ? __nla_validate_parse+0x108f/0x1760 [ 292.382081][T10524] ? __nla_parse+0x3c/0x50 [ 292.386478][T10524] rtnl_setlink+0x257/0x2a0 [ 292.391037][T10524] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 292.396045][T10524] rtnetlink_rcv_msg+0x711/0x7c0 [ 292.400980][T10524] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 292.407021][T10524] ? __wake_up+0x8d/0xc0 [ 292.411254][T10524] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 292.417233][T10524] ? __d_rehash+0x125/0x180 [ 292.421716][T10524] ? __perf_event_task_sched_in+0x7e7/0x850 [ 292.427655][T10524] ? rb_erase+0x4cb/0x750 [ 292.432015][T10524] ? should_fail+0x2a/0x250 [ 292.436497][T10524] ? avc_has_perm_noaudit+0x1c0/0x270 [ 292.441874][T10524] ? rhashtable_jhash2+0x13a/0x1a0 [ 292.447045][T10524] ? jhash+0x2b0/0x2b0 [ 292.451104][T10524] netlink_rcv_skb+0x14e/0x250 [ 292.455848][T10524] ? rtnetlink_bind+0x60/0x60 [ 292.460505][T10524] rtnetlink_rcv+0x18/0x20 [ 292.464903][T10524] netlink_unicast+0x5ec/0x6b0 [ 292.469655][T10524] netlink_sendmsg+0x6ea/0x7d0 [ 292.474406][T10524] sock_write_iter+0x1a3/0x200 [ 292.479154][T10524] do_iter_readv_writev+0x2de/0x380 [ 292.484420][T10524] do_iter_write+0x192/0x5c0 [ 292.489149][T10524] do_writev+0x210/0x440 [ 292.493396][T10524] ? vfs_write+0x61a/0x900 [ 292.497801][T10524] __x64_sys_writev+0x41/0x50 [ 292.502484][T10524] do_syscall_64+0x44/0xa0 [ 292.506898][T10524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 292.512825][T10524] RIP: 0033:0x7f5cdb0a4739 [ 292.517229][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 292.536924][T10524] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 292.545331][T10524] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 292.553302][T10524] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 292.561322][T10524] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:12 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:12 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 292.569275][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.577236][T10524] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 292.601174][T10524] syz-executor.1 (10524) used greatest stack depth: 9744 bytes left [ 292.616206][T10572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 22:45:13 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x101}, 0x14}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x373) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RFLUSH(r4, &(0x7f0000000380)={0x796e6564}, 0x7) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r5 = fork() perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x2, 0x5, 0x8, 0xc4, 0x0, 0x8419, 0x80020, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2, 0x53, 0x0, 0x2, 0x2003, 0x1, 0x6, 0x0, 0xffff2cea, 0x0, 0x7}, r5, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7, 0xfd, 0x1, 0x8, 0x0, 0x3ff, 0x22000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x80000000000}, 0xc1c0, 0xfffffffffffffffd, 0x2, 0x9, 0x8, 0x5, 0x4, 0x0, 0x6, 0x0, 0x8}, r5, 0x3, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'syz_tun\x00'}) sendto$inet(r1, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x41, 0x3f, 0x1, 0x0, 0x34491933, 0x80, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x24a, 0x4, @perf_config_ext={0x5, 0x1c}, 0x195a2, 0x800, 0x1, 0x6, 0x4, 0x9, 0x400, 0x0, 0x10000, 0x0, 0x7}, r5, 0xb, r0, 0xe) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, &(0x7f00000004c0)="9ad45e5164f97bd6730551a36494e85e1f605a520dc8933d6dafdf21ad1ff22933f782a915a84d6f5935b9e81dd999da6fabaa6263201ae07405ebfcf3f965a77343cd6d1c1dc5da0d10b35de227232631bae9c9876be712306bb703ce51ea141ad2c40dc2752cf705b400d64df1b3961f62d41f51bf7c7eb200bf01d3c525bcd53f9ce3085621eb7ea069a4d19824133d5329d7bf0867ca519f479ad4cd25a17b84f540196ea5c6ec9c32f8c93b9eb25769", 0xfffffffffffffedb, 0xc8c0, 0x0, 0x0) 22:45:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0xa5a, 0x0, r0}) umount2(&(0x7f0000000080)='./file0\x00', 0x2) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x46, 0x1, 0x3, 0xf441, 0x7, 0x4, 0x5, 0x3ff}, 0x0) 22:45:13 executing program 1 (fault-call:2 fault-nth:26): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:13 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) 22:45:13 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:13 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 292.735057][T10593] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 292.742949][T10599] loop5: detected capacity change from 0 to 224 [ 292.750497][T10601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 292.750813][T10593] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 292.778534][T10593] FAULT_INJECTION: forcing a failure. [ 292.778534][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 292.791269][T10593] CPU: 0 PID: 10593 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 292.800028][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.810076][T10593] Call Trace: [ 292.813358][T10593] dump_stack_lvl+0xd6/0x122 [ 292.817967][T10593] dump_stack+0x11/0x1b [ 292.822121][T10593] should_fail+0x23c/0x250 [ 292.826610][T10593] __should_failslab+0x81/0x90 [ 292.831381][T10593] ? fib_insert_alias+0x295/0x7a0 [ 292.836404][T10593] should_failslab+0x5/0x20 [ 292.840930][T10593] kmem_cache_alloc_trace+0x52/0x320 [ 292.846315][T10593] ? kmem_cache_alloc+0x20d/0x300 [ 292.851358][T10593] ? fib_insert_alias+0x168/0x7a0 [ 292.856381][T10593] fib_insert_alias+0x295/0x7a0 [ 292.861302][T10593] ? kmem_cache_alloc+0x20d/0x300 [ 292.866326][T10593] ? fib_table_insert+0x468/0x10b0 [ 292.871446][T10593] fib_table_insert+0x564/0x10b0 [ 292.876380][T10593] fib_add_ifaddr+0x1b7/0x690 [ 292.881057][T10593] ? skb_put+0xb9/0xf0 [ 292.885199][T10593] fib_inetaddr_event+0xb5/0x210 [ 292.890134][T10593] blocking_notifier_call_chain+0x73/0xf0 [ 292.895847][T10593] __inet_insert_ifa+0x4fd/0x5e0 [ 292.900783][T10593] ? inetdev_event+0x73d/0xad0 [ 292.905554][T10593] inetdev_event+0x8ee/0xad0 [ 292.910154][T10593] raw_notifier_call_chain+0x53/0xb0 [ 292.915434][T10593] __dev_notify_flags+0x1d3/0x3b0 [ 292.920501][T10593] dev_change_flags+0xa2/0xc0 [ 292.925174][T10593] do_setlink+0x810/0x2410 [ 292.929593][T10593] ? __nla_validate_parse+0x108f/0x1760 [ 292.935140][T10593] ? __nla_parse+0x3c/0x50 [ 292.939545][T10593] rtnl_setlink+0x257/0x2a0 [ 292.944069][T10593] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 292.949090][T10593] rtnetlink_rcv_msg+0x711/0x7c0 [ 292.954097][T10593] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 292.959959][T10593] ? __wake_up+0x8d/0xc0 [ 292.964201][T10593] ? __d_rehash+0x125/0x180 [ 292.968703][T10593] ? __d_add+0x3bf/0x490 [ 292.972958][T10593] ? should_fail+0x2a/0x250 [ 292.977482][T10593] ? avc_has_perm_noaudit+0x1c0/0x270 [ 292.982884][T10593] ? rhashtable_jhash2+0x13a/0x1a0 [ 292.988002][T10593] ? jhash+0x2b0/0x2b0 [ 292.992247][T10593] netlink_rcv_skb+0x14e/0x250 [ 292.997022][T10593] ? rtnetlink_bind+0x60/0x60 [ 293.001702][T10593] rtnetlink_rcv+0x18/0x20 [ 293.006122][T10593] netlink_unicast+0x5ec/0x6b0 [ 293.010891][T10593] netlink_sendmsg+0x6ea/0x7d0 [ 293.015663][T10593] sock_write_iter+0x1a3/0x200 [ 293.020439][T10593] do_iter_readv_writev+0x2de/0x380 [ 293.025689][T10593] do_iter_write+0x192/0x5c0 [ 293.030275][T10593] do_writev+0x210/0x440 [ 293.034507][T10593] ? vfs_write+0x61a/0x900 [ 293.038916][T10593] __x64_sys_writev+0x41/0x50 [ 293.043584][T10593] do_syscall_64+0x44/0xa0 [ 293.047991][T10593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 293.053963][T10593] RIP: 0033:0x7f5cdb0a4739 [ 293.058358][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 293.078054][T10593] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 22:45:13 executing program 1 (fault-call:2 fault-nth:27): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 293.086494][T10593] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 293.094447][T10593] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 293.102396][T10593] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 293.110354][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.118315][T10593] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:13 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:13 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) 22:45:13 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000080)="097b89ffe6db1748eaff0faa652c3b80bc0e3f3ec61eccee4dd7eedc152fa551ed28db2b84f00f748493dbceaac0af36634f116b70f7adfb0335d50a5b5c7103811db7c88a11a7324ba9ab49d08035bea7f9b5e23a26d412d4a561e1acbfaf8bc33d2dc56eb3eb6be2dbcb7b1c68fde5bf91e4f16ff8ad34ac6472ca11ce50bf233833a2551e39686842b545c704226e63cdac3e1fe2738a39e87e083f603a69e70d449aeb427346ef34bcb17eadee82060e497973544531ab4cf9319739ceaef680f780a92b51abda578cdec787dffaa11b026f6f0fdb51001d", 0xda}, {&(0x7f0000000180)="a65f88ad2202d881d7d9efac704d47817699dfed1bc9612befc3836aa581e565243bbfeba2ea50b23c348bc50ace4f2767401516f9c239397bc8fa8a5bb918f423a7ee8d1f83d06fe5131c1f962e51e0549f80d6c6c0f03f5398b51629da1c078fda0c1c220dbec4500f1f298caee19b63681a3142b8a92b", 0x78}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000000)="9d14588ebc4e", 0x6}, {&(0x7f0000002200)="2f909f3120831878bdd852031c7144c8df7dbe0371cd95f147652a72595c4aef88c902282dd85d98bbbf4cfbb5e01b3cc58355b088eef0772340e720305ad3ec1bbbd7b2cf72fe93fcab67c61f948c3519c89cf35fe0f0054a575f52afbcf91ce9178a1a1c4f63dcce43ab8be4180929573ef3671a6348a0ff8492541041e6e8ef77d384b5dab3ada88af5612c68c64be48adf2174f17d00af301d28fd8796381dd774245f728cd433b909465d5e9b9fead45893fdf0a0e763005a5ff5f799c3fa47f0c70a25e589d3707d7b85205d258c8fdc6e4609201012668e015dc04d0aac7b7792", 0xe4}, {&(0x7f0000002300)="2203ed85cb9a8889153eed48a874a7fd6311656744b8f1a7055609c40fa5797c8b11b39b471dc9b1d023a6ebb48adc43846457b5deb2d4bb999ded77b050be82d7fff5d794dc4fc4bc45fa3bd15da1ddf93baab5ce88d93a7e12973b39d09293a91467b5036f949ae198f746466c4feb597d80ab56a3ce8dd956ac0c8a979cb16a39a0dc10d5f04ebbd2f9441caa4c6b5b2793990e476f5165fe80e0ec208069089502a739eb4b671760bcddf4763a7464462143508dba9d6a24d23d6dab91f7aebd74d5a9df1131faaff41c5f93605cf840e456a54ced3065a3044166c6549a0f2f2c70104806286623ff59f9", 0xed}], 0x7, 0x5, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000025c0)=0x40, 0x4) pipe2(&(0x7f0000002480), 0x84000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) preadv(r0, &(0x7f0000002580)=[{&(0x7f00000024c0)=""/152, 0x98}], 0x1, 0x9, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x3f3b, 0x5, 0x1, 0x4}, 0x10) mmap(&(0x7f0000474000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) [ 293.193822][T10624] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 293.214351][T10624] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 293.230963][T10629] loop5: detected capacity change from 0 to 224 [ 293.246085][T10624] FAULT_INJECTION: forcing a failure. [ 293.246085][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 293.258729][T10624] CPU: 0 PID: 10624 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 293.267537][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.277782][T10624] Call Trace: [ 293.281054][T10624] dump_stack_lvl+0xd6/0x122 [ 293.285757][T10624] dump_stack+0x11/0x1b [ 293.289891][T10624] should_fail+0x23c/0x250 [ 293.294390][T10624] ? tnode_new+0x98/0x180 [ 293.298709][T10624] __should_failslab+0x81/0x90 [ 293.303481][T10624] should_failslab+0x5/0x20 [ 293.308002][T10624] __kmalloc+0x6f/0x350 [ 293.312148][T10624] ? _raw_spin_unlock_bh+0x33/0x40 [ 293.317384][T10624] ? fib_create_info+0x2fd6/0x33c0 [ 293.322642][T10624] tnode_new+0x98/0x180 [ 293.326776][T10624] resize+0x16d/0xf10 [ 293.330795][T10624] ? kmem_cache_alloc_trace+0x221/0x320 [ 293.336327][T10624] ? fib_insert_alias+0x295/0x7a0 [ 293.341333][T10624] fib_insert_alias+0x668/0x7a0 [ 293.346245][T10624] ? kmem_cache_alloc+0x20d/0x300 [ 293.351309][T10624] fib_table_insert+0x564/0x10b0 [ 293.356272][T10624] fib_add_ifaddr+0x1b7/0x690 [ 293.361060][T10624] ? skb_put+0xb9/0xf0 [ 293.365131][T10624] fib_inetaddr_event+0xb5/0x210 [ 293.370063][T10624] blocking_notifier_call_chain+0x73/0xf0 [ 293.375825][T10624] __inet_insert_ifa+0x4fd/0x5e0 [ 293.380746][T10624] ? inetdev_event+0x73d/0xad0 [ 293.385498][T10624] inetdev_event+0x8ee/0xad0 [ 293.390233][T10624] raw_notifier_call_chain+0x53/0xb0 [ 293.395501][T10624] __dev_notify_flags+0x1d3/0x3b0 [ 293.400509][T10624] dev_change_flags+0xa2/0xc0 [ 293.405186][T10624] do_setlink+0x810/0x2410 [ 293.409619][T10624] ? __nla_validate_parse+0x108f/0x1760 [ 293.415266][T10624] ? __nla_parse+0x3c/0x50 [ 293.419707][T10624] rtnl_setlink+0x257/0x2a0 [ 293.424203][T10624] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 293.429230][T10624] rtnetlink_rcv_msg+0x711/0x7c0 [ 293.434188][T10624] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 293.440012][T10624] ? __wake_up+0x8d/0xc0 [ 293.444256][T10624] ? __d_rehash+0x125/0x180 [ 293.448817][T10624] ? __d_add+0x3bf/0x490 [ 293.453050][T10624] ? should_fail+0x2a/0x250 [ 293.457586][T10624] ? avc_has_perm_noaudit+0x1c0/0x270 [ 293.463009][T10624] ? rhashtable_jhash2+0x13a/0x1a0 [ 293.468216][T10624] ? jhash+0x2b0/0x2b0 [ 293.472266][T10624] netlink_rcv_skb+0x14e/0x250 [ 293.477011][T10624] ? rtnetlink_bind+0x60/0x60 [ 293.481972][T10624] rtnetlink_rcv+0x18/0x20 [ 293.486393][T10624] netlink_unicast+0x5ec/0x6b0 [ 293.491161][T10624] netlink_sendmsg+0x6ea/0x7d0 [ 293.496088][T10624] sock_write_iter+0x1a3/0x200 [ 293.500838][T10624] do_iter_readv_writev+0x2de/0x380 [ 293.506021][T10624] do_iter_write+0x192/0x5c0 [ 293.510660][T10624] do_writev+0x210/0x440 [ 293.514897][T10624] ? vfs_write+0x61a/0x900 [ 293.519304][T10624] __x64_sys_writev+0x41/0x50 [ 293.524032][T10624] do_syscall_64+0x44/0xa0 [ 293.528505][T10624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 293.534402][T10624] RIP: 0033:0x7f5cdb0a4739 [ 293.538870][T10624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 293.558462][T10624] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 293.567027][T10624] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 293.575093][T10624] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 293.583131][T10624] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:14 executing program 1 (fault-call:2 fault-nth:28): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) creat(&(0x7f0000000140)='./bus\x00', 0x8b) sendfile(r2, r1, 0x0, 0x800100020600) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0x6, 0x0, 0xca7, 0xb4, "f32863", 0x7, [0x6, 0x0, 0x9, 0x3]}}) sendmmsg$inet(r0, &(0x7f000000a040)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="b30a", 0x2}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x30}}], 0x2, 0x0) 22:45:14 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x208e24b) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0xb, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c7", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2, 0x2, 0x3dad) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00', {}, 0x1f}) 22:45:14 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 293.591094][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.599045][T10624] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 293.622162][T10624] syz-executor.1 (10624) used greatest stack depth: 9488 bytes left 22:45:14 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:14 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 293.687827][T10656] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 293.706199][T10658] loop5: detected capacity change from 0 to 224 [ 293.713194][T10656] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 293.735491][T10656] FAULT_INJECTION: forcing a failure. [ 293.735491][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 293.748335][T10656] CPU: 0 PID: 10656 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 293.757091][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.767142][T10656] Call Trace: [ 293.770413][T10656] dump_stack_lvl+0xd6/0x122 [ 293.775066][T10656] dump_stack+0x11/0x1b [ 293.779242][T10656] should_fail+0x23c/0x250 [ 293.783688][T10656] __should_failslab+0x81/0x90 [ 293.788450][T10656] should_failslab+0x5/0x20 [ 293.793048][T10656] kmem_cache_alloc_node+0x61/0x2c0 [ 293.798401][T10656] ? __alloc_skb+0xed/0x420 [ 293.802908][T10656] __alloc_skb+0xed/0x420 [ 293.807309][T10656] rtmsg_fib+0xa1/0x200 [ 293.811452][T10656] fib_table_insert+0xaaf/0x10b0 [ 293.816386][T10656] fib_add_ifaddr+0x1b7/0x690 [ 293.821094][T10656] ? skb_put+0xb9/0xf0 [ 293.825200][T10656] fib_inetaddr_event+0xb5/0x210 [ 293.830129][T10656] blocking_notifier_call_chain+0x73/0xf0 [ 293.836124][T10656] __inet_insert_ifa+0x4fd/0x5e0 [ 293.841095][T10656] ? inetdev_event+0x73d/0xad0 [ 293.845883][T10656] inetdev_event+0x8ee/0xad0 [ 293.850695][T10656] raw_notifier_call_chain+0x53/0xb0 [ 293.856007][T10656] __dev_notify_flags+0x1d3/0x3b0 [ 293.861012][T10656] dev_change_flags+0xa2/0xc0 [ 293.865679][T10656] do_setlink+0x810/0x2410 [ 293.870218][T10656] ? __nla_validate_parse+0x108f/0x1760 [ 293.875743][T10656] ? __nla_parse+0x3c/0x50 [ 293.880175][T10656] rtnl_setlink+0x257/0x2a0 [ 293.884678][T10656] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 293.889689][T10656] rtnetlink_rcv_msg+0x711/0x7c0 [ 293.894607][T10656] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 293.900529][T10656] ? __wake_up+0x8d/0xc0 [ 293.904800][T10656] ? __d_rehash+0x125/0x180 [ 293.909304][T10656] ? kvm_sched_clock_read+0xd/0x20 [ 293.914402][T10656] ? sched_clock_cpu+0xe/0x180 [ 293.919161][T10656] ? select_idle_sibling+0x4cd/0x6d0 [ 293.924486][T10656] ? rhashtable_jhash2+0x13a/0x1a0 [ 293.929582][T10656] ? jhash+0x2b0/0x2b0 [ 293.933651][T10656] netlink_rcv_skb+0x14e/0x250 [ 293.938393][T10656] ? rtnetlink_bind+0x60/0x60 [ 293.943127][T10656] rtnetlink_rcv+0x18/0x20 [ 293.948084][T10656] netlink_unicast+0x5ec/0x6b0 [ 293.952835][T10656] netlink_sendmsg+0x6ea/0x7d0 [ 293.957587][T10656] sock_write_iter+0x1a3/0x200 [ 293.962333][T10656] do_iter_readv_writev+0x2de/0x380 [ 293.967533][T10656] do_iter_write+0x192/0x5c0 [ 293.972128][T10656] do_writev+0x210/0x440 [ 293.976370][T10656] ? vfs_write+0x61a/0x900 [ 293.980861][T10656] __x64_sys_writev+0x41/0x50 [ 293.985521][T10656] do_syscall_64+0x44/0xa0 [ 293.989922][T10656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 293.995816][T10656] RIP: 0033:0x7f5cdb0a4739 [ 294.000239][T10656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 294.019886][T10656] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 294.028280][T10656] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 294.036248][T10656] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 294.044235][T10656] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 294.052221][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.060178][T10656] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 294.083256][T10669] loop5: detected capacity change from 0 to 224 22:45:16 executing program 1 (fault-call:2 fault-nth:29): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:16 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x20, 0xe, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x15, 0x2, "1adfe20ad6a0c7b39829d17465d442db9f"}}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x108, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x41}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9edd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6c8b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x93}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5cb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf9d0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffff24b]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x203}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x14e, 0x9, 0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xa5d, 0x0, 0xba9, 0x401]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xd2a5, 0x3, 0x1, 0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x667}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008004}, 0x44000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000018000000c2", 0x61, 0x400}, {&(0x7f0000000540)="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", 0x121, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013a00)) 22:45:16 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/81, 0x51}, 0x559}, {{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/224, 0xe0}], 0x1, &(0x7f0000000380)=""/106, 0x6a}, 0x5}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000001480)=""/2, 0x2}}, {{&(0x7f00000014c0)=@rc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/91, 0x5b}], 0x1, &(0x7f0000001640)=""/178, 0xb2}, 0xa0}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001780)=""/36, 0x24}, {&(0x7f00000017c0)=""/174, 0xae}], 0x2, &(0x7f00000018c0)=""/190, 0xbe}, 0xdf4}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/23, 0x17}, {&(0x7f0000001a40)=""/251, 0xfb}], 0x2}, 0xffffffc1}], 0x6, 0x141, &(0x7f0000001d00)={0x77359400}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001d40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2004, @fd=r1, 0x2bf7, 0x5, 0x6, 0x1a, 0x1, {0x3}}, 0xff) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x9, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0x0, [{@multicast2}, {@multicast2}]}]}}}], 0x28}}], 0x2, 0x0) r2 = signalfd(r0, &(0x7f0000000080)={[0x1242d583]}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) finit_module(r3, &(0x7f0000000100)='\x00', 0x0) open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x100) 22:45:16 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) 22:45:16 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:16 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 295.759444][T10700] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 295.769194][T10702] loop5: detected capacity change from 0 to 224 [ 295.798509][T10700] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 295.818254][T10700] FAULT_INJECTION: forcing a failure. [ 295.818254][T10700] name failslab, interval 1, probability 0, space 0, times 0 [ 295.830906][T10700] CPU: 1 PID: 10700 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 295.839680][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.849753][T10700] Call Trace: [ 295.853031][T10700] dump_stack_lvl+0xd6/0x122 [ 295.857714][T10700] dump_stack+0x11/0x1b [ 295.861877][T10700] should_fail+0x23c/0x250 22:45:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x8610}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, &(0x7f0000000080)="d13800db16829fb3b72849356cd8120cbc851afaf7a89ae3f8af7a51e4d3213aaa24af6f0e3bddd25eebf0f31261944800bb8c8e3bedf85d8e34a79b7d8370ec1fb7d8fbef9dff3328dfacd3f8f03b8ed69f829d3e7fbdd16e1150d25838e7f9a091a8978838ad2d253dd98c5dc1787bc13dce1b1533b8b57aa9695065df825479", 0x81, 0x4040000, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 22:45:16 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x0, 0x0, {0x10}, [{{0x3fa}, {0x4}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@remote}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-generic\x00'}, 0x2}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="ec86f9af9e62686d6f3d7192c2319126635fd5de94abc2c6f5820dc482f7dac9a7745d50436078b2c5548c54daeda8e4f3e9867e7597851d2685bf48a64a80a2e62819be05276f9a2dc7c4db0f50b087a57b3dc0686b71567d8b1842e3b89255ff56e3ee9c072c1946404930c0007ea99e3c39dd92c86090ece4498ddcb108a740fa4a8dd62249d081d18fe46dda7b468ac418171a41c00eebf84a297987dcb1d49947b41390580f03dabf4b45899362a6a62c0383", @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000000007,msize=0xffffffffffffffff,access=client,cache=fscache,posixacl,version=9p2000,obj_type=user.incfs.metadata\x00,smackfsroot=user.incfs.metadata\x00,uid>', @ANYRESDEC=0xee00, @ANYRES16=r0]) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000100)={0x0, 0x1, 0x2000000401, 0x1}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x121401, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r7, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r5, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r4], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, r3, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, r7, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @usage=0x7e47cf27, r7, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={r7, 0x4, 0x8}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x3, 0xfb4, @start={r7, 0x1, "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", "e33efb1be31b1239c8497e3ebead7e37c23927c8b9f399a89e9d50ab1d94532ca3420dcf87bc85fcecedfc9df50f4b5867d6a9e5d34f7cb738c2fb7c5af478d54365d9faa845ad6ee69ee16cf665da0c0d533e6a6111eaacf0d96b53cc3ef03d09659f99c7e3c604cf62980b770b3ea6a21810f3e3ecc62568e64590e47999366303e5b058b0d51c0ad7ee36d5176357adfbbf0395de889e222c422abeb533aa2a7537f4dc090bbcc48be4dc62edb55c1ff8780bf4f64998082d679be35c9886cbf11622295fd6b18dda1c7f2960d5e33ac635289c344560066a6fbde25a5efb4c2fde1730d4028b3a2bd3f7654105958db39fd4ff351d197c7a638382d758840a95299c77fb45c973ca1bc17f88bcf329640d2bc892951afeb83c74ea1070c05a7a052937c647a78ea78996ce53c2e6cdb442a693dbaf1f237f71bb8876eb00c43f8ae2aef6a1497005d4b0ddaa525e78a4d6957b65d19e0c682782f7165267f9e4d258d359192885e36a5f8a170a7e9253be7e2fdb0c7dda94afefd3ae37df2fbf188a2c11e951d20fd22f23e6007d9ad15e99e53555ee94508e905ad809d73b495bfcd2d7ce2fadc798279ed6aee19628cd2838cfc747d0a1162ae2e0cf789621bbb784044854830f535e26700170793781be9f0d35fd0a48686ffdd027eac8af1694cbc07a5f373924036d8eca7fd3ea5074428943af876c465ef655a8cbf89fc4bd121d3e9176e47099582be4352764c3ac961df695693540d16af82ced61160efd045fc9a16895247b9c7c6dab38004495fe070a9320c8fcb9da3e9961b1efbc6bf6f0f4a0a2de625a4099187ea15876535bbaffdc24f4249566670b359c74c0bab08d9f9ae78aa7e62f754d14a020ac8c4b6d01b8c5d58e87f4de43aec0a022463bb5d8f96bd632a5ff1f069fb6d8a4ecd9a8c82113cd8b2d239bbc43e374cc06df93a33c8d75bd84f535e5172a7ab3bc0ebd83be09191b64658f14b84736c2940bfed496aa68ad8e3620877191a7159ea34b29b03bc8a038d8c0a765745fe8da6e752940d5f97f3d876028d5e588b2ab72535e9c8b7a64e3b8a039f5f40ade2c7d4e45073b6b48a94cabb1c8c371abb8b35bb646bfde8053f5f1b1b0273d86ec0b6ccf847086b4693240dc67b4973faa3249c0cf0bd85306d6fb77b9da1717746a019345bff3c062fbe0d3261451c4bca1130a701a0562e531981d2214caf4ed4fa18373a740b5a31e235b359aaa9f884c46a89d5323ff91f6a035a78fa64ae4529314905f4f6c5ddab6c410620347b521ead4fc78dd92ba1bea1fcbde40bb53e27bf13826e87e68d775f934e7b909486cb131afa5b5f8b49b489ddefbfdd2871527e508a27378a67c700da70b05b4f170187bae2a5958813c6e00b631a93242af8c9cfcc00ef7c31fd83d4137d2f9ce0fc464be90638ad9169038631e"}, [0x7, 0x7fff, 0x80000001, 0x8, 0xff, 0xffff, 0x7fffffff, 0x4, 0x10001, 0x8, 0x7, 0x40, 0x89b7, 0x400, 0x6, 0x20000000, 0x9, 0x10000, 0xfff, 0x200, 0x20, 0x5, 0x5, 0x4, 0x6, 0x100, 0x1, 0x473, 0xb, 0xa, 0x2, 0x8, 0x80000000, 0x838, 0x6, 0x2, 0x100, 0x0, 0xeed, 0x80000000, 0x8, 0x20, 0x11e000000, 0x8001, 0x0, 0xe7ce, 0x4, 0x3ff, 0x6, 0x10001, 0xff, 0x2, 0x5, 0x1000, 0xfffffffffffffffd, 0x6, 0x2, 0x968, 0x1, 0x9, 0x0, 0xfffffffffffffff9, 0x7, 0x7]}) [ 295.866300][T10700] __should_failslab+0x81/0x90 [ 295.871067][T10700] should_failslab+0x5/0x20 [ 295.875723][T10700] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 295.881445][T10700] ? __kmalloc_node_track_caller+0x30/0x40 [ 295.887273][T10700] __kmalloc_node_track_caller+0x30/0x40 [ 295.892911][T10700] ? rtmsg_fib+0xa1/0x200 [ 295.897584][T10700] __alloc_skb+0x187/0x420 [ 295.902002][T10700] rtmsg_fib+0xa1/0x200 [ 295.906159][T10700] fib_table_insert+0xaaf/0x10b0 [ 295.911102][T10700] fib_add_ifaddr+0x1b7/0x690 [ 295.915825][T10700] ? skb_put+0xb9/0xf0 [ 295.919886][T10700] fib_inetaddr_event+0xb5/0x210 [ 295.920054][T10719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10719 comm=syz-executor.4 [ 295.924825][T10700] blocking_notifier_call_chain+0x73/0xf0 [ 295.943297][T10700] __inet_insert_ifa+0x4fd/0x5e0 [ 295.948241][T10700] ? inetdev_event+0x73d/0xad0 [ 295.953043][T10700] inetdev_event+0x8ee/0xad0 [ 295.957633][T10700] raw_notifier_call_chain+0x53/0xb0 [ 295.962910][T10700] __dev_notify_flags+0x1d3/0x3b0 [ 295.967927][T10700] dev_change_flags+0xa2/0xc0 [ 295.972589][T10700] do_setlink+0x810/0x2410 [ 295.976991][T10700] ? __nla_validate_parse+0x108f/0x1760 [ 295.982528][T10700] ? __nla_parse+0x3c/0x50 [ 295.987017][T10700] rtnl_setlink+0x257/0x2a0 [ 295.991509][T10700] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 295.996529][T10700] rtnetlink_rcv_msg+0x711/0x7c0 [ 296.001453][T10700] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 296.007278][T10700] ? __wake_up+0x8d/0xc0 [ 296.011509][T10700] ? __d_rehash+0x125/0x180 [ 296.016023][T10700] ? __d_add+0x3bf/0x490 [ 296.020267][T10700] ? should_fail+0x2a/0x250 [ 296.024756][T10700] ? avc_has_perm_noaudit+0x1c0/0x270 [ 296.030115][T10700] ? rhashtable_jhash2+0x13a/0x1a0 [ 296.035267][T10700] ? jhash+0x2b0/0x2b0 [ 296.039337][T10700] netlink_rcv_skb+0x14e/0x250 [ 296.044087][T10700] ? rtnetlink_bind+0x60/0x60 [ 296.048756][T10700] rtnetlink_rcv+0x18/0x20 [ 296.053163][T10700] netlink_unicast+0x5ec/0x6b0 [ 296.057917][T10700] netlink_sendmsg+0x6ea/0x7d0 [ 296.062672][T10700] sock_write_iter+0x1a3/0x200 [ 296.067600][T10700] do_iter_readv_writev+0x2de/0x380 [ 296.072830][T10700] do_iter_write+0x192/0x5c0 [ 296.077413][T10700] do_writev+0x210/0x440 [ 296.081678][T10700] ? vfs_write+0x61a/0x900 [ 296.086084][T10700] __x64_sys_writev+0x41/0x50 [ 296.090755][T10700] do_syscall_64+0x44/0xa0 [ 296.095189][T10700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 296.101143][T10700] RIP: 0033:0x7f5cdb0a4739 [ 296.105629][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 296.125222][T10700] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 296.133766][T10700] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 296.141723][T10700] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 296.149680][T10700] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 296.157637][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:45:16 executing program 1 (fault-call:2 fault-nth:30): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 296.165691][T10700] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 296.177207][T10719] device lo entered promiscuous mode [ 296.189326][T10719] Y­4`Ò˜: renamed from lo [ 296.207334][T10726] loop5: detected capacity change from 0 to 224 22:45:16 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 296.230874][T10732] FAULT_INJECTION: forcing a failure. [ 296.230874][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 296.243504][T10732] CPU: 1 PID: 10732 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 296.252349][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.262553][T10732] Call Trace: [ 296.265827][T10732] dump_stack_lvl+0xd6/0x122 [ 296.270514][T10732] dump_stack+0x11/0x1b [ 296.274653][T10732] should_fail+0x23c/0x250 [ 296.279072][T10732] __should_failslab+0x81/0x90 [ 296.283816][T10732] should_failslab+0x5/0x20 [ 296.288320][T10732] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 296.294024][T10732] ? pcpu_memcg_post_alloc_hook+0xe5/0x1d0 [ 296.299806][T10732] ? __kmalloc_node_track_caller+0x30/0x40 [ 296.305611][T10732] ? netlink_trim+0x112/0x140 [ 296.310348][T10732] __kmalloc_node_track_caller+0x30/0x40 [ 296.316051][T10732] pskb_expand_head+0xc9/0x920 [ 296.320882][T10732] ? rcu_segcblist_enqueue+0x8e/0xa0 [ 296.326249][T10732] netlink_trim+0x112/0x140 [ 296.330753][T10732] netlink_broadcast_filtered+0x47/0xb60 [ 296.336379][T10732] ? nla_put+0xd8/0x100 [ 296.340542][T10732] ? fib_nexthop_info+0x3de/0x430 [ 296.345553][T10732] nlmsg_notify+0xcc/0x180 [ 296.349969][T10732] rtnl_notify+0x72/0x80 [ 296.354219][T10732] rtmsg_fib+0x183/0x200 [ 296.358451][T10732] fib_table_insert+0xaaf/0x10b0 [ 296.363384][T10732] fib_add_ifaddr+0x1b7/0x690 [ 296.368067][T10732] ? skb_put+0xb9/0xf0 [ 296.372141][T10732] fib_inetaddr_event+0xb5/0x210 [ 296.377100][T10732] blocking_notifier_call_chain+0x73/0xf0 [ 296.382812][T10732] __inet_insert_ifa+0x4fd/0x5e0 [ 296.387743][T10732] ? inetdev_event+0x73d/0xad0 [ 296.392564][T10732] inetdev_event+0x8ee/0xad0 [ 296.397151][T10732] raw_notifier_call_chain+0x53/0xb0 [ 296.402480][T10732] __dev_notify_flags+0x1d3/0x3b0 [ 296.407562][T10732] dev_change_flags+0xa2/0xc0 [ 296.412240][T10732] do_setlink+0x810/0x2410 [ 296.416659][T10732] ? __nla_validate_parse+0x108f/0x1760 [ 296.422233][T10732] ? __nla_parse+0x3c/0x50 [ 296.426640][T10732] rtnl_setlink+0x257/0x2a0 [ 296.431161][T10732] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 296.436220][T10732] rtnetlink_rcv_msg+0x711/0x7c0 [ 296.441158][T10732] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 296.447020][T10732] ? __wake_up+0x8d/0xc0 [ 296.451396][T10732] ? __d_rehash+0x125/0x180 [ 296.455905][T10732] ? __d_add+0x3bf/0x490 [ 296.460156][T10732] ? should_fail+0x2a/0x250 [ 296.464717][T10732] ? avc_has_perm_noaudit+0x1c0/0x270 [ 296.470085][T10732] ? rhashtable_jhash2+0x13a/0x1a0 [ 296.475196][T10732] ? jhash+0x2b0/0x2b0 [ 296.479325][T10732] netlink_rcv_skb+0x14e/0x250 [ 296.484173][T10732] ? rtnetlink_bind+0x60/0x60 [ 296.488849][T10732] rtnetlink_rcv+0x18/0x20 [ 296.493261][T10732] netlink_unicast+0x5ec/0x6b0 [ 296.498048][T10732] netlink_sendmsg+0x6ea/0x7d0 [ 296.503082][T10732] sock_write_iter+0x1a3/0x200 [ 296.507872][T10732] do_iter_readv_writev+0x2de/0x380 [ 296.513112][T10732] do_iter_write+0x192/0x5c0 [ 296.517781][T10732] do_writev+0x210/0x440 [ 296.522046][T10732] ? vfs_write+0x61a/0x900 [ 296.526473][T10732] __x64_sys_writev+0x41/0x50 [ 296.531191][T10732] do_syscall_64+0x44/0xa0 [ 296.535612][T10732] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 296.541520][T10732] RIP: 0033:0x7f5cdb0a4739 [ 296.545933][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 296.565712][T10732] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 296.574126][T10732] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 22:45:17 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:17 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 296.582152][T10732] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 296.590552][T10732] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 296.598565][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.606620][T10732] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 296.617010][T10719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10719 comm=syz-executor.4 [ 296.708885][T10762] loop5: detected capacity change from 0 to 224 [ 296.710708][T10732] syz-executor.1 (10732) used greatest stack depth: 9216 bytes left 22:45:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:19 executing program 1 (fault-call:2 fault-nth:31): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x44947000) ftruncate(r0, 0x8001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x18, 0x0, &(0x7f00000012c0)) 22:45:19 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) 22:45:19 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:19 executing program 0: unshare(0x20030000) socket$unix(0x1, 0x5, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x341000, 0x0) unshare(0x22000000) recvmsg$unix(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) 22:45:19 executing program 4: gettid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0xb8, 0x1f, @buffer={0x0, 0x6d, &(0x7f0000000040)=""/109}, &(0x7f00000000c0)="b9d87b21a39b897fe812583d768c9d5a8c9555f47730578291ff5d58b866a26f63eb99877528efe5a9f2b690ebf603a23b1d27e29124b070f327c05679280b332f858c7784b2a6e7463f93397508ed54391db9ea2c132e83c663cd3d63e8558bcfd2979ad444701d06c01a0e0be5863c79b460fa637ff8d277b590dc244167349c1b6bb48f0452f374d0323bde8333ca014a1214e940cea1a1387d20d9071574118494d8ae22c246445391c50f41d6af45e760158f38c160", &(0x7f0000000440)=""/4096, 0x5, 0x20, 0x2, &(0x7f00000001c0)}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x100000000}, 0x0, 0x0, 0x0, 0x5, 0x7ffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001880)={0x0, 0xfffffffffffffffb, 0x75, 0x8e, @scatter={0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/237, 0xed}]}, &(0x7f0000001700)="686cefd9c56341a61718bd942320aa3ed70be1a7ee3d1add28018a9d50f608ce0b30678dd30888cecce3d53b63a2b75ea3ed03e5cf7df5cee1fa8978d64429d8129f94a5ea7cc5d48c00ab5c51839897781335d437936312897babf5a93d5a42e07ae98ab597b1a6b64a761b6ebb287be410300a67", &(0x7f0000001780)=""/163, 0x9, 0x2, 0x1, &(0x7f0000001840)}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001580)={0x0, 0xfffffffffffffffd, 0x76, 0x4, @buffer={0x0, 0x67, &(0x7f00000002c0)=""/103}, &(0x7f0000001440)="76fc26a12e5bb32c2b10b39c0b2d33da7a5f55f09a917785bf993e9d31852fd3230ea212a442787658b04eea5854b109ac5983d0903e50498a2212f655a3697a93650808a794caed2a3c9a3eb0ae612cb97a60cfda4ea30462a30a854806f1851871e88b702db464ffe470f785f7677b7a34b536c7d9", &(0x7f00000014c0)=""/152, 0x1, 0x21, 0x0, &(0x7f0000000180)}) unshare(0x22060400) r3 = gettid() clone(0x6cbaa510, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 298.782809][T10785] loop5: detected capacity change from 0 to 224 [ 298.792986][T10789] validate_nla: 2 callbacks suppressed [ 298.792998][T10789] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:19 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) 22:45:19 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000200)=0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) fork() connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0x60}, {0x1, 0x8, 0x1, 0x8, 0x8, 0xd2a, 0xb0, 0x6}, {0x3f, 0x1, 0x0, 0x7f}, 0xda7d, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@multicast2, 0x4d5}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x5, 0x0, 0x5, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:45:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r2, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) dup2(r1, r2) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', '\x00\x00\x00\x00\x00^\x00\b\x00'}, 0x28) sendfile(r4, r3, 0x0, 0x800100020600) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f00000000c0)={0x7, 'veth1_vlan\x00', {0x4}, 0x2}) read(r0, 0x0, 0x0) [ 298.834547][ C1] sd 0:0:1:0: tag#7330 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 298.844402][ C1] sd 0:0:1:0: tag#7330 CDB: opcode=0xe5 (vendor) [ 298.850732][ C1] sd 0:0:1:0: tag#7330 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 298.859814][ C1] sd 0:0:1:0: tag#7330 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 298.868855][ C1] sd 0:0:1:0: tag#7330 CDB[20]: ba [ 298.892633][T10802] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 298.926995][T10802] FAULT_INJECTION: forcing a failure. [ 298.926995][T10802] name failslab, interval 1, probability 0, space 0, times 0 [ 298.939645][T10802] CPU: 0 PID: 10802 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 298.948467][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.958616][T10802] Call Trace: [ 298.961888][T10802] dump_stack_lvl+0xd6/0x122 [ 298.966478][T10802] dump_stack+0x11/0x1b [ 298.970628][T10802] should_fail+0x23c/0x250 [ 298.975037][T10802] ? kzalloc+0x16/0x20 [ 298.979097][T10802] __should_failslab+0x81/0x90 [ 298.983859][T10802] should_failslab+0x5/0x20 [ 298.988361][T10802] __kmalloc+0x6f/0x350 [ 298.992539][T10802] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 298.998351][T10802] ? __wake_up+0x8d/0xc0 [ 299.002587][T10802] kzalloc+0x16/0x20 [ 299.006478][T10802] fib_create_info+0xdec/0x33c0 [ 299.011339][T10802] ? netlink_broadcast_filtered+0xb41/0xb60 [ 299.017229][T10802] ? fib_nexthop_info+0x3de/0x430 [ 299.022260][T10802] ? nlmsg_notify+0xcc/0x180 [ 299.026842][T10802] ? nlmsg_notify+0x13d/0x180 [ 299.031523][T10802] ? rtnl_notify+0x72/0x80 [ 299.035935][T10802] ? rtmsg_fib+0x183/0x200 [ 299.040354][T10802] fib_table_insert+0x148/0x10b0 [ 299.045290][T10802] fib_add_ifaddr+0x502/0x690 [ 299.050012][T10802] ? skb_put+0xb9/0xf0 [ 299.054192][T10802] fib_inetaddr_event+0xb5/0x210 [ 299.059121][T10802] blocking_notifier_call_chain+0x73/0xf0 [ 299.064847][T10802] __inet_insert_ifa+0x4fd/0x5e0 [ 299.069822][T10802] ? inetdev_event+0x73d/0xad0 [ 299.074579][T10802] inetdev_event+0x8ee/0xad0 [ 299.079169][T10802] raw_notifier_call_chain+0x53/0xb0 [ 299.084486][T10802] __dev_notify_flags+0x1d3/0x3b0 [ 299.089565][T10802] dev_change_flags+0xa2/0xc0 [ 299.094242][T10802] do_setlink+0x810/0x2410 [ 299.098661][T10802] ? __nla_validate_parse+0x108f/0x1760 [ 299.104263][T10802] ? __nla_parse+0x3c/0x50 [ 299.108674][T10802] rtnl_setlink+0x257/0x2a0 [ 299.113191][T10802] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 299.118207][T10802] rtnetlink_rcv_msg+0x711/0x7c0 [ 299.123150][T10802] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 299.128958][T10802] ? __wake_up+0x8d/0xc0 [ 299.133238][T10802] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 299.139217][T10802] ? __d_rehash+0x125/0x180 [ 299.143855][T10802] ? __perf_event_task_sched_in+0x7e7/0x850 [ 299.149752][T10802] ? rb_erase+0x623/0x750 [ 299.154079][T10802] ? should_fail+0x2a/0x250 [ 299.158574][T10802] ? avc_has_perm_noaudit+0x1c0/0x270 [ 299.163948][T10802] ? rhashtable_jhash2+0x13a/0x1a0 [ 299.169061][T10802] ? jhash+0x2b0/0x2b0 [ 299.173127][T10802] netlink_rcv_skb+0x14e/0x250 [ 299.177964][T10802] ? rtnetlink_bind+0x60/0x60 [ 299.182647][T10802] rtnetlink_rcv+0x18/0x20 [ 299.187121][T10802] netlink_unicast+0x5ec/0x6b0 [ 299.191880][T10802] netlink_sendmsg+0x6ea/0x7d0 [ 299.196636][T10802] sock_write_iter+0x1a3/0x200 [ 299.201399][T10802] do_iter_readv_writev+0x2de/0x380 [ 299.206665][T10802] do_iter_write+0x192/0x5c0 [ 299.211253][T10802] do_writev+0x210/0x440 [ 299.215495][T10802] ? vfs_write+0x61a/0x900 [ 299.219927][T10802] __x64_sys_writev+0x41/0x50 [ 299.224602][T10802] do_syscall_64+0x44/0xa0 [ 299.229022][T10802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.234919][T10802] RIP: 0033:0x7f5cdb0a4739 [ 299.239325][T10802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 299.258928][T10802] RSP: 002b:00007f5cd8dfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 299.267414][T10802] RAX: ffffffffffffffda RBX: 00007f5cdb1a9038 RCX: 00007f5cdb0a4739 [ 299.275388][T10802] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 299.283360][T10802] RBP: 00007f5cd8dfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 299.291337][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.299298][T10802] R13: 00007ffd2eebccef R14: 00007f5cd8dfb300 R15: 0000000000022000 22:45:19 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x3d}, {0x34, 0x0, 0x0, 0x5}, {0x9, 0x0, 0x0, 0x7ffffff5}]}) creat(&(0x7f0000001180)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) [ 299.343234][T10823] loop5: detected capacity change from 0 to 224 22:45:22 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:22 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:22 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44}, {0x3}, {0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x6, 0x3f, 0x6, 0x2}, {0x2, 0xf2, 0x4, 0x1}, {0x3, 0x40, 0x1, 0xfffffffc}, {0x5, 0x4, 0x9, 0x8}, {0x40, 0x80, 0x0, 0x5}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:45:22 executing program 1 (fault-call:2 fault-nth:32): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:22 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:22 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a1", 0x1}], 0x1}}], 0x1, 0x240848c5) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000007d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000007d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000002c40)={@private2, 0x0}, &(0x7f0000002c80)=0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000007d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004c00)=[{{&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="a5512d07732fcc81f4ad151a49fa1055823e5d063e2b0f12490fe9abb7c78fd8098635390a2a37e836abd049e8d21f641aded1d26961ad2d9ce1bfdf277479b61b84debdb7af5752798e4cf1bec0fb458d2ed5819b017ee545e63e887283baa097048b6836dc60eb3c698a9ba6df4a8faa30e4211b965ba552", 0x79}, {&(0x7f0000000300)="8e0216b9f9069e7fda55a8fe2033c70af6e0a132efc22f14bc4c7961d1d226ebbfa46d31487eef0c229951f4186334a13a617635f08ead15b5ec7f006fc2e4badc682ed45045363437265614e0739c426a05250665ceaf749f13a2d34a70d058cfe79fc009ea4c4c14a791a0476371fb255500a4c9785a3f746d9dac2ecd2edd46da0fb95b4910392a7b53f0a4c01e20914fe36099aabb07663b1032ae1beabbdeaf96", 0xa3}, {&(0x7f0000000200)="2a5ebc9d795452ee5af2ad262ed65a70399cf150202bc687ca81bc", 0x1b}, {&(0x7f00000003c0)="3d7b0df915", 0x5}, {&(0x7f0000000400)="65686f58782bf9f725b2e266b29ae40a01a071ae6cfdf8532bb79ed80531ef8bf3bb7da5904f83960edbc62c6d0b7630f32291b5d6eaa1e955f5dd65da90c2d1087d8578215e4ba6a7e3345e7fdc991b3b6fba9379984faa5c5dfe2f59af53ff901a22c525155da0543856e15d31a7800f7279497dd0d0bdc799a54125e9c9ebe2cbea2d4e7b0e496e65177c95b17db3dd20d027d1b1aa44b755629b822459e08ff544e10bcb7f60b8", 0xa9}], 0x5, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)="4ccace4601ad6ca352216b7bcfd7ae07b59268da54556e4594b0b30cd4d9d57510e7b061e02a473f15716557d9f29bec769851f1d4fb19573c4794bd8f4af67fafc437a49e4853ba55957e1bd8b817bbbba87d537b9188bedc031544399bdd67356c20288c1c4414d156a5f3acdcc46b7987f54ebcc727c846c787bd5eb3c85daced9b15662a85a1eb0dd72e12a987", 0x8f}, {&(0x7f0000000680)="74ddddd931df9931d79599e5cea39448e0b6f4a4dfa18cbdbe1de4e99a0d2029c8607bedabbac0d7808f1c57586e7830643507500ce4f2d23db09ee6a52ac70872e39a07e66a1ee7fc852ab2b5e0038578fcc8", 0x53}, {&(0x7f0000000700)="c1fb8c8be6e4ee67c98555de2ba363678b4fadec0d0c8a30c37a90fcdd463640ac232257c10ea487fa51efd4acd05de14265c43ec540a807d69c3129e33fa2ba5a3c415454374bd19b66e8552a588586b4820f1286a721783250a80b4d1e0c5282b79a84624f691611fea8983d49035a2091a5b0caf4a3d2996a3faa8e97bce77b7a7d6a9627f6cf145b9af782fd56e0062276d0ba34a6452877c8fb8c38d520ddd22c3023c72321d6d8e6923a190ceb5386f1e230b31b36cc764cc70994770ae5cb20638955637334e4cb76c5d06b0c0e9833ee10067a4fe30acbb1b670cb1194509952989addd090d77b", 0xeb}, {&(0x7f0000000800)="846a64ce6b59eb0ea039a35f571d40f80515c3ce3bfb1645d47b0619e3195101358949f3a30c9a585d38e59a5612a5c548a48d751998cfd8f6b77f3e88da6a425eb2d55ea0d634e1dfcc58abfc338b0232f86467bea4cdbb848912a11c92e1c1df04f5f009c20d1ac670af44a1fd0c7c2de8b4a02059b7fc8d33da5adda90a5993081ec598358da7deb5e0df45a945aaed567c8c0c758779fb586402449300fcdc50982e8651446c9c07b6c5bd7b21c93c6b516c7950c256201cde79699df7a68f11687190bc7b1a47d2e60d7c85da8dd36281d2a1ca9a476ed6df4acac8599253530dfa0f5aff66bc99", 0xea}, {&(0x7f0000000900)="589309e43d62b48be0cad572", 0xc}, {&(0x7f0000000940)="598778dd3811d81b0ef80660f889be2bece235628c70783bfc7e02726e198c173d35f672d79f469b63d4e1e4e868c3e7d0d8be30a2c146071088f634657d61adfbd100517f087c0d0436f027466fe8e373902a77275085130e3fbdd90ba6d4cb8f963b726c50df60ece856839c880e8b9ee4718aada100827befa6fb8290f60422cda06fe4b938618d2d65422d51ae6b57bbf04099402b411c5a44312ed907d0b4f279a28b30bb40cad2b62f80d1f5962b27d3a2b7368cda82db88903d376d9f1be8d3a750f1ee607efff7e4cf526d8785b6bc03f812c903f6", 0xd9}, {&(0x7f0000000a40)="3059d18ea6bacedee8f4f326826cbe3e1907401ef4595f1579cecd8b65a681f535d1f47b4c8f55e9e9eb5fd9844614711b9a6b9fd4e5bf4efe15e4054c31c02981ce61a4bd26fb424edff66a1d2d311da93b90d9df46c96d7cbc6a67feed2945581c4c8f5d95a8293cb1597af6218e708349872d5fb142cb63145915609cd0cdf8d64763ee507bafe28b1ef16cf94d5d12af062ce8cf8f4088301f1b5c032e2afea2a2f2a4efe5a613f694a48e16480334682a4c17c892e914712e52fa5d055cf9ac8f3745c2fd4ef36e9ecc18513b23fe878404043ff5ac9bf0977ae4988d3ab8927212", 0xe4}], 0x7, &(0x7f0000000bc0)=[@ip_retopts={{0x40, 0x0, 0x7, {[@end, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x4, "0190"}, {0x9585b092200173f4, 0xf, "8517a9ad4b308f0f500b17d762"}, {0x6, 0x2}, {0x6, 0x11, "80009c0ae5b9977d0a84b2f5563b65"}]}]}}}], 0x40}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c40)="3b57d92a479c348efa14d43ccc8c4f5f668774c1c74b07fc68dcde2998b4cfa4cfb19835b8749ff389855aa138d91dc18ab77ac1fd53e6de397158e8f19f8c669f65e55ac1f601645a22e1b5d88e7bdd3b30670e66", 0x55}, {&(0x7f0000000cc0)="b602334523b3071f5bc71b6f6f6cbc779fc64361de4266dfcfcb83ef3de81693c28972ca621f88685afda42c844aad809615261e171a11f2907f3288eb844ccce18f03c7703a259f7882ac0cd52a47cad252149b3fb262", 0x57}, {&(0x7f0000000d40)="84633b1b29c3c71d11f69a979653a72fa386428c78dff6f29edc3d9749bac8651f3c1e7829d6c515050621d0a9903759f4bc7db5c9c3a2e2ec0ab28ff0ebf0a64bd2523a658b8c1435ac85970e72f2ec80", 0x51}, {&(0x7f0000000dc0)="50566a8bb29ac915a884439bd6d9212b6b87fb81998bf9cf846229697d68cdac7c60cef68299f7779dc397f63404f4f68ea734a77ab4004d52", 0x39}, {&(0x7f0000000e00)="1c2043f389b8d2b4bee83edb8878c679ea2c6e32129c", 0x16}], 0x5}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)="7c99ce8f7f97b95ac059416501e715c5e448a18c15f70779a58a2b4cbe234a36c97019824033df52e708728c5c39c2d5f3c5bbf5cef608c375d761e37d254ba5df", 0x41}, {&(0x7f0000000f80)="7c2313457d54421f1db0bd69eea659333df6d0fe3ae42a7f3a921c96ad8791651acc65bac100dc40ab8de74bbeb9ce46c0e10a4309666e26abbbe81b607c417b72d565fd5ac7046fc4172f037245f7a1b35048a6e62cff5e2ae1826b8be3608df3f7fe9f3c4295383ebb9988891126b5393dd27928da00cba5ad1652550cd5a643153546b1299b49db9c3a8ba20002b7468e99e52e6efdb3ac034498923ee9ae8d0cb2b85a6f0a3cb364eae4f3c63361f0764f85aa2c40d130", 0xb9}, {&(0x7f0000001040)="a332c8a3c00cb0a436c353c485f317360344e5d68ce7739884590e1009d199aefb9dbd41809e7c621ade63490e49dac4f8c7c3ff6079a5383bd9a7fff3fc9ea72fb4bcbc5a2819ea784d66dcc1b956b3b445cd21103325468ba1074a3f7878d9d95e1215abdcbd14601926915f095d9f85eb6fa7f8dd56d884242064a8058a8c7842037cc756f63061218180183b3b1ba34b018d47536569c4cb02290e3d9a", 0x9f}, {&(0x7f0000001100)="703f6b85a35c4226df615ca53206cec6ff8a50bb150f95d6da2c8be6eb3c0ecc9d9f95302f705565714a866e13368e7384fe7d092a3a4cd3fa44da12f62e4820b5cc7be87086f0e0", 0x48}, {&(0x7f0000001180)="9da98f6be4794e391a20e765e00718afa6516a145aff83b75a0102207441e955745fa578c55e342abc8d4a302f92d727af5d959ed0f062375addf6317cd0abd3a1c7cdb2ef944be9b546f7161b2cb6359d5ff7e53bba4db8332e63207ab43077b97588d39ee7ce582a2110b1ed73f36c83fad24d82d54cb9ca8ee5a0cc060931553e5c227aeb270cb355639e8b66e5b5a94027109f6eb0dbd8303ee1f6b07c9d6adb7e513338d273d01a6b08c204fea664e11aebfc057eb15a99e2bd07eb1fdacca78982697bad353b84dd416da619f4783ce08e5f2c1a57b675d70f721785b97332a9f6dd125e809f7338d7c48b1d056e8a73b3d0eff6d3e30685025142bf5c0a16687440c1681dc38f57b3ef3f28cf21083472cb716c4637b95c29fa1846d4482fda7b3a1039c08ad429dd203fe7966cc7b4b24d6ba14a5f023f74cb796e74613b0095a18837f0d03f0c652f2f7dae17395a0c9c9d22579b6da1662158e01b1f8253bd189dabc308b9d88f614be5f4465819ba9c42a7da09cf57d304b2f9e784b9fe17335861332d62123eaedc10daca0339fae0bc6bc68916704102d4742e906d38efd49fcf2a80116c1788f5a3793c120a330df092fa8cba92b96e9ec6b7fc189560b81e15b1d6a02484c5512a9852a680e7957f278af24fe5f767fe05225118c2cbfd0724f8ae8ff9fb30d6c08b44ffabecfa59dab577d0d4595844a459408a2dbfb45e364a384ccb51047a51fcf6e626b0e47f2ceec020d17d92519bce0228d7fb7156c2275b464f330327a42cbf853da619daa569f0fa298e4f6ac556a9a25528364ce9aa759a4f126f0f53816a9083204b6e041f615730ec631ece1a58a6a43f86ebd63c7782d3816d3907866c8996adbd9b5406c50ad94cd14ba15a53ecd1de18d16d636854ff8766dcd9a8451958cf08958fbb1123938f0f59b0b2a298b6298e2ba5200d802c8c6db90a128d875374aa21570258e332e6ccb96c5ceec5e6a91adb48bd1b9c6b7f2c620b49b1cf66183604d7df40bc40f18ace8280d6afc8fbd2bd8cdae055ee705d4db3ae6279286139ade3fd28ec70efabad742a66c251df24ccccaacfe3d8975e56ea093b5b752ac4320f91e41b0ad23c23551ea47f69902c92b468739e623e23ac45140be2b637278cae799c3256c24b89e1175f697b1bb9785a45dc29d2ee1a6c7034e01d5525172d1fccb1fb9ca0552e6b5d97d204c3e2b48cc8afb80b1f2b8ceef0238d1970b1f2310ef6d4acce9ab40e4fb54705d1bef75cdedaeee8f98cb9e10d21079e1e4aba1bcc66a7c9ca00d5513ae345affa57408560fb1d89c3bf8c08c8ebfca552c6b083408eaee74ee44dd42994e1456b1155e45fbc30739332b2adb3b5087f83ebc2b6528c7370703225499002b0e799709738044253fbefcd9ba94d8410a9a8b73e8415f05097f145d17b431c9b69fc0108d7630e9404f8e54e26b03d70f55ecfb7c65864629c4636250ee722d1bc2d49dae4e631099fcf2467bba7c42567fe0f531da7b85895ca3d28cf972ccdaeb33f4c845c08962e87980b1425160a557574932dd115b1822b32bfc5b1be0edd09844d7858187d4ca01ba72b6244be83e9420ea34ce980359e70c75bf018fb888bc7731a8d554608b0f53ee1cdd5f3ee1fab64604dd9047d3764520f8bb07630d56a33659167b6ba38d95356bbca6666fa695c5fe6b82b0aede18da7606f903c2b3d9dedfbc261305588ebd441b32b8e0307665ca96a957d45dfd40c00a086e6985458261ea68bfad74d0bce8faa5b7fef2e00534928d6e20a497e4d4be53a3938d45c5f91961ddc04aa4fe309cb6f0f131e580b2f47417bd1b251ab1575231a103a1874e2f5d0e2c8a8426ec0b688e9f23221ba24a272fa2a9ea7e792578d2039bc9b2efdfda6c9f217f1d73110552fe8602249ad497885d9340d357ae767e97a42413dfdb4ed48e1821dc8010c3439a13c93de5d74235088c470c5cfe2ad4eaf7bf77716eb4bbf594ab6db66d3ce32af1775ecb7c0ac085339d6554037510ea79706a93d76acf298a3d487f0a8059c47038aff168c03570f6745b1ed8ecf2949aff5240f9fc44b357acf7dcbed8801ed1e6face4d06f30ca09963b8989b9fd4dfa64443698528f0afec0e22d083ea5315370258cc67055fbac9e45b1d55a56d72fb4614f66b299a197514639488b8d00e9589dee407e6bc0527f7878ea11db206902b8c760bbd4ad835f05601df5a605d2f16a0056664114eef2d271709d215a8a6a26fc779d62c8c647f46ca20036d87740b11e4e94980ec49235f4cd7a5230f1388558414e716b285bbd72ebddc6b931089aa25f51347f069004ead2c862837c2179106613f374ef80188af449ac5e02989e2f6f8015fd82194d0834818272fc9bd1f44dee33a15e4dfb6c4b8cc7833ac4d7bfeef9d72557698645ff850f21957ce31894d8a373b793a7f5ac11b86c5852410d8fd562bcfcd5c096c67614c86138fc012bd81f2508eb64107d77d8a8b15ab11e3b168af45d0e4c92a438140f64b8018c4380a82f4e025910183b55bf338f9a197b70a07b2f3fb2b6ca85b6cb9ed6535f5070d3f4ac26c02ca37914e386c5ac235dde00b4828f60a5e6048efb5df80f118b513d8e1fbc817dccef8d505adeb34fd25aa8ab461493daa7dc390a35d7d1483c2a98425da89c0164dc8e7189fc68cd99bd2023bdd370339605ed01d1a5eb8f734119ddc17550ba73bbbb94a436461c83603e911bd7126f17158268f930969bd638732cee594b5e5e6369e39446481b6dd3c868ae94c8e3d4350709c478c28cad37da5942206a927a38274bb474d9573be46068e47d6389a2fac03463cf692d584f2ead72d83c9364f9252b3d4defbdae342c58fb5e2b9b618b1e6fae5b9827ca2eae2dc9e4fff5974180189a64cf8e8f9b90107500f0e7df428504b4579e3addc7a61b4bac0b9f3ecb72d43b4abb23cf803bdd8ae7b049e5a0c60f47cbfc4576ede9fe7564bd68e48b35e16b8385d581e14ce92c656d56d723c6bd04bb2d1a026cfb40fc8d4ddc6634dd2262d2c511c6a7ebebc2d620871240fdf77442c4c8886e6ba382c2348e283c0bc0f23ca641f5b45507cf94e6c158941645feca32bebae52904d91043b5704eedfaa8ab4fe42f6e4738bf244e18d8b0935b1b1a9e8a6ade3ef0c36c07b4c19aee38115e1b21dde1b7e1ea460b3d5bdcbba36d2e853f6b2e5850e8fc0757d24f58c3cd02ffd8ae6e4cb0c6c0e07015e66b22c70f423cabe1d68aa6f7cb7728280f5934861a8620a25306974f2afe7ba66216947d7c6366330e48a41df59cf997aedd56f6652e0f4083a3f00b42d2155394d30d384ce6fceea544c8eff82dc1be497869f8ea385b00e1460dc1f661a1f99b9a9a6d0fc9562a119bec867585922ce2fa4c9fd5a98ba2e72a7fae4318611c007bf9b63215829a9b98118203c300272383bd206522a78922ed33e3681b93b73869b8014d3192334375c45112b3b0e5e57123b21a051863906f186cebea92a95822d17af38b0fc8b1a5e05c25b2f566211d5783e738488a02fbc434a09dbaae9bc0defcee8e63f7be78573a017ef8167060d9b34b08a0aabf7427fb6b1f6d55b852f4639ed511219b3b09121e3ed37fca0068102bb00f734a841f6edb9fac2f31d4d2f612c7befbfb962702e2a437a3f2178a6ed5b747c79bf2c507a69797b9cc12acc023be7e3dedf67b2d9fa7cb3b7ed221fcf5fb1a2846a1a2f48a59b8e02df8d30220b5660a2eaa2a0cb78ea2221136fe6afb9f64e73a869bdd6e54c717319752ebd9b27032bd32d78a4e82e4d3f13bc6b4da0195bd77267fc1cce864c7366a4fb965db0f90879751f14c4ca6c999a3ec3dd7cf13de1d6fda31a8ead677a2e92c51cd1c7114a38dfd6649511f6fccbbf5978cba33fbb3737c00e337f2f25e955f1c4c70a6b32e85bef8c3c8dac56e8efc843ee442b8ff8e0d3dfb59130f5c6f2b0c7105eec9ae99856ab0dc6d5b5061fd4348ce44595a5a5f582bf7ef67dae51a069b958e4e640ef127229c399b684332ed17f0a975dde5dc323f3d81f3475f450fad40e6a01884eecc5f79e7f07c9914ab99d12ccaedb3b65c9db48e375d46e26439a0ddf0b3ec996d6bb382c83a627eee884057b911c5f9540a32340538a5b37acd62d2722fdea3907967ec76f4888db71ae8f2f4d5ae3d1a5c64d578a7fe73139bd6ef3b01401577ee8da7ad3fa06339f1c1dbf0d695594852ed4542633311fb062ef9247909f650b73a16b872ef8802fb58be583e233c407eaa6e1febc57227ac0e54cf93c5f67fc4e35e16761bb6c53ff3f9c9a1616826135680132e27904ab6d017862ec3df20f0ac3ff8807f22451189687f39c70670554386c67e22dbf1ce5796f6ff3ab6840b205d11843269023fe31f9049284291c5dc4bd55c4640217c7be767ee3420deb03854f253211391184eeaa6153f7f5aeccccf9f4270fdb381abf3c705f7c6d49a71335838c6560d1449142775d35b740d18e3b49c0c5891b6473c534f38c8dbf842d5271cc2148832152a6e64f4e64a281121b888a148b1759826dfea51dbddc2289f544ac9fb690eb5ff36dca434a0d1a76ed4a613a283ee58cc099a00a110d6f5105778629d0d9a6b1534aa15e665a57f52484fc4db62b56b8a7c8a16ae8ac3637e5f5bb2794c2841ccccf51287c36828ab9580c5d51ca04e848161f352b473ba1f19b61a656819c9af34f509f5870ac724e1e1acd1ef61829e0c0c362e4fc274b2528173b968ab02524a6a7b3b99bcfe13bca7e44fb572e6974d160720055a9fa2ba6459cb7e05bf33e6f6fc721c37c347b0617e2d84960718993f9aaa30375a271f0040b44581c5044d22654ff1cc8ad80e3e52cdf2a3a397783567fa7e1146b44bf8cffa70815fbd1a382c6b07197a351c8662d2c1c918b542f253c145c30f019d529d4de183a2631493a1ad79915060fd9a2d2e350aeba6b3227512a054546fa83625012bc44512ddcf9455ac430bfb48fd2cdd6b6f6ddd45134ea560cc91f647d0dd7bf54ba860602ac8300bee98db255ecfc61423177cce0c0b8a75510fd6eb35e4ffc7dd7c3f5a16ba3ba5a2b9fd834dc8166c9613ee293eec59adc2218096d06aafcc481fdbdc304877adf930939e17f39a657700d1e51060fbff7d1b148ad75da98ea96caf38af7e2e345cdbb3d1e2f4a3814e1c4562a9d51c63c976bbc73084c33f0eff865161450bff73bd20a542dc32839c18bb0388d9ea5b11299b5d40a7550cd5c334e1a178f9bf5a5d1c109239f076eb68c7ab4e590a1b406d6c883e99f3eb10b4beca8172aeae1293af440e4f50ce8c776a690b597648eac5a998c4f13a427e1e131c867eea1fb937090cb48fb6b8720198611697704eee1832170b11b5108199dc4239f998ce71ee497ee9188ef18e71884ab106a5f3348eec26ef5a38d5ca234d597340ac5b1dbfe47dfed768ed1faa86da5bb8ca129bb21075e5ead5b1d7ac48983e2451fe2c1469cf5aaccc6438d29c66f3ded33b107890ef509140c2a743ccc7f89723642829b0954fac7a4adc2eee102b0232a1ee7bf469eb475cbd4bfe513b6b9e5d262aed589d74027324c2ac0c93888f94cd73250fa219fb44dd85ef62257fc373a65925e542428f5dc8f26c114ae9c17d545ffd17816a5db7f6361f4ebda8c17642df881ecd076b1e8af2284dfe652ca2e50839b3b085c294d29491c58cce5b4a42d2c3d4e7eb91e3dee61697488481fcfc666d8301dbafff38172f1bd18e819f89c823", 0x1000}, {&(0x7f0000002180)="ddd37f2836dbcf96fb3f5cdd738c9c1c36f91293f1851bec5f7f3743948c87531d8f42c071d670cf85e101af8d671ba200022d333187566eb0640d1d96fa0da2c356451fb5f15be6e3851e8f225c39add6a1180c9833c72f24eac2d3eb9eeebe17a663da2412d8d3820d7474ff14e6794f7458c61c8804cb66a7", 0x7a}, {&(0x7f0000002200)="ff413202b4f2d139278f27c44b1f47aa84290723cebb449d893cdc003d8efe07c42796b361bcde56d473867ac3f0c26dafbda0eb1d0734a1a4c0c817f6d92f12cefa750ede06127b81f893c4243fb99b504f51caaa2d89797aae43702b15a228dff58cb74531ea50944d66b8b65c6c6d21148f409db8a11bf738c07d405759837e153acc26eba1dfdb6a2b999de0f734ac74526dc8e333e7015d4144a951ef8db89aeb6d058689fd5a917562a76afded2d50788e600d61d48e5defbaa59a38b9991caa59b8752ecc939eeddeff52264fae051e58d3d7defbf72b557fb1f70dd9a145523cc7308994e3e5cdd4", 0xec}], 0x8, &(0x7f0000002cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x36d25e20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0xe0}}, {{&(0x7f0000002dc0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000003180)=[{&(0x7f0000002e00)="533784ab100d66f9bdce66fc7af463ffa9b906d023051f8bf4470ea7c89912320dce0256e267ea444465bd3d4ffd7a500bf521ae4d224aaad8d9d949", 0x3c}, {&(0x7f0000002e40)}, {&(0x7f0000002e80)="f4fd9b3f6f2502f54c7789f560704d80e778665e259bbc33fbb48186c8d1a8a108293bf538f219c733a1010f7deda44e30299256fb2e2c769f37c78f09a1db61b952b96ee3fbaf2b17903c524b212a4c3d8bcdcbcbd0183707709495482353d687b4c705eb1cfb3e7af6b8", 0x6b}, {&(0x7f0000002f00)="ff89912a3c2a12208d5ce87f75e62eea02104a78ad91b40398b1ec378f246e1444b31df999b34c8171bf24186919885c737e8c8db3c5c4bc0ef7d5855d7c316c516d00995f9fee1c17ba6bbacc2a7a57e061bd8de281544a9c0087511c79cef7e4f12815a2db33ff0226359a3d4215556aad043b57e73ccca007526b3b75eda867c72505e6471bc10fab3cdda6b9cfbe14dbd7c8bde60dd9abf4c5d982382cfdc76178ee4a2492e6d9865cb9487c187c21ad80228d22b872c2f55bd2f28e5e30c618bc88449ba64d45673380e2e3b9b28551f4742301ec295242e9c38ec3a688774a3c7bbbb19d44e645b9fb9c3e0dd99359f2ca3839bed9", 0xf8}, {&(0x7f0000003000)="618370c01725aafe7cc7a9dc40a8ec4680ffa8f43b7ee998f1e6410e383f5b581b039e89fe4332772d10ceab65cc765b76d3bf7d0fcead41569b768a1bf2795d0616faf0ebaaade84a7727decde9e501a987514dbad4010c591a57e92c1a4d8234f5c46d29200d70b12396467a2c66e7aaf1b482a07176e825b469aa4036f41f48dba2db2bca7f82b44be9788754dc1896ec99ddebd17703921af8abe0843897c9d0d4eaaf0a5d9b0d308176960027e3a3b0f5757f344b0c89fbb01e4f", 0xbd}, {&(0x7f00000030c0)="d7aeac7cc136277ea428adadacbad09d246c05c16bffc96f9ef02fe0eab203a4837d5c34c4a7a70042966eabc4022c8b7ece69ca1ef36b47d8ba2bd7a03a33bd42f0fcaf5a597ad258285ed47b0dfb8e3ee84c4168b92ed43972ff9cf608db8d47907d969889ae122a48e2703aafdf921fab0c3f6560fc85309cf3c95a90e30797c91f", 0x83}], 0x6}}, {{&(0x7f0000003200)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000004340)=[{&(0x7f0000003240)="43c23162af506243d90c64dbba25cc4a4d43662b49832c77778903cdf7", 0x1d}, {&(0x7f0000003280)="703a6b851d42d89ade2c199d76ce60c8c6538e6f81d900ea1c005a0d886263fe4faa570d367a0fa5867e296176121e062e58d21162310815c39beff263f34b2ccb10c7eb7e8e84cb12968878001c7fec59705d60ae652eb02076eadac119c302e66f3a63d58b64794eb40d3cd99959ad283325cf55e50cf1ef96efe04b3c4c1b49a07f6fbd28a34857b9c7050db7fa67927f6c5a91fc4c12b02797ed06bf0979d008d99d607be0d1977069cd81cc", 0xae}, {&(0x7f0000003340)="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", 0x1000}], 0x3, &(0x7f0000004380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@end, @rr={0x7, 0x13, 0xb3, [@rand_addr=0x64010102, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe7}}], 0xb8}}, {{&(0x7f0000004440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004580)=[{&(0x7f0000004480)="33f18b170a279be64c1cfe589b2d67960b1b1556283434c6095676117ef7c85f0833055b749ca3bd27bdd813e7f4021412cd7bffc5f64b3db3c60d2680a69832eeadb2f9180f0b9a05383a2fca7a4df5063efef99e6c7211fb87284eb713904b1d7c4ca48a9a8c0d43ee9267b66d668a7875ef7800854db49b889e89db5aa420e4c988f4642983aecb439e75900fadff95f7693fa493831ff44862d8ba1881fde5ea7be3fe72fcc23135c7ecd4a0ae00af18e340cb2ca0057dc1c5d5deae5ac897c17da84af421d29d99bcd556", 0xcd}], 0x1}}, {{&(0x7f00000045c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004b40)=[{&(0x7f0000004600)="49d92e677a74ce1ade07e58a5d260263b0ae83ab8a0e0633f9a3566fa18c688072ac39130227e12770c9771078710c2bd61e5d9d891834b43ae9b0df196af5e6e1b8eb42ea355edc4979c6c00218220ab36c340df0a0bfc2279a886dcb3d16d7d90b299f8aaffc84908c0e91422139d5ce377711ea6a4cbb0515d1fc5b4392add6d34674a3fb29e005480b2c281b548cc54e45388fc16ddcf977921f459ee8278c5f9efd0be21873e9ea674a", 0xac}, {&(0x7f00000046c0)="e554bdf72f2a76cf872fb434cec6b03d6cd6dcdb40c9ef60422e2cd975b911603ca42a00cf865ef66136836c7798fe04b2f8562b34e96f77f6405895626bcc583acd5a3e3e71fd13d59b43bdbe3bdb31bdfa5e4b26919e7638af02a803950449fa4521a3df9a58c4", 0x68}, {&(0x7f0000004740)="efc551e45d8e900e4fd29cbb0e3fc3708e01502a0a0cc1cae3165008d7963737ca7887055972990e7b2368470cf588a436ab864daa6042e720e083934fb42fc114ae697aee696fea7162c1d47a300637f10bc7068202937c84a69f6c4b4cfc2a0602174f887419be04aa03758257e3a0fb1e18599b2eda3d6a5190b8515214390f15839f2cd3838dad4e6c941de1789d34b9dd", 0x93}, {&(0x7f0000004800)="1c8e73b0cb86e1dd6a35281b105f31e88cedefe5dcdc6fe7963b4f3a0601df08e623d2e17fc8e9feaea13ed5fce15f174f34751e4cd30281fcc391af662b65bb1f5fe1a4aad9e8777b8d0d31ea09563494717a2207faf277ff1ff28901d951c2cca85de01dfade1acb32229d4cf7dd0312c61e89ca153bc3ef7c5620fa18d1312f3f0ffeea80fcd96b63750cc216ffe9ba1c937ad7cdb0218b590a671243dbafee128b87d0016ed3658592ea819ffaf33a714f9a5552ae2dbb154b71d56cde9f17f295fb70c80874d45ca792982f86f4", 0xd0}, {&(0x7f0000004900)="87cd8193bc15733b7f74237a5e93775b8dc3382abc40948015880e3f7ce6c67f5487ef959bcbdbfa122da5aae040b89b9eee2b56457b010a00f7f3f58bdb452efd5fc70a726979c76a3c4a35ff2003ffd950299875fd6737aa7d98aeb6dc2d9875dda8a9ee47bacd66f0516e2566956d05dfb9affcf88ee3d64e4f53f21abd5cec86c24dd262e2d75e3c52efabf18c", 0x8f}, {&(0x7f00000049c0)="d781212c33edb8393f45279ea8e827d07e3c0d47a5a7dbaead34822e1396a5e7c17771465cf4ef1fffcbc9885b74f86d61763c3201c5e0d81b50cc44f85b0577eaa24c64481845434300d50d3a391c26463a1dd50e8927efca993f15de51e9f319cf2ec1abda9d5632fa6fad66c432b77f07cbe5625ef7bda23b48bf92e3e08fa417cbf4e0ecc284cd96146d0e9ac4d5cf2db26177400762", 0x98}, {&(0x7f0000004a80)="6306a603e8d6a4c45de08a648c1c0f19cab11a5d73695c5d7c6d0cd2067af6890860ecce6aaa13069c707bdebac4bf4ebe24ae024fd2807b15f886500319c689f3467e292e2efbbe2857d051051d24f1b314e3d99afd9a28992c47c0f3001f6f818e6e2773689fb7078afde8be6d3b7c99e0727d8207bf185d7b6ef4ba19472c4b70", 0x82}], 0x7, &(0x7f0000004bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x8, 0x0) [ 301.812154][T10849] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 301.822820][ T22] audit: type=1326 audit(1632091522.192:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10844 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8840cb739 code=0x0 [ 301.824312][T10848] loop5: detected capacity change from 0 to 224 [ 301.859956][T10849] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 301.871241][T10849] FAULT_INJECTION: forcing a failure. [ 301.871241][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 301.883890][T10849] CPU: 0 PID: 10849 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 301.892631][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.902753][T10849] Call Trace: [ 301.906022][T10849] dump_stack_lvl+0xd6/0x122 [ 301.910599][T10849] dump_stack+0x11/0x1b [ 301.914751][T10849] should_fail+0x23c/0x250 [ 301.919191][T10849] ? fib_table_insert+0x468/0x10b0 [ 301.924326][T10849] __should_failslab+0x81/0x90 [ 301.929239][T10849] should_failslab+0x5/0x20 [ 301.933724][T10849] kmem_cache_alloc+0x4f/0x300 [ 301.938509][T10849] fib_table_insert+0x468/0x10b0 [ 301.943425][T10849] fib_add_ifaddr+0x502/0x690 [ 301.948086][T10849] ? skb_put+0xb9/0xf0 [ 301.952136][T10849] fib_inetaddr_event+0xb5/0x210 [ 301.957051][T10849] blocking_notifier_call_chain+0x73/0xf0 [ 301.962845][T10849] __inet_insert_ifa+0x4fd/0x5e0 [ 301.967790][T10849] ? inetdev_event+0x73d/0xad0 [ 301.972549][T10849] inetdev_event+0x8ee/0xad0 [ 301.977216][T10849] raw_notifier_call_chain+0x53/0xb0 [ 301.982480][T10849] __dev_notify_flags+0x1d3/0x3b0 [ 301.987495][T10849] dev_change_flags+0xa2/0xc0 [ 301.992184][T10849] do_setlink+0x810/0x2410 [ 301.996580][T10849] ? __nla_validate_parse+0x108f/0x1760 [ 302.002144][T10849] ? __nla_parse+0x3c/0x50 [ 302.006536][T10849] rtnl_setlink+0x257/0x2a0 [ 302.011025][T10849] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 302.016097][T10849] rtnetlink_rcv_msg+0x711/0x7c0 [ 302.021043][T10849] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 302.026840][T10849] ? __wake_up+0x8d/0xc0 [ 302.031072][T10849] ? __d_rehash+0x125/0x180 [ 302.035562][T10849] ? __d_add+0x3bf/0x490 [ 302.039909][T10849] ? should_fail+0x2a/0x250 [ 302.044396][T10849] ? avc_has_perm_noaudit+0x1c0/0x270 [ 302.049838][T10849] ? rhashtable_jhash2+0x13a/0x1a0 [ 302.054986][T10849] ? jhash+0x2b0/0x2b0 [ 302.059050][T10849] netlink_rcv_skb+0x14e/0x250 [ 302.063888][T10849] ? rtnetlink_bind+0x60/0x60 [ 302.068552][T10849] rtnetlink_rcv+0x18/0x20 [ 302.072958][T10849] netlink_unicast+0x5ec/0x6b0 [ 302.077774][T10849] netlink_sendmsg+0x6ea/0x7d0 [ 302.082522][T10849] sock_write_iter+0x1a3/0x200 [ 302.087426][T10849] do_iter_readv_writev+0x2de/0x380 [ 302.092717][T10849] do_iter_write+0x192/0x5c0 [ 302.097385][T10849] do_writev+0x210/0x440 [ 302.101733][T10849] ? vfs_write+0x61a/0x900 [ 302.106155][T10849] __x64_sys_writev+0x41/0x50 [ 302.110894][T10849] do_syscall_64+0x44/0xa0 [ 302.115373][T10849] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 302.121302][T10849] RIP: 0033:0x7f5cdb0a4739 [ 302.125745][T10849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 302.145331][T10849] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 302.153774][T10849] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 22:45:22 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 302.161731][T10849] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 302.169706][T10849] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 302.177677][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.185648][T10849] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:22 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:22 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:22 executing program 1 (fault-call:2 fault-nth:33): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 302.226279][T10875] loop5: detected capacity change from 0 to 224 22:45:22 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 302.270172][T10884] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 302.279188][T10881] loop5: detected capacity change from 0 to 224 [ 302.286568][T10884] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 302.296335][T10884] FAULT_INJECTION: forcing a failure. [ 302.296335][T10884] name failslab, interval 1, probability 0, space 0, times 0 [ 302.308973][T10884] CPU: 0 PID: 10884 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 302.317731][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.327784][T10884] Call Trace: [ 302.331047][T10884] dump_stack_lvl+0xd6/0x122 [ 302.335697][T10884] dump_stack+0x11/0x1b [ 302.339893][T10884] should_fail+0x23c/0x250 [ 302.344287][T10884] ? fib_insert_alias+0x168/0x7a0 [ 302.349367][T10884] __should_failslab+0x81/0x90 [ 302.354614][T10884] should_failslab+0x5/0x20 [ 302.359132][T10884] kmem_cache_alloc+0x4f/0x300 [ 302.363881][T10884] fib_insert_alias+0x168/0x7a0 [ 302.368773][T10884] ? kmem_cache_alloc+0x20d/0x300 [ 302.373794][T10884] ? fib_table_insert+0x468/0x10b0 [ 302.378885][T10884] fib_table_insert+0x564/0x10b0 [ 302.383804][T10884] fib_add_ifaddr+0x502/0x690 [ 302.388524][T10884] ? skb_put+0xb9/0xf0 [ 302.392661][T10884] fib_inetaddr_event+0xb5/0x210 [ 302.397584][T10884] blocking_notifier_call_chain+0x73/0xf0 [ 302.403295][T10884] __inet_insert_ifa+0x4fd/0x5e0 [ 302.408300][T10884] ? inetdev_event+0x73d/0xad0 [ 302.413053][T10884] inetdev_event+0x8ee/0xad0 [ 302.417628][T10884] raw_notifier_call_chain+0x53/0xb0 [ 302.422919][T10884] __dev_notify_flags+0x1d3/0x3b0 [ 302.427922][T10884] dev_change_flags+0xa2/0xc0 [ 302.432583][T10884] do_setlink+0x810/0x2410 [ 302.436988][T10884] ? __nla_validate_parse+0x108f/0x1760 [ 302.442531][T10884] ? __nla_parse+0x3c/0x50 [ 302.446950][T10884] rtnl_setlink+0x257/0x2a0 [ 302.451506][T10884] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 302.456511][T10884] rtnetlink_rcv_msg+0x711/0x7c0 [ 302.461451][T10884] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 302.467247][T10884] ? __wake_up+0x8d/0xc0 [ 302.471624][T10884] ? __d_rehash+0x125/0x180 [ 302.476128][T10884] ? __d_add+0x3bf/0x490 [ 302.480472][T10884] ? should_fail+0x2a/0x250 [ 302.484958][T10884] ? avc_has_perm_noaudit+0x1c0/0x270 [ 302.490315][T10884] ? rhashtable_jhash2+0x13a/0x1a0 [ 302.495407][T10884] ? jhash+0x2b0/0x2b0 [ 302.499457][T10884] netlink_rcv_skb+0x14e/0x250 [ 302.504200][T10884] ? rtnetlink_bind+0x60/0x60 [ 302.508889][T10884] rtnetlink_rcv+0x18/0x20 [ 302.513285][T10884] netlink_unicast+0x5ec/0x6b0 [ 302.518032][T10884] netlink_sendmsg+0x6ea/0x7d0 [ 302.522797][T10884] sock_write_iter+0x1a3/0x200 [ 302.527587][T10884] do_iter_readv_writev+0x2de/0x380 [ 302.532800][T10884] do_iter_write+0x192/0x5c0 [ 302.537372][T10884] do_writev+0x210/0x440 [ 302.541730][T10884] ? vfs_write+0x61a/0x900 [ 302.546140][T10884] __x64_sys_writev+0x41/0x50 [ 302.550826][T10884] do_syscall_64+0x44/0xa0 [ 302.555235][T10884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 302.561188][T10884] RIP: 0033:0x7f5cdb0a4739 [ 302.565586][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 302.585234][T10884] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 302.593640][T10884] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 302.601665][T10884] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 302.609634][T10884] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:23 executing program 1 (fault-call:2 fault-nth:34): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 302.617668][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.625699][T10884] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 302.642735][T10892] loop5: detected capacity change from 0 to 224 22:45:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="6a6f8304664c6c5f6465763d3078303030303030303030303030303030302c6772706a71756f74613d2e2f66696c65302c00"]) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x6, &(0x7f00000004c0)=[{&(0x7f00000000c0)="d6884a6dbc351ab481a30002ed43574105f8a2799d4888fd49635508ad51269d", 0x20, 0x6}, {&(0x7f0000000240)="bf2e03d4623238e2df7c7383cc6fb9151c9a41042344a5b7c0ce110cab4a9db1c634fa7baaaa6652827c83af8a6de57f0f057749558f19593ca32e621ac17d80f6be9b8b389e930b459454392c2847587c17e30404849a6b217bbd8df6d68db30c0629ff0ffa3e232d2b7b8079b72004e77c08d5", 0x74, 0x9}, {&(0x7f00000002c0)="1868adadefe5e08642a3577472182d1d707fbc2745ef0ab2e7eb00ae111df20f60057e1c9aa93ca45c8bed99606805a65fa12212371812caa2aa24fbb5e409c1e9283234c7884d34c38e36f4d256194a9ab06afa125e2c211edc54742ec7251fd363a3e3befd4c70a9b5d5e46b2bc43f6c6564074a79b8be42ea106185cee5e63522a3", 0x83}, {&(0x7f0000000140), 0x0, 0xbb9}, {&(0x7f0000000380)="776e4857e5747da7308589c0257b159c72b46a684e8eec549aabed0d75598942cd97e9e4dd21f2f209aed431549fca051a434c2ee5ab2a3a88d2fcc2c3f2340606554c8f38db54a0d024f171c61e8e9bf05b52a2c06e560b7a224cc696f06de36b4e549ad8a2101eb5118a6e136eee0c037a5a535f5d895e2f4e7a9e25f8a3a8b1", 0x81, 0x60000000000000}, {&(0x7f0000000440)="6bdc3efd8be862f06cf3e32656704bda42e94807b0aca2779d8d187431b2d59611485c8c5f2cde10f95840194ff0d82d1d5b252569003b1d9ecb56ceafb0dc22a2e7e5a849a4d6decaa33f5bb5d3844914db6169521aab9dcde846532d36a1c57a69ec606992", 0x66, 0xfff}], 0x1800, &(0x7f0000000580)={[{@quota}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0xc}}, {@subj_type}, {@pcr={'pcr', 0x3d, 0x18}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*,'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) setxattr$trusted_overlay_upper(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940), &(0x7f0000000980)={0x0, 0xfb, 0x81, 0x3, 0x8, "61c904ad714db2f3b052b693c8353520", "b6ec90c0d90f9504cbadbf73a953e4b044890e21a58014f906b029b9a5142048cd8172122d21fc50fa938b9e23060e2e2524df3902f8148f87a1eff1dc8551250154b1ec8d212dd806bdf4bf518d3afd539f889febde49a797b03e63a7972a240733a26946af998f932a90a8"}, 0x81, 0x3) r0 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000640)='./file0\x00', 0x1, 0x2, &(0x7f0000000780)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000680)="ce1e650ba51d808584c48ea34a3f430df128095658bd76bd6b76bcb0e19877fe0335d443697e5b48da932e798e2b9d16c6c76244e73ba1bc2f89378d8c877024f2c05c6f2c5673fed369a10e36cce7b6f039b345e3cc03393d2de9f186fc6668eaa42ded6d98e34d49f278632627cb4390b81faabea19b2ba139e6c06e3d2e1cd857e394aa693530f09e5d3df1af95a2a9f8045633a764fff8550dcf3cbdc1f90ccefa0c254d8a5ef39e9adac764333f8c63db473b3e94a5dd8c29d4cb97622931af67ae4848f81a1f3b5578d915b2739867f108e6c62436", 0xd8, 0xe78f}], 0x200041c, &(0x7f00000007c0)={[{@fat=@nfs}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@fat=@errors_remount}, {@nodots}], [{@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '*,'}}, {@uid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, ':{'}}]}) getdents64(r0, &(0x7f0000000880)=""/107, 0x6b) [ 302.652980][ T22] audit: type=1326 audit(1632091523.022:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=10844 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8840cb739 code=0x0 [ 302.667316][T10903] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 302.689276][T10903] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 302.698105][T10903] FAULT_INJECTION: forcing a failure. [ 302.698105][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 302.710727][T10903] CPU: 1 PID: 10903 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 302.719497][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.729555][T10903] Call Trace: [ 302.732832][T10903] dump_stack_lvl+0xd6/0x122 [ 302.737478][T10903] dump_stack+0x11/0x1b [ 302.741677][T10903] should_fail+0x23c/0x250 [ 302.746117][T10903] __should_failslab+0x81/0x90 [ 302.750882][T10903] ? fib_insert_alias+0x295/0x7a0 [ 302.755920][T10903] should_failslab+0x5/0x20 [ 302.760505][T10903] kmem_cache_alloc_trace+0x52/0x320 [ 302.765792][T10903] ? kmem_cache_alloc+0x20d/0x300 [ 302.770820][T10903] ? fib_insert_alias+0x168/0x7a0 [ 302.775843][T10903] fib_insert_alias+0x295/0x7a0 [ 302.780688][T10903] ? kmem_cache_alloc+0x20d/0x300 [ 302.785710][T10903] ? fib_table_insert+0x468/0x10b0 [ 302.790831][T10903] fib_table_insert+0x564/0x10b0 [ 302.795827][T10903] fib_add_ifaddr+0x502/0x690 [ 302.801346][T10903] ? skb_put+0xb9/0xf0 [ 302.805440][T10903] fib_inetaddr_event+0xb5/0x210 [ 302.810381][T10903] blocking_notifier_call_chain+0x73/0xf0 [ 302.816136][T10903] __inet_insert_ifa+0x4fd/0x5e0 [ 302.821076][T10903] ? inetdev_event+0x73d/0xad0 [ 302.825880][T10903] inetdev_event+0x8ee/0xad0 [ 302.830508][T10903] raw_notifier_call_chain+0x53/0xb0 [ 302.835801][T10903] __dev_notify_flags+0x1d3/0x3b0 [ 302.840827][T10903] dev_change_flags+0xa2/0xc0 [ 302.845486][T10903] do_setlink+0x810/0x2410 [ 302.849966][T10903] ? __nla_validate_parse+0x108f/0x1760 [ 302.855505][T10903] ? __nla_parse+0x3c/0x50 [ 302.859900][T10903] rtnl_setlink+0x257/0x2a0 [ 302.864384][T10903] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 302.869500][T10903] rtnetlink_rcv_msg+0x711/0x7c0 [ 302.874425][T10903] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 302.880285][T10903] ? __wake_up+0x8d/0xc0 [ 302.884510][T10903] ? __d_rehash+0x125/0x180 [ 302.889011][T10903] ? __d_add+0x3bf/0x490 [ 302.893278][T10903] ? should_fail+0x2a/0x250 [ 302.897845][T10903] ? avc_has_perm_noaudit+0x1c0/0x270 [ 302.903196][T10903] ? rhashtable_jhash2+0x13a/0x1a0 [ 302.908352][T10903] ? jhash+0x2b0/0x2b0 [ 302.912400][T10903] netlink_rcv_skb+0x14e/0x250 [ 302.917162][T10903] ? rtnetlink_bind+0x60/0x60 [ 302.921822][T10903] rtnetlink_rcv+0x18/0x20 [ 302.926234][T10903] netlink_unicast+0x5ec/0x6b0 [ 302.930979][T10903] netlink_sendmsg+0x6ea/0x7d0 [ 302.935721][T10903] sock_write_iter+0x1a3/0x200 [ 302.940481][T10903] do_iter_readv_writev+0x2de/0x380 [ 302.945659][T10903] do_iter_write+0x192/0x5c0 [ 302.950302][T10903] do_writev+0x210/0x440 [ 302.954609][T10903] ? vfs_write+0x61a/0x900 [ 302.959010][T10903] __x64_sys_writev+0x41/0x50 [ 302.963718][T10903] do_syscall_64+0x44/0xa0 [ 302.968120][T10903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 302.974000][T10903] RIP: 0033:0x7f5cdb0a4739 [ 302.978410][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 302.997996][T10903] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 303.006400][T10903] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 303.014366][T10903] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 303.022318][T10903] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 303.030270][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.038249][T10903] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:25 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:25 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x4}, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x81, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x84, 0x4) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80000, 0x110, 0x2}, 0x18) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)=0x3, 0x4) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 22:45:25 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000cc0)={{r3, r4+60000000}, {r5, r6+10000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x20000000005) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x11, r7, 0x28a70000) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x13, 0x0, 0x1000, 0x8, 0x16, "e5e929a27e7e88ea130105217eac81ef2a6fde"}) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r8, r8, 0x0, 0x8080fffffffe) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000200)={0x0, 0x4, @start={0x0, 0x1, "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", "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"}, [0x8, 0x7fffffff, 0x2, 0xc01, 0x0, 0xffffffffffff439c, 0x4, 0x0, 0x5, 0x1, 0x1, 0x80, 0x9, 0x80000001, 0x5, 0x5, 0x81, 0x9, 0x7, 0x6, 0x0, 0xfff, 0x1cc2, 0x2, 0x1, 0x6, 0xfffffffffffffede, 0xb, 0x0, 0x1000, 0x5, 0x7fffffff, 0x1, 0xb256, 0x9, 0x100, 0x3, 0x2abe, 0x9, 0xfff, 0x7ff, 0x2, 0x6, 0x7fff, 0x80, 0xff, 0x399be0ee, 0x4, 0x1, 0x100, 0x0, 0x4, 0x5, 0x10001, 0xfd, 0x7, 0x40, 0xfffffffffffff33e, 0x6, 0x62, 0x3, 0x848, 0xc5, 0x7]}) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r11, @ANYBLOB='\x00\x00\x00\x00']) r12 = getpid() tkill(r12, 0x14) 22:45:25 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:25 executing program 1 (fault-call:2 fault-nth:35): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:25 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:25 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 304.840611][T10931] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 304.841959][T10928] loop5: detected capacity change from 0 to 224 [ 304.855998][T10931] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 304.870546][T10931] FAULT_INJECTION: forcing a failure. [ 304.870546][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 304.883199][T10931] CPU: 1 PID: 10931 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 304.891956][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.902334][T10931] Call Trace: [ 304.905645][T10931] dump_stack_lvl+0xd6/0x122 [ 304.910250][T10931] dump_stack+0x11/0x1b [ 304.914389][T10931] should_fail+0x23c/0x250 [ 304.918792][T10931] __should_failslab+0x81/0x90 [ 304.923599][T10931] should_failslab+0x5/0x20 [ 304.928101][T10931] kmem_cache_alloc_node+0x61/0x2c0 [ 304.933277][T10931] ? __alloc_skb+0xed/0x420 [ 304.937835][T10931] __alloc_skb+0xed/0x420 [ 304.942228][T10931] rtmsg_fib+0xa1/0x200 [ 304.946428][T10931] fib_table_insert+0xaaf/0x10b0 [ 304.951347][T10931] fib_add_ifaddr+0x502/0x690 [ 304.956013][T10931] ? skb_put+0xb9/0xf0 [ 304.960062][T10931] fib_inetaddr_event+0xb5/0x210 [ 304.965046][T10931] blocking_notifier_call_chain+0x73/0xf0 [ 304.970744][T10931] __inet_insert_ifa+0x4fd/0x5e0 [ 304.975707][T10931] ? inetdev_event+0x73d/0xad0 [ 304.980451][T10931] inetdev_event+0x8ee/0xad0 [ 304.985100][T10931] raw_notifier_call_chain+0x53/0xb0 [ 304.990366][T10931] __dev_notify_flags+0x1d3/0x3b0 [ 304.995402][T10931] dev_change_flags+0xa2/0xc0 [ 305.000066][T10931] do_setlink+0x810/0x2410 [ 305.004480][T10931] ? __nla_validate_parse+0x108f/0x1760 [ 305.010056][T10931] ? __nla_parse+0x3c/0x50 [ 305.014450][T10931] rtnl_setlink+0x257/0x2a0 [ 305.018930][T10931] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 305.023962][T10931] rtnetlink_rcv_msg+0x711/0x7c0 [ 305.028884][T10931] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 305.034690][T10931] ? __wake_up+0x8d/0xc0 [ 305.039113][T10931] ? __d_rehash+0x125/0x180 [ 305.043607][T10931] ? __d_add+0x3bf/0x490 [ 305.047935][T10931] ? should_fail+0x2a/0x250 [ 305.052543][T10931] ? avc_has_perm_noaudit+0x1c0/0x270 [ 305.057897][T10931] ? rhashtable_jhash2+0x13a/0x1a0 [ 305.062991][T10931] ? jhash+0x2b0/0x2b0 [ 305.067052][T10931] netlink_rcv_skb+0x14e/0x250 [ 305.071862][T10931] ? rtnetlink_bind+0x60/0x60 [ 305.076534][T10931] rtnetlink_rcv+0x18/0x20 [ 305.080955][T10931] netlink_unicast+0x5ec/0x6b0 [ 305.085699][T10931] netlink_sendmsg+0x6ea/0x7d0 [ 305.090443][T10931] sock_write_iter+0x1a3/0x200 [ 305.095248][T10931] do_iter_readv_writev+0x2de/0x380 [ 305.100434][T10931] do_iter_write+0x192/0x5c0 [ 305.105108][T10931] do_writev+0x210/0x440 [ 305.109335][T10931] ? vfs_write+0x61a/0x900 [ 305.113730][T10931] __x64_sys_writev+0x41/0x50 [ 305.118385][T10931] do_syscall_64+0x44/0xa0 [ 305.122799][T10931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 305.128676][T10931] RIP: 0033:0x7f5cdb0a4739 [ 305.133133][T10931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 305.152780][T10931] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 305.161173][T10931] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 305.169123][T10931] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 305.177099][T10931] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:25 executing program 1 (fault-call:2 fault-nth:36): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:25 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 305.185056][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.193005][T10931] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 305.228082][T10949] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:25 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 305.240607][T10949] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 305.252852][T10949] FAULT_INJECTION: forcing a failure. [ 305.252852][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 305.265554][T10949] CPU: 1 PID: 10949 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 305.274403][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.284482][T10949] Call Trace: [ 305.287758][T10949] dump_stack_lvl+0xd6/0x122 [ 305.292357][T10949] dump_stack+0x11/0x1b [ 305.296513][T10949] should_fail+0x23c/0x250 [ 305.301016][T10949] __should_failslab+0x81/0x90 [ 305.305147][T10960] loop5: detected capacity change from 0 to 224 [ 305.305777][T10949] should_failslab+0x5/0x20 [ 305.316489][T10949] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 305.322214][T10949] ? __kmalloc_node_track_caller+0x30/0x40 [ 305.328022][T10949] __kmalloc_node_track_caller+0x30/0x40 [ 305.333638][T10949] ? rtmsg_fib+0xa1/0x200 [ 305.337956][T10949] __alloc_skb+0x187/0x420 [ 305.342373][T10949] rtmsg_fib+0xa1/0x200 [ 305.346595][T10949] fib_table_insert+0xaaf/0x10b0 [ 305.351516][T10949] fib_add_ifaddr+0x502/0x690 [ 305.356247][T10949] ? skb_put+0xb9/0xf0 [ 305.360308][T10949] fib_inetaddr_event+0xb5/0x210 [ 305.365236][T10949] blocking_notifier_call_chain+0x73/0xf0 [ 305.370963][T10949] __inet_insert_ifa+0x4fd/0x5e0 [ 305.375901][T10949] ? inetdev_event+0x73d/0xad0 [ 305.380666][T10949] inetdev_event+0x8ee/0xad0 [ 305.385238][T10949] raw_notifier_call_chain+0x53/0xb0 [ 305.390504][T10949] __dev_notify_flags+0x1d3/0x3b0 [ 305.395514][T10949] dev_change_flags+0xa2/0xc0 [ 305.400193][T10949] do_setlink+0x810/0x2410 [ 305.404726][T10949] ? __nla_validate_parse+0x108f/0x1760 [ 305.410278][T10949] ? __nla_parse+0x3c/0x50 [ 305.414762][T10949] rtnl_setlink+0x257/0x2a0 [ 305.419267][T10949] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 305.424274][T10949] rtnetlink_rcv_msg+0x711/0x7c0 [ 305.429199][T10949] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 305.435109][T10949] ? __wake_up+0x8d/0xc0 [ 305.439395][T10949] ? __d_rehash+0x125/0x180 [ 305.443951][T10949] ? __d_add+0x3bf/0x490 [ 305.448182][T10949] ? should_fail+0x2a/0x250 [ 305.452675][T10949] ? avc_has_perm_noaudit+0x1c0/0x270 [ 305.458124][T10949] ? rhashtable_jhash2+0x13a/0x1a0 [ 305.463219][T10949] ? jhash+0x2b0/0x2b0 [ 305.467373][T10949] netlink_rcv_skb+0x14e/0x250 [ 305.472170][T10949] ? rtnetlink_bind+0x60/0x60 [ 305.476943][T10949] rtnetlink_rcv+0x18/0x20 [ 305.481509][T10949] netlink_unicast+0x5ec/0x6b0 [ 305.486334][T10949] netlink_sendmsg+0x6ea/0x7d0 [ 305.491112][T10949] sock_write_iter+0x1a3/0x200 [ 305.495990][T10949] do_iter_readv_writev+0x2de/0x380 [ 305.501270][T10949] do_iter_write+0x192/0x5c0 [ 305.505859][T10949] do_writev+0x210/0x440 [ 305.510086][T10949] ? vfs_write+0x61a/0x900 [ 305.514496][T10949] __x64_sys_writev+0x41/0x50 [ 305.519180][T10949] do_syscall_64+0x44/0xa0 [ 305.523599][T10949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 305.529501][T10949] RIP: 0033:0x7f5cdb0a4739 [ 305.533896][T10949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 305.553658][T10949] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 305.562085][T10949] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 305.570153][T10949] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 305.578104][T10949] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:25 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 305.586054][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.594011][T10949] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:28 executing program 1 (fault-call:2 fault-nth:37): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:28 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) ioctl$SG_IO(r0, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0xd7, 0x1, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f00000004c0)="1db71e8035a2491a29e5922117418bfeb75355158c7840d6bcf5d0122bd820bf9be2e2239deef5b11a4d7d3ece7ffc960cdb872dd1959534eed80af663d1bcb724305d2fc4275e985ee23a1995151657dd1967d7893d395cd55fc3d641acbbc3a4190a554f42d069a46b4e7b43c08bbd822d4bfa26b479240801d8f84291db4f0a725d640e170439f25357fe73a4f62daee2e740299ec7d055c4702a1aac94e7525ceb262acb2b14b5e58e626c2cddb38023ed01f0975bead0f5d7dbd754f38b400a386c43583e9b489f708fb8342ff45e9bd2c5fec217", &(0x7f00000005c0)=""/161, 0x8, 0x9, 0x2, &(0x7f0000000680)}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x3f) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/2, 0x23}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73046a79df58b5b7f938cf30b0a1f4b3cc35a4cb7455834686ea6bf9835926d004b410b24e2ea25bfd9b2aa91d2459bf4126e49c5323a7f9a44e33e2d4b41772981b806747c350e79f03", 0x93}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x29, 0xda, @buffer={0x0, 0xfb, &(0x7f0000000300)=""/251}, &(0x7f0000000140)="5ca519d6bd653a5e56599e588ff9bfe0537f41bc7189050e86a8d3d2b7ae2b953227225979decbfadd", &(0x7f00000007c0)=""/4096, 0x0, 0x0, 0x3, &(0x7f0000000180)}) 22:45:28 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) r6 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) 22:45:28 executing program 4: clone(0xc5014d80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4200, r0, 0x9, 0x100050) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000019540)=""/102387, 0x19000}], 0x3, 0x0, 0xfffffffffffffe65, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ptrace$cont(0x9, 0x0, 0xfffffffffffff800, 0x1) ftruncate(0xffffffffffffffff, 0x8a) r2 = dup3(r1, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000200), 0x3) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x3, 0x1}}}], 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000000)={0x1, 0x101, 0xc0, &(0x7f0000000140)=""/192}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:28 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 307.847497][T10988] loop5: detected capacity change from 0 to 224 [ 307.860311][T10990] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 307.885370][T10990] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 307.893909][T10990] FAULT_INJECTION: forcing a failure. [ 307.893909][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 307.906523][T10990] CPU: 0 PID: 10990 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 307.915350][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.925390][T10990] Call Trace: [ 307.928655][T10990] dump_stack_lvl+0xd6/0x122 [ 307.933281][T10990] dump_stack+0x11/0x1b [ 307.937422][T10990] should_fail+0x23c/0x250 [ 307.941842][T10990] __should_failslab+0x81/0x90 [ 307.946620][T10990] should_failslab+0x5/0x20 [ 307.951108][T10990] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 307.956811][T10990] ? __kmalloc_node_track_caller+0x30/0x40 [ 307.962631][T10990] ? netlink_trim+0x112/0x140 [ 307.967293][T10990] __kmalloc_node_track_caller+0x30/0x40 [ 307.972963][T10990] pskb_expand_head+0xc9/0x920 [ 307.977713][T10990] ? call_rcu+0x261/0x6d0 [ 307.982050][T10990] netlink_trim+0x112/0x140 [ 307.986594][T10990] netlink_broadcast_filtered+0x47/0xb60 [ 307.992281][T10990] ? nla_put+0xd8/0x100 [ 307.996495][T10990] ? fib_nexthop_info+0x3de/0x430 [ 308.001572][T10990] nlmsg_notify+0xcc/0x180 [ 308.005974][T10990] rtnl_notify+0x72/0x80 [ 308.010218][T10990] rtmsg_fib+0x183/0x200 [ 308.014458][T10990] fib_table_insert+0xaaf/0x10b0 [ 308.019435][T10990] fib_add_ifaddr+0x502/0x690 [ 308.024096][T10990] ? skb_put+0xb9/0xf0 [ 308.028177][T10990] fib_inetaddr_event+0xb5/0x210 [ 308.033159][T10990] blocking_notifier_call_chain+0x73/0xf0 [ 308.038889][T10990] __inet_insert_ifa+0x4fd/0x5e0 [ 308.043840][T10990] ? inetdev_event+0x73d/0xad0 [ 308.048607][T10990] inetdev_event+0x8ee/0xad0 [ 308.053182][T10990] raw_notifier_call_chain+0x53/0xb0 [ 308.058456][T10990] __dev_notify_flags+0x1d3/0x3b0 [ 308.063546][T10990] dev_change_flags+0xa2/0xc0 [ 308.068263][T10990] do_setlink+0x810/0x2410 [ 308.072841][T10990] ? __nla_validate_parse+0x108f/0x1760 [ 308.078535][T10990] ? __nla_parse+0x3c/0x50 [ 308.082940][T10990] rtnl_setlink+0x257/0x2a0 [ 308.087544][T10990] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 308.092585][T10990] rtnetlink_rcv_msg+0x711/0x7c0 [ 308.097503][T10990] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 308.103297][T10990] ? kcsan_setup_watchpoint+0x241/0x3f0 [ 308.108843][T10990] ? __d_rehash+0x125/0x180 [ 308.113381][T10990] ? __d_add+0x3bf/0x490 [ 308.117617][T10990] ? should_fail+0x2a/0x250 [ 308.122102][T10990] ? avc_has_perm_noaudit+0x1c0/0x270 [ 308.127458][T10990] ? rhashtable_jhash2+0x13a/0x1a0 [ 308.132631][T10990] ? jhash+0x2b0/0x2b0 [ 308.136684][T10990] netlink_rcv_skb+0x14e/0x250 [ 308.141435][T10990] ? rtnetlink_bind+0x60/0x60 [ 308.146222][T10990] rtnetlink_rcv+0x18/0x20 [ 308.150616][T10990] netlink_unicast+0x5ec/0x6b0 [ 308.155370][T10990] netlink_sendmsg+0x6ea/0x7d0 [ 308.160116][T10990] sock_write_iter+0x1a3/0x200 [ 308.164863][T10990] do_iter_readv_writev+0x2de/0x380 [ 308.170049][T10990] do_iter_write+0x192/0x5c0 [ 308.174740][T10990] do_writev+0x210/0x440 [ 308.179005][T10990] ? vfs_write+0x61a/0x900 [ 308.183406][T10990] __x64_sys_writev+0x41/0x50 [ 308.188081][T10990] do_syscall_64+0x44/0xa0 [ 308.192492][T10990] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 308.198438][T10990] RIP: 0033:0x7f5cdb0a4739 [ 308.203216][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 308.222894][T10990] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 308.231295][T10990] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 308.239336][T10990] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 308.247288][T10990] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 308.255256][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.266060][T10990] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 308.284068][T11004] loop5: detected capacity change from 0 to 224 [ 308.290303][T11015] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; 22:45:28 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:28 executing program 1 (fault-call:2 fault-nth:38): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:28 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:28 executing program 4: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001600)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4}, 0x9) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r0, 0x10000000) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6e2226) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0xe, 0x0, {0x0, 0x0, r0}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x102, 0x4, 0xa}, 0x18) syz_io_uring_setup(0x7e99, &(0x7f0000000140)={0x0, 0x5cca, 0x0, 0x2, 0xed, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x80182, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r8) [ 308.290303][T11015] program syz-executor.0 not setting count and/or reply_len properly [ 308.332055][T11029] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 308.349618][T11029] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 308.364540][T11029] FAULT_INJECTION: forcing a failure. [ 308.364540][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 308.377257][T11029] CPU: 0 PID: 11029 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 308.386027][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.391787][T11039] loop5: detected capacity change from 0 to 224 [ 308.396084][T11029] Call Trace: [ 308.396093][T11029] dump_stack_lvl+0xd6/0x122 [ 308.410262][T11029] dump_stack+0x11/0x1b [ 308.414431][T11029] should_fail+0x23c/0x250 [ 308.418851][T11029] ? kzalloc+0x16/0x20 [ 308.422928][T11029] __should_failslab+0x81/0x90 [ 308.427692][T11029] should_failslab+0x5/0x20 [ 308.432213][T11029] __kmalloc+0x6f/0x350 [ 308.436347][T11029] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 308.442197][T11029] ? __wake_up+0x8d/0xc0 [ 308.446424][T11029] kzalloc+0x16/0x20 [ 308.450361][T11029] fib_create_info+0xdec/0x33c0 [ 308.455193][T11029] ? netlink_broadcast_filtered+0xb41/0xb60 [ 308.461119][T11029] ? fib_nexthop_info+0x3de/0x430 [ 308.466125][T11029] ? nlmsg_notify+0xcc/0x180 [ 308.470698][T11029] ? nlmsg_notify+0x13d/0x180 [ 308.475351][T11029] ? rtnl_notify+0x72/0x80 [ 308.479830][T11029] ? rtmsg_fib+0x183/0x200 [ 308.484224][T11029] fib_table_insert+0x148/0x10b0 [ 308.489158][T11029] fib_add_ifaddr+0x64e/0x690 [ 308.493842][T11029] ? skb_put+0xb9/0xf0 [ 308.497958][T11029] fib_inetaddr_event+0xb5/0x210 [ 308.502877][T11029] blocking_notifier_call_chain+0x73/0xf0 [ 308.508578][T11029] __inet_insert_ifa+0x4fd/0x5e0 [ 308.513506][T11029] ? inetdev_event+0x73d/0xad0 [ 308.518301][T11029] inetdev_event+0x8ee/0xad0 [ 308.522885][T11029] raw_notifier_call_chain+0x53/0xb0 [ 308.528207][T11029] __dev_notify_flags+0x1d3/0x3b0 [ 308.533215][T11029] dev_change_flags+0xa2/0xc0 [ 308.537940][T11029] do_setlink+0x810/0x2410 [ 308.542352][T11029] ? __nla_validate_parse+0x108f/0x1760 [ 308.548025][T11029] ? __nla_parse+0x3c/0x50 [ 308.552513][T11029] rtnl_setlink+0x257/0x2a0 [ 308.557030][T11029] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 308.562044][T11029] rtnetlink_rcv_msg+0x711/0x7c0 [ 308.567026][T11029] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 308.572815][T11029] ? __wake_up+0x8d/0xc0 [ 308.577038][T11029] ? __d_rehash+0x125/0x180 [ 308.581607][T11029] ? __d_add+0x3bf/0x490 [ 308.585841][T11029] ? should_fail+0x2a/0x250 [ 308.590373][T11029] ? avc_has_perm_noaudit+0x1c0/0x270 [ 308.595737][T11029] ? rhashtable_jhash2+0x13a/0x1a0 [ 308.600850][T11029] ? jhash+0x2b0/0x2b0 [ 308.604910][T11029] netlink_rcv_skb+0x14e/0x250 [ 308.609768][T11029] ? rtnetlink_bind+0x60/0x60 [ 308.614435][T11029] rtnetlink_rcv+0x18/0x20 [ 308.618837][T11029] netlink_unicast+0x5ec/0x6b0 [ 308.623637][T11029] netlink_sendmsg+0x6ea/0x7d0 [ 308.628512][T11029] sock_write_iter+0x1a3/0x200 [ 308.633285][T11029] do_iter_readv_writev+0x2de/0x380 [ 308.638490][T11029] do_iter_write+0x192/0x5c0 [ 308.643069][T11029] do_writev+0x210/0x440 [ 308.647406][T11029] ? vfs_write+0x61a/0x900 [ 308.651820][T11029] __x64_sys_writev+0x41/0x50 [ 308.656510][T11029] do_syscall_64+0x44/0xa0 [ 308.660914][T11029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 308.666799][T11029] RIP: 0033:0x7f5cdb0a4739 [ 308.671295][T11029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 308.690900][T11029] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 308.699295][T11029] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 308.707293][T11029] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 308.715245][T11029] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 308.723210][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.731179][T11029] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 308.739658][T11002] sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in; 22:45:29 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) recvmsg$unix(r1, 0x0, 0x40010123) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0xc4800, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000240)={0x0}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10000) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001440)="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") openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) pidfd_getfd(r2, r0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000440)={r5, 0x7ff}) [ 308.739658][T11002] program syz-executor.0 not setting count and/or reply_len properly 22:45:31 executing program 1 (fault-call:2 fault-nth:39): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:31 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:31 executing program 4: r0 = socket(0x2, 0x803, 0xff) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r5}, {0x0, r5}, {r4}, {r4}, {r4, r5}, {}, {}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {}, {r3}, {}, {}, {}, {r3, r5}, {r4}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {0x0, r5}, {}, {r3, r5}, {}, {r3}, {}, {r4}, {r3}, {}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {0x0, r5}, {}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {}, {}, {}, {r3}, {r4, r5}, {}, {r3}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3, r5}, {}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {r4}, {}, {r3, r5}, {r3}, {0x0, r5}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {}, {}, {}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {r4}, {}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {r4}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {0x0}, {r4}, {0x0, r5}, {}, {r3, r5}, {}, {}, {}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {r4}, {r4}, {}, {}, {}, {r4, r5}, {0x0, r5}], 0x1, "2156816c73038c"}) r9 = perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0}) r14 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r17}, {0x0, r17}, {r16}, {r16}, {r16, r17}, {}, {}, {0x0, r17}, {}, {}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {}, {r16, r17}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {}, {}, {r15, r17}, {r16}, {}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {}, {0x0, r17}, {r16}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {r15}, {}, {r16}, {r15}, {}, {r16, r17}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {}, {r15}, {}, {}, {0x0, r17}, {}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r15, r17}, {}, {}, {0x0, r17}, {}, {r15}, {0x0, r17}, {}, {r16}, {r15, r17}, {0x0, r17}, {r15}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r15}, {r15, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {}, {r15, r17}, {r15}, {0x0, r17}, {}, {r15}, {r12, r17}, {}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {}, {}, {r16, r17}, {r16}, {}, {}, {r15}, {}, {r16}, {r15}, {0x0, r17}, {r16}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {r15, r17}, {r16, r17}, {}, {0x0, r17}, {}, {r16}, {}, {}, {}, {r15}, {r15}, {0x0, r17}, {r15, r17}, {0x0, r17}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {r16}, {r15}, {0x0, r17}, {0x0, r17}, {r11, r17}, {}, {}, {0x0, r17}, {r16}, {r15}, {}, {r15}, {r16}, {}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {r16}, {r16, r17}, {0x0}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, r17}, {r15}, {}, {r16}, {}, {}, {r16}, {0x0, r17}, {}, {r15}, {r15}, {}, {}, {0x0, r17}, {}, {r16, r17}, {}, {0x0, r17}, {r15}, {r16}, {0x0, r17}, {r16, r17}, {r16}, {r15, r17}, {}, {}, {r16}, {r15}, {0x0, r17}, {r15}, {0x0, r17}, {r16}, {r16}, {r15}, {0x0, r17}, {r16, r17}, {}, {0x0, r17}, {}, {}, {0x0, r17}, {r15, r17}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000055300)={0x3, [{r12, r13}, {r6, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {r12}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12}, {r11, r13}, {r12, r23}, {r11, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11}, {r12, r13}, {r11, r13}, {r11}, {0x0, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r12}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12}, {0x0, r13}, {r11}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {r12, r13}, {r11, r13}, {r11}, {r12, r13}, {r11, r13}, {r11, r13}, {r11}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11}, {r11, r13}, {}, {0x0, r13}, {r11, r13}, {r21, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {r11, r13}, {}, {r11, r13}, {r11}, {r11, r13}, {r12, r13}, {r12}, {r12, r13}, {r12, r13}, {r12}, {r12, r13}, {r11, r13}, {r11, r13}, {}, {r11}, {r11}, {r12, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11}, {r12}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r18}, {r11, r13}, {r11}, {r12}, {r12, r13}, {r11, r13}, {r20, r13}, {r11, r13}, {r11, r13}, {r11, r19}, {r11, r13}, {r11, r13}, {r12}, {r11, r13}, {}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r11}, {r11, r13}, {r11, r13}, {r12, r13}, {r11}, {r11, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r12}, {r12, r7}, {r12, r13}, {0x0, r13}, {r12, r13}, {r12}, {r11, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {r22, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {r12, r13}, {r11}, {r11, r13}, {r11}, {r11, r13}, {r12}, {r12, r13}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {r11}, {r12, r13}, {r12, r13}, {r11, r13}], 0x3, "550b302111ad21"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056300)={0x41e3, [{r12, r13}, {r11, r13}, {r11, r13}, {}, {r11}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12}, {r12}, {r11, r13}, {r11}, {r12}, {r12, r13}, {}, {r11, r13}, {r11}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {r12, r13}, {r11}, {0x0, r13}, {r11}, {r11, r13}, {r11, r13}, {r12}, {r11}, {r11}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r12, r13}, {r12}, {}, {r12}, {}, {r12, r13}, {}, {}, {}, {0x0, r13}, {r12}, {r12}, {0x0, r13}, {r12, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {r11}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {0x0, r13}, {r11}, {r11}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {r11, r13}, {r11, r13}, {0x0, r13}, {r11}, {r12}, {r11, r13}, {}, {0x0, r13}, {}, {}, {}, {r12}, {}, {r11, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {}, {r11, r13}, {0x0, r13}, {}, {r11, r13}, {}, {r12, r13}, {r11}, {0x0, r13}, {}, {r11, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {r12}, {}, {0x0, r13}, {}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {r11}, {r11}, {r12}, {r11}, {}, {r11, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {r11, r13}, {}, {}, {r12}, {0x0, r13}, {0x0, r13}, {r12}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {r11}, {}, {}, {}, {r12, r13}, {r12}, {0x0, r13}, {r12, r13}, {r12}, {}, {r12, r13}, {r12}, {0x0, r13}, {r12, r13}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r11}, {0x0, r13}, {r12}, {r11}, {r11, r13}, {r12}, {0x0, r13}, {}, {0x0, r13}, {}, {r12}, {r11, r13}, {}, {0x0, r13}, {0x0, r13}, {r12}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r12, r13}, {r11}, {0x0, r13}, {r11}, {r12}, {r12}, {}, {r12, r13}, {0x0, r13}, {}, {r11}, {r11}, {}, {r11}, {r11}, {r11, r13}, {r12, r13}, {r12, r13}, {r12, r13}, {r11}, {r12}, {}, {r12, r13}, {}, {}, {r11}, {}, {r12, r13}, {r12}, {}, {r11, r13}, {r11}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {r12}, {0x0, r13}, {r12}, {}, {}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r11}, {r12}, {r12, r13}, {r12}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {r11, r13}, {r11}, {r12}, {0x0, r13}, {r15, r24}, {r12}], 0x4, "5dc0586eabafcf"}) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055a80)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x6, 'XPJm;\fy'}) splice(r0, &(0x7f0000000000)=0x80000000, r1, &(0x7f0000000080)=0x10000, 0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="70668f556d1e600e4129eab9d155d54dcbfe7ea1", 0x14, 0x0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10) 22:45:31 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:31 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:31 executing program 0: set_mempolicy(0x2, &(0x7f0000000040)=0x81, 0x6) r0 = io_uring_setup(0x76fb, &(0x7f0000000080)) set_mempolicy(0x0, &(0x7f00000001c0)=0x4, 0x5def) fcntl$setlease(r0, 0x400, 0x3) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) close(r1) syz_io_uring_setup(0x199d, &(0x7f0000000100)={0x0, 0x7b9, 0x10, 0x1, 0xb9, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) 22:45:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)=""/68, 0x20000184}], 0x8, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_setup(0xa9d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7ffffe}, &(0x7f00006d7000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12, 0x1, {0x0, r4}}, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={'U+', 0x1d}, 0x16, 0x3) [ 310.893896][T11075] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 310.896740][T11076] loop5: detected capacity change from 0 to 224 [ 310.924757][T11075] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 310.933442][T11075] FAULT_INJECTION: forcing a failure. [ 310.933442][T11075] name failslab, interval 1, probability 0, space 0, times 0 [ 310.946069][T11075] CPU: 1 PID: 11075 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 310.954903][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.964958][T11075] Call Trace: [ 310.968234][T11075] dump_stack_lvl+0xd6/0x122 [ 310.972841][T11075] dump_stack+0x11/0x1b [ 310.976996][T11075] should_fail+0x23c/0x250 [ 310.981509][T11075] ? fib_table_insert+0x468/0x10b0 [ 310.986624][T11075] __should_failslab+0x81/0x90 22:45:31 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 310.991435][T11075] should_failslab+0x5/0x20 [ 310.995939][T11075] kmem_cache_alloc+0x4f/0x300 [ 311.000709][T11075] fib_table_insert+0x468/0x10b0 [ 311.005683][T11075] fib_add_ifaddr+0x64e/0x690 [ 311.010366][T11075] ? skb_put+0xb9/0xf0 [ 311.014530][T11075] fib_inetaddr_event+0xb5/0x210 [ 311.019578][T11075] blocking_notifier_call_chain+0x73/0xf0 [ 311.025379][T11075] __inet_insert_ifa+0x4fd/0x5e0 [ 311.030326][T11075] ? inetdev_event+0x73d/0xad0 [ 311.035112][T11075] inetdev_event+0x8ee/0xad0 [ 311.039699][T11075] raw_notifier_call_chain+0x53/0xb0 [ 311.042403][T11096] loop5: detected capacity change from 0 to 224 [ 311.044986][T11075] __dev_notify_flags+0x1d3/0x3b0 [ 311.056301][T11075] dev_change_flags+0xa2/0xc0 [ 311.060963][T11075] do_setlink+0x810/0x2410 [ 311.065387][T11075] ? __nla_validate_parse+0x108f/0x1760 [ 311.070964][T11075] ? __nla_parse+0x3c/0x50 [ 311.075358][T11075] rtnl_setlink+0x257/0x2a0 [ 311.079942][T11075] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 311.084955][T11075] rtnetlink_rcv_msg+0x711/0x7c0 [ 311.089895][T11075] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 311.095684][T11075] ? __wake_up+0x8d/0xc0 [ 311.099912][T11075] ? __d_rehash+0x125/0x180 [ 311.104397][T11075] ? __d_add+0x3bf/0x490 [ 311.108641][T11075] ? should_fail+0x2a/0x250 [ 311.113248][T11075] ? avc_has_perm_noaudit+0x1c0/0x270 [ 311.118599][T11075] ? rhashtable_jhash2+0x13a/0x1a0 [ 311.123809][T11075] ? jhash+0x2b0/0x2b0 [ 311.127990][T11075] netlink_rcv_skb+0x14e/0x250 [ 311.132750][T11075] ? rtnetlink_bind+0x60/0x60 [ 311.137431][T11075] rtnetlink_rcv+0x18/0x20 [ 311.141847][T11075] netlink_unicast+0x5ec/0x6b0 [ 311.146608][T11075] netlink_sendmsg+0x6ea/0x7d0 [ 311.151415][T11075] sock_write_iter+0x1a3/0x200 [ 311.156172][T11075] do_iter_readv_writev+0x2de/0x380 [ 311.161473][T11075] do_iter_write+0x192/0x5c0 [ 311.166073][T11075] do_writev+0x210/0x440 [ 311.170345][T11075] ? vfs_write+0x61a/0x900 [ 311.174750][T11075] __x64_sys_writev+0x41/0x50 [ 311.179447][T11075] do_syscall_64+0x44/0xa0 [ 311.183935][T11075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 311.189813][T11075] RIP: 0033:0x7f5cdb0a4739 [ 311.194293][T11075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 311.213879][T11075] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 311.222286][T11075] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 311.230270][T11075] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 22:45:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x48000, 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) 22:45:31 executing program 1 (fault-call:2 fault-nth:40): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 311.238307][T11075] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.246276][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.254233][T11075] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:31 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:31 executing program 5: setns(0xffffffffffffffff, 0x80) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 311.318304][T11110] loop4: detected capacity change from 0 to 87 [ 311.331922][T11111] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 311.348745][T11111] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 311.374666][T11111] FAULT_INJECTION: forcing a failure. [ 311.374666][T11111] name failslab, interval 1, probability 0, space 0, times 0 [ 311.388779][T11111] CPU: 1 PID: 11111 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 311.396703][T11110] attempt to access beyond end of device [ 311.396703][T11110] loop4: rw=0, want=90, limit=87 [ 311.397562][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.397576][T11111] Call Trace: 22:45:31 executing program 4: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000007d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x10c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x7}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$P9_RREADLINK(r5, &(0x7f0000000080)=ANY=[], 0xffffffe3) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000180)={0x9}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 311.397652][T11111] dump_stack_lvl+0xd6/0x122 [ 311.425913][T11111] dump_stack+0x11/0x1b [ 311.426118][T11125] loop5: detected capacity change from 0 to 224 [ 311.430120][T11111] should_fail+0x23c/0x250 [ 311.430146][T11111] ? fib_insert_alias+0x168/0x7a0 [ 311.445781][T11111] __should_failslab+0x81/0x90 [ 311.450550][T11111] should_failslab+0x5/0x20 [ 311.455197][T11111] kmem_cache_alloc+0x4f/0x300 [ 311.460016][T11111] fib_insert_alias+0x168/0x7a0 [ 311.464950][T11111] ? kmem_cache_alloc+0x20d/0x300 [ 311.470019][T11111] ? fib_table_insert+0x468/0x10b0 [ 311.475133][T11111] fib_table_insert+0x564/0x10b0 [ 311.480127][T11111] fib_add_ifaddr+0x64e/0x690 [ 311.484806][T11111] ? skb_put+0xb9/0xf0 [ 311.488857][T11111] fib_inetaddr_event+0xb5/0x210 [ 311.493849][T11111] blocking_notifier_call_chain+0x73/0xf0 [ 311.499552][T11111] __inet_insert_ifa+0x4fd/0x5e0 [ 311.504500][T11111] ? inetdev_event+0x73d/0xad0 [ 311.509265][T11111] inetdev_event+0x8ee/0xad0 [ 311.513849][T11111] raw_notifier_call_chain+0x53/0xb0 [ 311.519117][T11111] __dev_notify_flags+0x1d3/0x3b0 [ 311.524223][T11111] dev_change_flags+0xa2/0xc0 [ 311.528919][T11111] do_setlink+0x810/0x2410 [ 311.533317][T11111] ? __nla_validate_parse+0x108f/0x1760 [ 311.538925][T11111] ? __nla_parse+0x3c/0x50 [ 311.543333][T11111] rtnl_setlink+0x257/0x2a0 [ 311.547818][T11111] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 311.552890][T11111] rtnetlink_rcv_msg+0x711/0x7c0 [ 311.557811][T11111] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 311.564146][T11111] ? __wake_up+0x8d/0xc0 [ 311.568374][T11111] ? __d_rehash+0x125/0x180 [ 311.572941][T11111] ? __d_add+0x3bf/0x490 [ 311.577206][T11111] ? should_fail+0x2a/0x250 [ 311.581726][T11111] ? avc_has_perm_noaudit+0x1c0/0x270 [ 311.587076][T11111] ? rhashtable_jhash2+0x13a/0x1a0 [ 311.592355][T11111] ? jhash+0x2b0/0x2b0 [ 311.596406][T11111] netlink_rcv_skb+0x14e/0x250 [ 311.601252][T11111] ? rtnetlink_bind+0x60/0x60 [ 311.605953][T11111] rtnetlink_rcv+0x18/0x20 [ 311.610429][T11111] netlink_unicast+0x5ec/0x6b0 [ 311.615198][T11111] netlink_sendmsg+0x6ea/0x7d0 [ 311.619954][T11111] sock_write_iter+0x1a3/0x200 [ 311.624791][T11111] do_iter_readv_writev+0x2de/0x380 [ 311.629978][T11111] do_iter_write+0x192/0x5c0 [ 311.634563][T11111] do_writev+0x210/0x440 [ 311.638828][T11111] ? vfs_write+0x61a/0x900 [ 311.643247][T11111] __x64_sys_writev+0x41/0x50 [ 311.647908][T11111] do_syscall_64+0x44/0xa0 [ 311.652316][T11111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 311.658220][T11111] RIP: 0033:0x7f5cdb0a4739 [ 311.662627][T11111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 311.682254][T11111] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 311.690824][T11111] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 311.698797][T11111] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 311.706756][T11111] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.714802][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.722780][T11111] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 311.737190][ T1175] attempt to access beyond end of device [ 311.737190][ T1175] loop4: rw=1, want=98, limit=87 22:45:34 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:34 executing program 1 (fault-call:2 fault-nth:41): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:34 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:34 executing program 5: setns(0xffffffffffffffff, 0x80) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) 22:45:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8992, &(0x7f0000009940)) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"a3f452e80a2c8d396ffddcd8440c6e87", 0x0, 0x0, {0xd3}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x2, 0x6, 0x7fff, 0x6, 0x8, 0xe00000000000, 0x7fff]}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000880)={0x0, 0x0, @start={0x0, 0x1, "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", "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"}, [0x0, 0x1000, 0x3, 0x5, 0x8, 0x0, 0x4, 0x0, 0x7, 0x10000, 0x7fffffff, 0x0, 0x7, 0x7, 0x1, 0x3d, 0x8, 0x9, 0x4800000, 0x752, 0x1, 0xff, 0x0, 0x0, 0x7, 0x1, 0x5, 0x1, 0x3, 0x3ff, 0x0, 0x2, 0x0, 0x5, 0x1, 0x80000001, 0x0, 0x8e, 0x1, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x9490, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, 0x2, 0x0, 0x1, 0x0, 0x7ff, 0x6]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000012c0)={{r2}, r3, 0x2, @unused=[0x0, 0x0, 0x9, 0x80000000000000], @devid=r4}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {0x0}, {r7}, {r7, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {0x0, 0x0}, {r7, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {r7}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r7, 0x0}, {}, {0x0, r8}, {r7, 0x0}, {0x0, r8}, {r6, 0x0}, {0x0, 0x0}, {r6}, {0x0, r8}, {0x0, 0x0}, {0x0}, {r6, r8}, {r7, 0x0}, {0x0}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0}, {}, {0x0, r8}, {r7}, {0x0, 0x0}, {0x0, r8}, {r7}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, r8}, {r6}, {0x0, 0x0}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {}, {0x0, 0x0}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, r8}, {}, {r7}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {r6}, {0x0}, {}, {0x0, r8}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {r6}, {0x0, r8}, {0x0}, {}, {r6, r8}, {0x0, r8}, {0x0}, {r7, r8}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {r6, 0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, 0x0}, {}, {0x0}, {r6, r8}, {r6}, {}, {0x0, 0x0}, {0x0, 0x0}, {r6}, {0x0, 0x0}, {}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {r7, r8}, {0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {r7, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r8}, {r6, 0x0}, {0x0, r8}, {r7}, {}, {0x0}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {0x0, r8}, {r7}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {r6, r8}, {r7}, {}, {0x0, r8}, {}, {r7, 0x0}, {0x0, r8}, {}, {0x0}, {r6}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {0x0, 0x0}, {r6, 0x0}, {0x0, r8}, {0x0}, {r6, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {r6}, {0x0}, {r6, 0x0}, {r7, 0x0}, {0x0, r8}, {r7, 0x0}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {r7, 0x0}, {r7, r8}, {0x0}, {0x0, 0x0}, {r6, 0x0}, {}, {r6, 0x0}, {}, {0x0, 0x0}, {r6}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {r7}, {0x0, 0x0}, {0x0}, {}, {r7}, {0x0, r8}, {0x0, 0x0}, {r6}, {r6}, {0x0, 0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {r7, 0x0}, {r6}, {0x0, r8}, {}, {0x0}, {r6}, {r7, r8}, {0x0}, {r6, r8}, {0x0, 0x0}, {0x0, 0x0}, {r7}, {r6, r8}, {0x0, r8}, {r6, 0x0}, {0x0, r8}, {r7, 0x0}, {0x0, 0x0}, {r6}, {0x0, r8}, {r7, r8}, {r7}, {0x0}, {0x0, 0x0}, {}, {0x0, r8}, {r6, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000032c0)={0x2, [{}, {r57, r12}, {r141}, {r97, r81}, {0x0, r152}, {r97, r30}, {r74, r116}, {0x0, r104}, {r199, r113}, {r117}, {r43, r46}, {}, {r173, r67}, {r162, r186}, {r10, r96}, {r227}, {r212, r131}, {r130, r175}, {r84}, {r89}, {r223, r189}, {r209, r123}, {r185, r68}, {r225, r221}, {}, {r101}, {}, {r65}, {r52, r194}, {r20, r206}, {r208}, {}, {r122}, {r51}, {0x0, r143}, {0x0, r150}, {0x0, r205}, {0x0, r42}, {0x0, r123}, {r77}, {r210, r87}, {0x0, r100}, {r101, r124}, {r204}, {}, {r196}, {r215, r168}, {r191, r126}, {0x0, r61}, {r20, r170}, {r10}, {0x0, r203}, {r139, r176}, {r216}, {r178, r183}, {r92}, {}, {}, {r29}, {0x0, r142}, {0x0, r78}, {}, {r36}, {r55}, {r11}, {0x0, r15}, {0x0, r88}, {}, {}, {r149}, {}, {0x0, r72}, {0x0, r94}, {0x0, r8}, {}, {}, {}, {0x0, r150}, {r130}, {0x0, r94}, {}, {0x0, r115}, {}, {r39}, {}, {r137}, {}, {}, {}, {r22, r206}, {r56}, {}, {0x0, r192}, {r155}, {0x0, r105}, {}, {}, {r59}, {}, {r193}, {r63}, {r200}, {r159, r50}, {0x0, r121}, {r133, r220}, {r93, r16}, {r28, r136}, {0x0, r217}, {}, {r127}, {0x0, r145}, {r74, r118}, {r119}, {}, {0x0, r222}, {}, {r162}, {0x0, r18}, {}, {r117, r202}, {r73, r213}, {0x0, r194}, {r28, r33}, {r95, r138}, {r161, r125}, {r151, r129}, {r31, r40}, {r55}, {}, {r201}, {0x0, r16}, {}, {0x0, r9}, {0x0, r214}, {0x0, r112}, {r56, r152}, {r147, r110}, {r55, r27}, {r36, r102}, {r98}, {0x0, r14}, {r211}, {r167, r46}, {r95, r158}, {}, {0x0, r206}, {r128, r198}, {0x0, r228}, {}, {r39, r48}, {r223}, {0x0, r166}, {r144}, {r190, r107}, {r69, r179}, {r89, r104}, {r140, r172}, {0x0, r195}, {}, {0x0, r106}, {r34}, {}, {0x0, r135}, {0x0, r179}, {0x0, r99}, {r71, r121}, {r141, r183}, {r169, r113}, {r53, r46}, {}, {}, {r169, r160}, {0x0, r187}, {r21, r217}, {}, {}, {r44}, {}, {r134, r226}, {r108, r163}, {r219, r192}, {r156, r82}, {0x0, r26}, {r53, r124}, {}, {}, {r109}, {0x0, r150}, {}, {r171, r37}, {r154, r177}, {r146}, {r197, r99}, {}, {r53}, {r32}, {r79, r207}, {0x0, r188}, {0x0, r202}, {r148}, {r86, r90}, {r157, r14}, {0x0, r83}, {}, {0x0, r102}, {r111, r58}, {}, {}, {}, {r184}, {r13, r50}, {r25, r70}, {r7, r177}, {0x0, r54}, {}, {r45, r132}, {r17, r88}, {r91, r202}, {0x0, r165}, {r103, r218}, {r75, r14}, {r93, r217}, {r114, r180}, {r174, r66}, {r79, r81}, {r182}, {r117, r23}, {r127}, {r153}, {r73}, {}, {r41}, {}, {0x0, r64}, {r38}, {r60, r72}, {r49, r138}, {r47}, {r134, r76}, {0x0, r24}, {r224, r62}, {}, {0x0, r181}, {r77, r222}, {r85}, {0x0, r168}, {}, {r80, r35}, {r127, r110}, {r164, r152}, {}, {}, {r154}, {r120, r27}, {r182, r19}], 0x2, "a0505080f468f9"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 22:45:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = io_uring_setup(0x28da, &(0x7f0000000fc0)={0x0, 0xb3c9, 0x38, 0x2, 0xa1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$packet(0x11, 0x3, 0x300) signalfd4(r6, &(0x7f00000011c0)={[0xfffffffffffffe01]}, 0x8, 0x80800) setresuid(0x0, r5, 0xee00) getresuid(&(0x7f0000001080)=0x0, &(0x7f00000010c0), &(0x7f0000001100)) fsetxattr$system_posix_acl(r1, &(0x7f0000001040)='system.posix_acl_access\x00', &(0x7f0000001140)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x7, r3}, {0x2, 0x4, r5}, {0x2, 0x2, 0xee01}, {0x2, 0x6, r7}, {0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0xe5535fe9f81a84c0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x810, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xa9d, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="8640f1ccefa0bc245f1435e0baef", 0xe}, {&(0x7f0000000200)="7e7b87b672295e9d96b7c2275cb792d62f33b2df4ef76d716f1565be4f72bc5116e8276e497803e8ad22ee486f9b96393f87484d0162a5b6f39c885effc623546543c950fc00b80d2690e8bdc206745cd9e471", 0x53}, {&(0x7f0000000340)="60677dedb1c5c695a127baa4e2f3ff96763f22520e91cfb137151c4e0e54be3d052de8", 0x23}, {&(0x7f0000000380)="c6c913b29ea8c992956326d556e0a2b189502fa346721a09354425d03a5877fc53", 0x21}, {&(0x7f00000003c0)="a9c446cbaea4b7ea7f9490fb0a6b79a7b532ff1958bc3088f935484ae34fb55ba39576cb2528fa912db30150cdd76b3b1028917c5e3e226c5764619eb6f16535d1944f9eb54c81a54787136cfb3020edf95ab6ed425226d483d3f9c6293f4ab284841a18f24b3df2c98d691c7ec3ebb391368054c0c4bf7bcaf7c57dedfaf78ad7b58de265ad9a3bff8cea901dcbe9bdce8cc5418ee60c2c29ae0ff35427acdffcca263fc7bdd95de404324793e20e335f1af108966df154a3899d703ca519867da90966a69eb9920caaf4379eea259d6b4a1dd31a03e2b8517a", 0xda}, {&(0x7f00000004c0)="79c671b4c03fddf548ffd3a37ad919b9ba6813f531e66d7f03a52ae4", 0x1c}, {&(0x7f0000000500)="3035ac23583f9a9c4ea6e6ec8c194a45be181751e1119a58766d37993311b43e0683e547767a740d5f7ebb0bdc17c434f1f119d938fe08295e13b956d10a11aa0c7939d7445b39c89fc7822e41eedbe58e54fcb586ac7eef1ae2090cbbbbb2558739810bc8fcc335296b1ee9a5662d7beb5c24322557064f4c55c05cff6a9fde7cb60ced3e0d4c3ef45d7708f1e7011c4f0f5d7c53d667c20959198f31d6b86a870b5513", 0xa4}, {&(0x7f00000005c0)="2fb52af39feb0e2b8c3b63adecd0c9b9c7fceb1dee92c4bf22dde4368caee6d06331f50b870c66b0fa27cf7b48b93089575e131028a7726843aa5a3c3c8592b9674b1eeb90da40c3710ab2b205f8fc0e40409afff2702bd8d9dfdd0ecd56be81e26d3711ccbacc7925aba5918507cad485bfae0e64da3ede11db5f3fd1f5c40599efedad5aec41a384ef3e98019585cf334b64aca3cf95398bfd05a3b88202909e8c85e9103774bb9bfa3b1d7f4a5e656f0d", 0xb2}, {&(0x7f0000000680)="87b8eb2e69452ea67acc772d93d1cd88a04bb6bdc001e1373dc8161cf25af3181feeb010cba1b7c7c79c222b7846e6ed1000ba6cb5e7f21d15d089ab7d17cace6d5286b80eb5442f11a3751c0e8bfe60174543b39ba8f94f6d714bf482dcff7773e4d454cb86153171ebe1ab1339dee77bfbe13ee5c897c7c22f3a9028f170d57fd1e39ef41f5952fd4713ee05f84f0fb59203860e93170ac94bd4474d574a153ee9341898b792afd01f3cd5fe19f7e3f7a2736cbcee106ee748c618", 0xbc}], 0x9, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @end]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x2c, 0x0, 0xa, [0x7]}]}}}], 0x48}}, {{&(0x7f0000000880)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="99ea686f0fa132afcdcc9918ecd0a75f76bfe4fbb416f4b2", 0x18}, {&(0x7f0000000900)="fea947809610b81525ee9aca6a009a558abd40a64858b2b2d6759aad65d030e422a202e57af0c5d0c5813e319cb7f821abc7e6efbf36794f982973ff450bbd4838150c0a6acbdb90928fff1897b91cca9acaed1db3c14c31a7745fa0c5a4dda15fbfb1efb93b88773a2e00d396de511ada5df4f2b6d6d50f6e2fee9ff961bd80ee33ad529cac2964091d471e8881e66dfd8a9264a7d2677b7b897241f7352369766f7b46a4637889e738c11b078aa8b6c45050f37abf54b8acf80d5be6981a06526584450ce640b868908e34a1e88c7712", 0xd1}], 0x2, &(0x7f0000000a40)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xdb, [@local, @empty, @broadcast, @local, @multicast1, @private=0xa010100, @empty, @local, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x89, [@loopback, @rand_addr=0x64010102, @loopback, @loopback, @multicast2, @remote, @private=0xa010102]}, @rr={0x7, 0xf, 0x34, [@remote, @dev={0xac, 0x14, 0x14, 0x3e}, @remote]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xe7, [@rand_addr=0x64010100, @broadcast, @remote, @multicast1, @loopback]}, @cipso={0x86, 0x2f, 0x0, [{0x2, 0xc, "3ab1e49852bd2560cca0"}, {0x7, 0x12, "55f18a624d9ace53b8e4938eb22b6069"}, {0x7, 0xb, "e6c1a6df0c879045e7"}]}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x65, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@local, 0x10000}, {@multicast2, 0x3}, {@broadcast, 0x9}]}, @timestamp={0x44, 0x24, 0x45, 0x0, 0x4, [0x800, 0x4e3, 0x5, 0x1, 0x0, 0x1000, 0x5, 0x2]}, @lsrr={0x83, 0x17, 0x5b, [@rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @noop]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x29, 0x1, 0x0, [{@loopback, 0x7}]}, @generic={0x94, 0x9, "976fdd155cb485"}, @lsrr={0x83, 0x7, 0x8b, [@local]}, @generic={0x7, 0x2}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x1a8}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="1526", 0x2}, {&(0x7f0000000c80)="d8e8473424e8c8b530b510db597d519d2ce1e4109ebac78ad36d7f041d881a3f882eeb8bc32bb0ec58440752bd5c3ee22d813040ff9c6a61f40fb6e74d0046ec27cf9d2a17960c7ab76e31afcc018d898836ce087e549d60e8e99cd0be904d5e", 0x60}, {&(0x7f0000000d00)="e3e0eee657315298218ac16f3771ee8c115f2ac4781a8f855ac1aa81499b900a33bfc009e1e32b3e1768d815afbf672fc6e107ea103fb231f7a116d3631792f7226c825b143c80ce94a4b113e0029dc2d58dcbde6df8071418896f441a501ed447028691a3af6f88ea54703ac7e6a6dca8ba1365", 0x74}, {&(0x7f0000000d80)="08b92f97f3b13fadc3831f90532c0933ee79c9bac3584bf6f9f22d93467f9b5a45747e2028a9d21ca015220f78", 0x2d}], 0x4, &(0x7f0000000e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0xac, 0x0, 0x7, {[@cipso={0x86, 0x58, 0xffffffffffffffff, [{0x0, 0x7, "f0320926e4"}, {0x6, 0xe, "0eb266d9e6773aa75887d327"}, {0x0, 0x10, "fb088e4dd178056ff1bdc0de0bd8"}, {0x6, 0x6, "0faa25bf"}, {0x7, 0xf, "2f3cfc1d8fae5d6024f02dd0ac"}, {0x6, 0x7, "e24b95321f"}, {0x6, 0xc, "f14f1a350cb12554e611"}, {0x7, 0x5, "460002"}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0xe, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x401}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @end, @lsrr={0x83, 0x7, 0xb3, [@private=0xa010101]}, @rr={0x7, 0x3, 0xd}, @rr={0x7, 0x13, 0x9c, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}]}}}], 0xc8}}], 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffff) syz_io_uring_submit(r8, r10, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x4}, 0x81) sendmmsg$inet(r0, &(0x7f0000005240)=[{{&(0x7f0000000100)={0x2, 0x6e20, @dev}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14f9e296948c369e7ee9bdca40411c00070000020000000000000000"], 0x18}}], 0x2, 0x0) [ 313.921960][T11164] loop5: detected capacity change from 0 to 224 [ 313.930517][T11174] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 313.946726][T11174] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 313.955992][T11174] FAULT_INJECTION: forcing a failure. [ 313.955992][T11174] name failslab, interval 1, probability 0, space 0, times 0 22:45:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r5}, {0x0, r5}, {r4}, {r4}, {r4, r5}, {}, {}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {}, {r3}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {0x0, r5}, {}, {r3, r5}, {}, {r3}, {}, {r4}, {r3, 0x0}, {}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {0x0, r5}, {}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {}, {r3}, {r3}, {r4, r5}, {}, {r3}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3, r5}, {}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {r4}, {}, {r3, r5}, {r3}, {0x0, r5}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {r3}, {}, {}, {0x0, 0x0}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {r4}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {r3, r5}, {}, {}, {}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {r4}, {r4}, {}, {}, {}, {r4, r5}, {0x0, r5}], 0x1, "2156816c73038c"}) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045a80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "007f18fcd89a07"}) clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) pipe(&(0x7f00000001c0)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0xfffffffffffffffc, 0x2) write$binfmt_misc(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="73797acc9feb62ee509f4c649d31b08f114f590dccc41b3ba4f8ea61f1f213b3549ed3bb832d6fd95e810c3c07a16cb7da1d1e6fa800b04d4d929f03d170fc6a4d8a5ed34ae39fd4a7d4a83bf5e1bebde5f0520e9fe3c2fd23df0548ab79f32e"], 0x41) [ 313.968670][T11174] CPU: 1 PID: 11174 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 313.977432][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.987489][T11174] Call Trace: [ 313.990763][T11174] dump_stack_lvl+0xd6/0x122 [ 313.995377][T11174] dump_stack+0x11/0x1b [ 313.999607][T11174] should_fail+0x23c/0x250 [ 314.004053][T11174] __should_failslab+0x81/0x90 [ 314.008827][T11174] ? fib_insert_alias+0x295/0x7a0 [ 314.009269][ C0] sd 0:0:1:0: tag#7301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 314.013862][T11174] should_failslab+0x5/0x20 [ 314.013887][T11174] kmem_cache_alloc_trace+0x52/0x320 [ 314.023723][ C0] sd 0:0:1:0: tag#7301 CDB: opcode=0xe5 (vendor) [ 314.028183][T11174] ? kmem_cache_alloc+0x20d/0x300 [ 314.033464][ C0] sd 0:0:1:0: tag#7301 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 314.033481][ C0] sd 0:0:1:0: tag#7301 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 314.039773][T11174] ? fib_insert_alias+0x168/0x7a0 [ 314.044786][ C0] sd 0:0:1:0: tag#7301 CDB[20]: ba [ 314.053761][T11174] fib_insert_alias+0x295/0x7a0 [ 314.077911][T11174] ? kmem_cache_alloc+0x20d/0x300 [ 314.082985][T11174] ? fib_table_insert+0x468/0x10b0 [ 314.088116][T11174] fib_table_insert+0x564/0x10b0 [ 314.093112][T11174] fib_add_ifaddr+0x64e/0x690 [ 314.097799][T11174] ? skb_put+0xb9/0xf0 [ 314.101929][T11174] fib_inetaddr_event+0xb5/0x210 [ 314.106945][T11174] blocking_notifier_call_chain+0x73/0xf0 [ 314.112754][T11174] __inet_insert_ifa+0x4fd/0x5e0 [ 314.117695][T11174] ? inetdev_event+0x73d/0xad0 [ 314.122511][T11174] inetdev_event+0x8ee/0xad0 [ 314.127165][T11174] raw_notifier_call_chain+0x53/0xb0 [ 314.132448][T11174] __dev_notify_flags+0x1d3/0x3b0 [ 314.137562][T11174] dev_change_flags+0xa2/0xc0 [ 314.142295][T11174] do_setlink+0x810/0x2410 [ 314.146702][T11174] ? __nla_validate_parse+0x108f/0x1760 [ 314.152334][T11174] ? __nla_parse+0x3c/0x50 [ 314.156740][T11174] rtnl_setlink+0x257/0x2a0 [ 314.161240][T11174] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 314.166254][T11174] rtnetlink_rcv_msg+0x711/0x7c0 [ 314.171235][T11174] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 314.177037][T11174] ? __wake_up+0x8d/0xc0 [ 314.181269][T11174] ? __d_rehash+0x125/0x180 [ 314.185766][T11174] ? __d_add+0x3bf/0x490 [ 314.190059][T11174] ? should_fail+0x2a/0x250 [ 314.194550][T11174] ? avc_has_perm_noaudit+0x1c0/0x270 [ 314.199956][T11174] ? rhashtable_jhash2+0x13a/0x1a0 [ 314.205060][T11174] ? jhash+0x2b0/0x2b0 [ 314.209116][T11174] netlink_rcv_skb+0x14e/0x250 [ 314.213870][T11174] ? rtnetlink_bind+0x60/0x60 [ 314.218532][T11174] rtnetlink_rcv+0x18/0x20 [ 314.222989][T11174] netlink_unicast+0x5ec/0x6b0 [ 314.227742][T11174] netlink_sendmsg+0x6ea/0x7d0 [ 314.232496][T11174] sock_write_iter+0x1a3/0x200 [ 314.237327][T11174] do_iter_readv_writev+0x2de/0x380 [ 314.242543][T11174] do_iter_write+0x192/0x5c0 [ 314.247125][T11174] do_writev+0x210/0x440 [ 314.251373][T11174] ? vfs_write+0x61a/0x900 [ 314.255779][T11174] __x64_sys_writev+0x41/0x50 [ 314.260448][T11174] do_syscall_64+0x44/0xa0 [ 314.264858][T11174] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 314.270851][T11174] RIP: 0033:0x7f5cdb0a4739 [ 314.275252][T11174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 314.294865][T11174] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 314.303263][T11174] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 314.311224][T11174] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 22:45:34 executing program 5: setns(0xffffffffffffffff, 0x80) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r4 = gettid() tkill(r4, 0xd) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) [ 314.319194][T11174] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 314.327243][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.335235][T11174] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 314.351521][T11180] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 314.360158][ C0] sd 0:0:1:0: tag#7302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 22:45:34 executing program 1 (fault-call:2 fault-nth:42): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:34 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffc) recvfrom$packet(r0, &(0x7f0000000080)=""/163, 0xa3, 0x1, &(0x7f0000000000)={0x11, 0xf8, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) clone3(&(0x7f0000000180)={0xc0001100, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair(0xa, 0x1, 0x106, &(0x7f00000002c0)) [ 314.369993][ C0] sd 0:0:1:0: tag#7302 CDB: opcode=0xe5 (vendor) [ 314.376346][ C0] sd 0:0:1:0: tag#7302 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 314.385380][ C0] sd 0:0:1:0: tag#7302 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 314.394404][ C0] sd 0:0:1:0: tag#7302 CDB[20]: ba [ 314.404906][T11184] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 314.440569][T11197] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 314.454057][T11201] loop5: detected capacity change from 0 to 224 [ 314.463504][T11197] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 314.473435][T11197] FAULT_INJECTION: forcing a failure. [ 314.473435][T11197] name failslab, interval 1, probability 0, space 0, times 0 22:45:34 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:34 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0000000000c33b03d6006d80f3590000", @ANYRESHEX=r1, @ANYBLOB="2c6bd20ce97b7e3f13875b99e571ec5f0dc36da101012301ff100c477740d5"]) [ 314.486175][T11197] CPU: 1 PID: 11197 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 314.494928][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.504979][T11197] Call Trace: [ 314.508254][T11197] dump_stack_lvl+0xd6/0x122 [ 314.512853][T11197] dump_stack+0x11/0x1b [ 314.517014][T11197] should_fail+0x23c/0x250 [ 314.521462][T11197] __should_failslab+0x81/0x90 [ 314.526231][T11197] ? fib_insert_alias+0x295/0x7a0 [ 314.531313][T11197] should_failslab+0x5/0x20 [ 314.535823][T11197] kmem_cache_alloc_trace+0x52/0x320 [ 314.541144][T11197] ? kmem_cache_alloc+0x20d/0x300 [ 314.543966][T11223] 9pnet: Insufficient options for proto=fd [ 314.546161][T11197] ? fib_insert_alias+0x168/0x7a0 [ 314.546186][T11197] fib_insert_alias+0x295/0x7a0 [ 314.561876][T11197] ? kmem_cache_alloc+0x20d/0x300 [ 314.566900][T11197] ? fib_table_insert+0x468/0x10b0 [ 314.572013][T11197] fib_table_insert+0x564/0x10b0 [ 314.576953][T11197] fib_add_ifaddr+0x64e/0x690 [ 314.581715][T11197] ? skb_put+0xb9/0xf0 [ 314.585766][T11197] fib_inetaddr_event+0xb5/0x210 [ 314.590684][T11197] blocking_notifier_call_chain+0x73/0xf0 [ 314.596387][T11197] __inet_insert_ifa+0x4fd/0x5e0 [ 314.601306][T11197] ? inetdev_event+0x73d/0xad0 [ 314.606081][T11197] inetdev_event+0x8ee/0xad0 [ 314.610710][T11197] raw_notifier_call_chain+0x53/0xb0 [ 314.616058][T11197] __dev_notify_flags+0x1d3/0x3b0 [ 314.621070][T11197] dev_change_flags+0xa2/0xc0 [ 314.625732][T11197] do_setlink+0x810/0x2410 [ 314.630173][T11197] ? __nla_validate_parse+0x108f/0x1760 [ 314.635720][T11197] ? __nla_parse+0x3c/0x50 [ 314.640174][T11197] rtnl_setlink+0x257/0x2a0 [ 314.644658][T11197] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 314.649717][T11197] rtnetlink_rcv_msg+0x711/0x7c0 [ 314.654680][T11197] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 314.660471][T11197] ? __wake_up+0x8d/0xc0 [ 314.664753][T11197] ? __d_rehash+0x125/0x180 [ 314.669316][T11197] ? __d_add+0x3bf/0x490 [ 314.673628][T11197] ? should_fail+0x2a/0x250 [ 314.678108][T11197] ? avc_has_perm_noaudit+0x1c0/0x270 [ 314.683458][T11197] ? rhashtable_jhash2+0x13a/0x1a0 [ 314.688625][T11197] ? jhash+0x2b0/0x2b0 [ 314.692680][T11197] netlink_rcv_skb+0x14e/0x250 [ 314.697500][T11197] ? rtnetlink_bind+0x60/0x60 [ 314.702174][T11197] rtnetlink_rcv+0x18/0x20 [ 314.706567][T11197] netlink_unicast+0x5ec/0x6b0 [ 314.711327][T11197] netlink_sendmsg+0x6ea/0x7d0 [ 314.716089][T11197] sock_write_iter+0x1a3/0x200 [ 314.720837][T11197] do_iter_readv_writev+0x2de/0x380 [ 314.726100][T11197] do_iter_write+0x192/0x5c0 [ 314.730738][T11197] do_writev+0x210/0x440 [ 314.734965][T11197] ? vfs_write+0x61a/0x900 [ 314.739362][T11197] __x64_sys_writev+0x41/0x50 [ 314.744027][T11197] do_syscall_64+0x44/0xa0 [ 314.748499][T11197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 314.754379][T11197] RIP: 0033:0x7f5cdb0a4739 [ 314.758772][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 314.778414][T11197] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 314.786890][T11197] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 314.794845][T11197] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 314.802809][T11197] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 314.810805][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.818757][T11197] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 314.856182][T11234] loop5: detected capacity change from 0 to 224 22:45:37 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6b, 0x8}, 0x1004, 0x400, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) 22:45:37 executing program 1 (fault-call:2 fault-nth:43): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:37 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:37 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8992, &(0x7f0000009940)) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"a3f452e80a2c8d396ffddcd8440c6e87", 0x0, 0x0, {0xd3}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x2, 0x6, 0x7fff, 0x6, 0x8, 0xe00000000000, 0x7fff]}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000880)={0x0, 0x0, @start={0x0, 0x1, "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", "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"}, [0x0, 0x1000, 0x3, 0x5, 0x8, 0x0, 0x4, 0x0, 0x7, 0x10000, 0x7fffffff, 0x0, 0x7, 0x7, 0x1, 0x3d, 0x8, 0x9, 0x4800000, 0x752, 0x1, 0xff, 0x0, 0x0, 0x7, 0x1, 0x5, 0x1, 0x3, 0x3ff, 0x0, 0x2, 0x0, 0x5, 0x1, 0x80000001, 0x0, 0x8e, 0x1, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x9490, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, 0x2, 0x0, 0x1, 0x0, 0x7ff, 0x6]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000012c0)={{r2}, r3, 0x2, @unused=[0x0, 0x0, 0x9, 0x80000000000000], @devid=r4}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {0x0}, {r7}, {r7, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {0x0, 0x0}, {r7, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {r7}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r7, 0x0}, {}, {0x0, r8}, {r7, 0x0}, {0x0, r8}, {r6, 0x0}, {0x0, 0x0}, {r6}, {0x0, r8}, {0x0, 0x0}, {0x0}, {r6, r8}, {r7, 0x0}, {0x0}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0}, {}, {0x0, r8}, {r7}, {0x0, 0x0}, {0x0, r8}, {r7}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, r8}, {r6}, {0x0, 0x0}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {}, {0x0, 0x0}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, r8}, {}, {r7}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {r6}, {0x0}, {}, {0x0, r8}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {r6}, {0x0, r8}, {0x0}, {}, {r6, r8}, {0x0, r8}, {0x0}, {r7, r8}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {r6, 0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, 0x0}, {}, {0x0}, {r6, r8}, {r6}, {}, {0x0, 0x0}, {0x0, 0x0}, {r6}, {0x0, 0x0}, {}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {r7, r8}, {0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {r7, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r8}, {r6, 0x0}, {0x0, r8}, {r7}, {}, {0x0}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {0x0, r8}, {r7}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {r6, r8}, {r7}, {}, {0x0, r8}, {}, {r7, 0x0}, {0x0, r8}, {}, {0x0}, {r6}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {0x0, 0x0}, {r6, 0x0}, {0x0, r8}, {0x0}, {r6, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {r6}, {0x0}, {r6, 0x0}, {r7, 0x0}, {0x0, r8}, {r7, 0x0}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {r7, 0x0}, {r7, r8}, {0x0}, {0x0, 0x0}, {r6, 0x0}, {}, {r6, 0x0}, {}, {0x0, 0x0}, {r6}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {r7}, {0x0, 0x0}, {0x0}, {}, {r7}, {0x0, r8}, {0x0, 0x0}, {r6}, {r6}, {0x0, 0x0}, {0x0, r8}, {0x0, 0x0}, {0x0, 0x0}, {r7, 0x0}, {r6}, {0x0, r8}, {}, {0x0}, {r6}, {r7, r8}, {0x0}, {r6, r8}, {0x0, 0x0}, {0x0, 0x0}, {r7}, {r6, r8}, {0x0, r8}, {r6, 0x0}, {0x0, r8}, {r7, 0x0}, {0x0, 0x0}, {r6}, {0x0, r8}, {r7, r8}, {r7}, {0x0}, {0x0, 0x0}, {}, {0x0, r8}, {r6, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000032c0)={0x2, [{}, {r57, r12}, {r141}, {r97, r81}, {0x0, r152}, {r97, r30}, {r74, r116}, {0x0, r104}, {r199, r113}, {r117}, {r43, r46}, {}, {r173, r67}, {r162, r186}, {r10, r96}, {r227}, {r212, r131}, {r130, r175}, {r84}, {r89}, {r223, r189}, {r209, r123}, {r185, r68}, {r225, r221}, {}, {r101}, {}, {r65}, {r52, r194}, {r20, r206}, {r208}, {}, {r122}, {r51}, {0x0, r143}, {0x0, r150}, {0x0, r205}, {0x0, r42}, {0x0, r123}, {r77}, {r210, r87}, {0x0, r100}, {r101, r124}, {r204}, {}, {r196}, {r215, r168}, {r191, r126}, {0x0, r61}, {r20, r170}, {r10}, {0x0, r203}, {r139, r176}, {r216}, {r178, r183}, {r92}, {}, {}, {r29}, {0x0, r142}, {0x0, r78}, {}, {r36}, {r55}, {r11}, {0x0, r15}, {0x0, r88}, {}, {}, {r149}, {}, {0x0, r72}, {0x0, r94}, {0x0, r8}, {}, {}, {}, {0x0, r150}, {r130}, {0x0, r94}, {}, {0x0, r115}, {}, {r39}, {}, {r137}, {}, {}, {}, {r22, r206}, {r56}, {}, {0x0, r192}, {r155}, {0x0, r105}, {}, {}, {r59}, {}, {r193}, {r63}, {r200}, {r159, r50}, {0x0, r121}, {r133, r220}, {r93, r16}, {r28, r136}, {0x0, r217}, {}, {r127}, {0x0, r145}, {r74, r118}, {r119}, {}, {0x0, r222}, {}, {r162}, {0x0, r18}, {}, {r117, r202}, {r73, r213}, {0x0, r194}, {r28, r33}, {r95, r138}, {r161, r125}, {r151, r129}, {r31, r40}, {r55}, {}, {r201}, {0x0, r16}, {}, {0x0, r9}, {0x0, r214}, {0x0, r112}, {r56, r152}, {r147, r110}, {r55, r27}, {r36, r102}, {r98}, {0x0, r14}, {r211}, {r167, r46}, {r95, r158}, {}, {0x0, r206}, {r128, r198}, {0x0, r228}, {}, {r39, r48}, {r223}, {0x0, r166}, {r144}, {r190, r107}, {r69, r179}, {r89, r104}, {r140, r172}, {0x0, r195}, {}, {0x0, r106}, {r34}, {}, {0x0, r135}, {0x0, r179}, {0x0, r99}, {r71, r121}, {r141, r183}, {r169, r113}, {r53, r46}, {}, {}, {r169, r160}, {0x0, r187}, {r21, r217}, {}, {}, {r44}, {}, {r134, r226}, {r108, r163}, {r219, r192}, {r156, r82}, {0x0, r26}, {r53, r124}, {}, {}, {r109}, {0x0, r150}, {}, {r171, r37}, {r154, r177}, {r146}, {r197, r99}, {}, {r53}, {r32}, {r79, r207}, {0x0, r188}, {0x0, r202}, {r148}, {r86, r90}, {r157, r14}, {0x0, r83}, {}, {0x0, r102}, {r111, r58}, {}, {}, {}, {r184}, {r13, r50}, {r25, r70}, {r7, r177}, {0x0, r54}, {}, {r45, r132}, {r17, r88}, {r91, r202}, {0x0, r165}, {r103, r218}, {r75, r14}, {r93, r217}, {r114, r180}, {r174, r66}, {r79, r81}, {r182}, {r117, r23}, {r127}, {r153}, {r73}, {}, {r41}, {}, {0x0, r64}, {r38}, {r60, r72}, {r49, r138}, {r47}, {r134, r76}, {0x0, r24}, {r224, r62}, {}, {0x0, r181}, {r77, r222}, {r85}, {0x0, r168}, {}, {r80, r35}, {r127, r110}, {r164, r152}, {}, {}, {r154}, {r120, r27}, {r182, r19}], 0x2, "a0505080f468f9"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 22:45:37 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 316.935964][T11250] validate_nla: 2 callbacks suppressed [ 316.935978][T11250] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 316.949341][T11254] loop5: detected capacity change from 0 to 224 [ 316.956504][T11255] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 316.965705][T11250] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 316.974714][T11250] FAULT_INJECTION: forcing a failure. [ 316.974714][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 316.987344][T11250] CPU: 1 PID: 11250 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 316.996285][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.006382][T11250] Call Trace: [ 317.009740][T11250] dump_stack_lvl+0xd6/0x122 [ 317.014385][T11250] dump_stack+0x11/0x1b [ 317.018537][T11250] should_fail+0x23c/0x250 [ 317.022945][T11250] __should_failslab+0x81/0x90 [ 317.027794][T11250] should_failslab+0x5/0x20 [ 317.032336][T11250] kmem_cache_alloc_node+0x61/0x2c0 [ 317.037575][T11250] ? __alloc_skb+0xed/0x420 [ 317.042067][T11250] __alloc_skb+0xed/0x420 [ 317.046385][T11250] rtmsg_fib+0xa1/0x200 [ 317.050536][T11250] fib_table_insert+0xaaf/0x10b0 [ 317.055476][T11250] fib_add_ifaddr+0x64e/0x690 [ 317.060157][T11250] ? skb_put+0xb9/0xf0 [ 317.064214][T11250] fib_inetaddr_event+0xb5/0x210 [ 317.069150][T11250] blocking_notifier_call_chain+0x73/0xf0 [ 317.074858][T11250] __inet_insert_ifa+0x4fd/0x5e0 [ 317.079808][T11250] ? inetdev_event+0x73d/0xad0 [ 317.084562][T11250] inetdev_event+0x8ee/0xad0 [ 317.089145][T11250] raw_notifier_call_chain+0x53/0xb0 [ 317.094471][T11250] __dev_notify_flags+0x1d3/0x3b0 [ 317.099495][T11250] dev_change_flags+0xa2/0xc0 [ 317.104212][T11250] do_setlink+0x810/0x2410 [ 317.108627][T11250] ? __nla_validate_parse+0x108f/0x1760 [ 317.114215][T11250] ? __nla_parse+0x3c/0x50 [ 317.118621][T11250] rtnl_setlink+0x257/0x2a0 [ 317.123113][T11250] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 317.128183][T11250] rtnetlink_rcv_msg+0x711/0x7c0 [ 317.133128][T11250] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 317.138932][T11250] ? __wake_up+0x8d/0xc0 [ 317.143163][T11250] ? __d_rehash+0x125/0x180 [ 317.147662][T11250] ? __d_add+0x3bf/0x490 [ 317.151897][T11250] ? should_fail+0x2a/0x250 [ 317.156386][T11250] ? avc_has_perm_noaudit+0x1c0/0x270 [ 317.161822][T11250] ? rhashtable_jhash2+0x13a/0x1a0 [ 317.166921][T11250] ? jhash+0x2b0/0x2b0 [ 317.170980][T11250] netlink_rcv_skb+0x14e/0x250 [ 317.175735][T11250] ? rtnetlink_bind+0x60/0x60 [ 317.180409][T11250] rtnetlink_rcv+0x18/0x20 [ 317.184811][T11250] netlink_unicast+0x5ec/0x6b0 [ 317.189641][T11250] netlink_sendmsg+0x6ea/0x7d0 [ 317.194393][T11250] sock_write_iter+0x1a3/0x200 [ 317.199246][T11250] do_iter_readv_writev+0x2de/0x380 [ 317.204488][T11250] do_iter_write+0x192/0x5c0 [ 317.209077][T11250] do_writev+0x210/0x440 [ 317.213310][T11250] ? vfs_write+0x61a/0x900 [ 317.217727][T11250] __x64_sys_writev+0x41/0x50 [ 317.222445][T11250] do_syscall_64+0x44/0xa0 [ 317.226939][T11250] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 317.232826][T11250] RIP: 0033:0x7f5cdb0a4739 [ 317.237227][T11250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 317.256853][T11250] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 317.265249][T11250] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 317.273258][T11250] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 317.281212][T11250] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.289341][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.297301][T11250] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 317.341484][T11255] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 22:45:37 executing program 1 (fault-call:2 fault-nth:44): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:37 executing program 0: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0xb, 0x2, 0xff, 0xb}, &(0x7f0000000100)=0x20) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0x3, {{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}}, 0x88) r0 = clone3(&(0x7f0000000280)={0x64040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setpgid(0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) connect(0xffffffffffffffff, &(0x7f00000005c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000480)={0x820000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x31}, &(0x7f0000000300)=""/44, 0x2c, &(0x7f0000000340)=""/92, &(0x7f0000000440)=[r0, r1, 0x0, r0, r2], 0x5}, 0x58) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x719, 0x7f, 0x7, 0x7, 0x3d2]}, &(0x7f0000000580)=0x54) r3 = creat(&(0x7f0000002a80)='./file0\x00', 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000002b00)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x9e, 0x8}]}) [ 317.546692][T11280] loop5: detected capacity change from 0 to 224 22:45:37 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 317.592909][T11281] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 317.604204][T11281] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 317.622565][T11281] FAULT_INJECTION: forcing a failure. [ 317.622565][T11281] name failslab, interval 1, probability 0, space 0, times 0 [ 317.635295][T11281] CPU: 0 PID: 11281 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 317.644118][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.654163][T11281] Call Trace: [ 317.657434][T11281] dump_stack_lvl+0xd6/0x122 [ 317.662068][T11281] dump_stack+0x11/0x1b [ 317.666266][T11281] should_fail+0x23c/0x250 [ 317.670683][T11281] __should_failslab+0x81/0x90 [ 317.675444][T11281] should_failslab+0x5/0x20 [ 317.679935][T11281] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 317.685667][T11281] ? __kmalloc_node_track_caller+0x30/0x40 [ 317.691492][T11281] __kmalloc_node_track_caller+0x30/0x40 [ 317.697119][T11281] ? rtmsg_fib+0xa1/0x200 [ 317.701431][T11281] __alloc_skb+0x187/0x420 [ 317.705829][T11281] rtmsg_fib+0xa1/0x200 [ 317.709969][T11281] fib_table_insert+0xaaf/0x10b0 [ 317.714901][T11281] fib_add_ifaddr+0x64e/0x690 [ 317.719581][T11281] ? skb_put+0xb9/0xf0 [ 317.723648][T11281] fib_inetaddr_event+0xb5/0x210 [ 317.728645][T11281] blocking_notifier_call_chain+0x73/0xf0 [ 317.734387][T11281] __inet_insert_ifa+0x4fd/0x5e0 [ 317.739349][T11281] ? inetdev_event+0x73d/0xad0 [ 317.744207][T11281] inetdev_event+0x8ee/0xad0 [ 317.748808][T11281] raw_notifier_call_chain+0x53/0xb0 [ 317.754143][T11281] __dev_notify_flags+0x1d3/0x3b0 [ 317.759159][T11281] dev_change_flags+0xa2/0xc0 [ 317.763815][T11281] do_setlink+0x810/0x2410 [ 317.768210][T11281] ? __nla_validate_parse+0x108f/0x1760 [ 317.773739][T11281] ? __nla_parse+0x3c/0x50 [ 317.778144][T11281] rtnl_setlink+0x257/0x2a0 [ 317.782629][T11281] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 317.787635][T11281] rtnetlink_rcv_msg+0x711/0x7c0 [ 317.792569][T11281] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 317.798377][T11281] ? __wake_up+0x8d/0xc0 [ 317.802615][T11281] ? __d_rehash+0x125/0x180 [ 317.807101][T11281] ? __d_add+0x3bf/0x490 [ 317.811357][T11281] ? should_fail+0x2a/0x250 [ 317.815853][T11281] ? avc_has_perm_noaudit+0x1c0/0x270 [ 317.821311][T11281] ? rhashtable_jhash2+0x13a/0x1a0 [ 317.826402][T11281] ? jhash+0x2b0/0x2b0 [ 317.830464][T11281] netlink_rcv_skb+0x14e/0x250 [ 317.835214][T11281] ? rtnetlink_bind+0x60/0x60 [ 317.839877][T11281] rtnetlink_rcv+0x18/0x20 [ 317.844276][T11281] netlink_unicast+0x5ec/0x6b0 [ 317.849036][T11281] netlink_sendmsg+0x6ea/0x7d0 [ 317.853790][T11281] sock_write_iter+0x1a3/0x200 [ 317.858582][T11281] do_iter_readv_writev+0x2de/0x380 [ 317.863784][T11281] do_iter_write+0x192/0x5c0 [ 317.868370][T11281] do_writev+0x210/0x440 [ 317.872590][T11281] ? vfs_write+0x61a/0x900 [ 317.877149][T11281] __x64_sys_writev+0x41/0x50 [ 317.881831][T11281] do_syscall_64+0x44/0xa0 [ 317.886232][T11281] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 317.892143][T11281] RIP: 0033:0x7f5cdb0a4739 [ 317.896608][T11281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 317.916205][T11281] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 317.924708][T11281] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 317.932673][T11281] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 22:45:38 executing program 5: setns(0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:38 executing program 1 (fault-call:2 fault-nth:45): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 317.940706][T11281] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.948660][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.956628][T11281] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 318.045213][T11312] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 318.057593][T11314] loop5: detected capacity change from 0 to 224 [ 318.075516][T11312] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 318.084572][T11312] FAULT_INJECTION: forcing a failure. [ 318.084572][T11312] name failslab, interval 1, probability 0, space 0, times 0 [ 318.097200][T11312] CPU: 0 PID: 11312 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 318.105953][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.116006][T11312] Call Trace: [ 318.119266][T11312] dump_stack_lvl+0xd6/0x122 [ 318.123837][T11312] dump_stack+0x11/0x1b [ 318.127971][T11312] should_fail+0x23c/0x250 [ 318.132371][T11312] __should_failslab+0x81/0x90 [ 318.137130][T11312] ? fib_insert_alias+0x295/0x7a0 [ 318.144165][T11312] should_failslab+0x5/0x20 [ 318.148778][T11312] kmem_cache_alloc_trace+0x52/0x320 [ 318.154075][T11312] ? kmem_cache_alloc+0x20d/0x300 [ 318.159083][T11312] ? fib_insert_alias+0x168/0x7a0 [ 318.164116][T11312] fib_insert_alias+0x295/0x7a0 [ 318.168949][T11312] ? kmem_cache_alloc+0x20d/0x300 [ 318.173968][T11312] ? fib_table_insert+0x468/0x10b0 [ 318.179120][T11312] fib_table_insert+0x564/0x10b0 [ 318.184046][T11312] fib_add_ifaddr+0x64e/0x690 [ 318.188752][T11312] ? skb_put+0xb9/0xf0 [ 318.192798][T11312] fib_inetaddr_event+0xb5/0x210 [ 318.197837][T11312] blocking_notifier_call_chain+0x73/0xf0 [ 318.203536][T11312] __inet_insert_ifa+0x4fd/0x5e0 [ 318.208452][T11312] ? inetdev_event+0x73d/0xad0 [ 318.213300][T11312] inetdev_event+0x8ee/0xad0 [ 318.217871][T11312] raw_notifier_call_chain+0x53/0xb0 [ 318.223137][T11312] __dev_notify_flags+0x1d3/0x3b0 [ 318.228140][T11312] dev_change_flags+0xa2/0xc0 [ 318.232804][T11312] do_setlink+0x810/0x2410 [ 318.237203][T11312] ? __nla_validate_parse+0x108f/0x1760 [ 318.242731][T11312] ? __nla_parse+0x3c/0x50 [ 318.247138][T11312] rtnl_setlink+0x257/0x2a0 [ 318.251707][T11312] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 318.256784][T11312] rtnetlink_rcv_msg+0x711/0x7c0 [ 318.261702][T11312] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 318.267505][T11312] ? __wake_up+0x8d/0xc0 [ 318.271737][T11312] ? __d_rehash+0x125/0x180 [ 318.276223][T11312] ? __d_add+0x3bf/0x490 [ 318.280447][T11312] ? should_fail+0x2a/0x250 [ 318.285003][T11312] ? avc_has_perm_noaudit+0x1c0/0x270 [ 318.290369][T11312] ? rhashtable_jhash2+0x13a/0x1a0 [ 318.295468][T11312] ? jhash+0x2b0/0x2b0 [ 318.299532][T11312] netlink_rcv_skb+0x14e/0x250 [ 318.304324][T11312] ? rtnetlink_bind+0x60/0x60 [ 318.309030][T11312] rtnetlink_rcv+0x18/0x20 [ 318.313430][T11312] netlink_unicast+0x5ec/0x6b0 [ 318.318176][T11312] netlink_sendmsg+0x6ea/0x7d0 [ 318.323015][T11312] sock_write_iter+0x1a3/0x200 [ 318.327818][T11312] do_iter_readv_writev+0x2de/0x380 [ 318.333046][T11312] do_iter_write+0x192/0x5c0 [ 318.337732][T11312] do_writev+0x210/0x440 [ 318.341953][T11312] ? vfs_write+0x61a/0x900 [ 318.346349][T11312] __x64_sys_writev+0x41/0x50 [ 318.351134][T11312] do_syscall_64+0x44/0xa0 [ 318.355711][T11312] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.361606][T11312] RIP: 0033:0x7f5cdb0a4739 [ 318.366013][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 318.385598][T11312] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 318.393997][T11312] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 318.401951][T11312] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 318.409907][T11312] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 318.417856][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.425807][T11312] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:40 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:40 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='[\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\b\x1a%\xe0\x90\x93\x12l\xb6Z2\xbc\x06|\xe9\xc2Y\x01\x00\x81\x9eG\xf9,\xe2\xc6a\x9f\xe8\xf1\xd6\xec\xe2+O\xe1jS\xd6\x91%g|\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99@\x00`\xc3\xcf\xd3\xae\xaf(\xcb\xca\xd1\b\xd2\a\x11\xa9\x95\xd2\x05\xff\xc6\xca\x97!*\x886\xe0m\x96\xaf\x0f\xb1{\xa6@\xf1\xcd\xd7\xdf< \x8f/\xa9\x82\xdb\x88&\x87\x85\xd9\r[\x1a\x05\x1ce\x9c\"\x7f\x1f\x94>\xfa~\x9e\xf2A\x8d\xa0\xd2\x02\xf8.\xe6N\n\xa1\xb2\x7f:)\x16\x95@\xb3\xc3\xa4\xa3n\xc8\xa6\xcb9\x03\x91\xdb\x7fre\xf1*c\xb6\xc2\xdaE\x01\x94\"\x00'/198, 0x5) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\''}]}, 0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002540)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x340, 0x15, 0x100, 0x70bd25, 0x25dfdbfb, {0xb}, [@typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x101, 0x29, 0x0, 0x1, [@typed={0xc, 0x30, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=r1}, @generic="49d8448284fbdbdec64d0873e257e3910a8bd2456496f49629a4ee2be2063ec27bf06244b2418ff6c961aa26a66bf4125ae34531f8570616fe9f5dabc3495cce75a6bcc15cc2861549d8948fdc0fe694", @generic="7774ffa2813dc49c243283206b79d3988f7f8668ec05b0612103d1feeab4cac03c766f2c4a6179dd642022e795339b7ee65c7e257a6e637830d0d8058f7498bf63219442f23a7575e0c1a49ceaacc002e92d660c5ee413ed324c8912aea42269bb9d6624943ad765f1226e4c409de1f581ec445b1fae766bbaf2623e0f591180a3de67", @typed={0x8, 0x3d, 0x0, 0x0, @uid}, @generic="7948ce0308ab"]}, @nested={0x21d, 0xb, 0x0, 0x1, [@generic="bf2f1b87bbf606cae31f95d3d95c4bc5591a4cf19703aed57700456d9cb1dcd58284e1c01640217e27a8c74f7e6d70a610c5731e4993bce3427617287955a57aa8f2fd510ed7c39009a8da1ecf10b48691edebc1443e36603eda881fa5d0efb45843794664b611d52efe947df83caf7c94985b85f4786e276a989efdf177e7d3b7c0244d59db92cd2aebb19ddabf82bef0515dfe35a936c4260e90c093bd0d9d6ec8", @generic="d1d0c41d14e068e578d18489114fe07b8eabcabbbde22abf2029f6650e0ae557980a221f91d7cc283aa9a2ff70d582ad843c4ee1bab02b70a65028336454bad05e65f803ef369090d67a9cad49483d93ba7f5f3f03bfff10272f0a5d528d619a67e9f220dfde13d433619e3db23ce96fe294d616d39b027d6743d90c08720c32a97c412b140011fd0a35c53cc58e516546093f092bd2dc8ac4482ca57c5b0b7e533291913e622f6e06ec0d72569484017d2ab37c5aa6ae430d5205d069316d453f1914278be2fb01fcb480bee4", @generic="faaaa8ffd3edc060ff7b72f784fa9f38360865f1cb43c5a35d6bfa2d9a055546b0e1a9ccca495c60231c5034960d1f5af7304c0dfea3209ca3a4a12b504c72e6cd745201e1b1049a69983dfe5daadf5f02f697cf6c1e042e911e13ab2fce475cc7c45583986f3cec4a223fd69aefbcdf2ca9b7bd4532e0fb48abe09ccb24b8db64a0583278641752357265486e4b316bf9c7dd4352f1f24b9a3adeae7fbb49ff008c7e2cf745d0354380"]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000000700)=[{&(0x7f00000006c0)}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/74, 0x4a}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/41, 0x29}], 0x4, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b40)=""/74, 0x4a}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001cc0)=""/22, 0x16}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/54, 0x36}, {&(0x7f0000001e40)=""/211, 0xd3}, {&(0x7f0000001f40)=""/46, 0x2e}, {&(0x7f0000001f80)=""/30, 0x1e}], 0x6, &(0x7f0000002040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000020c0)=""/25, 0x19}], 0x1, &(0x7f0000002140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x5, 0x20, &(0x7f0000002340)={0x0, 0x3938700}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0xb8, &(0x7f0000002380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@uname={'uname', 0x3d, '\''}}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@afid}, {@posixacl}, {@cache_fscache}, {@posixacl}], [{@euid_lt={'euid<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x76}}, {@subj_user={'subj_user', 0x3d, '#! '}}, {@subj_user={'subj_user', 0x3d, '[\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\b\x1a%\xe0\x90\x93\x12l\xb6Z2\xbc\x06|\xe9\xc2Y\x01\x00\x81\x9eG\xf9,\xe2\xc6a\x9f\xe8\xf1\xd6\xec\xe2+O\xe1jS\xd6\x91%g|\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99@\x00`\xc3\xcf\xd3\xae\xaf(\xcb\xca\xd1\b\xd2\a\x11\xa9\x95\xd2\x05\xff\xc6\xca\x97!*\x886\xe0m\x96\xaf\x0f\xb1{\xa6@\xf1\xcd\xd7\xdf< \x8f/\xa9\x82\xdb\x88&\x87\x85\xd9\r[\x1a\x05\x1ce\x9c\"\x7f\x1f\x94>\xfa~\x9e\xf2A\x8d\xa0\xd2\x02\xf8.\xe6N\n\xa1\xb2\x7f:)\x16\x95@\xb3\xc3\xa4\xa3n\xc8\xa6\xcb9\x03\x91\xdb\x7fre\xf1*c\xb6\xc2\xdaE\x01\x94\"\x00'}}]}}) 22:45:40 executing program 5: setns(0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:40 executing program 1 (fault-call:2 fault-nth:46): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30354, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'U^]#]*'}, {0x20, '\x00'}, {0x20, '^$@/'}, {0x20, '%\xa1'}, {0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '^:'}, {0x20, '+'}, {0x20, 'cgroup.controllers\x00'}, {}], 0xa, "6fb2d95b3cca84359576d873d56f"}, 0x5a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x10000000}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x4000010, r2, 0x1f006000) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) close(0xffffffffffffffff) 22:45:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000100)=""/49, &(0x7f0000000140)=0x31) fstat(r0, &(0x7f0000000180)) pidfd_send_signal(r0, 0x23, &(0x7f0000000200)={0x12, 0xe0c6, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x5, 0x0, {0x5, 0x1ffe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x8a0, 0x40}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1b581885a271"}, @NL80211_ATTR_PREV_BSSID={0xa}, @chandef_params, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat2(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x800, 0x21, 0x9}, 0x18) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000018c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)={0x13ac, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xca, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x737}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x1014, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xece7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x13ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xcc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x53, 0x3, "945db4e2c314a90ed5116804b5c717471cfcbe0b8ad46abb4befd14229a66907c3b0b1d6aaeee7a2d83b35e57219e4ed5ea23751e6d27bc5f208095ec589e5e9436fb7c6fcf7709cf76bb310001ceb"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "411c101d2bad1dca5b462a0cd1c7822685a1efc837"}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) r2 = signalfd4(r1, &(0x7f0000001ac0)={[0x9]}, 0x8, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x80000000, &(0x7f0000001b00)) r3 = openat$incfs(r0, &(0x7f0000001bc0)='.pending_reads\x00', 0x101002, 0x10) preadv(r3, &(0x7f0000002fc0)=[{&(0x7f0000001c00)=""/90, 0x5a}, {&(0x7f0000001c80)=""/194, 0xc2}, {&(0x7f0000001d80)=""/234, 0xea}, {&(0x7f0000001e80)=""/169, 0xa9}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/122, 0x7a}], 0x6, 0x4, 0x80000000) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000003040), 0x20000, 0x0) signalfd4(r4, &(0x7f0000003080)={[0xffffffffffff4c4c]}, 0x8, 0x800) r5 = syz_open_dev$vcsa(&(0x7f00000030c0), 0x5, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, r5, 0xe3b08000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000064c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006480)={&(0x7f0000003140)={0x330c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1d4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x6, 0x3, 0x9c, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x4, 0x2, 0x2, 0x1, 0x3, 0xff, 0x6, 0x0, 0xbca]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x8, 0x100, 0x0, 0x200, 0x3, 0xe397, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x7, 0x1, 0x2, 0x3, 0x9, 0x80]}, @beacon_params=[@NL80211_ATTR_IE={0x188, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x4, 0x2, 0xa5, 0xca}}, @fast_bss_trans={0x37, 0xf2, {0x3f, 0x5, "225ec8c34a30949bb09332ec15214e94", "b2c4f2d2c756633e812fe38a2e298144c781e9cccedd868ebe960376cfebd584", "8e07b75f503243319514e56d84bc6c66a5b1b4b089ef51961bb58a2206287bdb", [{0x4, 0x28, "c22eb9e7ba0c192bc0cad89b0e8bebf53a0b5b82bb84f275d61b79305d511c9041e854f5d27c2243"}, {0x4, 0x1d, "bef74b098805782ef78435eec98f40d48902c5bdf70f18fdb3aca480c8"}, {0x3, 0x28, "06dc2a8e36c2678988612e6a8d9d74b4e802d2947650e17433347217ee9583bbdaf2d99c8b4c0b34"}, {0x2, 0x20, "fee25ccf0ea065af9dab7773788d60804cfb6fc45b1bd4a54b9339ed18e0c7c5"}, {0x1, 0x9, "8069b9282a74124e1f"}]}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x7a, {0x4, 0x20, 0x1, "b4989d5d23038945ba605c82d4adc2590e9814581bcd58b3f78b03a911d0f4191fdf5be1477e1036322710ea344885e2242a9415f10a9ac95fa23af4f632707d249e19b5396c3dcb9820be8ddef3f932572474e25dc2a673f29aa318357422bc2564da43b26dceafe9b13560c6d5c49c7cade5d6b8342e"}}, @chsw_timing={0x68, 0x4, {0x0, 0xfff7}}]}]]}, @NL80211_ATTR_CSA_IES={0x3120, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x98, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x9d, 0x3f}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x3f, 0x2, @broadcast, 0x1, 0x800, 0xce9a}}, @random_vendor={0xdd, 0x72, "4cdbb972db45bcbe1e16492bbb2e44990f60b33dd333089266f447246dcabfa65ccdf6aa036c119416f5e4025f665839a0ba592013b79884b6a01913c776f420d464aa062ba7375a470be143c9adf594b809a363f7f44cd55553c7f3426590c9b21148f668cda47dd008c3af271b4c388768"}, @challenge={0x10, 0x1, 0x25}]}, @NL80211_ATTR_PROBE_RESP={0x4d7, 0x91, "d84c3ce20db66da46267ab8100eab674a6258f57bb595f1e60849b1ad371d5eeca954888843a0bb75ddca22a0e64457e79ec68e79d137d4f972b5e9901584169caf3ed9e53497b087a54ecacc1c7baad66c9063e58de0ec9cad946c9d63d3b0f119935e07feff33000101e24beeab89ad205274710807c8c817688f51a6ab3838f0101feecf8d8432a9cd21719b99fbae2969d697b7e26a89eaa5a26bce10ec449b60f68aa5974da277b9785b8552a17a7e9849ff75e9f4ba455e88846d782cf8158036f86a7241b4fb7be3fea6dad35e4f6019b6b93761cb12cd7029a0e757fce72aceae9423cd11ea074ab1eb9f427239615cf06ad493f28baeec026fbbd5399782801d1f96cea269da267b3d8f80751dbd5829d6d12f079102a049098ff0f90747e424f475d092f3179b53ab2cdb63549a67ebbab4af6eca662844e38f95b6f848731463f4e7245ca9cdbbd9f72f7a23630b837740709e66d4d1f03e53b9d0a28707a30f28226fe3ffb03ee3a187fc27e67e5c9312554f6d6d4bba16cd08f5307335e4c9deaee03606bc80bc26aced61fc95f84bb67d1ad1bd9a75cf004ee91c39d5fe60360abf99504741ec8ce130f7083e7182a4f233b54ee79b54daf00486ac41652f39e414a97ab9444ba4e851dd2a07a7f357c3fb051a53c37364867a7bf3bbd5a8aa9c0486c5b1b9caa6e29bca2a5b57d4f3783f68b6a33517b86ebd1270226631da32e42882147f9c6b51773ac2fc086879a86feee149788883ca30d7d820ddde579f33343bd1f9948a1a2728768ca17a49a24fd71960a7eecc415ad9e164bfc8cb30ea613c1afbcd6a00fa044185024272650e826c9db3668cd4a43df193d6fa418697092ee4d09ba5ae2c299802bd49011e3ab9a59cf75c428e2140b07eb1fd5e983319901e31fe6ea4a7bbbeed172c9ec821961f96c214d2c35c1c3be1da800c4e12599c89a6f169d6ab89801f63df4cd2b85405edbb259d7e0ad455002d70b5b50335a78ad636de7820570b1d597ce7f20b7d28dc5fff83edd871fd18d735779a7db8269bff6d6f12afd4529b73c8132476aa29217fcaa6eb8dfcb0a500ef12a5ffe8e1023887b932ed456c6fa84036848842a11671e7b96376f761cb667aba2e93dbc2eff0436bd21990f18eea053012a200b45572d0ec770141f72520d5476b9c4711cb5c37314e8acc26d1df845cbdcc895d3e8ab7a293a88c846ea4a91114dee8a8d7db42f701e261961b7ab8294927a9a967fe508caeb5741dccf7232994014244f9381427a5e2bba8ac2976accd529941d4f1b19425ace02ed3411c03b324cb63cb70c9344ce6bf17bf591af09ab4e72b9cb80aab3a892281231e8c01bcb6a80444c16cad89a5e152a1934fc5f522708161a1933fd3a8938cffd7281bc8280239a98886ac614fd507e5548da2926c2b52ac5b0fac582ee9aa410bb9d2c2cdd6f17b1dfcbbe7e2863b3227a5e1565b3ed07c670377cdb98996d19ed2344b2df2fbf55226d01b40a10f19bece4ea523be2f965354c9d65e1d5cd737949134a977c26e2029c388312bad4efa144d76c442fa56e31495ee60faee8d13a9c740e65eadcccaf61919de6b889cc71e4170f3c03211605f0d27e9ca9263e9c2576c8d537ba2fc787aa3c72c00cf4740d5697b2aa2fcd80465827fc4205864f4b7872e8eb43d926bc29e29ee753115b3711235816917320d9dd88ad852feb99aa19793d3dc0c286da8d76421354"}, @NL80211_ATTR_PROBE_RESP={0x424, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x0, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x5, 0xa, 0x2, 0x7, 0x400, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x4, 0xc9ee, 0x6, 0x3, 0x81, 0x2, 0x7, 0x3, 0x1]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x19, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x8, {0x0, 0x0, @val=0x100, @val=0x2b, @void}}]}, @NL80211_ATTR_FTM_RESPONDER={0x18c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe1, 0x3, "9a8761ca3aa29c7514bad909311e1a95c6cdd512ca272b381c6764b25dc0f6c9d8e3d621ceaacc96fff0993686a31999896fd85dcdec8bcea7825239e87c10dbba4ba7d347a78da54cebf3d46445eba4dd1abecd7d5f74e31fda10daf8a63e6d737e10eac4fbec9009a8720ff45cb2fc0723c406a054b9563af35b8e1241a8344a35e3b6ef15488859322ca9eb3e74e90875851ea8fe359e966ab05053c6fb1e9c15f9f1b49104dd756d2abc9f3e643bc41d9c17efe38e8d4e23ab6d1cd50a3b24a8710e9d7cb0a5c81260c685312a2d5622fab392b11774dbb0d55fa5"}, @NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "3404c0fc80"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "76d3c2aa6751d6083db86899263ddf359b6218f94be8dbc9ee78bc169daed6c746dbd15eb03e11309de19151a58248c1c52f9bfebf4a2f0236857fe237b236e81c30a7455fba0bb7326332b0c01fc2267a0c1f16d1ece5099ec54bc646d46609d0e70c7c6da82cc94e2cc117ebc2f74655ed407368a819f1190df797b1b93c1bbd410d563a1f506213aaa575"}]}, @NL80211_ATTR_BEACON_TAIL={0xa4, 0xf, [@random_vendor={0xdd, 0x98, "8ce16b52edc13b81569e982f3c85d6c5ab9fc3d300995e827ae6095d786c05410b771cfee5f4a125475e97ad4abe5d054b7320b284c1794af27c0e97004f94adc7c3ad5ebfbc7e9c431dd801d74e7543167a3425e51bc61d2261a420ba3b9ead51e05690858ae9504dd3a498b55ad0246d97356838b7d8c81ce6ca106533da2c84f963c31b918175d3cdfd78e63b0e4686c54ff23f7ac0d5"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0x88, 0x8}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1388, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf8, 0x3, "61c952690e3283cfc77b7640a1eaba9e33b620ac3b3b608120de9828ea7cd34942bbf7f17965dd7e4f7454064cb719563fcae79be6a4f7874aefc3bfd6da97c5137d1d4f9e784cf7c98df3e3dd830c06b60b97971a86b83ee096a0c641427549fa5253251f82e3ae11735629b9537cdb8956ca3df80826a658039582fa5a9ed00fc5fd5a05c95ba6e0508c8c9ab158cce40584c20f4b0790ec656adbb706e1765d6c1d424b19ca8f956c19e41e804036b42c533e55beccfdb047898eb20f68b65271bf08fc25848ce324f59e2621efb9d74178a8349f2cd67b5706a6fefb539ae0efa1f89d392aa214da65e068517bcb10e358d8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xae, 0x3, "dfb6348e1c82955420661fc9faac5022558eaff80b2ec817b3a8b62af2c7259460267392c9b44a470e8e2d745bb02c25c3c70973541cb43ed8838ceba055fa92b46b28cc8195b942baa97840ce4e0866ae9fd707b234be7cc770d53bfeb0d8fb80a7c8d96c9e42909e157acfb89edb284034d8b70fd71385e9b5d3be255afaf3efbf15df1d456fb65ef1b51fef411d3485dae80de998a4af5c3e44fa7739b6970883f7db6053af1cb81a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd3, 0x3, "e6b3d37b00735746ef23f2397de06cab1836c03e534ec3e8a2d7a1203faa4dbc409ecde5930d491eb3b3cfbde3d6b43142c7868a0b458e966caa8310e3a21ea6711a650098d1ad89a7b16fdfcc5d2ac70fce89969e1e0715a47568d0f79f214db139f02bebb10de8b833d879b7c80f5bf21d05f4e3e86e0391b9b2f7569773501ff6ee8c1eb86f5c566a18a1af07eb2f170e906dc667d74984fd0daf94c380260e8502727a8507c94331d34d7962fb2ecc4d7dd2ab1339da3b2f67f242b3510b6ba754f7ebdf4824a9ac10f4d0325c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "72257986abf40d6f7dd1e24207a9c8e07c03b3480b2b053ec4d3c7f2651831c021f7819c7820278789f42dcf698b98e87cc139c37fff97af65748d4e7df85d1cb2a99cfb8616ff3af3f492346793b007608e26a4c8d36c905af6fedf58afcb5ac4740770d4080b4602464b0fa8da8f9c1a132bbf3a63fa318b695ba053466ec108cbfbc38a2214fd8f8ee714cdf41ae4791ce96548b8f245abe72bb4461188486fb0db7ce87af24f47fc80e303241f428c8552a4daa98a13d47c25b47c471889d3bad3fd3233ec2aab2059493bc4f5b2ca366d60dc43141ef410d9282f62fbcefaca8550bc7c458800742aed82f25a59"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x92, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="ea962e846a62", {0x4, 0x4}}, @ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x62b, @default, 0x8, @void, @val, @void, @val={0x4, 0x6, {0x20, 0x80, 0x0, 0x234}}, @void, @val={0x5, 0x4c, {0x1, 0x59, 0x5, "2904169e8652f405df6716ce6b1f24e11e446f04fd94d593ec8e863503e5aa2bc4bf3faa23e58105cd65eb27e4e6fd82e3cbbcca8b48b336fdbfa394ec52ec841f99cc6fffd002f891"}}, @val={0x25, 0x3, {0x1, 0xb3, 0x4}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x6, 0xa1}}, @void}}, @NL80211_ATTR_IE={0x2b, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x20, @device_a, 0xfffff423, "", 0x100, 0x8, @device_a, 0x346014d0}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x231, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0xef}, @device_b, @device_b, @initial, {0x6}}, @ver_80211n={0x0, 0x20, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0xffff, @random=0x8, 0x49, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x74}, @val={0x4, 0x6, {0xff, 0xa8, 0x1, 0x5}}, @void, @val={0x5, 0x33, {0x1, 0xff, 0x4, "b553f599e07d1924e8fe2c75373de3b6e51c99c5a3069b627d28da032e62c0203302432225ac0ee488956020251b4255"}}, @val={0x25, 0x3, {0x1, 0xb5, 0x1}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x4, 0x0, {0x9, 0x2, 0x0, 0x36a, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x7fffffff, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x3f, 0x8}}, @val={0x76, 0x6, {0xf8, 0x40, 0x1f, 0xcb5c}}, [{0xdd, 0x44, "ca19aa041191c13c78c8e33d457e9137957d24d254f6e831241f5d24cab1401467ca1516b6931e57a93d8d00af16866f7f6cd60e5549318e8fe44707cbb559cafa65e94f"}, {0xdd, 0xfe, "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"}, {0xdd, 0x36, "186828c824d0eb862313f35c7698309d2d9ccb5552db1199dfc916fdd0d5f805fe1e3dfda8668158435b5e8f0701caa4aae32ebaaecc"}]}}, @NL80211_ATTR_PROBE_RESP={0x331, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x539, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x97}, @device_a, @device_b, @from_mac=@broadcast, {0xf, 0xff}}, 0x3, @default, 0x8000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1b, 0x3, 0xfffc, 0x19}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0x7b, {0x9, 0x18, 0xe6, "aaae3858281137580a8581ebc27f29246977609dab8249df411a7e963b910896e551ea9114adb584b27bc404814f73c46ba256dea09314efe205328755b0af77d4b96fd1c3aa44d64fee5dac409624d0dcfadd75db6067e662d5443cc843aaf122ad062e54ac8ff287d63e6594cc45181f1824313da154c6"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xb5, 0x13}}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x6280000000, 0x1f, 0x0, 0x63, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x4, 0x5}}, @void, @void, @val={0x76, 0x6, {0x2, 0x7, 0x32, 0x4}}, [{0xdd, 0xb3, "857c64b03c98ef98480b3e25bf773b5b58495b9927aa95aabb87a36c70b7f06c3e190e21f89244b7c5fb51f23056919ca8243fab6b24865afa48245d2390d4be4b87daf56a94625a978fd3f9751d3ae8e4d2f7b844d5126b2bb7e1a7f47eb913a186bda2bb8b55d0b01928a9b8c7f7828f77877e4b49bb9b909a3d7809c1bd917189c82c8216db45685f2e8973a34aa2643bc8fc2d441d6f628fcf6568e5fde7a40ff15d4c8acd828245b63e4ace458cb3fc6e"}, {0xdd, 0xf0, "ed82b448cc8b281cf75987087cfc7f5dd82cb372a92b5abd558af41061a7bde696c3825c084b2a69a21b62e6b2980921a74f496faf50220201709297cb19b1e64f357d569308112395bfa1414e27715f55002d5db3b9091d560eb57d3124862387960c9e06ee24db5c08d0b1149f405ba7d683d7e3565107c03dc4f9a895a050d9d6f9f4ec4a281a55d57ee92fb03815328e36f3c1c9aa03770d794802ddb16fbf58c68e68a1036fb4ce93920b50e0550d6a76b039cc6973a7de7d19e65b4e3ed43512cb97bfe54acf8e68e0621893f9fe3f4e0b5f42f9583481fd13e0a7cd152bca276e91b5de2453c1771eaa99bfd8"}, {0xdd, 0xdd, "51ed7ca6fe0acdc49fed6738adf2b4e45889f3068d7836ae61039dac8d66e0098a863220f56110799f2dad3a21b29fc5a611ee8e061f577f6457b15b63816d3935e199506f33596d9f0352cf7df56871810c2b8080110da122788561fbb3c22258d6ce8be389096081ff944fe1689543ecde627aab5275a9d526414123825b9975b4b43bcf8b423c53bf902d8e206853c75292f421cc29bd7ab9469525089ffb162a0408cfd474d04cc88710f0efba4b7c9c9809e3bdfd89ddf93f76a007076405b327183eca0c18ee2b32fa76ffc8f1191ca98459dfe5f88c3adfed93"}, {0xdd, 0xaf, "64bdc81576e678b2a78bcd3d1954f988726882d2cd178008d7084b3c3070c25afb6707d3190c37946fd6ee6fd243b3aba0f8e1fa6012ab538142a8f28e7ea3cd0c0242bafe0f07ad36e04ee76828f67b470290f4dd87d39a42ccafc416671bfff4308591d9a88492476085f578d3e4fd099b4a7f4e57d8695ffc50dd9dff78ae28bf57f9c50cc50a107a595c4f7d680aefe3ffeb833c1012dd7d7ff2270d1b08ec173920d03547860a7ce427d8e604"}, {0xdd, 0x51, "df1edeebed28eeecc8b2d4de6ad803187595f6925ec089946b2ce55b86f68f1e3c279e8f76b61e743ae765f01c17fe36a6b660f1737aba027f62fe3714a56af4d70375479bbe2d8e6c8ea24c83a0d5706e"}, {0xdd, 0x93, "a4dfa021db2fc669ef8d1dafe6e36a4b6462e258c4e270a88aec4a3b138649db91c90bb5b9bafb883750c39c6a7687e8a0c99fbfb7447c3cba64e56d6254a23e90c43adc90e6c7c3916e65cce78c8a8d78e80f4f7347e6a87601da89fce9285f84e67ae99ac5efe08f8991a90fa9e49a20a33ce1205d7d6c9236ea854148891c1b7756c635fdcf51e3d1371bc6e472fcba260d"}, {0xdd, 0x35, "c23087f2912204f44d94b6b03f8bb8a1a5c7d3c219daa63f4027b4abddbcd747a945203a993b124f5138588c2c40bb46a83d4febe5"}]}}, @NL80211_ATTR_BEACON_TAIL={0x100, 0xf, [@fast_bss_trans={0x37, 0xdf, {0x2, 0x6, "7edecc5daa1fb1a8f0f7b5b3c31b50fb", "61b15108d69b48a0fc43a2e459d18a5a1f30a78eb883ef7dbebbfaae0ba04bf2", "7d6f541e99e6b70038656405b821b8b6b8de1cb12a6a68b4d22bf40689e245f6", [{0x2, 0x1c, "04ebb5a94193008ef5d2ba2e43452ed3818ff1bc3488361cff19ca23"}, {0x1, 0xb, "02401f74dd8d8c9bdf30e9"}, {0x4, 0x10, "b23b8af0987d28b61c2f90792b50f2a1"}, {0x2, 0x15, "709dbaffb9c37c731ff0d37ad6c4f47aa9f1065c94"}, {0x1, 0x1f, "7cef4fce08c0c6c7f39f6c7fe8c4bafb0c63b14f1b8e4329d5e3bb60a72aa2"}, {0x1, 0x16, "ab3c275e016b0e43fc936b46e348b26ec2cb492e5cc1"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @supported_rates={0x1, 0x5, [{0x30}, {0x22, 0x1}, {0x1b}, {0x48, 0x1}, {0x36, 0x1}]}]}, @NL80211_ATTR_IE_PROBE_RESP={0x89, 0x7f, [@preq={0x82, 0x83, @ext={{0x1, 0x1}, 0x7, 0x20, 0x5c, @device_a, 0x3, @broadcast, 0xc4, 0x180000, 0x9, [{{0x1, 0x0, 0x1}, @device_b, 0xfffffff9}, {{}, @device_a, 0x10000}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0xfff}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0xffff}, {{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @device_b, 0x1ff}, {{}, @device_b, 0x144}]}}]}, @NL80211_ATTR_IE={0x2a2, 0x2a, [@cf={0x4, 0x6, {0x3, 0xfb, 0x2, 0x6}}, @measure_req={0x26, 0xd5, {0x8, 0x4, 0xaa, "fc5ca35f565d69eda96af344db9e2851cf13fafe36264aeee880a1c9d8f83854ef82a17b84ff611cb4e592836360027661837ce374ccd0ecd85c0f671b12d86ca980bda5a8f701bdf5db82f6f1d1a7345ec8ca2bc6898f8cdfec9229292c565d697428ec090136bf3e02412440aa07e9dc04519811e5dba10a5fb3125d2f178c914d54aa1608f9c4446ec2e17c040eb39e187a62918cd697cf063f5a697024e2b4bb0be9a95df56f07e1ebf0ea233bf0ee2bff6d4999e1222c1e6260d4e0f3f92fb8877aec615cf83782f761c91ac49d6936"}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x2, 0x0, {0x40, 0x1f80, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x0, 0x4, 0x6}}, @dsss={0x3, 0x1, 0x74}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x7}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0x13, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @fast_bss_trans={0x37, 0x81, {0x0, 0x4, "66db7af8617408ccc8a02d13ed46d30e", "d08faa21c5ebc252c7b4030f57cd3c6526e394a2c65a609d5c1e709def293558", "9600f23b555318e91392fa4dbef6d18085195199727597dba7deb70905434ed7", [{0x2, 0x3, "11a0a7"}, {0x1}, {0x1, 0xb, "13345f43a69621d2830fb8"}, {0x2, 0x19, "2bdc34202593b51aa18b8b7e768666ba763bd927b431bf822d"}]}}, @random={0x6, 0xef, "eaf3e1d8981b44ed128d5eb30f32199f3d8409c643b80202d2983fa376365d2c1391729d0d64f9f63f735470c3d612e07a37c5af78b3441f0bf097757f776979a4715909988ae1df0f46275d00ecf878cf0f3d6755eb69fbba2bdb9811cef68dd0cd1d888a6e482414ab3baf91cbed6077c408e9901688db5740e3fbeaf766927d41fe16ee476a9e92ddaea0314d7603fad3289b518a4c3a2eb9f373450cabee0e5e12d26efcaf7a6e5c2015a198860a510276971e2d190e4d55be195c5b5681c48946dc7ccf939bb209f5e78ad6979b92c123500425aafbd07e4053c2a37a7614cbb2c83f2a2855b9da59d3fc2063"}, @rann={0x7e, 0x15, {{0x0, 0x54}, 0x2, 0x1f, @device_a, 0x8, 0x80, 0x80}}]}, @NL80211_ATTR_BEACON_HEAD={0x1f0, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x9, 0xfff}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x3, @default, 0x80, @void, @val={0x1, 0x5, [{0xb}, {0x36, 0x1}, {0xb, 0x1}, {0x48}, {0x1}]}, @val={0x3, 0x1, 0x99}, @val={0x4, 0x6, {0x9, 0xff, 0x7f, 0x5}}, @val={0x6, 0x2, 0x80}, @val={0x5, 0x4b, {0x8, 0x93, 0x5, "f81e1ce3ca80e629c1158b5a79c3e4e3103aa1809a4cf799e50461b2a0c03160b910dd0163b2ed701e68debc1e78b74d201320110c2f86c81166ba2da44a7b213ce972ae44cf9f85"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, @val={0x76, 0x6, {0x7c, 0x5, 0x39, 0x4}}, [{0xdd, 0x5e, "bb713ca8e27a21c19d09f6e508f4560dd09855ad04da37694b032dc1ea1e1b45011bfa7b2fb71804cd29454ed5da7f9fb549bcc02448fcf1fcc1fe90e0dabd5c5878e24c4c0ef6589783bc55ff7b147d3ee8a7b8be8fb9f0296c93e6c454"}, {0xdd, 0xe3, "a0d895a87dd75756464c6fa9ab096c5301112c0e1c51765aa9630cb5b563083d95f8cb6bce76677d6e7693d1b9cca58e354dc857537008c7c0094ad691c3d5b138358ede5ace7dd1896ba8a1752370c2ca2b42136021ba5e482d88cd46d25377c73cdef9623103b3bf326d1baab63912eb34307fbda74b1852ee312bd7af9e160166d26d243c4b440202d3b58842f6cb050927e7e05112ecb06a2a4145d342aa615ab86bc00f684b3d7355f506dde0e2f0de84646e008ce12b4d5879153c211f5bfb614ffa612f35c783fbe6f6e1c9c34fcc4a1f01405cd10643fc51e611a2cad98d8b"}]}}]]}]}, 0x330c}, 0x1, 0x0, 0x0, 0x48015}, 0x20048894) 22:45:40 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r1 = dup3(r0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@isdn={0x22, 0x4, 0x1, 0x0, 0x9}, 0x80) sendmmsg$sock(r1, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@private, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@private0}, 0x2b3da120a3aaaa5d, @in6=@private2, 0x0, 0x1}}, 0xe8) 22:45:40 executing program 5: setns(0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 319.981617][T11342] loop5: detected capacity change from 0 to 224 [ 319.991491][T11343] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 320.021101][T11343] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r1, 0x0, 0x800100020600) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020600) ioctl$FITHAW(r4, 0xc0045878) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x20, 0x4}, {0x81, 0x0, 0x0, 0x4}, {0xb}]}, 0x10) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0'}, 0x4) 22:45:40 executing program 4: unshare(0x62020600) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_open(r0, 0x0) r2 = pidfd_open(r0, 0x0) r3 = dup3(r2, r1, 0x0) setns(r3, 0x2000000) [ 320.064111][T11343] FAULT_INJECTION: forcing a failure. [ 320.064111][T11343] name failslab, interval 1, probability 0, space 0, times 0 [ 320.076752][T11343] CPU: 0 PID: 11343 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 320.085551][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.095619][T11343] Call Trace: [ 320.098892][T11343] dump_stack_lvl+0xd6/0x122 [ 320.103487][T11343] dump_stack+0x11/0x1b [ 320.107648][T11343] should_fail+0x23c/0x250 [ 320.112069][T11343] __should_failslab+0x81/0x90 [ 320.116831][T11343] should_failslab+0x5/0x20 [ 320.121340][T11343] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 320.127058][T11343] ? __kmalloc_node_track_caller+0x30/0x40 [ 320.132874][T11343] ? netlink_trim+0x112/0x140 [ 320.133619][T11371] loop5: detected capacity change from 0 to 224 [ 320.137555][T11343] __kmalloc_node_track_caller+0x30/0x40 [ 320.137581][T11343] pskb_expand_head+0xc9/0x920 [ 320.154154][T11343] ? rcu_segcblist_enqueue+0x8e/0xa0 [ 320.159452][T11343] netlink_trim+0x112/0x140 22:45:40 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x201, 0x40) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1, 0x0, 0x0) [ 320.163962][T11343] netlink_broadcast_filtered+0x47/0xb60 [ 320.169603][T11343] ? nla_put+0xd8/0x100 [ 320.173839][T11343] ? fib_nexthop_info+0x3de/0x430 [ 320.178865][T11343] nlmsg_notify+0xcc/0x180 [ 320.183305][T11343] rtnl_notify+0x72/0x80 [ 320.187554][T11343] rtmsg_fib+0x183/0x200 [ 320.191799][T11343] fib_table_insert+0xaaf/0x10b0 [ 320.196740][T11343] fib_add_ifaddr+0x64e/0x690 [ 320.201476][T11343] ? skb_put+0xb9/0xf0 [ 320.205603][T11343] fib_inetaddr_event+0xb5/0x210 [ 320.210546][T11343] blocking_notifier_call_chain+0x73/0xf0 [ 320.216271][T11343] __inet_insert_ifa+0x4fd/0x5e0 [ 320.221215][T11343] ? inetdev_event+0x73d/0xad0 [ 320.225977][T11343] inetdev_event+0x8ee/0xad0 [ 320.230612][T11343] raw_notifier_call_chain+0x53/0xb0 [ 320.235913][T11343] __dev_notify_flags+0x1d3/0x3b0 [ 320.241109][T11343] dev_change_flags+0xa2/0xc0 [ 320.245766][T11343] do_setlink+0x810/0x2410 [ 320.250197][T11343] ? __nla_validate_parse+0x108f/0x1760 [ 320.255739][T11343] ? __nla_parse+0x3c/0x50 [ 320.260154][T11343] rtnl_setlink+0x257/0x2a0 [ 320.264644][T11343] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 320.269700][T11343] rtnetlink_rcv_msg+0x711/0x7c0 [ 320.274638][T11343] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 320.280537][T11343] ? __wake_up+0x8d/0xc0 [ 320.284774][T11343] ? __d_rehash+0x125/0x180 [ 320.289310][T11343] ? __d_add+0x3bf/0x490 [ 320.293554][T11343] ? should_fail+0x2a/0x250 [ 320.298081][T11343] ? avc_has_perm_noaudit+0x1c0/0x270 [ 320.303433][T11343] ? rhashtable_jhash2+0x13a/0x1a0 [ 320.308527][T11343] ? jhash+0x2b0/0x2b0 [ 320.312656][T11343] netlink_rcv_skb+0x14e/0x250 [ 320.317436][T11343] ? rtnetlink_bind+0x60/0x60 [ 320.322168][T11343] rtnetlink_rcv+0x18/0x20 [ 320.326568][T11343] netlink_unicast+0x5ec/0x6b0 [ 320.331334][T11343] netlink_sendmsg+0x6ea/0x7d0 [ 320.336080][T11343] sock_write_iter+0x1a3/0x200 [ 320.340833][T11343] do_iter_readv_writev+0x2de/0x380 [ 320.346016][T11343] do_iter_write+0x192/0x5c0 [ 320.350655][T11343] do_writev+0x210/0x440 [ 320.354878][T11343] ? vfs_write+0x61a/0x900 [ 320.359379][T11343] __x64_sys_writev+0x41/0x50 [ 320.364055][T11343] do_syscall_64+0x44/0xa0 [ 320.368565][T11343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 320.374467][T11343] RIP: 0033:0x7f5cdb0a4739 [ 320.378869][T11343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 320.398467][T11343] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 320.406938][T11343] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 320.414959][T11343] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 320.422929][T11343] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.430895][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.438854][T11343] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:43 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:43 executing program 0: r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r1, r0, 0x0, 0x800100020600) dup2(0xffffffffffffffff, r1) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "79b5e78f1afddfa5", "dcd7cf5ee92b8cff18892f40cbc4eecca931e8393445600799539223a5d305c5", "3bfae298", "6f9d39752f11a216"}, 0x38) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {0x64}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000040)='./file0\x00', 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup3(r2, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) 22:45:43 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x16c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5586e626, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6e, @remote, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6b0b}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff04}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3f, @private0, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0xc010) 22:45:43 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:43 executing program 1 (fault-call:2 fault-nth:47): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x5a, 0x11, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 322.993821][T11412] loop5: detected capacity change from 0 to 224 [ 323.014995][T11420] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 323.024542][T11423] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 323.034401][T11420] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:43 executing program 4: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="f6", 0x1, 0x80000000}, {&(0x7f0000000200)="e2", 0x1}], 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x100) [ 323.043283][T11423] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 323.046500][T11420] FAULT_INJECTION: forcing a failure. [ 323.046500][T11420] name failslab, interval 1, probability 0, space 0, times 0 [ 323.063964][T11420] CPU: 1 PID: 11420 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 323.072729][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.082845][T11420] Call Trace: [ 323.086123][T11420] dump_stack_lvl+0xd6/0x122 [ 323.090780][T11420] dump_stack+0x11/0x1b [ 323.091873][T11433] loop4: detected capacity change from 0 to 264192 [ 323.094958][T11420] should_fail+0x23c/0x250 [ 323.094982][T11420] ? kzalloc+0x16/0x20 [ 323.094997][T11420] __should_failslab+0x81/0x90 [ 323.095016][T11420] should_failslab+0x5/0x20 [ 323.095035][T11420] __kmalloc+0x6f/0x350 [ 323.095071][T11420] ? rtnl_notify+0x72/0x80 [ 323.127751][T11420] kzalloc+0x16/0x20 [ 323.131640][T11420] fib_create_info+0xdec/0x33c0 [ 323.136481][T11420] ? fib_rebalance+0x59/0x530 [ 323.141145][T11420] ? fib_add_ifaddr+0x64e/0x690 [ 323.146055][T11420] fib_table_insert+0x148/0x10b0 [ 323.150981][T11420] ? fib_sync_up+0x51c/0x550 [ 323.155560][T11420] ? arp_mc_map+0x2f7/0x300 [ 323.160069][T11420] fib_add_ifaddr+0x1b7/0x690 [ 323.164773][T11420] ? igmp_group_added+0x125/0x4d0 [ 323.169838][T11420] fib_netdev_event+0x178/0x510 [ 323.174724][T11420] raw_notifier_call_chain+0x53/0xb0 [ 323.179998][T11420] __dev_notify_flags+0x1d3/0x3b0 [ 323.185012][T11420] dev_change_flags+0xa2/0xc0 [ 323.189676][T11420] do_setlink+0x810/0x2410 [ 323.194134][T11420] ? __nla_validate_parse+0x108f/0x1760 [ 323.199669][T11420] ? __nla_parse+0x3c/0x50 [ 323.204075][T11420] rtnl_setlink+0x257/0x2a0 [ 323.208569][T11420] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 323.213617][T11420] rtnetlink_rcv_msg+0x711/0x7c0 [ 323.218543][T11420] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 323.224462][T11420] ? __wake_up+0x8d/0xc0 [ 323.228696][T11420] ? __d_rehash+0x125/0x180 [ 323.233190][T11420] ? __d_add+0x3bf/0x490 [ 323.237437][T11420] ? should_fail+0x2a/0x250 [ 323.241927][T11420] ? avc_has_perm_noaudit+0x1c0/0x270 [ 323.247285][T11420] ? rhashtable_jhash2+0x13a/0x1a0 [ 323.252391][T11420] ? jhash+0x2b0/0x2b0 [ 323.256448][T11420] netlink_rcv_skb+0x14e/0x250 [ 323.261201][T11420] ? rtnetlink_bind+0x60/0x60 [ 323.265886][T11420] rtnetlink_rcv+0x18/0x20 [ 323.270289][T11420] netlink_unicast+0x5ec/0x6b0 [ 323.275066][T11420] netlink_sendmsg+0x6ea/0x7d0 [ 323.279820][T11420] sock_write_iter+0x1a3/0x200 [ 323.284578][T11420] do_iter_readv_writev+0x2de/0x380 [ 323.289770][T11420] do_iter_write+0x192/0x5c0 [ 323.294353][T11420] do_writev+0x210/0x440 [ 323.298592][T11420] ? vfs_write+0x61a/0x900 [ 323.303033][T11420] __x64_sys_writev+0x41/0x50 [ 323.307700][T11420] do_syscall_64+0x44/0xa0 [ 323.312113][T11420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 323.318000][T11420] RIP: 0033:0x7f5cdb0a4739 [ 323.322402][T11420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:45:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') set_mempolicy(0x3, &(0x7f0000000080)=0xffffffff, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket(0x2, 0x803, 0x9) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000180)) r3 = accept4(r2, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r4 = socket$unix(0x1, 0x235fdb160cf8a0b, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000240), 0xf0, 0x40002) bind$unix(r5, &(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept4(r4, &(0x7f00000003c0)=@qipcrtr, &(0x7f0000000440)=0x80, 0x80000) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000300)="70b4b2bb84759ed7fdee4743", 0xc}, {&(0x7f0000000700)="cf6117ba481d9de59cfae9cac073634d1864e9fe438a2b4ea71a0de741dfa25c6a0112f6dd43f78f726702f02e779856ac357ca894b6b6259f3770fac86b2bf3b1075f726e823d6cea517b8bbb96ce4ae6cd3fa6ab4b9ed2183ee57419cac7365fc5d13e1a57171b114ad76ba17105cb29f33111a73434f1080a48b67e39725d29366a6cf6106053b28bbb19544036f0749e4801b3db0fa720d42a2d49d19d80c9c80d7edb8d67696b7277411c5c772ca62ced45dcebe579aaa1abad8cc4815375ae290964d0ee8d6124711ab43401a53ef019e20f9446fb4e", 0xd9}, {&(0x7f0000000800)="aed75a42e3757acebff38a3bffc19fac801e713f2dddcdf2d7d3c075c2b8f1242c1902edcc3de799684c45c78803a70f1a49f381f070190e3d2f679896e877d5ec3a44a707cdbea5d6a68182762a5b4f8189eba1c5317186ee2a182f4eb81aea8eb9dd718cca547429f48d6f211cc30921cab0823da5481157323ab0fc66f2b4e387596a40ce061006eae5393933eaac9eca15bf1f2940393925bee0a2dd2b1e9e06810c744c63d48dbe9ac7d6e23240fdadbfb3e2fffab34589c3fe02d18cf4ed4d6119e78ce5eea798", 0xca}, {&(0x7f0000000900)="f6182d129c9f593921fcc57ad7d295810458e7c639b4271c78ec84e98463a6a863414d78d11bc457c8e72dcd47e2d38f3cbf49580ac0a7460de134353b2b8d921caae581fa68ae255abec0635bde8d9cf4f924f797b0ced92b613532a2b328568676db019f2f9e3e89065bc4b46eff0a60aaffe7e5be4a7c3247facdb4ae7e4bd7f419f12e42dbf62f335dc49b8b9ea9b2e5eb5a8e76c22b2a311bbc795972536f4c70c591d0e9e1407c0ff89f93646c0f630735a3a380e35460912ef417d6aae630b32746d571cf29cc4a9b32398d54471a2c8c40277f", 0xd7}, {&(0x7f0000000500)="1d7c30b43048a5cd5a95365d2d41f1f4f78b44e43afe46ddfaac29a171ba41", 0x1f}], 0x5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="d25c413a85a0e1953dac3550737b029374fce671924f62deab0d28428d41cf369310e45462", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) r7 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f000001a240)={{r7}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000a80)={0x1, 0x5, 0x3ff, 0x81, {0x10, 0x8, 0x15a8e941, 0x9, 0x6}, [0x0, 0xfffffffffffff000, 0x68, 0x3, 0xe86]}}, @name="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"}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r8, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x504200}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="854b16d15d99fe836840cbdf68e1c4beeadd73159b50bcc8742a4b21b942d7a658d8ca7457fb41d7e0be777f17b2400ba21b4208", @ANYRES16, @ANYBLOB="30032dff01000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000040}, 0x4000000) pread64(r0, &(0x7f0000001240)=""/102392, 0xfffffe62, 0x0) 22:45:43 executing program 1 (fault-call:2 fault-nth:48): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:43 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 323.342009][T11420] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 323.350410][T11420] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 323.358366][T11420] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 323.366322][T11420] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.374277][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.382232][T11420] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:43 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 323.451714][T11452] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 323.468168][T11453] loop5: detected capacity change from 0 to 224 [ 323.479703][T11452] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 323.490216][T11452] FAULT_INJECTION: forcing a failure. [ 323.490216][T11452] name failslab, interval 1, probability 0, space 0, times 0 [ 323.502864][T11452] CPU: 0 PID: 11452 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 323.511625][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.521675][T11452] Call Trace: [ 323.524955][T11452] dump_stack_lvl+0xd6/0x122 [ 323.529548][T11452] dump_stack+0x11/0x1b [ 323.533718][T11452] should_fail+0x23c/0x250 [ 323.538133][T11452] ? kzalloc+0x16/0x20 [ 323.542196][T11452] __should_failslab+0x81/0x90 [ 323.546962][T11452] should_failslab+0x5/0x20 [ 323.551467][T11452] __kmalloc+0x6f/0x350 [ 323.555620][T11452] kzalloc+0x16/0x20 [ 323.559505][T11452] fib_create_info+0xdec/0x33c0 [ 323.564364][T11452] ? kcsan_setup_watchpoint+0x94/0x3f0 [ 323.570011][T11452] ? _raw_spin_unlock_bh+0x33/0x40 [ 323.575117][T11452] ? fib_release_info+0x423/0x470 [ 323.580157][T11452] fib_table_insert+0x148/0x10b0 [ 323.585192][T11452] fib_add_ifaddr+0x502/0x690 [ 323.589868][T11452] ? igmp_group_added+0x125/0x4d0 [ 323.594897][T11452] fib_netdev_event+0x178/0x510 [ 323.599760][T11452] raw_notifier_call_chain+0x53/0xb0 [ 323.605037][T11452] __dev_notify_flags+0x1d3/0x3b0 [ 323.610055][T11452] dev_change_flags+0xa2/0xc0 [ 323.614721][T11452] do_setlink+0x810/0x2410 [ 323.619583][T11452] ? __nla_validate_parse+0x108f/0x1760 [ 323.625137][T11452] ? __nla_parse+0x3c/0x50 [ 323.629548][T11452] rtnl_setlink+0x257/0x2a0 [ 323.634055][T11452] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 323.639085][T11452] rtnetlink_rcv_msg+0x711/0x7c0 [ 323.644034][T11452] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 323.649843][T11452] ? __wake_up+0x8d/0xc0 [ 323.654081][T11452] ? __d_rehash+0x125/0x180 [ 323.658594][T11452] ? __d_add+0x3bf/0x490 [ 323.662838][T11452] ? should_fail+0x2a/0x250 [ 323.667368][T11452] ? avc_has_perm_noaudit+0x1c0/0x270 [ 323.672847][T11452] ? rhashtable_jhash2+0x13a/0x1a0 [ 323.677958][T11452] ? jhash+0x2b0/0x2b0 [ 323.682021][T11452] netlink_rcv_skb+0x14e/0x250 [ 323.686842][T11452] ? rtnetlink_bind+0x60/0x60 [ 323.691515][T11452] rtnetlink_rcv+0x18/0x20 [ 323.695931][T11452] netlink_unicast+0x5ec/0x6b0 [ 323.700688][T11452] netlink_sendmsg+0x6ea/0x7d0 [ 323.705455][T11452] sock_write_iter+0x1a3/0x200 [ 323.710362][T11452] do_iter_readv_writev+0x2de/0x380 [ 323.715570][T11452] do_iter_write+0x192/0x5c0 [ 323.720167][T11452] do_writev+0x210/0x440 [ 323.724476][T11452] ? vfs_write+0x61a/0x900 [ 323.728904][T11452] __x64_sys_writev+0x41/0x50 [ 323.733672][T11452] do_syscall_64+0x44/0xa0 [ 323.738149][T11452] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 323.744095][T11452] RIP: 0033:0x7f5cdb0a4739 [ 323.748585][T11452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.768190][T11452] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 323.776596][T11452] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 323.784568][T11452] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 323.792565][T11452] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.800531][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.808544][T11452] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:46 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:46 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:46 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000240)=0x3, 0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x14e82, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x8, 0xf0, 0x8e, 0x4, 0x0, 0xd3b3, 0x10001, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4525, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x43086, 0x200, 0xa6c1, 0xe, 0xfff, 0xd9, 0x6, 0x0, 0x9, 0x0, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x9) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001640)={0x50, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x50}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) fadvise64(r5, 0x0, 0x0, 0x4) 22:45:46 executing program 1 (fault-call:2 fault-nth:49): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:46 executing program 4: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c800}, 0x40000800) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff050400000000200010004d2000000000000040000000000000000000", 0xffffffe5}], 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x1, 0x42, &(0x7f0000000680)={r3, r4+10000000}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1080000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@version_9p2000}], [{@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}, {@obj_type={'obj_type', 0x3d, '-$'}}, {@fowner_gt={'fowner>', r2}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x38, 0x61, 0x38, 0x68, 0x61, 0x63], 0x2d, [0x66, 0x34, 0x65, 0x35], 0x2d, [0x31, 0x32, 0x33, 0x62], 0x2d, [0x66, 0x65, 0x39, 0x62], 0x2d, [0x31, 0x65, 0x30, 0x63, 0xd3145d66b30dedd, 0x33, 0x34, 0x61]}}}, {@fowner_eq={'fowner', 0x3d, r5}}]}}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000010000010000000000d000000548fa6336f0100010000000000000000ff9a177f7b3f1e6e0b19c9ba873faa9a", 0x2f}], 0x2) 22:45:46 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, r0, 0x1, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) preadv(r1, &(0x7f0000000040), 0x0, 0x8, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000040)}, {&(0x7f0000000440)=""/132, 0x84}], 0x4, 0xfffffffd, 0x7) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x366}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000400)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)=';', 0x1) sendfile(r3, r4, 0x0, 0x1c500) [ 326.047688][T11487] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 326.049635][T11488] sg_write: data in/out 1048540/1 bytes for SCSI command 0x3f-- guessing data in; [ 326.049635][T11488] program syz-executor.4 not setting count and/or reply_len properly [ 326.060871][T11489] loop5: detected capacity change from 0 to 224 [ 326.088931][T11487] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 326.112515][T11487] FAULT_INJECTION: forcing a failure. [ 326.112515][T11487] name failslab, interval 1, probability 0, space 0, times 0 [ 326.125162][T11487] CPU: 1 PID: 11487 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 326.133930][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.143987][T11487] Call Trace: [ 326.147267][T11487] dump_stack_lvl+0xd6/0x122 [ 326.151864][T11487] dump_stack+0x11/0x1b [ 326.156021][T11487] should_fail+0x23c/0x250 [ 326.160464][T11487] ? kzalloc+0x16/0x20 [ 326.164530][T11487] __should_failslab+0x81/0x90 [ 326.169359][T11487] should_failslab+0x5/0x20 [ 326.173859][T11487] __kmalloc+0x6f/0x350 [ 326.178012][T11487] kzalloc+0x16/0x20 [ 326.181898][T11487] fib_create_info+0xdec/0x33c0 [ 326.186746][T11487] ? _raw_spin_unlock_bh+0x33/0x40 [ 326.191858][T11487] ? fib_release_info+0x423/0x470 [ 326.196871][T11487] ? fib_add_ifaddr+0x64e/0x690 [ 326.201854][T11487] fib_table_insert+0x148/0x10b0 [ 326.206804][T11487] fib_add_ifaddr+0x64e/0x690 [ 326.211497][T11487] ? igmp_group_added+0x125/0x4d0 [ 326.216563][T11487] fib_netdev_event+0x178/0x510 [ 326.221410][T11487] raw_notifier_call_chain+0x53/0xb0 [ 326.226694][T11487] __dev_notify_flags+0x1d3/0x3b0 [ 326.231771][T11487] dev_change_flags+0xa2/0xc0 [ 326.236510][T11487] do_setlink+0x810/0x2410 [ 326.240925][T11487] ? __nla_validate_parse+0x108f/0x1760 [ 326.246522][T11487] ? __nla_parse+0x3c/0x50 [ 326.250938][T11487] rtnl_setlink+0x257/0x2a0 [ 326.255468][T11487] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 326.260487][T11487] rtnetlink_rcv_msg+0x711/0x7c0 [ 326.265423][T11487] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 326.271251][T11487] ? __wake_up+0x8d/0xc0 [ 326.275518][T11487] ? __d_rehash+0x125/0x180 [ 326.280049][T11487] ? __d_add+0x3bf/0x490 [ 326.284329][T11487] ? should_fail+0x2a/0x250 [ 326.288830][T11487] ? avc_has_perm_noaudit+0x1c0/0x270 [ 326.294191][T11487] ? rhashtable_jhash2+0x13a/0x1a0 [ 326.299302][T11487] ? jhash+0x2b0/0x2b0 [ 326.303371][T11487] netlink_rcv_skb+0x14e/0x250 [ 326.308140][T11487] ? rtnetlink_bind+0x60/0x60 [ 326.312828][T11487] rtnetlink_rcv+0x18/0x20 [ 326.317252][T11487] netlink_unicast+0x5ec/0x6b0 [ 326.322085][T11487] netlink_sendmsg+0x6ea/0x7d0 [ 326.326854][T11487] sock_write_iter+0x1a3/0x200 [ 326.331663][T11487] do_iter_readv_writev+0x2de/0x380 [ 326.336910][T11487] do_iter_write+0x192/0x5c0 [ 326.341589][T11487] do_writev+0x210/0x440 [ 326.345970][T11487] ? vfs_write+0x61a/0x900 [ 326.350026][T11513] loop4: detected capacity change from 0 to 264192 [ 326.350395][T11487] __x64_sys_writev+0x41/0x50 [ 326.361539][T11487] do_syscall_64+0x44/0xa0 [ 326.365962][T11487] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 326.371876][T11487] RIP: 0033:0x7f5cdb0a4739 [ 326.376287][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 326.395994][T11487] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 326.404411][T11487] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 22:45:46 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:46 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 326.412378][T11487] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 326.420362][T11487] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 326.428385][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.436360][T11487] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:46 executing program 1 (fault-call:2 fault-nth:50): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:46 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getpgid(0x0) fsmount(0xffffffffffffffff, 0x0, 0x71) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x35, 0x20, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c727d135121c92f3904cf12daaf2a4bf2b6c87563d3580198420e06cbb0300000000000000e9cf2508ca84", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x8000000000, [], 0x0, "00001000"}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000040)='./bus\x00', 0x4) fallocate(r0, 0x3, 0x0, 0x100000fe) [ 326.516144][T11526] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 326.519666][T11525] loop5: detected capacity change from 0 to 224 [ 326.538347][T11526] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 326.547794][ C1] sd 0:0:1:0: tag#7319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 326.548210][T11526] FAULT_INJECTION: forcing a failure. [ 326.548210][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 326.557638][ C1] sd 0:0:1:0: tag#7319 CDB: opcode=0xe5 (vendor) [ 326.557657][ C1] sd 0:0:1:0: tag#7319 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 27 d1 35 12 1c [ 326.557672][ C1] sd 0:0:1:0: tag#7319 CDB[10]: 92 f3 90 4c f1 2d aa f2 a4 bf 2b 6c 87 56 3d 35 [ 326.557688][ C1] sd 0:0:1:0: tag#7319 CDB[20]: 80 19 84 20 e0 6c bb 03 00 00 00 00 00 00 00 e9 [ 326.557703][ C1] sd 0:0:1:0: tag#7319 CDB[30]: cf 25 08 ca 84 [ 326.609998][T11526] CPU: 0 PID: 11526 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 326.618767][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.628906][T11526] Call Trace: [ 326.632223][T11526] dump_stack_lvl+0xd6/0x122 [ 326.636945][T11526] dump_stack+0x11/0x1b [ 326.641102][T11526] should_fail+0x23c/0x250 [ 326.645522][T11526] __should_failslab+0x81/0x90 [ 326.650294][T11526] ? ipv6_add_addr+0x2f2/0xd10 [ 326.655067][T11526] should_failslab+0x5/0x20 [ 326.659577][T11526] kmem_cache_alloc_trace+0x52/0x320 [ 326.664866][T11526] ? blocking_notifier_call_chain+0xac/0xf0 [ 326.670834][T11526] ? inet6addr_validator_notifier_call_chain+0xe/0x30 [ 326.677662][T11526] ipv6_add_addr+0x2f2/0xd10 [ 326.682264][T11526] ? ndisc_mc_map+0x267/0x2e0 [ 326.686951][T11526] add_addr+0x7d/0x1e0 [ 326.691029][T11526] addrconf_notify+0x130a/0x1cb0 [ 326.695972][T11526] ? fib_sync_up+0x51c/0x550 [ 326.700564][T11526] raw_notifier_call_chain+0x53/0xb0 [ 326.705854][T11526] __dev_notify_flags+0x1d3/0x3b0 [ 326.710887][T11526] dev_change_flags+0xa2/0xc0 [ 326.715568][T11526] do_setlink+0x810/0x2410 [ 326.719985][T11526] ? __nla_validate_parse+0x108f/0x1760 [ 326.725598][T11526] ? __nla_parse+0x3c/0x50 [ 326.730014][T11526] rtnl_setlink+0x257/0x2a0 [ 326.734524][T11526] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 326.739622][T11526] rtnetlink_rcv_msg+0x711/0x7c0 [ 326.744558][T11526] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 326.750456][T11526] ? __wake_up+0x8d/0xc0 [ 326.754748][T11526] ? __d_rehash+0x125/0x180 [ 326.759485][T11526] ? __d_add+0x3bf/0x490 [ 326.763766][T11526] ? should_fail+0x2a/0x250 [ 326.768286][T11526] ? avc_has_perm_noaudit+0x1c0/0x270 [ 326.773703][T11526] ? rhashtable_jhash2+0x13a/0x1a0 [ 326.778897][T11526] ? jhash+0x2b0/0x2b0 [ 326.782973][T11526] netlink_rcv_skb+0x14e/0x250 [ 326.787761][T11526] ? rtnetlink_bind+0x60/0x60 [ 326.792526][T11526] rtnetlink_rcv+0x18/0x20 [ 326.796945][T11526] netlink_unicast+0x5ec/0x6b0 [ 326.801709][T11526] netlink_sendmsg+0x6ea/0x7d0 [ 326.806476][T11526] sock_write_iter+0x1a3/0x200 [ 326.811451][T11526] do_iter_readv_writev+0x2de/0x380 [ 326.816740][T11526] do_iter_write+0x192/0x5c0 [ 326.821333][T11526] do_writev+0x210/0x440 [ 326.825577][T11526] ? vfs_write+0x61a/0x900 [ 326.830050][T11526] __x64_sys_writev+0x41/0x50 [ 326.834771][T11526] do_syscall_64+0x44/0xa0 [ 326.839199][T11526] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 326.845105][T11526] RIP: 0033:0x7f5cdb0a4739 [ 326.849573][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 326.869207][T11526] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 326.877624][T11526] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 326.885595][T11526] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 326.893566][T11526] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 326.901593][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.909644][T11526] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:47 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:47 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 327.015542][T11553] loop5: detected capacity change from 0 to 224 22:45:49 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:49 executing program 1 (fault-call:2 fault-nth:51): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:49 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:49 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000009a80)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) 22:45:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x208e24b) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000640)={0x0, 0x101, 0x401}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000a40)={r2, 0xbe4, 0x9, 0x1}) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "c95f00", "2cfb52ae10a57ad7517e606342da9baf", "711d912d", "9a5008c53d12e166"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x80000, 0x120, 0x5}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) [ 329.085311][T11585] loop5: detected capacity change from 0 to 224 [ 329.085680][T11586] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 329.110502][T11586] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 329.127887][T11586] FAULT_INJECTION: forcing a failure. [ 329.127887][T11586] name failslab, interval 1, probability 0, space 0, times 0 [ 329.140675][T11586] CPU: 0 PID: 11586 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 329.149442][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.159574][T11586] Call Trace: [ 329.162855][T11586] dump_stack_lvl+0xd6/0x122 [ 329.167440][T11586] dump_stack+0x11/0x1b [ 329.171588][T11586] should_fail+0x23c/0x250 [ 329.176087][T11586] ? fib6_info_alloc+0x28/0x80 [ 329.180927][T11586] __should_failslab+0x81/0x90 22:45:49 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:49 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0xffffffe3) unlink(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000140)='./bus\x00', 0xa9) mount$bind(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x0, 0x0) setxattr$security_ima(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x0, 0x0, 0x3) [ 329.185701][T11586] should_failslab+0x5/0x20 [ 329.190219][T11586] __kmalloc+0x6f/0x350 [ 329.194367][T11586] fib6_info_alloc+0x28/0x80 [ 329.198957][T11586] ip6_route_info_create+0x388/0xc80 [ 329.204389][T11586] addrconf_f6i_alloc+0x12a/0x1a0 [ 329.209423][T11586] ipv6_add_addr+0x315/0xd10 [ 329.214006][T11586] ? ndisc_mc_map+0x267/0x2e0 [ 329.218751][T11586] add_addr+0x7d/0x1e0 [ 329.222824][T11586] addrconf_notify+0x130a/0x1cb0 [ 329.227762][T11586] ? fib_sync_up+0x51c/0x550 [ 329.232349][T11586] raw_notifier_call_chain+0x53/0xb0 [ 329.238704][T11586] __dev_notify_flags+0x1d3/0x3b0 [ 329.243746][T11586] dev_change_flags+0xa2/0xc0 [ 329.248420][T11586] do_setlink+0x810/0x2410 [ 329.252882][T11586] ? __nla_validate_parse+0x108f/0x1760 [ 329.258431][T11586] ? __nla_parse+0x3c/0x50 [ 329.262940][T11586] rtnl_setlink+0x257/0x2a0 [ 329.267545][T11586] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 329.272573][T11586] rtnetlink_rcv_msg+0x711/0x7c0 [ 329.277510][T11586] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 329.283314][T11586] ? __wake_up+0x8d/0xc0 [ 329.287564][T11586] ? __d_rehash+0x125/0x180 [ 329.292329][T11586] ? __d_add+0x3bf/0x490 [ 329.296578][T11586] ? should_fail+0x2a/0x250 [ 329.301074][T11586] ? avc_has_perm_noaudit+0x1c0/0x270 [ 329.306489][T11586] ? rhashtable_jhash2+0x13a/0x1a0 [ 329.311716][T11586] ? jhash+0x2b0/0x2b0 [ 329.315788][T11586] netlink_rcv_skb+0x14e/0x250 [ 329.320575][T11586] ? rtnetlink_bind+0x60/0x60 [ 329.325245][T11586] rtnetlink_rcv+0x18/0x20 [ 329.329664][T11586] netlink_unicast+0x5ec/0x6b0 [ 329.334422][T11586] netlink_sendmsg+0x6ea/0x7d0 [ 329.339187][T11586] sock_write_iter+0x1a3/0x200 [ 329.343953][T11586] do_iter_readv_writev+0x2de/0x380 [ 329.349167][T11586] do_iter_write+0x192/0x5c0 [ 329.353826][T11586] do_writev+0x210/0x440 [ 329.358148][T11586] ? vfs_write+0x61a/0x900 [ 329.362561][T11586] __x64_sys_writev+0x41/0x50 [ 329.367243][T11586] do_syscall_64+0x44/0xa0 [ 329.371719][T11586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 329.377632][T11586] RIP: 0033:0x7f5cdb0a4739 [ 329.382080][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 329.401800][T11586] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 329.410216][T11586] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 329.418185][T11586] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 329.426214][T11586] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 329.434201][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.442199][T11586] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:49 executing program 1 (fault-call:2 fault-nth:52): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:49 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 329.519422][T11617] loop5: detected capacity change from 0 to 224 [ 329.538194][T11622] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 329.555008][T11622] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 329.572795][T11622] FAULT_INJECTION: forcing a failure. [ 329.572795][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 329.585440][T11622] CPU: 0 PID: 11622 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 329.594208][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.604331][T11622] Call Trace: [ 329.607613][T11622] dump_stack_lvl+0xd6/0x122 [ 329.612268][T11622] dump_stack+0x11/0x1b [ 329.616511][T11622] should_fail+0x23c/0x250 [ 329.620988][T11622] __should_failslab+0x81/0x90 [ 329.625776][T11622] should_failslab+0x5/0x20 [ 329.630331][T11622] kmem_cache_alloc_node+0x61/0x2c0 [ 329.635531][T11622] ? __alloc_skb+0xed/0x420 [ 329.640036][T11622] __alloc_skb+0xed/0x420 [ 329.644370][T11622] __ipv6_ifa_notify+0x128/0x880 [ 329.649340][T11622] ? node_free_rcu+0x30/0x30 [ 329.653941][T11622] add_addr+0x14d/0x1e0 [ 329.658108][T11622] addrconf_notify+0x130a/0x1cb0 [ 329.663127][T11622] ? fib_sync_up+0x51c/0x550 [ 329.667729][T11622] raw_notifier_call_chain+0x53/0xb0 [ 329.673066][T11622] __dev_notify_flags+0x1d3/0x3b0 [ 329.678101][T11622] dev_change_flags+0xa2/0xc0 [ 329.682802][T11622] do_setlink+0x810/0x2410 [ 329.687218][T11622] ? __nla_validate_parse+0x108f/0x1760 [ 329.692842][T11622] ? __nla_parse+0x3c/0x50 [ 329.697263][T11622] rtnl_setlink+0x257/0x2a0 [ 329.701838][T11622] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 329.706881][T11622] rtnetlink_rcv_msg+0x711/0x7c0 [ 329.711906][T11622] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 329.717805][T11622] ? __wake_up+0x8d/0xc0 22:45:50 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 329.722051][T11622] ? __d_rehash+0x125/0x180 [ 329.726567][T11622] ? __d_add+0x3bf/0x490 [ 329.730851][T11622] ? should_fail+0x2a/0x250 [ 329.735353][T11622] ? avc_has_perm_noaudit+0x1c0/0x270 [ 329.740726][T11622] ? rhashtable_jhash2+0x13a/0x1a0 [ 329.745972][T11622] ? jhash+0x2b0/0x2b0 [ 329.750034][T11622] netlink_rcv_skb+0x14e/0x250 [ 329.754878][T11622] ? rtnetlink_bind+0x60/0x60 [ 329.759559][T11622] rtnetlink_rcv+0x18/0x20 [ 329.764119][T11622] netlink_unicast+0x5ec/0x6b0 [ 329.768878][T11622] netlink_sendmsg+0x6ea/0x7d0 [ 329.773648][T11622] sock_write_iter+0x1a3/0x200 [ 329.778478][T11622] do_iter_readv_writev+0x2de/0x380 [ 329.783757][T11622] do_iter_write+0x192/0x5c0 [ 329.788359][T11622] do_writev+0x210/0x440 [ 329.792623][T11622] ? vfs_write+0x61a/0x900 [ 329.797042][T11622] __x64_sys_writev+0x41/0x50 [ 329.801719][T11622] do_syscall_64+0x44/0xa0 [ 329.806244][T11622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 329.812149][T11622] RIP: 0033:0x7f5cdb0a4739 [ 329.816618][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 329.836221][T11622] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 329.844662][T11622] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 329.852633][T11622] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 329.860687][T11622] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 22:45:50 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 329.868714][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.876689][T11622] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 329.927947][T11639] loop5: detected capacity change from 0 to 224 22:45:52 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:52 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="f8d564ac746e61ca653d7769000074"]) 22:45:52 executing program 1 (fault-call:2 fault-nth:53): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:52 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:52 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000003c0)={0x48800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) [ 332.111711][T11664] loop5: detected capacity change from 0 to 224 [ 332.115762][T11665] FAT-fs (loop4): Unrecognized mount option "øÕd¬tnaÊe=wi" or missing value [ 332.129580][T11669] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 332.151449][T11669] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:45:52 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 332.161226][T11669] FAULT_INJECTION: forcing a failure. [ 332.161226][T11669] name failslab, interval 1, probability 0, space 0, times 0 [ 332.173894][T11669] CPU: 0 PID: 11669 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 332.182638][T11669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.192792][T11669] Call Trace: [ 332.196142][T11669] dump_stack_lvl+0xd6/0x122 [ 332.200745][T11669] dump_stack+0x11/0x1b [ 332.204884][T11669] should_fail+0x23c/0x250 [ 332.209277][T11669] __should_failslab+0x81/0x90 [ 332.214022][T11669] should_failslab+0x5/0x20 [ 332.218518][T11669] kmem_cache_alloc_node+0x61/0x2c0 [ 332.223706][T11669] ? __alloc_skb+0xed/0x420 [ 332.228203][T11669] __alloc_skb+0xed/0x420 [ 332.232531][T11669] __ipv6_ifa_notify+0x128/0x880 [ 332.237451][T11669] ? node_free_rcu+0x30/0x30 [ 332.242085][T11669] add_addr+0x14d/0x1e0 [ 332.246296][T11669] addrconf_notify+0x130a/0x1cb0 [ 332.251223][T11669] ? fib_sync_up+0x51c/0x550 [ 332.255792][T11669] raw_notifier_call_chain+0x53/0xb0 [ 332.261210][T11669] __dev_notify_flags+0x1d3/0x3b0 [ 332.266221][T11669] dev_change_flags+0xa2/0xc0 [ 332.270945][T11669] do_setlink+0x810/0x2410 [ 332.275413][T11669] ? __nla_validate_parse+0x108f/0x1760 [ 332.280958][T11669] ? __nla_parse+0x3c/0x50 [ 332.285367][T11669] rtnl_setlink+0x257/0x2a0 [ 332.289914][T11669] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 332.294961][T11669] rtnetlink_rcv_msg+0x711/0x7c0 [ 332.299927][T11669] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 332.306085][T11669] ? __wake_up+0x8d/0xc0 [ 332.310311][T11669] ? __d_rehash+0x125/0x180 [ 332.314805][T11669] ? __d_add+0x3bf/0x490 [ 332.319041][T11669] ? should_fail+0x2a/0x250 [ 332.323521][T11669] ? avc_has_perm_noaudit+0x1c0/0x270 [ 332.328870][T11669] ? rhashtable_jhash2+0x13a/0x1a0 [ 332.333983][T11669] ? jhash+0x2b0/0x2b0 [ 332.338100][T11669] netlink_rcv_skb+0x14e/0x250 [ 332.342885][T11669] ? rtnetlink_bind+0x60/0x60 [ 332.347541][T11669] rtnetlink_rcv+0x18/0x20 [ 332.351938][T11669] netlink_unicast+0x5ec/0x6b0 [ 332.356687][T11669] netlink_sendmsg+0x6ea/0x7d0 [ 332.361451][T11669] sock_write_iter+0x1a3/0x200 [ 332.366199][T11669] do_iter_readv_writev+0x2de/0x380 [ 332.371389][T11669] do_iter_write+0x192/0x5c0 [ 332.375961][T11669] do_writev+0x210/0x440 [ 332.380189][T11669] ? vfs_write+0x61a/0x900 [ 332.384716][T11669] __x64_sys_writev+0x41/0x50 [ 332.389462][T11669] do_syscall_64+0x44/0xa0 [ 332.393978][T11669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 332.399904][T11669] RIP: 0033:0x7f5cdb0a4739 [ 332.404331][T11669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 332.424013][T11669] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 332.432416][T11669] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 332.440365][T11669] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 332.448405][T11669] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 332.456461][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.464417][T11669] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 332.482990][T11665] FAT-fs (loop4): Unrecognized mount option "øÕd¬tnaÊe=wi" or missing value 22:45:52 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1, "5f2b6ea9c3fdf698d7bd73662d9b3559f3eed25c9553f9e04879234aa65af768f7d0ece1d4f30c64086d6f8f7048e62190f01b36e5ef1c7853f8eeaa3664794ac5851bbdb3c30b71be070ae5f52edae76bbd41cd35ef4d5fb9b3674727bf838f780fe74a4e9ec895d6d009d2"}, 0x74, 0x800) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) 22:45:52 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:52 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:52 executing program 1 (fault-call:2 fault-nth:54): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 332.520302][T11695] loop5: detected capacity change from 0 to 224 22:45:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xfffffffc}) pwrite64(r0, &(0x7f00000002c0)='_', 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="14002c80080000009909"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="307b2a000d60fbc308515b6e1fb7374529fe4d10e093fb4c3b92fc57227ec15aabcf7a169630faa75d19f9ce8c8254268af5da85e3218a68ac4fb449bd31cc3d094696500527408bb9bfac79b484e3088d3e2cd4d292e7134b601ecb716bbd8cdea2db2013176289cbe4afc1aa5b6f1a5a767c0643d8474fcd838b4b9fd61204082273d1a6517e41ed63e43abc", @ANYRES16=r2, @ANYBLOB="000628bd7000fedbdf250600000008000300", @ANYRES32, @ANYBLOB="0c00990061000000a3f300000800050008000000d3cc9cc34e3f3f9470948a8e752e34"], 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) r6 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8948, &(0x7f0000000000)={'batadv_slave_0\x00'}) ptrace$setopts(0x4206, r6, 0x0, 0x0) [ 332.592400][T11709] loop5: detected capacity change from 0 to 224 [ 332.609463][T11714] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 332.623490][T11714] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 332.632420][T11714] FAULT_INJECTION: forcing a failure. [ 332.632420][T11714] name failslab, interval 1, probability 0, space 0, times 0 [ 332.645051][T11714] CPU: 1 PID: 11714 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 332.653840][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.663950][T11714] Call Trace: [ 332.667227][T11714] dump_stack_lvl+0xd6/0x122 [ 332.671820][T11714] dump_stack+0x11/0x1b [ 332.676105][T11714] should_fail+0x23c/0x250 [ 332.680529][T11714] ? fib6_add+0x452/0x23b0 [ 332.684937][T11714] __should_failslab+0x81/0x90 22:45:53 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 332.689708][T11714] should_failslab+0x5/0x20 [ 332.694216][T11714] kmem_cache_alloc+0x4f/0x300 [ 332.698983][T11714] ? __wake_up+0x8d/0xc0 [ 332.703235][T11714] fib6_add+0x452/0x23b0 [ 332.707523][T11714] ? nlmsg_notify+0xcc/0x180 [ 332.712196][T11714] ip6_ins_rt+0x74/0xb0 [ 332.716365][T11714] __ipv6_ifa_notify+0x36b/0x880 [ 332.721311][T11714] ? node_free_rcu+0x30/0x30 [ 332.725933][T11714] add_addr+0x14d/0x1e0 [ 332.730156][T11714] addrconf_notify+0x130a/0x1cb0 [ 332.735157][T11714] ? fib_sync_up+0x51c/0x550 [ 332.739747][T11714] raw_notifier_call_chain+0x53/0xb0 [ 332.745048][T11714] __dev_notify_flags+0x1d3/0x3b0 [ 332.750097][T11714] dev_change_flags+0xa2/0xc0 [ 332.754767][T11714] do_setlink+0x810/0x2410 [ 332.759182][T11714] ? __nla_validate_parse+0x108f/0x1760 [ 332.764765][T11714] ? __nla_parse+0x3c/0x50 [ 332.769259][T11714] rtnl_setlink+0x257/0x2a0 [ 332.773836][T11714] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 332.778853][T11714] rtnetlink_rcv_msg+0x711/0x7c0 [ 332.783792][T11714] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 332.789700][T11714] ? __wake_up+0x8d/0xc0 [ 332.793978][T11714] ? __d_rehash+0x125/0x180 [ 332.798477][T11714] ? __d_add+0x3bf/0x490 [ 332.802715][T11714] ? should_fail+0x2a/0x250 [ 332.807224][T11714] ? avc_has_perm_noaudit+0x1c0/0x270 [ 332.812609][T11714] ? rhashtable_jhash2+0x13a/0x1a0 [ 332.817705][T11714] ? jhash+0x2b0/0x2b0 [ 332.821784][T11714] netlink_rcv_skb+0x14e/0x250 [ 332.826658][T11714] ? rtnetlink_bind+0x60/0x60 [ 332.831317][T11714] rtnetlink_rcv+0x18/0x20 [ 332.835764][T11714] netlink_unicast+0x5ec/0x6b0 [ 332.840550][T11714] netlink_sendmsg+0x6ea/0x7d0 [ 332.845296][T11714] sock_write_iter+0x1a3/0x200 [ 332.850112][T11714] do_iter_readv_writev+0x2de/0x380 [ 332.855354][T11714] do_iter_write+0x192/0x5c0 [ 332.859995][T11714] do_writev+0x210/0x440 [ 332.864239][T11714] ? vfs_write+0x61a/0x900 [ 332.868825][T11714] __x64_sys_writev+0x41/0x50 [ 332.873512][T11714] do_syscall_64+0x44/0xa0 [ 332.877915][T11714] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 332.883805][T11714] RIP: 0033:0x7f5cdb0a4739 [ 332.888197][T11714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 332.907994][T11714] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 332.916479][T11714] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 332.924430][T11714] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 332.932390][T11714] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 332.940511][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.948752][T11714] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:55 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:55 executing program 1 (fault-call:2 fault-nth:55): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:55 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:55 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6bbe"], 0x4) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x62000) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)={'syz0', "65c1a1b4e5dd8c816c4f1df27efd8b5fd3a76dee13c0d5cc013fdcd4c9a459d3384ec8a3844970f3450eaab08ad04511ef4ce9d6d2c6faa653b948724aef6a0f0fab716512c250971d921e81665a7c08e27bd58b79ed3864ace1507c889108ef52"}, 0x65) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x1, 0x3, 0x9, 0x8}) [ 335.142627][T11751] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 335.152238][T11753] loop5: detected capacity change from 0 to 224 [ 335.159609][T11751] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 335.173279][T11751] FAULT_INJECTION: forcing a failure. [ 335.173279][T11751] name failslab, interval 1, probability 0, space 0, times 0 22:45:55 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 335.185968][T11751] CPU: 0 PID: 11751 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 335.194732][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.204799][T11751] Call Trace: [ 335.208075][T11751] dump_stack_lvl+0xd6/0x122 [ 335.212647][T11751] dump_stack+0x11/0x1b [ 335.216780][T11751] should_fail+0x23c/0x250 [ 335.221174][T11751] ? fib6_add+0x4bc/0x23b0 [ 335.225588][T11751] __should_failslab+0x81/0x90 [ 335.230366][T11751] should_failslab+0x5/0x20 [ 335.234861][T11751] kmem_cache_alloc+0x4f/0x300 [ 335.239617][T11751] ? fib6_add+0x452/0x23b0 [ 335.244083][T11751] fib6_add+0x4bc/0x23b0 [ 335.248303][T11751] ? nlmsg_notify+0xcc/0x180 [ 335.252879][T11751] ip6_ins_rt+0x74/0xb0 [ 335.257031][T11751] __ipv6_ifa_notify+0x36b/0x880 [ 335.261948][T11751] ? node_free_rcu+0x30/0x30 [ 335.266602][T11751] add_addr+0x14d/0x1e0 [ 335.270745][T11751] addrconf_notify+0x130a/0x1cb0 [ 335.275731][T11751] ? kcsan_setup_watchpoint+0x241/0x3f0 [ 335.281276][T11751] ? fib_sync_up+0x51c/0x550 [ 335.285923][T11751] raw_notifier_call_chain+0x53/0xb0 [ 335.291318][T11751] __dev_notify_flags+0x1d3/0x3b0 [ 335.296457][T11751] dev_change_flags+0xa2/0xc0 [ 335.301120][T11751] do_setlink+0x810/0x2410 [ 335.305549][T11751] ? __nla_validate_parse+0x108f/0x1760 [ 335.311074][T11751] ? __nla_parse+0x3c/0x50 [ 335.315469][T11751] rtnl_setlink+0x257/0x2a0 [ 335.319953][T11751] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 335.325024][T11751] rtnetlink_rcv_msg+0x711/0x7c0 [ 335.329957][T11751] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 335.335802][T11751] ? __wake_up+0x8d/0xc0 [ 335.340026][T11751] ? __d_rehash+0x125/0x180 [ 335.344511][T11751] ? __d_add+0x3bf/0x490 [ 335.348748][T11751] ? should_fail+0x2a/0x250 [ 335.353237][T11751] ? avc_has_perm_noaudit+0x1c0/0x270 [ 335.358587][T11751] ? rhashtable_jhash2+0x13a/0x1a0 [ 335.363755][T11751] ? jhash+0x2b0/0x2b0 [ 335.367863][T11751] netlink_rcv_skb+0x14e/0x250 [ 335.372666][T11751] ? rtnetlink_bind+0x60/0x60 [ 335.377324][T11751] rtnetlink_rcv+0x18/0x20 [ 335.381716][T11751] netlink_unicast+0x5ec/0x6b0 [ 335.386457][T11751] netlink_sendmsg+0x6ea/0x7d0 [ 335.391375][T11751] sock_write_iter+0x1a3/0x200 [ 335.396235][T11751] do_iter_readv_writev+0x2de/0x380 [ 335.401505][T11751] do_iter_write+0x192/0x5c0 [ 335.406266][T11751] do_writev+0x210/0x440 [ 335.410490][T11751] ? vfs_write+0x61a/0x900 [ 335.414900][T11751] __x64_sys_writev+0x41/0x50 [ 335.419582][T11751] do_syscall_64+0x44/0xa0 [ 335.423996][T11751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.429875][T11751] RIP: 0033:0x7f5cdb0a4739 [ 335.434270][T11751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.453868][T11751] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 335.462263][T11751] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 335.470274][T11751] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 335.478227][T11751] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.486238][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:45:55 executing program 1 (fault-call:2 fault-nth:56): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:55 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 335.494191][T11751] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 335.528088][T11769] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 335.553492][T11769] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 335.564386][T11769] FAULT_INJECTION: forcing a failure. [ 335.564386][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 335.566516][T11776] loop5: detected capacity change from 0 to 224 [ 335.577056][T11769] CPU: 1 PID: 11769 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 335.592038][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:45:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) [ 335.602082][T11769] Call Trace: [ 335.605342][T11769] dump_stack_lvl+0xd6/0x122 [ 335.609918][T11769] dump_stack+0x11/0x1b [ 335.614065][T11769] should_fail+0x23c/0x250 [ 335.618487][T11769] ? fib6_add+0x4bc/0x23b0 [ 335.622911][T11769] __should_failslab+0x81/0x90 [ 335.627687][T11769] should_failslab+0x5/0x20 [ 335.632207][T11769] kmem_cache_alloc+0x4f/0x300 [ 335.636971][T11769] ? fib6_add+0x452/0x23b0 [ 335.641430][T11769] fib6_add+0x4bc/0x23b0 [ 335.645753][T11769] ? nlmsg_notify+0xcc/0x180 22:45:56 executing program 0: sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x840) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x0, 0x0, 0x3784b23be4048eaa, &(0x7f0000001340)) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4) [ 335.650343][T11769] ip6_ins_rt+0x74/0xb0 [ 335.654505][T11769] __ipv6_ifa_notify+0x36b/0x880 [ 335.659442][T11769] ? node_free_rcu+0x30/0x30 [ 335.664089][T11769] add_addr+0x14d/0x1e0 [ 335.668257][T11769] addrconf_notify+0x130a/0x1cb0 [ 335.673206][T11769] ? fib_sync_up+0x51c/0x550 [ 335.677797][T11769] raw_notifier_call_chain+0x53/0xb0 [ 335.683083][T11769] __dev_notify_flags+0x1d3/0x3b0 [ 335.688141][T11769] dev_change_flags+0xa2/0xc0 [ 335.692883][T11769] do_setlink+0x810/0x2410 [ 335.697317][T11769] ? __nla_validate_parse+0x108f/0x1760 22:45:56 executing program 0: r0 = fork() syz_open_procfs(r0, &(0x7f0000000000)='task\x00') syz_io_uring_setup(0x261e, &(0x7f0000000140)={0x0, 0xf109, 0x1f, 0x1, 0xed}, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 335.702847][T11769] ? __nla_parse+0x3c/0x50 [ 335.707251][T11769] rtnl_setlink+0x257/0x2a0 [ 335.711759][T11769] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 335.716786][T11769] rtnetlink_rcv_msg+0x711/0x7c0 [ 335.721724][T11769] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 335.727590][T11769] ? __wake_up+0x8d/0xc0 [ 335.731860][T11769] ? __d_rehash+0x125/0x180 [ 335.736350][T11769] ? __d_add+0x3bf/0x490 [ 335.740572][T11769] ? should_fail+0x2a/0x250 [ 335.745056][T11769] ? avc_has_perm_noaudit+0x1c0/0x270 [ 335.750427][T11769] ? rhashtable_jhash2+0x13a/0x1a0 [ 335.755611][T11769] ? jhash+0x2b0/0x2b0 [ 335.759773][T11769] netlink_rcv_skb+0x14e/0x250 [ 335.764533][T11769] ? rtnetlink_bind+0x60/0x60 [ 335.769210][T11769] rtnetlink_rcv+0x18/0x20 [ 335.773634][T11769] netlink_unicast+0x5ec/0x6b0 [ 335.778399][T11769] netlink_sendmsg+0x6ea/0x7d0 [ 335.783151][T11769] sock_write_iter+0x1a3/0x200 [ 335.787898][T11769] do_iter_readv_writev+0x2de/0x380 [ 335.793101][T11769] do_iter_write+0x192/0x5c0 [ 335.797686][T11769] do_writev+0x210/0x440 [ 335.802010][T11769] ? vfs_write+0x61a/0x900 [ 335.806478][T11769] __x64_sys_writev+0x41/0x50 [ 335.811253][T11769] do_syscall_64+0x44/0xa0 [ 335.815654][T11769] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.821618][T11769] RIP: 0033:0x7f5cdb0a4739 [ 335.826015][T11769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.845657][T11769] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 22:45:56 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x62) socket$inet6(0xa, 0x80000, 0x4) sendto$inet6(r0, &(0x7f0000000200)="1164", 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="653e0fe26f15c51682f0711f241c4229367b8c68a0f3f4c88e0467af4e9e2fc51eb308b95071ecb07687f269dde63350a82d0f889cb95045a49722dcfce4737307fa6b", 0x43, 0xc004000, 0x0, 0x0) [ 335.854057][T11769] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 335.862077][T11769] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 335.870076][T11769] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.878044][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.885997][T11769] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:58 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:45:58 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:45:58 executing program 1 (fault-call:2 fault-nth:57): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:45:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:58 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000001c0)={0x0, {{0x2, 0x4e1e, @broadcast}}}, 0xfffffffffffffd90) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000002c0)=0xe6e) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb0800020000000000"], 0x80}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7fff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x5}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x1ff, 0x8000000, 0xffb, 0x59c, 0x6, 0x0]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x6, 0x401, 0x1ff, 0x0, 0x0, 0x1000, 0x5]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xa37a1ba5]}]}, 0x148}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1000000, 0x0, 0x1, 0x87b, 0x9, "9c349f022089b758991ab06bbee0fee071e453"}) 22:45:58 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) recvmsg$unix(r0, &(0x7f0000002580)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4, 0x4}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/171, 0xab}, {&(0x7f0000002400)=""/81, 0x51}], 0x6, &(0x7f0000002500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000220100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x10000) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r7) lstat(&(0x7f0000003ac0)='./file0/file0\x00', &(0x7f0000003b00)) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000025c0)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x3, 0xee00}, {0x8, 0x6, r5}, {0x8, 0x2, r7}, {0x8, 0x0, r3}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d756e69782c00ee379542bc53e30cbc40eda09e8af4933f1aadd535571b706ca8456613b801f3ba0b5d14ef8a0b0a7c12d06d3c6ac3bfa5e9fc933842d1c4824703b375ebd6ddf54d"]) 22:45:58 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3f, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000200)={0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/122) r2 = dup(r0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 22:45:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:58 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 338.190503][T11833] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 338.199056][T11836] loop5: detected capacity change from 0 to 224 [ 338.210513][T11833] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 338.223600][T11833] FAULT_INJECTION: forcing a failure. [ 338.223600][T11833] name failslab, interval 1, probability 0, space 0, times 0 [ 338.236304][T11833] CPU: 1 PID: 11833 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 338.237418][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.245066][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.245079][T11833] Call Trace: [ 338.245087][T11833] dump_stack_lvl+0xd6/0x122 [ 338.245114][T11833] dump_stack+0x11/0x1b [ 338.254489][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.264320][T11833] should_fail+0x23c/0x250 [ 338.264343][T11833] __should_failslab+0x81/0x90 [ 338.294871][T11833] should_failslab+0x5/0x20 [ 338.299387][T11833] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 338.305127][T11833] ? __kmalloc_node_track_caller+0x30/0x40 [ 338.310923][T11833] __kmalloc_node_track_caller+0x30/0x40 [ 338.316543][T11833] ? inet6_rt_notify+0x157/0x280 [ 338.321486][T11833] __alloc_skb+0x187/0x420 [ 338.325883][T11833] inet6_rt_notify+0x157/0x280 [ 338.330637][T11833] fib6_add+0x16b3/0x23b0 [ 338.335055][T11833] ip6_ins_rt+0x74/0xb0 [ 338.339208][T11833] __ipv6_ifa_notify+0x36b/0x880 [ 338.344150][T11833] ? node_free_rcu+0x30/0x30 [ 338.348719][T11833] add_addr+0x14d/0x1e0 [ 338.352854][T11833] addrconf_notify+0x130a/0x1cb0 [ 338.357775][T11833] ? fib_sync_up+0x51c/0x550 [ 338.362347][T11833] raw_notifier_call_chain+0x53/0xb0 [ 338.367610][T11833] __dev_notify_flags+0x1d3/0x3b0 [ 338.372678][T11833] dev_change_flags+0xa2/0xc0 [ 338.377365][T11833] do_setlink+0x810/0x2410 [ 338.381762][T11833] ? __nla_validate_parse+0x108f/0x1760 [ 338.387301][T11833] ? __nla_parse+0x3c/0x50 [ 338.391703][T11833] rtnl_setlink+0x257/0x2a0 [ 338.396201][T11833] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 338.401225][T11833] rtnetlink_rcv_msg+0x711/0x7c0 [ 338.406163][T11833] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 338.411959][T11833] ? __wake_up+0x8d/0xc0 [ 338.416207][T11833] ? __d_rehash+0x125/0x180 [ 338.420774][T11833] ? __d_add+0x3bf/0x490 [ 338.424998][T11833] ? should_fail+0x2a/0x250 [ 338.429486][T11833] ? avc_has_perm_noaudit+0x1c0/0x270 [ 338.434836][T11833] ? rhashtable_jhash2+0x13a/0x1a0 [ 338.439937][T11833] ? jhash+0x2b0/0x2b0 [ 338.444000][T11833] netlink_rcv_skb+0x14e/0x250 [ 338.448747][T11833] ? rtnetlink_bind+0x60/0x60 [ 338.453402][T11833] rtnetlink_rcv+0x18/0x20 [ 338.457802][T11833] netlink_unicast+0x5ec/0x6b0 [ 338.462550][T11833] netlink_sendmsg+0x6ea/0x7d0 [ 338.467300][T11833] sock_write_iter+0x1a3/0x200 [ 338.472134][T11833] do_iter_readv_writev+0x2de/0x380 [ 338.477318][T11833] do_iter_write+0x192/0x5c0 [ 338.481885][T11833] do_writev+0x210/0x440 [ 338.486111][T11833] ? vfs_write+0x61a/0x900 [ 338.490549][T11833] __x64_sys_writev+0x41/0x50 [ 338.495362][T11833] do_syscall_64+0x44/0xa0 [ 338.499812][T11833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.505832][T11833] RIP: 0033:0x7f5cdb0a4739 [ 338.510227][T11833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 338.529812][T11833] RSP: 002b:00007f5cd8e1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 22:45:58 executing program 1 (fault-call:2 fault-nth:58): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 338.538211][T11833] RAX: ffffffffffffffda RBX: 00007f5cdb1a8f80 RCX: 00007f5cdb0a4739 [ 338.546188][T11833] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 338.554486][T11833] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.562438][T11833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.570599][T11833] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 22:45:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:45:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005b640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005b840)={{0x0, 0x0, 0x7f, 0x3ff8000000000000, 0x8, 0x20, 0x7ff, 0x7, 0x0, 0x800, 0xfffffff8, 0x1, 0x2, 0x9, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005b8c0)={0x0, ""/256, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x81, 0x8, 0x0, 0x2, 0x3, 0x3, 0x30d, 0x40, 0x35, 0x401, 0x7ff, 0x38, 0x1, 0x3ff, 0x1}, [{0x5, 0x2, 0x0, 0x401, 0x1f, 0x8000, 0x7, 0x5}, {0x7, 0x3, 0x6, 0x5, 0x0, 0xfffffffffffffffd, 0x4, 0x6980000}], "0010163b7ce7e5590121bb5f1cd732bf0c8fa48777c4205e7efa", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ca) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005bac0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r7, r8}], 0x0, "27cfc4dd7ec58c"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f000005b840)=ANY=[@ANYRES64=0x0, @ANYBLOB]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005bac0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "27cfc4dd7ec58c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000068800)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "34d0c617e02655"}) recvmmsg(0xffffffffffffffff, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001c00)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x97, 0x4000, 0x0) [ 338.619120][T11856] loop5: detected capacity change from 0 to 224 [ 338.634727][T11858] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 338.640365][ C1] sd 0:0:1:0: tag#7311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 338.652638][ C1] sd 0:0:1:0: tag#7311 CDB: opcode=0x75 (reserved) [ 338.659167][ C1] sd 0:0:1:0: tag#7311 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 22:45:59 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 338.668209][ C1] sd 0:0:1:0: tag#7311 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 338.677271][ C1] sd 0:0:1:0: tag#7311 CDB[20]: f1 [ 338.682888][T11870] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 338.695779][T11870] FAULT_INJECTION: forcing a failure. [ 338.695779][T11870] name failslab, interval 1, probability 0, space 0, times 0 [ 338.700232][ C1] sd 0:0:1:0: tag#7313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 338.708476][T11870] CPU: 0 PID: 11870 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 338.718259][ C1] sd 0:0:1:0: tag#7313 CDB: opcode=0x75 (reserved) [ 338.726966][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.726978][T11870] Call Trace: [ 338.726986][T11870] dump_stack_lvl+0xd6/0x122 [ 338.733485][ C1] sd 0:0:1:0: tag#7313 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 338.743504][T11870] dump_stack+0x11/0x1b [ 338.743525][T11870] should_fail+0x23c/0x250 [ 338.746809][ C1] sd 0:0:1:0: tag#7313 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 338.751381][T11870] __should_failslab+0x81/0x90 [ 338.751405][T11870] should_failslab+0x5/0x20 [ 338.760405][ C1] sd 0:0:1:0: tag#7313 CDB[20]: f1 [ 338.764521][T11870] kmem_cache_alloc_node+0x61/0x2c0 [ 338.797407][T11870] ? __alloc_skb+0xed/0x420 [ 338.801985][T11870] __alloc_skb+0xed/0x420 [ 338.806410][T11870] inet6_ifinfo_notify+0x46/0xe0 [ 338.811419][T11870] addrconf_notify+0x1415/0x1cb0 [ 338.816341][T11870] ? fib_sync_up+0x51c/0x550 [ 338.820913][T11870] raw_notifier_call_chain+0x53/0xb0 [ 338.826181][T11870] __dev_notify_flags+0x1d3/0x3b0 [ 338.831235][T11870] dev_change_flags+0xa2/0xc0 [ 338.835918][T11870] do_setlink+0x810/0x2410 [ 338.840330][T11870] ? __nla_validate_parse+0x108f/0x1760 [ 338.845933][T11870] ? __nla_parse+0x3c/0x50 [ 338.850342][T11870] rtnl_setlink+0x257/0x2a0 [ 338.854836][T11870] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 338.859840][T11870] rtnetlink_rcv_msg+0x711/0x7c0 [ 338.864758][T11870] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 338.870601][T11870] ? __wake_up+0x8d/0xc0 [ 338.874836][T11870] ? __d_rehash+0x125/0x180 [ 338.879323][T11870] ? __d_add+0x3bf/0x490 [ 338.883605][T11870] ? should_fail+0x2a/0x250 [ 338.888088][T11870] ? avc_has_perm_noaudit+0x1c0/0x270 [ 338.893629][T11870] ? rhashtable_jhash2+0x13a/0x1a0 [ 338.898806][T11870] ? jhash+0x2b0/0x2b0 [ 338.902856][T11870] netlink_rcv_skb+0x14e/0x250 [ 338.907633][T11870] ? rtnetlink_bind+0x60/0x60 [ 338.912292][T11870] rtnetlink_rcv+0x18/0x20 [ 338.916692][T11870] netlink_unicast+0x5ec/0x6b0 [ 338.921433][T11870] netlink_sendmsg+0x6ea/0x7d0 [ 338.926255][T11870] sock_write_iter+0x1a3/0x200 [ 338.931028][T11870] do_iter_readv_writev+0x2de/0x380 [ 338.936292][T11870] do_iter_write+0x192/0x5c0 [ 338.940875][T11870] do_writev+0x210/0x440 [ 338.945122][T11870] ? vfs_write+0x61a/0x900 [ 338.949521][T11870] __x64_sys_writev+0x41/0x50 [ 338.954196][T11870] do_syscall_64+0x44/0xa0 [ 338.958603][T11870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.964483][T11870] RIP: 0033:0x7f5cdb0a4739 [ 338.968875][T11870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 338.988544][T11870] RSP: 002b:00007f5cd8dfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 338.996953][T11870] RAX: ffffffffffffffda RBX: 00007f5cdb1a9038 RCX: 00007f5cdb0a4739 [ 339.005127][T11870] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 339.013087][T11870] RBP: 00007f5cd8dfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 339.021043][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.029007][T11870] R13: 00007ffd2eebccef R14: 00007f5cd8dfb300 R15: 0000000000022000 [ 339.060702][T11873] loop5: detected capacity change from 0 to 224 22:46:01 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:46:01 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_mempolicy(0x1, 0x0, 0x60) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) openat(r0, &(0x7f0000000080)='./file0\x00', 0x14b040, 0x68) 22:46:01 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x1}, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nfs']) 22:46:01 executing program 1 (fault-call:2 fault-nth:59): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:01 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:01 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 341.213377][ T22] audit: type=1326 audit(1632091561.584:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.223003][T11906] loop5: detected capacity change from 0 to 224 [ 341.240972][T11905] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:46:01 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="00010000000000e80500c204000000050502000400000000"], 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x88, 0x68, &(0x7f0000000000)={0x3a}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x1000, 0x4) close(r0) 22:46:01 executing program 4: set_mempolicy(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x1}, {0x80, 0x8, 0x1d, 0x7}, {0x800, 0x8, 0xff, 0x108}]}) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r1, r0, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001580)={r4, 0x1, r3, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000028c0)={r4, 0x1}) [ 341.261559][ T22] audit: type=1326 audit(1632091561.604:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.286478][ T22] audit: type=1326 audit(1632091561.604:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.333046][T11915] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 341.346905][ T22] audit: type=1326 audit(1632091561.604:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.349643][T11915] FAULT_INJECTION: forcing a failure. [ 341.349643][T11915] name failslab, interval 1, probability 0, space 0, times 0 [ 341.384126][T11915] CPU: 1 PID: 11915 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 341.392951][T11915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.403020][T11915] Call Trace: [ 341.406288][T11915] dump_stack_lvl+0xd6/0x122 [ 341.410874][T11915] dump_stack+0x11/0x1b [ 341.415018][T11915] should_fail+0x23c/0x250 [ 341.419421][T11915] __should_failslab+0x81/0x90 [ 341.424180][T11915] should_failslab+0x5/0x20 [ 341.428676][T11915] kmem_cache_alloc_node+0x61/0x2c0 [ 341.433933][T11915] ? __alloc_skb+0xed/0x420 [ 341.438427][T11915] __alloc_skb+0xed/0x420 [ 341.442751][T11915] inet6_ifinfo_notify+0x46/0xe0 [ 341.447700][T11915] addrconf_notify+0x1415/0x1cb0 [ 341.452698][T11915] ? fib_sync_up+0x51c/0x550 [ 341.457295][T11915] raw_notifier_call_chain+0x53/0xb0 [ 341.462585][T11915] __dev_notify_flags+0x1d3/0x3b0 [ 341.467616][T11915] dev_change_flags+0xa2/0xc0 [ 341.472359][T11915] do_setlink+0x810/0x2410 [ 341.476766][T11915] ? __nla_validate_parse+0x108f/0x1760 [ 341.482321][T11915] ? __nla_parse+0x3c/0x50 [ 341.486834][T11915] rtnl_setlink+0x257/0x2a0 [ 341.491387][T11915] ? rtnl_dump_ifinfo+0xce0/0xce0 [ 341.496500][T11915] rtnetlink_rcv_msg+0x711/0x7c0 [ 341.501436][T11915] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 341.507264][T11915] ? __wake_up+0x8d/0xc0 [ 341.511506][T11915] ? __d_rehash+0x125/0x180 [ 341.516018][T11915] ? __d_add+0x3bf/0x490 [ 341.520318][T11915] ? should_fail+0x2a/0x250 [ 341.524839][T11915] ? avc_has_perm_noaudit+0x1c0/0x270 [ 341.530218][T11915] ? rhashtable_jhash2+0x13a/0x1a0 [ 341.535324][T11915] ? jhash+0x2b0/0x2b0 [ 341.539432][T11915] netlink_rcv_skb+0x14e/0x250 [ 341.544199][T11915] ? rtnetlink_bind+0x60/0x60 [ 341.548866][T11915] rtnetlink_rcv+0x18/0x20 [ 341.553345][T11915] netlink_unicast+0x5ec/0x6b0 [ 341.558189][T11915] netlink_sendmsg+0x6ea/0x7d0 [ 341.562949][T11915] sock_write_iter+0x1a3/0x200 [ 341.567709][T11915] do_iter_readv_writev+0x2de/0x380 [ 341.572910][T11915] do_iter_write+0x192/0x5c0 [ 341.577639][T11915] do_writev+0x210/0x440 [ 341.581970][T11915] ? vfs_write+0x61a/0x900 [ 341.586380][T11915] __x64_sys_writev+0x41/0x50 [ 341.591049][T11915] do_syscall_64+0x44/0xa0 [ 341.595491][T11915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 341.601437][T11915] RIP: 0033:0x7f5cdb0a4739 [ 341.605837][T11915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 341.625476][T11915] RSP: 002b:00007f5cd8dfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 22:46:02 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x0, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:02 executing program 0: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x43, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 341.633948][T11915] RAX: ffffffffffffffda RBX: 00007f5cdb1a9038 RCX: 00007f5cdb0a4739 [ 341.641923][T11915] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 341.649888][T11915] RBP: 00007f5cd8dfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 341.657849][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.665829][T11915] R13: 00007ffd2eebccef R14: 00007f5cd8dfb300 R15: 0000000000022000 22:46:02 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x0, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 341.717786][T11936] loop5: detected capacity change from 0 to 224 [ 341.731433][ T22] audit: type=1326 audit(1632091561.614:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.776116][ T22] audit: type=1326 audit(1632091561.624:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.803142][ T22] audit: type=1326 audit(1632091561.624:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.829548][ T22] audit: type=1326 audit(1632091561.624:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.854304][ T22] audit: type=1326 audit(1632091561.624:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f193e308739 code=0x7ffc0000 [ 341.879039][ T22] audit: type=1326 audit(1632091561.624:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=11896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193e308739 code=0x7ffc0000 22:46:04 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:46:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x1, "2156816c73038c"}) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVid:De', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x832d}]}) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x2, 0x8, 0x0, 0xbec, 0x20, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x8124, 0x40, 0x800, 0x4, 0x0, 0x4, 0x3, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x0, r3, 0x11244aff860102b8) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x0) 22:46:04 executing program 1 (fault-call:2 fault-nth:60): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:04 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x0, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:04 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = accept4$packet(r0, 0x0, &(0x7f0000000040), 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x5, 0x10001) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b3cb2a53caca0738f5"], 0xe) 22:46:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 344.239453][T11968] loop5: detected capacity change from 0 to 224 [ 344.246696][ C0] sd 0:0:1:0: tag#7402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 344.256546][ C0] sd 0:0:1:0: tag#7402 CDB: opcode=0xe5 (vendor) [ 344.262898][ C0] sd 0:0:1:0: tag#7402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 344.271935][ C0] sd 0:0:1:0: tag#7402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 344.280971][ C0] sd 0:0:1:0: tag#7402 CDB[20]: ba 22:46:04 executing program 4: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x6]}, 0x8) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r2 = socket(0xb, 0x2, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000004}, 0x40001) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd0}}, 0x4c812) r4 = signalfd4(r2, &(0x7f0000000600)={[0x3ff]}, 0x8, 0x800) connect$netlink(r4, &(0x7f0000000640)=@unspec, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr/prev\x00') epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f00000006c0)={0x4}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) fcntl$lock(0xffffffffffffffff, 0x27, &(0x7f0000000800)={0x2, 0x1, 0x200, 0x8, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000840)=0xffffffff, 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000a40)={0x0, 0x2, 0x1, 0x3, 0xffffffffffffffff}) [ 344.287839][T11974] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 344.303408][T11974] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 344.312798][T11974] FAULT_INJECTION: forcing a failure. [ 344.312798][T11974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.325874][T11974] CPU: 0 PID: 11974 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 344.334636][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.344707][T11974] Call Trace: [ 344.347984][T11974] dump_stack_lvl+0xd6/0x122 [ 344.352635][T11974] dump_stack+0x11/0x1b [ 344.356798][T11974] should_fail+0x23c/0x250 [ 344.361246][T11974] should_fail_usercopy+0x16/0x20 [ 344.366270][T11974] _copy_to_user+0x1c/0x90 [ 344.370691][T11974] simple_read_from_buffer+0xab/0x120 [ 344.376073][T11974] proc_fail_nth_read+0x10d/0x150 [ 344.381103][T11974] ? proc_fault_inject_write+0x230/0x230 [ 344.386754][T11974] vfs_read+0x1e6/0x750 [ 344.390969][T11974] ? __fget_light+0x21b/0x260 [ 344.395787][T11974] ? __cond_resched+0x11/0x40 [ 344.400531][T11974] ksys_read+0xd9/0x190 [ 344.404688][T11974] __x64_sys_read+0x3e/0x50 [ 344.409198][T11974] do_syscall_64+0x44/0xa0 [ 344.413698][T11974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 344.419604][T11974] RIP: 0033:0x7f5cdb0574bc 22:46:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x81) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x400, 0x1f, 0x9, 0x79, 0xfc, "4aaf1d3eb3115660f52df16ed179e757004460", 0x6388, 0xbe}) r2 = open(&(0x7f00000000c0)='./bus/file0\x00', 0x1231be, 0x20) sendfile(r2, r2, 0x0, 0x8080fffffffe) r3 = syz_open_pts(r2, 0x290540) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r4, r4, 0x0, 0x8080fffffffe) fallocate(r1, 0x48, 0x8, 0xc) ioctl$TCSETAF(r3, 0x4b3a, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x1b, '\a\x00'}) 22:46:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 344.424020][T11974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 344.443703][T11974] RSP: 002b:00007f5cd8e1c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.452166][T11974] RAX: ffffffffffffffda RBX: 0000000000000039 RCX: 00007f5cdb0574bc [ 344.460144][T11974] RDX: 000000000000000f RSI: 00007f5cd8e1c1e0 RDI: 0000000000000004 [ 344.468180][T11974] RBP: 00007f5cd8e1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 344.476161][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:46:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x0, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 344.484132][T11974] R13: 00007ffd2eebccef R14: 00007f5cd8e1c300 R15: 0000000000022000 [ 345.070568][ C1] sd 0:0:1:0: tag#7323 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 345.080415][ C1] sd 0:0:1:0: tag#7323 CDB: opcode=0xe5 (vendor) [ 345.086751][ C1] sd 0:0:1:0: tag#7323 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 345.095823][ C1] sd 0:0:1:0: tag#7323 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 345.104858][ C1] sd 0:0:1:0: tag#7323 CDB[20]: ba 22:46:07 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000001200)="d20e601cbfd9cdf3ef29357a0e0cc84921aa8117a765aa3fd031c0a4703cb900e9c495c39a0c3d8d0041ff9e489190358ce29971dce741") lseek(0xffffffffffffffff, 0x81, 0x1) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001180)=[r2, 0xffffffffffffffff, r3, r1, r1], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x0, 0xfffff77d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f00000011c0)=0x401, 0x4) 22:46:07 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x13c}, 0x1, 0xf000000}, 0x0) 22:46:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:07 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 22:46:07 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:07 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x0, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x130, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b94ba06b9e4e3af9c6ff81d781d007fbe72f2f98608448dad202100dfe301745d4dc463ce5e06d54359b83bd82797e48adf8259a4270ef0d680984d8b6951f5ffcfe21ad81da7c3e70b5c56880a53b4d196eda27aa6d092eea121fe115424ced95ab7670c820a50be3abe9517f9e7a45eed9f8eede002d10bd5edc12efa21cb5ef16cdbbda2e5af18ba8733fb3cb407ee6c4252493d2834faafc1f2169271f1ec5721a6535c16009b43a7efe75322cf3af1d7b48e23185ebf24de7024f010eb56a4d9e6c86f8b507139aea1d0a9590f61c9fe3cc9ffb1e33c047bf53b8bf2ecbaac21c4813235354b7c3f948a5cd67acc8eeed2"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r1, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="be016e9218ff058ee813a32d760a879135dcfa53383c2aada9e1e4d2f7e332b3008d1448492f64995ed866fb07397ac293c32a5cd3e1168dbb5cb79ad91cb835c4fc1d0324df89e1bd79f775a38ce0dbbba09055262fb46b74015176a579bdb11cf2cfc8542ef14e3f31817c2fa6260aa2849446687a7978ee2bc1ced975d3338431962171070ad5c6568a77", 0x8c}, {&(0x7f0000000080)="553f2f11991ddf5dedb20140f313fdbab69abbbed7004f6b1b60a985bcbd8cb0fa6d723ef4c20e52bd602403d7c0ed47667d638d254c59b6be19", 0x3a}, {&(0x7f0000000340)}, {&(0x7f0000000380)="3bba6bd2402a94ab011d3a2d9b259aa6ab69c3ae9f686302d98bc74ba1f73c1928d5e45f24e4d15d3717bd7b130c737363dfa87ddec4c7419c29e5754813e1f2c1029099dd3dc994ef720397c57c43b1aa20fdfac326e4142a926ea5f75d46a2d49ec42bce321284f9f36a189280e2f249d24b6a8d137dc798ad4d61f434129f8b9752f30faf57d28b635785c9b2af8d02d3021ff169f63006d64444", 0x9c}, {&(0x7f0000000440)="582bcadc157442a6652540d0268693c92a14689047caa428ee9964a711dbdf1604ba2e0ba6e333f7301f9e301f245ea205afe979e1375108d0100709c95fcb756fa2b0c00ef8298add01a54f2c026ebb0e0d194d4db88012f89fecb7dc738d9e007f064e117d04a724f1671e82946e84ec30a22fe26432e171dd829a0326d83bd14818be10a93e353153ec32c463c9b14dd96aecde6902ea98e71d86c0999c6ee79930627adcbc223f9b9bde64d32fd42d908f701e56f8d5c7bdf809e2c90da052f32ac321fef108766b02c421c19e2314", 0xd1}, {&(0x7f0000000540)="9a6d22384648644de964bfada4fa7035f74934e1a7aaf097ed79bcd19e5d8c06e40c0fb5e5ba9f0685fbd43941c2dfcd56582d93a4d9e8bb163c82c68459b8df245ea3a63fc4fea6cc2ec00e8cbed792ed1aacbbb6a9f61c42eaf8984cc8b64c0ecbc3bdd8ed9996a5c2b03f7dc04f79ce08670674441159806ed988268b95808863271bd81d3327cc5ba994c6b092ad93b533f98be7cbae86b6e960d184b09d7082850e7ceb48f296dfd1a8d92b60b3c8004490cf24de", 0xb7}], 0x6, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2d) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x3a) 22:46:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="040000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 347.279893][T12044] loop5: detected capacity change from 0 to 224 [ 347.287966][T12045] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.289041][T12046] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.309692][T12045] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:46:07 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200)="88001c0000000000c7d1ec9b000000040800780914092a1af9b795000100000101698c8755dfb6d52274036a22976f0053500701be5824026d413f2d5309854d285cff8a1f4c164da70f4f7343e536119ffc134b1289b3289e25125d95a1a93065ff724d49e57a5cb9625685477d6143b857cc272abb12ec58957331be20611001f180cc2af1dc0696", 0x89, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:07 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x0, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 347.389451][T12066] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.409356][T12066] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.418853][T12071] loop5: detected capacity change from 0 to 224 [ 347.441121][T12070] ================================================================== [ 347.449220][T12070] BUG: KCSAN: data-race in next_uptodate_page / shmem_write_end [ 347.456865][T12070] [ 347.459177][T12070] write to 0xffff888104de0208 of 8 bytes by task 12042 on cpu 0: [ 347.466889][T12070] shmem_write_end+0x60/0x3d0 [ 347.471577][T12070] generic_perform_write+0x251/0x3e0 [ 347.476866][T12070] __generic_file_write_iter+0x174/0x310 [ 347.482505][T12070] generic_file_write_iter+0x75/0x130 22:46:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="0a0000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:07 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 347.487877][T12070] vfs_write+0x7bc/0x900 [ 347.492127][T12070] ksys_write+0xd9/0x190 [ 347.496372][T12070] __x64_sys_write+0x3e/0x50 [ 347.500968][T12070] do_syscall_64+0x44/0xa0 [ 347.505394][T12070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 347.511300][T12070] [ 347.513612][T12070] read to 0xffff888104de0208 of 8 bytes by task 12070 on cpu 1: [ 347.521238][T12070] next_uptodate_page+0x323/0x670 [ 347.526273][T12070] filemap_map_pages+0x771/0x880 [ 347.531222][T12070] handle_mm_fault+0xb08/0x1580 [ 347.536074][T12070] __get_user_pages+0x381/0xc50 [ 347.540918][T12070] __mm_populate+0x24d/0x370 [ 347.545511][T12070] vm_mmap_pgoff+0x160/0x1f0 [ 347.548442][T12094] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.550096][T12070] ksys_mmap_pgoff+0x284/0x350 [ 347.550120][T12070] do_syscall_64+0x44/0xa0 [ 347.559159][T12094] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.563041][T12070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 347.563074][T12070] [ 347.563076][T12070] value changed: 0x0000000000f5f000 -> 0x0000000000f63000 [ 347.563087][T12070] [ 347.563089][T12070] Reported by Kernel Concurrency Sanitizer on: [ 347.563095][T12070] CPU: 1 PID: 12070 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 [ 347.607941][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.617991][T12070] ================================================================== 22:46:08 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000001200)="d20e601cbfd9cdf3ef29357a0e0cc84921aa8117a765aa3fd031c0a4703cb900e9c495c39a0c3d8d0041ff9e489190358ce29971dce741") lseek(0xffffffffffffffff, 0x81, 0x1) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020600) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001180)=[r2, 0xffffffffffffffff, r3, r1, r1], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x0, 0xfffff77d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f00000011c0)=0x401, 0x4) 22:46:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 22:46:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="0f0000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:10 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:10 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x0, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:10 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000380)}, 0x80, 0x33df, 0x0, 0x5, 0xff, 0x1, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00'], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x4, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r7}) [ 350.303689][T12115] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 350.319430][T12115] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:46:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16]) 22:46:10 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="100000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:10 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x0, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000404"], 0x28) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) 22:46:10 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="4e002d9dcef021ad78bac7050e261cc551293d2cc461596b85a77e"], 0xe8}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f000001a880)=""/102398, 0x18ffe}], 0x3, 0x0, 0xffffffffffffff28, 0x0) tkill(r0, 0x40) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) wait4(r2, 0x0, 0x80000000, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0xa, &(0x7f00000002c0)) [ 350.387399][T12146] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 350.410886][T12146] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 350.462317][T12163] loop5: detected capacity change from 0 to 136 22:46:13 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 22:46:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3c0000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000040)=""/11, 0x2000004b}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000740)={{r0}, "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"}) 22:46:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)={{0x0, 0xee01, r1, 0x0, r2, 0x40, 0x200}, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000008f7fcd14"]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x109000, 0xd) 22:46:13 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x0, 0x0, @private2, @mcast2, 0x1, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:13 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) recvmmsg(r3, &(0x7f0000003500)=[{{&(0x7f0000000300)=@caif=@dgm, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/220, 0xdc}], 0x7}, 0xf5}, {{&(0x7f00000007c0)=@caif=@dgm, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000a40)=""/163, 0xa3}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/54, 0x36}, {&(0x7f0000000b80)=""/140, 0x8c}], 0x6, &(0x7f0000000cc0)=""/239, 0xef}, 0xfffffff7}, {{&(0x7f0000000dc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e40)=""/136, 0x88}, {&(0x7f0000000f00)=""/124, 0x7c}, {&(0x7f0000000f80)=""/135, 0x87}, {&(0x7f0000001040)=""/102, 0x66}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000011c0)=""/61, 0x3d}, {&(0x7f0000001200)=""/69, 0x45}], 0x7, &(0x7f0000001300)=""/147, 0x93}, 0x8}, {{&(0x7f00000013c0)=@un=@abs, 0x80, &(0x7f0000001840)=[{&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/99, 0x63}, {&(0x7f0000001580)=""/33, 0x21}, {&(0x7f00000015c0)=""/148, 0x94}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001700)=""/87, 0x57}, {&(0x7f0000001780)=""/136, 0x88}], 0x7, &(0x7f00000018c0)=""/6, 0x6}, 0x2}, {{&(0x7f0000001900)=@xdp, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000001a80)=""/44, 0x2c}], 0x2, &(0x7f0000001b00)=""/38, 0x26}, 0xbc2}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001bc0)=""/241, 0xf1}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x3, &(0x7f0000002d80)=""/30, 0x1e}}, {{&(0x7f0000002dc0)=@nfc, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/226, 0xe2}], 0x1}}, {{&(0x7f0000002f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003000)=""/177, 0xb1}, {&(0x7f00000030c0)=""/228, 0xe4}], 0x2, &(0x7f0000003400)=""/236, 0xec}, 0x20}], 0x8, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000003740)) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @link_local}, 0x10) socket$inet(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f00000031c0)=""/220, 0xdc}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/235, 0xeb}], 0x5}}], 0x1, 0x0, 0x0) 22:46:13 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) read(r0, &(0x7f0000000080)=""/66, 0x42) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1bfe, 0x4) [ 353.318236][T12186] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 353.333386][T12186] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 353.341464][T12191] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.349344][T12190] loop5: detected capacity change from 0 to 136 22:46:13 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="c00000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:13 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x0, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:13 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {0x0, 0x0, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 353.424357][T12214] loop5: detected capacity change from 0 to 136 [ 353.449035][T12222] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 353.457769][T12222] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 353.486860][T12229] loop5: detected capacity change from 0 to 224 22:46:16 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {0x0, 0x0, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:16 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae89", 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:46:16 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x0, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x40000, 0x10) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) recvmmsg(r3, &(0x7f0000003500)=[{{&(0x7f0000000300)=@caif=@dgm, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/220, 0xdc}], 0x7}, 0xf5}, {{&(0x7f00000007c0)=@caif=@dgm, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000a40)=""/163, 0xa3}, {&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/54, 0x36}, {&(0x7f0000000b80)=""/140, 0x8c}], 0x6, &(0x7f0000000cc0)=""/239, 0xef}, 0xfffffff7}, {{&(0x7f0000000dc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e40)=""/136, 0x88}, {&(0x7f0000000f00)=""/124, 0x7c}, {&(0x7f0000000f80)=""/135, 0x87}, {&(0x7f0000001040)=""/102, 0x66}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000011c0)=""/61, 0x3d}, {&(0x7f0000001200)=""/69, 0x45}], 0x7, &(0x7f0000001300)=""/147, 0x93}, 0x8}, {{&(0x7f00000013c0)=@un=@abs, 0x80, &(0x7f0000001840)=[{&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/99, 0x63}, {&(0x7f0000001580)=""/33, 0x21}, {&(0x7f00000015c0)=""/148, 0x94}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001700)=""/87, 0x57}, {&(0x7f0000001780)=""/136, 0x88}], 0x7, &(0x7f00000018c0)=""/6, 0x6}, 0x2}, {{&(0x7f0000001900)=@xdp, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000001a80)=""/44, 0x2c}], 0x2, &(0x7f0000001b00)=""/38, 0x26}, 0xbc2}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001bc0)=""/241, 0xf1}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x3, &(0x7f0000002d80)=""/30, 0x1e}}, {{&(0x7f0000002dc0)=@nfc, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/226, 0xe2}], 0x1}}, {{&(0x7f0000002f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003000)=""/177, 0xb1}, {&(0x7f00000030c0)=""/228, 0xe4}], 0x2, &(0x7f0000003400)=""/236, 0xec}, 0x20}], 0x8, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000003740)) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @link_local}, 0x10) socket$inet(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f00000031c0)=""/220, 0xdc}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/235, 0xeb}], 0x5}}], 0x1, 0x0, 0x0) 22:46:16 executing program 0: r0 = mq_open(&(0x7f0000001a00)='&\x00', 0x800, 0x10, &(0x7f0000001a40)={0x8001, 0x100000001, 0x0, 0x8}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = epoll_create(0x1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0, 0x0}, &(0x7f0000002e80)=0xc) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0xee00) r10 = getgid() r11 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000004100)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f68ec77b9189c8cf7cf6f3b2a45bbc4099234db1ed4f47721c07e04c427b6a7bc205d1cd9775feab4f0331e5787241ccb4fa8df76bd0c94ee799f0e3df47991973f0939f3be98acb0829a86cf5780545c1da977e5bf81ca67dc0bdd41041a7232ff32336ed3f7a932d8259fb27b5bb72e7b1a0e6549d25318317f12d856e3755899cac3e7613ab90f2830afff48e97de39bd593796b74bb033a2fe", 0x9b}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000240000007eb236b65eb871c60e77253a", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32], 0x68, 0x4}}, {{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001b80)="d05b1f085325d5ddeeb30a3ef1060e3c9272c529baaa3ed7a224f8432f758e7e564554183d6acfb115f9c4d3868fe0d4ff5ae9b9905cbd9552834154a88ab647d99a5552b7160a23251add9b537ef93f7f3a175d4eec768da04ec6d105c2038e69f32f9471b4", 0x66}, {&(0x7f0000001c00)="9db97ea9d6c39ac8b20ad1e7f09eea2aaacbca48c4d0ec3831933163205b47e0f1b02f045092318d902a4a5301fa64064ae38be45a1b46c76e7d958998ce655aaa3882720d673d5d86c3ccaa88745438c1607f65d26b97d1c234c0258a5dca0b53f79d92bc5d803acc8fac9e9357c69fa7fd6d763de2d593040ead5e103fbd02ae22795bc3ad28d66b074428ccf6ba37509c51e5765b5665beacc94b9652", 0x9e}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="eeee8417a25345e5972673b452ef2bc4fec4c9337dddcc5c2721c59fb848f9f59134de40c6dccc95e5ac483fab235f7bc3ba6be12d2df0e92340edc77b7664e65e3dad7b90e828b021cc1602b1d3f5", 0x4f}, {&(0x7f0000002d40)="8cb185e1de4c4533a233dd2d976ed0d3846d4b5d1ee5b533f2a77e3a8476dc0a79ea2e58d448f64285fbbc74ab8b0826535150e0923fa2d2962cd39f6fd7f565513e201acf8baafe20a5abdc28784edfeec479e94a5bcb45b43d64673150fe18418f3ea5c992bffcb6f0d259", 0x6c}], 0x5, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}], 0x40, 0x4}}, {{&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002f80)="c01cf20b9bfe3f4584e89d97ab40c4ab535959f388aecb5a7d9216caa466e1beb595f222ca6ac4787265d5b7d1f45391b181171225ee9b70c61ed1743df4e635178268a51b9f81f896a2c9b92fb65d06b55dd27ec213df4388766ec00764180bc0912b29f4dfadb76a01047b40c4e4950b8c3b4f3746d6291c375f67abe09574439291ca9f52c7f0c1a366254b01dc79205fc64240fd0f1036c3c770c9ad8e132fe3a544a1363c06776f9c842cee4c418f44f52b4ed81ec8f19290e889b7f83f6c45367ac6e6017161370d3e696ccdefbd670a6fd297e9b608ef1a0aa4f688e28d14866d2bdf1fa539fcb8f943b530b3", 0xf0}, {&(0x7f0000003080)="3bd6efbc8c6c053e03e51fe5734ef02485fa04919565b4c06a23f9a15a75b40265416707b7edf49c2f5ff9c61f15be319215d4ca0d7db73f33f9e8c7acde90b4444003ca90ff1706dc0b7abcc3836e909e3e864886817e62bd111ed347c8922054c66840b21e43a2fca4639dcc00558fef83090ebba59229d5786969bdf475eec8dea4762bcb3179960db60455659d2c85563d16ebd42164822b00be8d10d36550c08b35b44403d4d7bac7d1c91ebe6270bb47329898d7d6cfda4f214918308ef8102487472edbeb89d31b3f78a4adfb8d70011a214a84f1d80eb557c476c7c26835a7ec8df4104bf851228934aebe288171a52a75126a8c45bf0c46f2973c87186cfc7a00052ecba8154f7edf4bc82cc0173de35586d7171aa09386a945f6b44b220c57f22cc9d0be26071da095df9dba54bc6d65d008038f9cc67ef9e6a730b0b8dd57194d3ff9dceea8bb9b4fd1f68b3cdcbf0668bd9df0a34cdf0b739d96ace5b5debc718baf8c1e8a0f9363bb9dbc5205aec49abcda4d3d680ff1255a48179d4e648c4dbc5dce3c5a281f52e797b933a21ce891a1e94a8b6148b5d67daf5273f1addd09a696a1771135d610797881f04183cb570dbd048e17cd8627f13c25839a8abb0e0698de34f35ae1da445983d7bedcf14832562c4db8b04b05e0fd32d3462b3758aaec9cb8a42a9b56089161bafd97ad305b3596fa2e9baa937401697f81b66139d9da55f24d1f75d63d80294fa903f16fa1b3f89762910d2341f47b983606d5e716bfa0d298d2f3ef7b707a31247eb82a3a08392af4f7db08a04e6f513d737554ea12a88624a80b0d6d145c90d783911605393c911e5c4776f40ccd7bf9682b0ba6c0830f89bf2efc982291b1764a447131f6d386bfe484476520df2359bd9bb937eb3a47048725af56ec5eec675ce1438cf056b7040607b0062cd8bdfd321c00987df5c44824cb24661cedd9bb782e5c6c63a7bf4a58fe6830cd3fea30f4a20ff90a62672ce4cddbb6e0bf2e9155304d38db10489db04f57c90d37274eeaa723c1c964e2520d16e83165546fea31ff58bc2c179c77313a6ebc5951edf0b2dbb10432f05ecbf8ba68f6e4bdb1b11a4e390fa9b5a4139738a56535914ed7f032cd5b2a8713d7da36bb1fce647cb357515ad9efce562a5d49bab1e3a6211db172c975335a5cb328a59a3022c0157cb385dfe030d2b5cd174047958681580ad788bfe2ae4f8c10fda710a2b5240b5f4eef0222c1611696330524b0e3459e0868770d41f01ddaa4607a63e51f759b90bf8ea3bdc78800c5fd6dcce007a43b4481a9213d69defe729f56d8a79268b47c039bd99d882141a4549868bb1301a2b778e9ba0bf98232ceddbcb906ec1f4599f48e5fea4648ca761d092724cd7d0e921da3ecab07186b70bd0336ef8240da44367b490d0b55c52a08e4949784d8451dc73ba5ee5ea429d24e41b4e73e499371bc09e86f09c0082b511faba51b67583b6d2854d1eedda8fff5717cffe80d502ac839652488783fc422df16b952a2aba7eab0fb4675a87280c5b4514b139ea3b9cbe2ceff0c2d88f75ebc1a9c9aa142cbdeec5fba36221fd442ee7ec8bed52b5cfc472973da46b11e1d21e9051e4d5b12343606c2c393f9e8892281942b14691cc193b2167b1a11d280681ab25471b20e061379b6664dada9d10bdbe13c977cbfd598af5b7afafd5aba154ae5750e611da80f429a2098ab01d250308b4cc478edfce91bb0df7f4216532522dae50f790234aec64a248e4c519bcd601483b9e56a73612fdc01be1c72776e0a63c73f3d0d603713c702d09deaf62c4bb1845e94bd4c23a709961eee82d0b6718126287a8713cb02f3d170ededf92dd58c6549f9ae6bbb6130e2367b594f4d3b89370f5b3ad2ecfa2e886aca4cdb0a117b0dc28cdda7436c285e121fa3bb3470ab9d008f56947de700ef6bf880b1c6b2fe594b535c1917fc086fdb36b70de853b3590dac1c8ec9a254faee1d8b54d940b86a9a01b2638f10f59019bd563144d4653b4d311b8e8a09e570d7cd39771b993d736aed6594e5f4a9891b1bc4e918a0616395a25347947b5daa060bfa02cab80009806db00caa3203fc362ede07f60113d0eacce165092b0bcdba23a390b70a414f81a03891d86b8dd3255349bf67ad68b9bffe6714959f99bb0031bbc850169dcb7cbc41a83ad49be94474f1825ee75eb227150ca7062fa08cc8eccc3e8abd5da16bc16f1672b5493b9be60af62152a30a73db1751576668484ea7395d863cbeca115492b51cfa06844d95d33170a2965453df53184d31cbcc88e56de56f1baef530714b5f7decf0c1f8964aa05d6ccd66b287c0846ee9eae618da2c288ae83bc1a9377555f3ed2acc39b2406b6a93935a1542eb625fd6859d039a830a8390e703df06fdfe5d891512f9cf2bf692b734deb536cb52f49f2acca8f05db267e15f368ef29e9a700856a35b24281ceccfd64e6493a2e7126df597f51fb801888b2c273a078e741820a725df8ca40cab695fb30190a64c0a8fd1db80ce24549a49ea00357ed3ffc3f01993b85bebd113358bab2d996450ead5f53394464741b2e934222b1512f6c2b70e20cfde40f26064a26d1a6ef61ddcbddad787ed82d75735d55cefde4f798134672764c01fa767e904fe081fb4c9c9e3fcd721378bff7c2127f4e8102b77c057c8e9bb0ab62457f142d76fb885176270be61aee5907775e9d2165f60f27be59ecb2061722a7964141f4b1de40a625022769597868d4b7ce5a055e7f2ea2ecf883498bda755b77b2e2de893359a7ae65d79810b7a80f2a8901180311150e34efd0f050360fd46051b3a6ce2aa80683dc50244c1e779025da439714f17f732f708fe0f554c50fcd5edc679595696187dfd917ef31804bfa6e8ddcaa067248b40b418ecf644b83df5fbac7fa288c5687b209a209fb35eb58a133f0c19dda60f83eed12b62734d3d43c5ba1fef0c7a1c22ce85c844736ff7fca2b4230d5300cf886a90002bd1adea84c0ee945b56f2e4181aef685920886fbd04b481ba49c8ee9e65cc414c12b9eae7dad44f0af4b732a661e491d6884840e1b492ae98decff8cdacab5a47b9dcb1c918f346f276b14ae14ee61ac79acfb0b622de319fb09a265c56a6c32a6ab7fded123af3343a0b37609a55bd7e2a8cc4d22a235e5ade951867d61f7117551add5f76f7c307f296becc38e328e02f88882e41dce4a458ff745667913bf70253e395f0ff4eb43a7a57087ca601a9d857d38cbcf1a6805754f3a193108a4d1f0f9676dbc692006cb9192b6b80c1dc54f7201e54323a7140233670d1c4f645c8cf4a856061a49fbcc4b97c7885c64b1a74d5c96fedf4267d80923cc9f36455e8801a615c55b6b3b39f0a5e5a4511cf4f2648336fc024122e56b5d531aea7c344f19ba449b0e11b1e9ab2c39399608793546cd41cfdff641ceb7ae9b582b470167aa9a58422ad1c8ffbacb6a8843347ca9134e79e75e32442f0337e49764bdae6423799bb21e650547a6309592dc7fbb66a341f1507220460b2cb8f298411c7344fe3b515029216dff6f8882537ce57a7cd90c7318d5724fa6d7c5d9859459a0aa8ed9c4d8dfac8aeba4f96ccfc29c2844dcfc93645e6419e694adf3d1563a8fe90d202baa584db1ad13a501b141b05ce12b826885bf8a4515008163b718321da9afd3b59c115e4f2a860fb721586debeca2cefbed2b0bb97eebbc27a88da139b174ac390e9474bbc96fe90cd48e77d59a727023e27f61dd83fe0bf77473b55878d1b43dfee62add796d1d66f524d5a22fa7bafe455cabfc22d1da195bffbd4d4d097328e3bed0cde380d486f7ec627df0d774b59a72f001c5e841647a8af04f5b415f4d533d0391626084d6eb2cf6b6356ff3c4e3cdb30184218c8d69a7adab5a0520ff3641117bc92592d73ba5a991074319848c39a70e5d8c3a534807f88335996a8ba7780ced5444fca44b221df6abb5f107b7e2daa62d517a63d8f27937a823be2032a7a214cd6cae535fa938e35c363fd2518ff6371323911708c2c7120ac712e1e4c62ea3a0f1d40fa6352b3aa62c93f183d656de466fec88cae0c8831a2601def0d87eb36eef638687c31b36a6fa407b436699e9faf3891a15896068cef1e02c9d12763d7f16b4c4039248f4ca7ab70761960a3d00d07a29b6697152a6c80dc1088f586837baa96265b0a1648aa9a071f83626a8d7174d63cd3d3afa8f96ed4a00f5be3a027bddf5b5877ff2a3de884b4fa45fe90ccfc3afb1576145cfffb48ec2f58facbcb06ac6137220d2f21746e0cf3c82d02377c0eaf272a7014b91ab5bbf5df2a6c928f6b2967c84a196840351e9d9bc2be08c399418f8d0821a1541a3161cf8124c6df70d4058bddfeaea251e9262edbd31865f36946c2c7de197978ffb82fdf5969bb5f493fe4d43eb073a3bb75705c58b66db59a3ffe5c5c98ff17cc1206142833fdcbc4b67191d6016b9662d54e265580ce334ecc2530433d725fac38128470da0053a6bc5e64184416a65dc17579b3e008a7bdc45afe2a49e305318bfe534b310879b8214556e0575c3eafc1448c743e3d251e016ea62e926e2af066ce1f018b02421f23512c56cffcadfb972d342380e7352696aeff8c4681c77317a71c9561a36b8c4970980ed8aedf9eb6ee1a28e86c9b6b5d0bf7dec65303aaf9ffa766107feb8c764f097e8c04735debf5fc88f1a8d614d96bbdff2f5c1668efd7b2e9c656314b10faf05e21dda2570d92e8c43d8fb50b4edf407d50bd96b5fa3deb6e2d45d9adc3e0d23c0fb2c13b9a2915b71c0eefdfc9c7182dd4592d1a3b4345a1a781b168bb1e6817bba87a95fabd69e93fda3a5aeb49eb1412e36fc0ddf79bfc1f65032ee15a5bf4a63a9777ab9c83b6a9ec71e0d22d7e108a7334f2c0acb088d021020b0f770561f388fb4296f9e2b94af99528c5aa76f840744b4c36ad7a7a6b77a6a150b5d916d39a226159056ece391ca39ab52ade1b75d2c57e23fa05268fcc276e4a26faa738b6f7e1d4ba772a9c043ed2245e9b048fb4bf67933d7295d27f93f7767454a278cd73860c648c19dae7bcbf6025f803ed60a583b9cf962446d0032f8cd896fae7b41110adee677fe5005247c22457ef596acad2af085db3cbe9f0ec2d5b0e62f2beca897e284022ea3bf501d834f48c56c56eb61bc495a747883856a713e0806d0a78cbb6fe014e6541c240f6c4400a6cd6dadc657ce22fc9afae3fe6c84899b663cd95efb8cbb36213cf4af0a938756d1e3a4fa68af5ed720936b0c4a66c2f842d2fa9621d0467f586bb42096cd39d600a550e49aa2116b715bd4b9956817764d6d7209b5c02fb499fc572c781f9168832465b74dd7549cf8cc35ff9194223311c2f87f49cade52e368aebc94951448a3de883df2706a93316bc60177a3ff260ce6381ac1fb2b1d3f89e95661ca2e710a3beda552b66181b1d06e0108c7cc7ff9b5b3cb0edf2160b7bf79add8b64dd7cae2728b7ca83c922518c9bb85a332f9e390881c0c930452067554ef82439d5b6f568c489268e50a2d6c86c50e2b38190ca2259ac184d874f1d9d11c265120fdc837367a269e7c7a4978dd33be62262e80e2de76e4d401fbe7ebbfd1f264698564c18c8d3da26f8f93bc1922bc3e648272e5ad478bb4212fc61e9ff77dcd44089b2476beca8beace8a7ee776172848e46dba04fccb29460f0f170a995856b935bd497b418365922614dcda7cc2275a0511fa9f1f7f7941f35406d958d772acd96660ff033a4", 0x1000}, {&(0x7f0000004080)="31419962ceab", 0x6}], 0x3, &(0x7f0000004140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0800000100"/20, @ANYRES32=r11, @ANYRES32], 0x38, 0x24004000}}], 0x3, 0x20040080) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r12, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000180)) 22:46:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="c00e00001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:16 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {0x0, 0x0, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 356.354217][T12250] loop5: detected capacity change from 0 to 224 [ 356.368536][T12257] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 356.379699][T12257] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:46:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="effd00001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 22:46:16 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x0, 0x1, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) 22:46:16 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200), 0x0, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) [ 356.466055][T12280] loop5: detected capacity change from 0 to 224 [ 356.496181][T12286] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:46:16 executing program 5: setns(0xffffffffffffffff, 0x80) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000000200), 0x0, 0xe000}], 0x8021, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0]) add_key$keyring(&(0x7f0000000600), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r5 = gettid() tkill(r5, 0xd) write$cgroup_pid(r4, &(0x7f0000000300)=r5, 0x12) 22:46:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="e03f03001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 356.536237][T12286] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 356.546564][T12292] loop5: detected capacity change from 0 to 224 22:46:16 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8e}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x8, "e3e1ff374c06"}]}}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@initdev}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0xd3, 0x401, 0x0, @private2, @mcast2, 0x1, 0x0, 0x4, 0x8000}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r6}) r7 = socket$inet6(0xa, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r8}) [ 356.640393][T12308] loop5: detected capacity change from 0 to 224 [ 356.651183][T12309] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 356.679123][T12309] netlink: 'syz-executor.1': attribute type 4 has an invalid length.