05c5340, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0xfff, {}, 0x3, 0xffffffffffff8000}) socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'bridge0\x00', @random="724c3633c85b"}) ioctl(r2, 0x4, &(0x7f0000000340)="153f6234971ba72b7ffba9e12f61c153afb7879d1ade3959760670378e13911ff90d9eac2e6959fb934fdc74c3366bc44082333b19b87c2703c9262c4bbb2f401dd49b3df466d7155bcabaf5500b88ea09fa048b00000000") fchmod(r3, 0x37) ioctl$TIOCCONS(r2, 0x541d) 05:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000003f00000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000520000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000ffffffa40200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000520200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000440)=0x6) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/189) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000140)=""/141) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="72617700000000000000000000000000003f40f7efdd6d4d00000000000000000000000900000003000000680300005801000000000000580100000000000000000000980200009802000098020000980200009802000003000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x3c8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105511, &(0x7f00000002c0)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 05:42:45 executing program 5: socket$inet(0x2, 0x3, 0xdf) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x2d3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x6, 0x70, 0x9, 0x3, 0x7f, 0xfffffffffffffff9, 0x0, 0x2, 0x2000, 0x8, 0x80000000, 0x4, 0xfffffffffffffffb, 0x9, 0x6f, 0xe64a, 0x5, 0x1, 0x0, 0x800, 0x3, 0x2, 0x7f, 0x5, 0x10000, 0xfffffffffffeffff, 0x5, 0x2, 0x873d, 0xffffffffffffffff, 0x73, 0xd95c, 0x6, 0x2, 0x9, 0x6, 0xf99c, 0xfffffffffffffff7, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x80, 0x2, 0x94, 0x6, 0x2, 0x3, 0x5}) syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)={0x10000, 0x2, [0x0, 0x0, 0x0, 0x80f]}) 05:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, r2, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000a00080000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:45 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x592, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0xffff) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x9, 0x1}, &(0x7f00000000c0)=0x10) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x17, 0x1c, 0x13, 0x17, 0x1, 0x100000000, 0x0, 0x1c}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xffffffffd41160c6, 0x20}, &(0x7f0000000140)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}}, &(0x7f0000003ff6)='8P$\x00', 0x401, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x9}, 0x48) 05:42:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) 05:42:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, r2, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) openat$cgroup_ro(r0, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000003c0), 0x4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 05:42:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000020200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:46 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./bus\x00'}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x4) fanotify_init(0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x7fffffff}}, 0x18) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000480)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2e975afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)) sendfile(r3, r2, &(0x7f0000000040)=0x100000, 0x100000001) 05:42:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, r2, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) [ 307.852697] binder: 11367:11368 transaction failed 29189/-22, size 0-0 line 2855 [ 307.873291] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 307.874835] binder: 11367:11368 transaction failed 29189/-22, size 0-0 line 2855 [ 307.962323] binder_alloc: binder_alloc_mmap_handler: 11367 20001000-20004000 already mapped failed -16 [ 308.006188] binder: BINDER_SET_CONTEXT_MGR already set [ 308.010428] binder: 11367:11386 transaction failed 29189/-22, size 0-0 line 2855 [ 308.020010] binder: 11367:11386 transaction failed 29189/-22, size 0-0 line 2855 [ 308.021863] binder: 11367:11368 ioctl 40046207 0 returned -16 [ 308.038609] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.046322] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.054221] binder: undelivered TRANSACTION_ERROR: 29189 [ 308.062210] binder: undelivered TRANSACTION_ERROR: 29189 05:42:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000440)=0x6) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x14, r2, 0x1}, 0x14}}, 0x0) 05:42:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000004000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:46 executing program 3: r0 = socket(0x10, 0x5, 0x100000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000680)="6e00742f69705f6d725f6361ff01658f") r3 = socket$inet6(0xa, 0x3, 0x3a) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000700)={0x0, 0x17, &(0x7f0000000000)="5240e437d0613ac30b25e562f868cf69da4ddab893fb18"}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000d40), &(0x7f0000000840)=0xc) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000006c0)={0x0, 0x0, 0xffffffff, 0x68ca, 0x1}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r7, 0x50, &(0x7f00000002c0)}, 0x10) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@empty, @empty, @mcast1, 0x200, 0x80000000081, 0x987, 0x400, 0x4, 0x1260312, r6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000780)=""/81) sync_file_range(r4, 0x2, 0x1fef721d, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x5, 0x2, 0xfffffffffffffffa, 0x1f, 0x7, r8}, &(0x7f0000000800)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r5, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000740)=0x84) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000280), 0x1f4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x4e20, 0x0, @remote}, 0x0, [0x0, 0x0, 0x69c, 0x0, 0x4]}, 0x5c) 05:42:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="86dbdf064a637332c2e468605915399328d1ad9e02eb70bdd9e48a9c8e5fbe50508989b673453e4abb5654140cf723cc2328be97788fcd386b5a1b976cb48dd54d192e1ce49985343b1d38f50f1b69c483e823f1210392f675c5d263244a9407b34c19d98271df961e582a5752a21b28334fcb5c833e3df9825be2bd921d3cc311984692c0bfbe647e33fb25aca9b8721db8b79a29c15e7e51403b08de5560ebe0feeab6", @ANYRES16=r1, @ANYBLOB="010000000000000000000900000030000300080008004e220000080003000000000008000100000000001400020076657468305f746f5f746561f87edc2f"], 0x44}}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x7) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xffffffffffff1742, 0x5, 0x6}) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/4096) 05:42:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@generic={0x7, "4e8910dd10e1da361c6f7a89a22097a9af7aa5518fe6b30819ae86370ae5b4505ef1ce572efa41f355b80c6a26716ea70787a05cf88ccdd407376773c3bfaef56e06f065013b9462a954c04d0d19e4b6f02515418151114e99a8175963b0d20f1314deb26fe2e9863656e4c343e1303bf0b2e711a91fda2aeaf53cac629f"}, {&(0x7f0000000080)=""/54, 0x36}, &(0x7f00000000c0)}, 0xa0) setresuid(0x0, r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 05:42:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x14, r2, 0x1}, 0x14}}, 0x0) 05:42:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000008000a00200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 308.618896] overlayfs: filesystem on './file0' not supported as upperdir [ 308.676715] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 05:42:46 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000100)=0x90) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x54f6962e05b34dc3, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x1000, "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"}, &(0x7f0000000200)=0x1008) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001600)={r3, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x1}, &(0x7f0000000240)=0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000000c0)=r5) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r7, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) shutdown(0xffffffffffffffff, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r8, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x1) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) accept$alg(r1, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x10000) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f00000004c0)="187eb8d022bcbb084b53fb1ea3644e0ab3569b49807e9a30b0ea4be8c95914b54ea4046a08cbf84b1f9a552d776747f6033e57e1974cd8bd82bd2531fb1bfa1f025643621cb710c914b0882d1bd80c801c53c61946b47193798586c007f7dffb31d15b7269b2bbf3303d390b98b17f3049a5de430649ab7fd8d935d8e87eed5d4f6124f498305c6c15628c6d9cd7b44e15a994fb48c72edefb81ef81a843ae5fb5a8d282f51f77f553da85245ab460bc5b0b108ce364194bf9bb638b7aaf2c1d3f59f74d625dbcf85ed8d1240c27c9ef667d1013c3f66f7b4e0ae2f46b4e8a207af9c3230aacf9d8eef9ebc2d2baf00832dd86018d0dc242603d") 05:42:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::e/Qnullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000280)={0x100004, 0x102000}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0xfff, 0x20, 0x40, 0x1ff}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x9}, 0x8) 05:42:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000020000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x14, r2, 0x1}, 0x14}}, 0x0) 05:42:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x200096e, 0x19) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000080), 0xf93e1db3630d5fd7, &(0x7f0000000c40)=""/160, 0xbf39917ec1abcdbf}, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0xfffffffffffffeed) 05:42:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000440)=0x6) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000008000a00200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000003f0200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:47 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x101, 0x2) write$P9_RRENAME(r0, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000480)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2e975afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) 05:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) 05:42:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000040000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, &(0x7f0000001f00)={0xa, 0x4e22}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x151000, 0x0) accept4$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80000) close(r0) r3 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) dup2(r1, r3) 05:42:47 executing program 1: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8, 0x9, 0x100, 0x739f, 0x0, 0x1, 0x10080, 0x7, 0x7f, 0x7, 0x1, 0x100000001, 0x7, 0x7ff, 0x6, 0x6, 0x80000001, 0x8, 0x400, 0x101, 0x79ae, 0x62, 0x9, 0x8061, 0x100000000, 0x7, 0x20, 0x2, 0x401, 0xffff, 0x4d, 0x1, 0xffff, 0x80000001, 0x9, 0x8000, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0xb848b9eb0c26ffa5}, 0x0, 0x9, 0x3, 0x7, 0x5, 0x4, 0x2}, 0x0, 0x10, 0xffffffffffffff9c, 0x2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) kcmp(r0, r1, 0x0, r2, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001cc0)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0xfffffff0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000003c0)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2000, 0x0) write$P9_RUNLINKAT(r5, &(0x7f00000002c0)={0x7, 0x4d, 0x2}, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702f73797a30fe", 0x1ff) 05:42:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0xc8, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0xac, 0x2, [{0x51, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xc8}}, 0x0) [ 309.478651] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:42:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000fffffff50200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:47 executing program 3: [ 309.638107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.887270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:42:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x90, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) 05:42:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:48 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcs\x00', 0x2a8400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@loopback, 0x1000, 0x2, 0xff, 0x7, 0x3, 0x1, 0x9}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a7dd2ada987899aec7e389f6a19480922744acf9bfebaf922227d8088e35a182b3eef138bccce47116ee29a96a36b80f025aa7b78476d06b6fade296fe9f1147276ab86e2959489dbb37dc937c332e1eb39aca99ac7cd14f75030576eb6b8d1cb5b926a4e99a01fb433ea72aa9f2767239709ee2f65cc731a895344257d3eabba7a5c3c431df6724e1f79fe9efd6ea42bd5bab17d37"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r3}) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x802) setsockopt$inet6_int(r2, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x30c, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r4}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_script(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e637075000a5220bd59c912d029146227c87fd44caed243b3967d4d9dcf3765e9a98dbe91f20406915742518332e260ff0f1e301620284c7b17c32d0541b7c2aba13a5cfee847e7e24284bb10bfc3ae8772ab175c0ef16db55bfe40d34f9cc6f007c8f2cddff068f8cffef5cccda3da778a3dff65b0aa06ca0bb0e3b0f962ebfbccd3556996fdcb8347a6086945e2d659a6d9d3380ccfebc41844"], 0xae) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r9, r8, &(0x7f0000000200), 0x10000003) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={0x0, 0xd3a9, 0x6, 0x4b0, 0x9, 0x8}, &(0x7f0000000500)=0x14) getsockname$unix(r9, &(0x7f00000006c0)=@abs, &(0x7f0000000580)=0x6e) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x7, 0x8001, 0x879d, 0xfffffffffffffffb, r10}, 0x10) 05:42:48 executing program 5: ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ea, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x981c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c001400", 0x2761, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) getpid() r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00462d285000fb4e229d6c1c9511fa187eae00000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x1) write$cgroup_int(r0, &(0x7f0000000080)=0xf, 0x12) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000140)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) 05:42:48 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x80, 0x4) dup3(r2, r3, 0xfffffffffffffffd) 05:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000400200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 310.249745] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 310.258786] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000010200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:48 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='g', 0x1}], 0x1) 05:42:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:48 executing program 5: r0 = timerfd_create(0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0x40085400, &(0x7f0000000080)={0x1ff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @mcast1, 0xfffffffffffffa4c}}, 0x1, 0xff, 0x6, 0xb3d1, 0x8}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) 05:42:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000004000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x1, &(0x7f0000000280)="153f6234488dd25d5c6070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.eventw\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) ioctl(r1, 0x4000002, &(0x7f00000005c0)="025c76408d8fe4f85370") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x10, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x35, @ipv4, 0x9}, @in={0x2, 0x4e20, @remote}], 0x5c) mmap(&(0x7f00009c4000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000002c0)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x9, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00^\x00\x00\x00\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'lo\x00', 0x6}) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4), 0x30b) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xbb) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r4 = socket$inet6(0xa, 0x2, 0x80000001) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000580)={0x28, 0x0, 0xd219882153f79c93, @hyper}, 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000003c0)={r6, 0x40, 0x3, 0xffffffffffffffff, 0xf68, 0xd3}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000440)=0xa) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r6, 0xfffffffffffff03e}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r7, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x4, 0x1000000000006, 0xaf6e, 0x8}, &(0x7f0000000540)=0x98) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}}, 0x5c) 05:42:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x20, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) [ 310.435201] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:42:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) gettid() ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x444}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x6}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000480)="50a1f5af1b470e1cd084b09a213161dd738addd84d748585d16522660c5be48e44a997f2c21da06dff71b6ae6e9467d5b491f418c1c499e395ef865380c04cadc362ee5d3fbadf5532336e84fe8142a620ed770fb64b1744dec9bae095ef520086a7883ffa66f618417db46add6414c7507a7e078d63fb026c74ea373aaa4aaa855f44", 0x83) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x6, 0x0, 0x0, 0x5, 0x0, 0x2, 0x200, 0x8, 0x0, 0x0, 0x0, 0x39, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x20, 0x1, 0x0, 0xdf, 0x0, 0x0, 0x22, 0x61, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000200)}, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x8) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000001640)="766574000000000000000000bd6800") epoll_create(0x3d) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0xffffffffffffffc0, 0x9, [0x8, 0x100000001, 0x3, 0x3, 0xfffffffffffff146, 0x4, 0x1, 0x4, 0x0]}, &(0x7f0000001680)=0x1a) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000016c0)={r5, 0x1}, 0x8) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000001700)='&\x00') ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000300)={0x3ff, 0x1e3f, 0x750, 0x1, 0x3cf86342}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000001800)=""/4096) 05:42:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000005200000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x20, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 05:42:49 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000001840)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000001c0)="e76631da78ca46db6e0fda8bc965cd5610e6cb3bfe8075a72c774dcd7b0488b38ac95b2aefbde9c9921f3d7de00dc75808098083c5bd4c5b82c8a1889f0905abc45cbaee47d6299be5c7aa6faaa849515e91467ffc4787e4f1cec38244592c6d1c4bf60e2bc9584d234bcb92e026c623d817d7cd7c305334e315ceb11f533d4251202f07e7a628ba0b93fec084b3aba35b02d34f2a099c1df13c16dcabc9a95448c3d2d4c9c8fbe46bf7914509dc39c9b50d33e9fd86", 0xb6}, {&(0x7f0000000280)="2ff76c98df91453714b777696dcd15b63e59646eac6e6ea99660f83d34a1bda55915c0558694da", 0x27}, {&(0x7f0000000600)="7e3024ad3a06fe51e39c62dbccaaa74b63b08761414d7046f09087253514d07bdb2024e1f8dc57c49f050e43348bece8904cdd7e3a8b9645161bd411ce3779b449af2e51de309cbcaa75c0ca4b5f209c2d8fee40ef096881eb07a66967bf46a06de0fdc1366ea464062efa42e6f41677d7eab9c25774cbc6e53e6863d96ed07c5b5e5fcc9353a93849532c961e2ad7fa52938e06bb4a9404aed08464646f2d5513fc99f41f113de1b2fe18f9f124fae56e5870cdafc4d2ce4bbaf61d967dd445ae8322285d5231b3705ffd7a57e8573f3c91f0aa7fb72acf8b1565da0c8146d965455f842455af9555d01613392a82d0d1a5bda66f901bfd2acad495d41d218ca3732b9375d0b0bcadcd808173f7b6f84e62b5b02988d86a428bba49dcb63c6ea0803aa4f61e11f9d4c0c24e8d506ade576002a7d25c13f2841de7af22fc74b7a930b631109c882779619ed917a7d0b0636754612a4a55ac63d1824eaaced9a19e8b2e99b066654a5f3795cc1109f2dfb2205264717b0c8cc179d7b12a4d26f1efa2319531664e578f4a0bbf73c0390b7bdcd307f80aa176b44edce020e88601e90f7d5799db8711e5bb97dd6c6eefb01ad149f576e8b2c681bc03c4be4ddee92c44810bb2766f4179f303487b28c45442f60b07192b15b4f7c98b6b96a3de656a05ea3dcdca82bcafb1db89b223581356969894683a2461b5a90d58645a5a89b777ce78b2038edb81de7678f1d7f170b6ad0f4884b1e68d677677d4c936ca8bc1175e9a1b21191e741ec584ffe9e9256c27c660cb25167e91b3520885a107e148c42e175e11b57860308b5659b95d6cf5ded273d769b1497dfff5791e96674fe088148f68289c3848c5ac4ff851193d5225ed70e620ad55dbe75ccae0e185ceffd7014a40c940ab92cfbc0c3c1635b73dcc216c21c7ab6472645cdaf7ec7483bba92eb23895c74beb7418283f4185b490d8506c61015c72188c25fe9db20f5d9117937f641a4cb9f47bffeab9d5c5b6d3e607d97f7d3c5480e256dcb74ba51fb2a2c39e5bc3645e082460aa966e9d30f9f90ca68861cf308c341640f8df786c10f08ab8a5a51bd65fcea3fe7c5f3fc8e227447d3d84d1d99578fb0cf5c51c9ff4d9d56d9ab56457ec65f1cfbc2075061cb2c1dd5146f0a433d9f9d10545c34f6bcbabebb67bbb6c4ea7c78c320772d887066b9ea8790ee04234c660737a4600df2071474487265e17fd806971d58eb6b296383e174093dec4030e890535c0babd8ccae38ef81981169e35e91a4ac0dc2e027ed4a654bbc4c97a7fdf08b0cedfe8f3fe3208a9ef25c6113d7381c89dd8ea100a58fc8d412a1d6ec2c2f719e3233fbf7100d3c64cbcaaad5836078f92c27de37b04fb70a70e32cc2d2937e0c6b558057b393fced5cc9f8ba1c99cf05720fc86a9bba9fc3918ade40481921d6f86407651a5810f72b5ec241282afe890923e59e501a0576b9d936392624c5a486b0d6432f7f3adc64bcd99c17735ba1a5f9600e0ef98b06a5c2178d188729b86e00c07ef8ea8d403a0560f62abf45e5919e603601325dadc71155bff2be68d902950557f1da1375590beb9adb73765ebfdadef69f5f92b148dd58ed14aa03c6050cd1031545f315e08fd89870d73ef5b2de184ed9509a576ab3568a6ba8b212b09a15d19dce55ccc1bf454d0d899651dc3bdba67d59cbaf36c24bc8a5b0ae9177d61ff9f728199c58af0cabdbb14115635482c2f5720801b28a3067839188d5d91997f2ebcce3b1c39ddefd8693f6d9804827a719c01eb324731fc6599b6117312ca2a38e2517047258cc50d44c317d2005e90e3b2a7de828b411123af35be4521aad1d9491bec106019924d4c3712101c51153db2743002462d237678c2dad9cc01599f3bb2fc0f7280812267f60fcc7fda18ad77f0780590d56c505b8a6dca690971bc05b941b13c3fb95a7c8a2556735095d2bda27211eb09bac6a27d5404dfd6825d04ab5e8201f3c75e8e6b15427d028eee839a50d592e1f65a8c53363fc6f98d6fa311c511c453fcf5d9c1fdfab2100cfbc256f33c0f50bbb44452df65fde42e01ab5dc2190b69a525fc30989fca149a3eb7b315778a8dff53c3f0d5cb14c21210be4f3a0232c7d9f09283d8698c931753d51089ffe5b45dcee11a0d4c80f780ac7a46f010f9596e70e76153ea5e22d583356f939b64934e87045da63b11c0d091b778f49b2c399a482b3fc780c20425d6d5bac3fa432d46bb852cfec76921cd4e7d8049fca2d2cfed13681afad652ab154838eb14bc578503b58566960cf62bbe2f87622df1b4e7efff431aff08c3ef725c5d25de449fd21ba7d7d29064d7838cc66b69bdde84ca31fb5c97b39be0b771f5b515baa379c44fd02af2f64f84f21d96579ef12ca244a24feaac5026ca59a0947ded3727205227db6752264a078f2a9cf9ab84fbc8fd73eba93edd13ed4d23fbd77250ef9a3befc63891e96dda45ee9ee8121d7513140cc7b24b02ac99b0a81a64c5e5379a6d937bb4afe20beaadf43831dda5f4398435684638d1093b5f5648353a5c34b5e4ca7ad179d14c5ec24804ce351d8c2e510a9c15b4dc843ef027b238941c3f32b1d360b89c59194132e2a410d6fdd83205b0fbf2c50249e3936a5068b3912d9e3868a324dc2dc4008b8d66b98011a18264cac6cc5767f59ddadd650d09ed6e03d89624be893ca9d99d398e496e86f8d7ed1e52b9e7efe279153601f66dafeb01fa42f4d53664b5f47ff323f2c4883b259c2c46e0f671d067316a0d0e5c2ec699f3a02cbcb5165a97865e5ad62e2976e07acfb200bdc577dfda4dcd0f0a968db58ea0f03fae1db4954a52ce59597343b7f8c95bdb7b0eebfbc9c889eebea4ff6c6da160fdf212fb390853b9e0758a383390475579ae62f218e66f4a2c6dedf5afeec88847ac35b5383d0bb40a4f45c6dadbe0fb127043e6e69c79fb1a46bfaa8b8214fa71e1c89f964fae77ec3ac6e318234357392229ed319507f32d10bcb13501e6cb093f45faca8f0db14079aceb9c0e1fc9f70f3b509a83c0fdf955e5a5f00a69276d086927c52e915659a83526094b03d5ec3e4b40cfb072f35144b1b33e93734b51815110afc892b64af31082baee0dab0ed00cb76109c72b0f0681dfc12851b1ad760268fc2560f1703c4de3ad88f2e447bcbeda4a0ae2bb80b473c949fb22a68591219dfb6ca0b836cde81b58e68afd87f349fd6b073f07e413fded0806c8f44dd2ca92de195f2027dfeb47440ebd8c0d4e18dc54da9dd1a7179caa8b5b6baea7a0f86981428369f5b068b6f322d972c624bf22035b38e2265a3ee001caa1198cfcdd1e2cd53a620d37bbd2bf9849c746738d614f3f6a133cd2726151ab9ff7061b2d149a25cd39d1d204f6356b692d03db49815920d843eb9dae62cf6788f043c95b9912e2888f3217e114f7faa67fdc498ca817ede0caeb76e768d8dcacbb7245588d73b25482ca4e1de3b9ef8e651053ca34a31918fb6adc21aeba239232883b950d42ef7081ab21a703448bee1e08146c9f43d98b6efb5eab51bb44adb16d8466987883982c2907ad4ab6674edc8e74749bb2316d9626e6b8ea169bdb5f34eca83d7d5f2b31cb6c4f2289344da8eabfa332c348276e7c56a6843ae43b794224a9af62b33574ffd18d7d255b0d6c6c6d18d844cf0f93738c3e1e4593131920e4d9546d552a913b9a9ef5d8cb257d949ae8d9e7f55f2921b236274061f847b9596fc76aa3f94a88c70ba6f1980118a6680d45fb0a70f9a7bec8b4e4fef3b1d9389081be64d4e2923164883eb0639b6186b041368cdda2d5f2c26c960bf51760a4e823f7c664cd04b259008b1c33e6de9c3289227ba58293860053e4a0ba98a5564d94c4b1ca597416c7bebcd9ec8a41c38c2f9003ec6ad690c6970dadb35b26713b31cdd530e4173085b49dbe1a99efb9c43548ea77ea70dbbaebdd29b39f5ddf85236345e8b78a366873d82346e93041a30947448a3a384d4b114adae5fa1fec279f58243997abca39530d2dc8823500fef3ba456fb628729ad679470192fe8e0a1344e48845605ca79605cf919b0c6ae2445cad5d0ea53888a6fca1bf73505f2dc6f3471587090cfa7a36fdee0596d135c4a20874a161257197015d47a8b99fd28f887e7465aa1074bbd7be70bad6985b94dcf647fb3dd0116552e0c9ef973fa5dc1771eeebda91c58104e0d23c8bee06386362d9a19f7714abab2a143a010bb1cdaff0b47654977d35be4ecdbd73eed7a6b59cf4b6f72279972545ca30539d5d9e1119931f81b8a4bd92b32d8fa5b219531fae9f1b5bff995d91497a8cdf484638e89d6d41398dbe74da6c8fc4f32714293d7c415294abe522966b56cf25c54ee6f9b7c6365ce050909c39f8ed0f8b8c6b79e39234f5561cf498bade35069b987676527199bdd6bd513ec8248f077229bd45b17bae2b1946bd31e02ec587b5a85fa487df297af45b11da4a4aaa32f391f00e1ab692ddaf91345f717730293f819878d77c7473efa397f20fc9b316d178165e9711e7f2e82eb94fead8919fafedc8ea07888295dbc6ea31785d5d8a7f188cd1769b109e11b906e3fd278c95fbb671db5cac6268ab1d0643ad43baa20f51acd81fe95c341d4c6134b2ffa7f6046f960b897f86e75babb74788e12bb603df942befbb681243243bc987cb8d348ed61119837ba3cdb5ff2579c430582911d269b48d1f00c839e0a3149504341a40bcd9da07d5b6695c69a2fc83f59893b1f5dfeae5229dc722785e3d50951f5e4abd5a40a9c8a9657a0ab9b2b254ceeecbd1e161ed3de27477c29a7af268816e8c958d032e6905e5948d1fe178c95f062abeefa42ec11776c605a5ecbf4569975a93e91548b1615d16039e6227f3ac3028323bdee78da5e70ec61cdff3a2c74121e5bcfbe7dd7244997f3389e085e4fb81f4497547152dbb1e81c38bf1ebaebdb7460bd3e7fda41c988cef04d103be5dcbbf587950fe0e88da421f638a56fc59759fd92a4c85946ca9d82320a56cd54051984c8c5285bc57f9c1fe981178796a5be0f60519db96fad7c5291b9cc3577c3ac63973f2241b1ae160ab4f8dfe3163dadf825a69047498456f9ff1e2527823f2e77175cfbecdd8e3f38fe7c6b34835f05006f87d05a3556be00a126bdf3ad1789ddc08dfc523a9ffd79b032c3f33163504b97ece2f777033ec9c060ab65ba983b5d2094480feb1cab6238a3848ef245511b8a76a651ef8c656a2dfe4ad54f523c50ccda87da6b7790a9b59405dfa48c99fa98e50814a7ba45f05e50382a9396ade2a6e7695098b8a57b113b8a50c99a3e198d154709022162f5c0ed59b1ea24ea854268979da54adcdeb607b012cfdde63372ff6c471fe2b71342e2c3e6ccdd18cfe713b34777d9a63270ef8370b842d1a825314d51b971ee4f376f56f02f983e8b26ca12979a7b4dda8274328585232aca2951f558dc738e7a4589347a141b586b7a143c53891e5a7a451f089487c9288f2fbf556a628849b3b17c9f26a4c14857bf6b4e617e77aa7aa91ddf913c9a889b75f848393d8a824516033846845e99fb8479dcff7b051d700310b3fd19c655c8fdadffaea5a1a6cb3a77fd0dba11934fb9ec9072c40702594f274040c9eb27d05b69552e221c233bd4dad0f4bc619aa0097cb32f6c23d3edaf74d84f135cff8e259d87b7b9d19aa3929dd17ac37589385c6936ce65628bc1b1b533f32783538bd9cd7ebd7f1574c2f12542832553019421fbd9bab7fc5485028d1f47f8db38e87", 0x1000}, {&(0x7f0000000380)="7811fcceec0794dd328d787790c96942913919e26fe462a42cba3f8fbc996a45461233a3e17a2a018624128a25f2942edd6709574b2fae8fa117e08eb10427d831e26908c849bec6ca9a14df154580b1ae9fea82334c90425dc62d0b8b95d14ae0efada4c2465535754e8fe1fcaa84a09e75385374de5f65e842246bf9224b11673d20f0c9e3848362c383d6d25f98acd3cd4ea9547a5bc806ccf2202d78a36d5d97217b37ffd2afd5843c8f86e5", 0xae}, {&(0x7f0000001600)="e2f95e36ea8ce12681cbd328cec642a329aeda45e4aea92e74eba20127d9d62c45543c347172cd3b0148103af02bb165adadcb9b00c9a734563e4205651a7ea250fbf2a570704f70fbf4d9a792a0081750decb2e54ab7a2eea6cdefdfd7b58390369ade1a5ada177d66e1048e53afa64a76875f0457f80467a6294b546124599f4df1e045d7b57ff64884aba1bb6052d09d83e85786d1a5d72a3de00ed389f55cc469117c180ca4af7b597322a1b9c49cc83ddf829bc923be1aedf782cbf4bf294cd55cb066fae87a7fa31771cff1167d65ddcac072601a69ec9dc0d3de784a24de4c442ba6dcdfff44c76d2c7b53ed5586989c11d6cc5151b516d", 0xfb}, {&(0x7f0000001700)="bb54d73fcc0d15f8e6787e0df4ef0b680f90a3064abe696ff5260f21841ac69ebef3f401af0c50247f4593d07b7de021c43147b207e4b4424d6e553643ae04f858f2d6d241bd1004d546e7d444f89ab8fca06583b940537fbb1689a6f470", 0x5e}], 0x6, &(0x7f0000001800), 0x0, 0x20004000}], 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:su_exec_t:s0\x00', 0x1f, 0x0) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='./file0\x00') mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$TIOCEXCL(r0, 0x540c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x10b) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300), &(0x7f0000000440)='lo$self(\x00', 0xfffffffffffffffa) getpgid(0x0) 05:42:49 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nfc={0x27, 0x1, 0x0, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)="872591aca26ea3e61b450caf342033054f0b450d6444c8276b5f7da1d6ef735a36545a021ef19ba093e5be32f70ae2088441c99d26d691952782c654ecb17be5a81a1b168628195a6f2c17e211d9a3445242deb9d071decd5ec012f64121a21e5a576b4597f8db25219506d43bd9c02ca460c7c0cdc3", 0x76}, {&(0x7f0000000240)="1b4973cf1d88e284aacaee1b9a9fcfbb0954e721851b7613f0be36e5717714209abe05c7599795fb904d8682bbbb777e3b8010c5013285be1841fc38cdabcc9a35bad785a5a7e07dac16f80bf0912ccbec1e9d6a21a7078590ca0f7b086b9231515a41ac1f2530ffa933c07a44c185e3777e68f14ebeed38e16a11fe353d4561d27164adadc9e43b", 0x88}, {&(0x7f0000000300)="8ac2b1c7687ade45a71dd084ef4b1c43f801227c5e59c4f74ec9876fdc7689a85d758437db9bdcde9bcc4e7eb927d357e7cf6f1eaa5d8da2c34cc0d1c318477e48d5cc604f8bc28d8d50f60778d85d024b1195228e400e26d826f2b06ed33d5a348ac4b747254552113b99fa6e64910e01", 0x71}, {&(0x7f0000000380)="e48279bdd1e035aab06aba4c6d3883f6f846129f446a6218aea5ede0870adc5f2b195cb87fb5b99edf566ae0286045af7211d1060dedf3e069ccb4a508eb050d8644b98fd44a137a9fbd1498c8", 0x4d}, {&(0x7f0000000400)="350170ad24deff20322238732055aa91fb293145c6dccfc381711c3de181555a8ce3908081d9857168f33d54d2d2a0b92d4e98daf1104a08560bf57dce05765dcad2b548bb95420f80594b1165dfd5e52cefc08f5f3a1e36d3a64542620777ae4023bc098d56e78cc8ff90ca0122fed8ec6e1bf6dae6b26124fdecec", 0x7c}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="ca146f655c801b1784cd434b3b80e7e75dd0020ec77d2d09840070eef7b0679bef42470c2b42bbb3e0a29efdb22f17c4c71b428595cf4ec867af", 0x3a}, {&(0x7f0000000500)="4932a2b571c8b4e8baec7908e122ffceaa78bf9afe51bf500a32c9bc7309a1654b8b42fb6e9223f90be0bd0f3b52062ea36f85081227b00b4e38d4114c9de31026a28c18f5699477b7db667de25c580873977f743fcaadc183cbfc10540ebf24659a50", 0x63}], 0x8, &(0x7f0000000900)=[{0x68, 0x0, 0x3, "9676f44be858d9186e8102b67ac00f8e4a1ef4ad5f5edb2496092197072e4a7ad2109285aa3aee6276bfbc97515601f60ca0d24b8c2ab10641a4c79eb5c14acd9aa9ff9a646829b287e636fbbf0b0fc2a7e14f6bd70c4498"}, {0xc8, 0x115, 0x7fff, "fa9e77c23849986699880e90f412a4fbc52d04edd292b6c9494d7d01936b560a2c923e0ccf7b07b8455c3d1723348ecbf3a362e890044ff7211f4e7e6fbb0ea7c04479bd8985acd334f851b6ef5f1d353a4c284f48c7c8e290cb08859ec3f48c9a69d49485d468de1e1844c516be76c8b4d7194dc0aa7ab2c9e3130f5431f5a81c4aead69f3f282295b3eb1bdf4e01baaa1eb8aa2dc57029b9dd985feb1e507ff7099008848032391e20cf62f4070987c652f645cd"}, {0x50, 0xa9, 0x80, "33a9ef9e36c63530d00c35f607120233ce19ed83a8e2f50a72acab8708c90490520680c9c215e4dc9642a027268d901ae641af24efda734f92deaf7c"}], 0x180, 0x80}, 0x40010) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) sendmsg(r0, &(0x7f0000002ec0)={&(0x7f0000000700)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b80)='x', 0x1}], 0x1, &(0x7f0000002cc0)}, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000180)=[{0x20, 0x84, 0x2, "000340020000000000"}], 0x20}, 0x0) 05:42:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000001740)=""/155, 0xfffffffffffffde3}, {&(0x7f00000001c0)=""/11, 0xffb5}, {&(0x7f0000000300)=""/102, 0x66}], 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x10, r1, 0x1, 0x9, 0x6, @broadcast}, 0x14) socket$kcm(0x29, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 05:42:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x20, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 05:42:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1950, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0xaf, &(0x7f0000000040)="8f6b5ebd55521a152ddcb49cf403540fcfef80b4a5b6e768721bde87a4794f9fd129eb2db98d80d16f01cfdf110efdd923385204ae2c438a51fc64530ad587ec421cb7762280c1ca036d7399955d709dc0b8dbe1a418c33d14e212514cfc37de5bdab3703e156019ac12cc9cd9c141da791bf215bdff8db23ccba83ff148257d611cbe587a2f9be2092890d350825e50f7a9da12555c5cf8ad378f9001743683180b34af1960acb48d929701e70947"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xffffffffffffff0e, &(0x7f0000000140)=""/195, 0x1}, 0x48) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0x7830, 0x4) 05:42:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000a4ffffff0200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:49 executing program 4 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000f5ffffff0200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:49 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6tnl0\x00', 0x10) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) [ 311.296255] FAULT_INJECTION: forcing a failure. [ 311.296255] name failslab, interval 1, probability 0, space 0, times 0 [ 311.325116] CPU: 0 PID: 11614 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #44 [ 311.332412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.341757] Call Trace: [ 311.341783] dump_stack+0x1c4/0x2b4 [ 311.341805] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.341830] should_fail.cold.4+0xa/0x17 [ 311.357273] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.362392] ? perf_trace_lock+0x7a0/0x7a0 [ 311.366639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.372247] ? __netlink_insert+0xddc/0x13b0 [ 311.376676] ? __netlink_dump_start+0x6f0/0x6f0 [ 311.381361] ? fs_reclaim_acquire+0x20/0x20 [ 311.385691] ? lock_downgrade+0x900/0x900 [ 311.389849] ? ___might_sleep+0x1ed/0x300 [ 311.394005] ? arch_local_save_flags+0x40/0x40 [ 311.398597] ? trace_hardirqs_on+0xbd/0x310 [ 311.402942] ? _raw_spin_unlock_bh+0x30/0x40 [ 311.407461] __should_failslab+0x124/0x180 [ 311.411697] should_failslab+0x9/0x14 [ 311.415521] kmem_cache_alloc_node+0x26e/0x730 [ 311.420116] ? __local_bh_enable_ip+0x160/0x260 [ 311.424778] ? _raw_spin_unlock_bh+0x30/0x40 [ 311.429195] __alloc_skb+0x119/0x770 [ 311.432919] ? skb_scrub_packet+0x490/0x490 [ 311.437727] ? netlink_insert+0x15a/0x3f0 [ 311.441882] ? __netlink_insert+0x13b0/0x13b0 [ 311.446390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.451933] ? netlink_autobind.isra.34+0x232/0x310 [ 311.456954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.462505] netlink_sendmsg+0xb29/0xfc0 [ 311.466574] ? netlink_unicast+0x760/0x760 [ 311.470823] ? smack_socket_sendmsg+0xb0/0x190 [ 311.475407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.481001] ? security_socket_sendmsg+0x94/0xc0 [ 311.485753] ? netlink_unicast+0x760/0x760 [ 311.489980] sock_sendmsg+0xd5/0x120 [ 311.493672] ___sys_sendmsg+0x7fd/0x930 [ 311.497625] ? copy_msghdr_from_user+0x580/0x580 [ 311.502359] ? lock_downgrade+0x900/0x900 [ 311.506486] ? proc_fail_nth_write+0x9e/0x210 [ 311.510961] ? __fget_light+0x2e9/0x430 [ 311.514926] ? fget_raw+0x20/0x20 [ 311.518374] ? kasan_check_write+0x14/0x20 [ 311.522617] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 311.527525] ? fsnotify+0xaae/0x12f0 [ 311.531224] ? wait_for_completion+0x8a0/0x8a0 [ 311.535791] ? lock_release+0x970/0x970 [ 311.539754] ? check_preemption_disabled+0x48/0x200 [ 311.544755] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.550272] ? sockfd_lookup_light+0xc5/0x160 [ 311.554748] __sys_sendmsg+0x11d/0x280 [ 311.558617] ? __ia32_sys_shutdown+0x80/0x80 [ 311.563050] ? __sb_end_write+0xd9/0x110 [ 311.567093] ? fput+0x130/0x1a0 [ 311.570355] ? ksys_write+0x1ae/0x260 [ 311.574155] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 311.579610] __x64_sys_sendmsg+0x78/0xb0 [ 311.583651] do_syscall_64+0x1b9/0x820 [ 311.587519] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 311.592862] ? syscall_return_slowpath+0x5e0/0x5e0 [ 311.597775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.602601] ? trace_hardirqs_on_caller+0x310/0x310 [ 311.607598] ? prepare_exit_to_usermode+0x291/0x3b0 [ 311.612595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.617420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.622587] RIP: 0033:0x457579 [ 311.625766] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.644644] RSP: 002b:00007f4c891ccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.652330] RAX: ffffffffffffffda RBX: 00007f4c891ccc90 RCX: 0000000000457579 [ 311.659579] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 311.666824] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 311.674076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c891cd6d4 [ 311.681358] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:42:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000001400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) getsockopt(r0, 0x0, 0x1ff, &(0x7f0000000000)=""/61, &(0x7f0000000040)=0x3d) 05:42:50 executing program 4 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 311.922427] FAULT_INJECTION: forcing a failure. [ 311.922427] name failslab, interval 1, probability 0, space 0, times 0 [ 311.934771] CPU: 0 PID: 11634 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #44 [ 311.942056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.951406] Call Trace: [ 311.954016] dump_stack+0x1c4/0x2b4 [ 311.957658] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.962881] should_fail.cold.4+0xa/0x17 [ 311.966966] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.972095] ? save_stack+0xa9/0xd0 [ 311.975715] ? kasan_kmalloc+0xc7/0xe0 [ 311.979604] ? kasan_slab_alloc+0x12/0x20 [ 311.983771] ? kmem_cache_alloc_node+0x144/0x730 [ 311.988520] ? __alloc_skb+0x119/0x770 [ 311.992400] ? netlink_sendmsg+0xb29/0xfc0 [ 311.996631] ? sock_sendmsg+0xd5/0x120 [ 312.000502] ? ___sys_sendmsg+0x7fd/0x930 [ 312.004630] ? __x64_sys_sendmsg+0x78/0xb0 [ 312.008845] ? do_syscall_64+0x1b9/0x820 [ 312.012886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.018233] ? fs_reclaim_acquire+0x20/0x20 [ 312.022538] ? lock_downgrade+0x900/0x900 [ 312.026698] ? ___might_sleep+0x1ed/0x300 [ 312.030836] ? arch_local_save_flags+0x40/0x40 [ 312.035398] ? lock_downgrade+0x900/0x900 [ 312.039658] __should_failslab+0x124/0x180 [ 312.043875] should_failslab+0x9/0x14 [ 312.047653] kmem_cache_alloc_node_trace+0x270/0x740 [ 312.052731] ? kasan_unpoison_shadow+0x35/0x50 [ 312.057291] ? kasan_kmalloc+0xc7/0xe0 [ 312.061180] __kmalloc_node_track_caller+0x33/0x70 [ 312.066089] __kmalloc_reserve.isra.39+0x41/0xe0 [ 312.070823] __alloc_skb+0x155/0x770 [ 312.074517] ? skb_scrub_packet+0x490/0x490 [ 312.078840] ? netlink_insert+0x15a/0x3f0 [ 312.082972] ? __netlink_insert+0x13b0/0x13b0 [ 312.087458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.092982] ? netlink_autobind.isra.34+0x232/0x310 [ 312.097978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.103507] netlink_sendmsg+0xb29/0xfc0 [ 312.107571] ? netlink_unicast+0x760/0x760 [ 312.111810] ? smack_socket_sendmsg+0xb0/0x190 [ 312.116378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.121899] ? security_socket_sendmsg+0x94/0xc0 [ 312.126641] ? netlink_unicast+0x760/0x760 [ 312.130856] sock_sendmsg+0xd5/0x120 [ 312.134546] ___sys_sendmsg+0x7fd/0x930 [ 312.138502] ? copy_msghdr_from_user+0x580/0x580 [ 312.143240] ? lock_downgrade+0x900/0x900 [ 312.147384] ? proc_fail_nth_write+0x9e/0x210 [ 312.151861] ? __fget_light+0x2e9/0x430 [ 312.155816] ? fget_raw+0x20/0x20 [ 312.159251] ? kasan_check_write+0x14/0x20 [ 312.163472] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 312.168379] ? fsnotify+0xaae/0x12f0 [ 312.172073] ? wait_for_completion+0x8a0/0x8a0 [ 312.176635] ? lock_release+0x970/0x970 [ 312.180592] ? check_preemption_disabled+0x48/0x200 [ 312.185593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.191111] ? sockfd_lookup_light+0xc5/0x160 [ 312.195590] __sys_sendmsg+0x11d/0x280 [ 312.199461] ? __ia32_sys_shutdown+0x80/0x80 [ 312.203868] ? __sb_end_write+0xd9/0x110 [ 312.207930] ? fput+0x130/0x1a0 [ 312.211201] ? ksys_write+0x1ae/0x260 [ 312.214992] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 312.220428] __x64_sys_sendmsg+0x78/0xb0 [ 312.224472] do_syscall_64+0x1b9/0x820 [ 312.228344] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 312.233800] ? syscall_return_slowpath+0x5e0/0x5e0 [ 312.238711] ? trace_hardirqs_on_caller+0x310/0x310 [ 312.243706] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 312.248703] ? recalc_sigpending_tsk+0x180/0x180 [ 312.253454] ? kasan_check_write+0x14/0x20 [ 312.257672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.262499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.267671] RIP: 0033:0x457579 [ 312.270857] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.289735] RSP: 002b:00007f4c891ccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.297422] RAX: ffffffffffffffda RBX: 00007f4c891ccc90 RCX: 0000000000457579 [ 312.304670] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 312.311925] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 312.319176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c891cd6d4 [ 312.326422] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:42:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000280)='./file0/file0\x00', r1}, 0x10) umount2(&(0x7f0000000100)='./file0\x00', 0x0) prctl$intptr(0x8, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioprio_get$pid(0x0, r2) 05:42:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000f6f652ada3d7bfbc5ad8d069f4d7db5220518d6484914384b2f97bb320308d31e936f1400e315985adac2f7eca6977b76285f2512966566ceda810012ac34f9bb1b1519a3399ab9eb357c26f45619c6cacd563aff3c25acde84c7b716b78e272055d2538afcff508f5d2993220240b4bdd79712da80c5a97c718872c7ae0341519660b55ac0e0080376714d461bc527863debfda9cd65260ca8b4226dc03e82c3fab017b0112634a6e35085f099e73ab0684c8f77a281ecf58384b7b1aa665d706fb13e5ca9390d48642c96aa3da168cf5927ff106813f7c4919"], 0x8) close(r2) close(r1) 05:42:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000180)=""/113) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x63}, {}], 0x30) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, &(0x7f0000000080)=""/175, 0xaf, 0x1, &(0x7f0000000140)={0xa, 0x4e21, 0x7d44, @empty, 0x6}, 0x1c) 05:42:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:50 executing program 4 (fault-call:5 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 312.439296] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 312.454450] FAULT_INJECTION: forcing a failure. [ 312.454450] name failslab, interval 1, probability 0, space 0, times 0 [ 312.466128] CPU: 0 PID: 11664 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #44 [ 312.473411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.482764] Call Trace: [ 312.485358] dump_stack+0x1c4/0x2b4 [ 312.488996] ? dump_stack_print_info.cold.2+0x52/0x52 [ 312.494204] should_fail.cold.4+0xa/0x17 [ 312.498274] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 312.503461] ? perf_sched_cb_inc+0x350/0x350 [ 312.507892] ? finish_task_switch+0x1f5/0x900 [ 312.512397] ? lock_downgrade+0x900/0x900 [ 312.516550] ? trace_hardirqs_on+0xbd/0x310 [ 312.520869] ? kasan_check_read+0x11/0x20 [ 312.525032] ? fs_reclaim_acquire+0x20/0x20 [ 312.529358] ? lock_downgrade+0x900/0x900 [ 312.533514] ? ___might_sleep+0x1ed/0x300 [ 312.537670] ? arch_local_save_flags+0x40/0x40 [ 312.542257] ? __switch_to_asm+0x34/0x70 [ 312.546320] __should_failslab+0x124/0x180 [ 312.550555] should_failslab+0x9/0x14 [ 312.554361] kmem_cache_alloc_node+0x26e/0x730 [ 312.558969] ? __schedule+0x874/0x1ed0 [ 312.562863] __alloc_skb+0x119/0x770 [ 312.566584] ? __sched_text_start+0x8/0x8 [ 312.570731] ? skb_scrub_packet+0x490/0x490 [ 312.575051] ? do_raw_spin_lock+0xc1/0x200 [ 312.579279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.584801] ? llist_add_batch+0x106/0x170 [ 312.589017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.594535] ? check_preemption_disabled+0x48/0x200 [ 312.599534] ? debug_smp_processor_id+0x1c/0x20 [ 312.604328] ? tick_nohz_tick_stopped+0x1a/0x90 [ 312.608981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.614558] ? team_notify_peers_work+0x410/0x410 [ 312.619392] __send_and_alloc_skb+0x83/0xe0 [ 312.623692] ? preempt_schedule_common+0x1f/0xd0 [ 312.628428] team_nl_send_options_get+0x1e9/0x1600 [ 312.633338] ? team_notify_peers_work+0x410/0x410 [ 312.638172] ? vprintk_emit+0x268/0x930 [ 312.642130] ? team_port_change_check+0x140/0x140 [ 312.646955] ? ___ratelimit+0x36f/0x655 [ 312.650918] ? lock_downgrade+0x900/0x900 [ 312.655057] ? trace_hardirqs_on+0xbd/0x310 [ 312.659356] ? kasan_check_read+0x11/0x20 [ 312.663492] ? ___ratelimit+0x36f/0x655 [ 312.667448] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 312.672888] ? vprintk_default+0x28/0x30 [ 312.676932] ? vprintk_func+0x85/0x181 [ 312.680810] ? printk+0xa7/0xcf [ 312.684085] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 312.688840] ? dev_get_by_index+0xf0/0x1c0 [ 312.693068] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 312.698249] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 312.703770] ? validate_nla+0x2d9/0x7b0 [ 312.707726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.713245] ? nla_parse+0x2f9/0x480 [ 312.716957] ? validate_nla+0x7b0/0x7b0 [ 312.720919] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 312.726102] team_nl_cmd_options_set+0x228/0x1370 [ 312.730938] ? team_options_unregister+0x2a0/0x2a0 [ 312.735879] ? perf_trace_lock+0x7a0/0x7a0 [ 312.740119] ? genl_rcv_msg+0x13a/0x168 [ 312.744086] ? debug_smp_processor_id+0x1c/0x20 [ 312.748742] ? mutex_trylock+0x2b0/0x2b0 [ 312.752786] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 312.757962] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 312.762963] ? validate_nla+0x2d9/0x7b0 [ 312.766933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.772448] ? nla_parse+0x2f9/0x480 [ 312.776148] ? __netlink_ns_capable+0x100/0x130 [ 312.780803] genl_family_rcv_msg+0x8a9/0x1140 [ 312.785292] ? genl_unregister_family+0x8a0/0x8a0 [ 312.790119] ? __radix_tree_insert+0x8f0/0x8f0 [ 312.794685] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 312.800475] ? lock_acquire+0x1ed/0x520 [ 312.804447] ? genl_rcv+0x19/0x40 [ 312.807902] genl_rcv_msg+0xc6/0x168 [ 312.811598] netlink_rcv_skb+0x172/0x440 [ 312.815656] ? genl_family_rcv_msg+0x1140/0x1140 [ 312.820391] ? netlink_ack+0xb80/0xb80 [ 312.824266] genl_rcv+0x28/0x40 [ 312.827530] netlink_unicast+0x5a5/0x760 [ 312.831575] ? netlink_attachskb+0x9a0/0x9a0 [ 312.835978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.841506] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 312.846514] netlink_sendmsg+0xa18/0xfc0 [ 312.850564] ? netlink_unicast+0x760/0x760 [ 312.854791] ? smack_socket_sendmsg+0xb0/0x190 [ 312.859363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.864883] ? security_socket_sendmsg+0x94/0xc0 [ 312.869623] ? netlink_unicast+0x760/0x760 [ 312.873854] sock_sendmsg+0xd5/0x120 [ 312.877548] ___sys_sendmsg+0x7fd/0x930 [ 312.881508] ? copy_msghdr_from_user+0x580/0x580 [ 312.886250] ? lock_downgrade+0x900/0x900 [ 312.890379] ? proc_fail_nth_write+0x9e/0x210 [ 312.894865] ? __fget_light+0x2e9/0x430 [ 312.898823] ? fget_raw+0x20/0x20 [ 312.902275] ? kasan_check_write+0x14/0x20 [ 312.906510] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 312.911438] ? fsnotify+0xaae/0x12f0 [ 312.915144] ? wait_for_completion+0x8a0/0x8a0 [ 312.919731] ? lock_release+0x970/0x970 [ 312.923698] ? check_preemption_disabled+0x48/0x200 [ 312.928698] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.934214] ? sockfd_lookup_light+0xc5/0x160 [ 312.938691] __sys_sendmsg+0x11d/0x280 [ 312.942567] ? __ia32_sys_shutdown+0x80/0x80 [ 312.946955] ? __sb_end_write+0xd9/0x110 [ 312.950997] ? fput+0x130/0x1a0 [ 312.954259] ? ksys_write+0x1ae/0x260 [ 312.958055] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 312.963507] __x64_sys_sendmsg+0x78/0xb0 [ 312.967562] do_syscall_64+0x1b9/0x820 [ 312.971433] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 312.976781] ? syscall_return_slowpath+0x5e0/0x5e0 [ 312.981693] ? trace_hardirqs_on_caller+0x310/0x310 [ 312.986696] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 312.991692] ? recalc_sigpending_tsk+0x180/0x180 [ 312.996429] ? kasan_check_write+0x14/0x20 [ 313.000649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.005476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.010645] RIP: 0033:0x457579 [ 313.013823] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.032707] RSP: 002b:00007f4c891ccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:42:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000005400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 313.040399] RAX: ffffffffffffffda RBX: 00007f4c891ccc90 RCX: 0000000000457579 [ 313.047659] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 313.054919] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 313.062287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c891cd6d4 [ 313.069534] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:42:51 executing program 3: r0 = socket(0x15, 0x20000000000805, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='\x00', 0x1, 0x1) ioctl(r1, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") getsockopt(r0, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f00000010c0)=0x334) 05:42:51 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x2, 0x4, 0x101, 0x2, 0x3, 0x3}) ioctl$FITRIM(r0, 0x4144, &(0x7f0000000380)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r2, 0x2}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) 05:42:51 executing program 4 (fault-call:5 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x9, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x3, 0x26, 0x0, 0x7}, 0x6, 0xcb3, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x4, 0x498f5ce7}) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) unshare(0x10000000) 05:42:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000001100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:51 executing program 3: socketpair(0xa, 0x80f, 0x1000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x6, &(0x7f0000000180)=0x2) r2 = socket(0x10, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r3) r4 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="b6646f900d4543a34f1989c57046fbc5da8d3be1e72c8210c6a371590389a2def63af86ea2f148b63063ef7325acc06229a5545ca8013de06fc5758a6bd7059dbebfd12a5cefd8982112148edff55e9913e42ae980841e1a1ee64ee776bf5bc88c733a2bce105398f983e6ca07d2bf84acb7c475465b8a6fedb5e8874ec0709f52a5", 0x82, 0xfffffffffffffffc) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="3dab0ffd512c80a97110b0dc0cfc4850d3b365da6c8456e49d3744b876db2d9d296915a39d6f11439f48c4e7c3c4a900887a0f28e571575a687d9823fadeeb40b20336b43cef394579898c1bcab1c47dee48434f2eed2508ed19e8a9ea9ee009fce2213c855f3abc6db75af4d896fbe27062135fe69aeeef2b50ade5dbea150da443f3d4c1f33005d7274228a7f0b3b8f492d86493553c134422ebf5d7b15e7e384ea3836e254079e76e695150ed7402c7af7c7b62da27e751c407a144134d0bfe773f18df5714c8", 0xc8, r4) linkat(r1, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00', 0x1000) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00000000c0)=""/162, &(0x7f0000000000)=0xa2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000480)={'eql\x00', 0x800}) 05:42:51 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x2, 0x2000000088) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x8004e20}, 0x10) recvmmsg(r1, &(0x7f0000005300)=[{{&(0x7f0000000440)=@ipx, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/7, 0x7}}], 0x1, 0x0, &(0x7f00000054c0)) 05:42:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) [ 313.212462] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 313.233440] FAULT_INJECTION: forcing a failure. [ 313.233440] name failslab, interval 1, probability 0, space 0, times 0 05:42:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x14, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000600)=0x1, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) recvfrom(r0, &(0x7f0000000180)=""/137, 0x89, 0x2, &(0x7f00000003c0)=@can={0x1d, r3}, 0x80) poll(&(0x7f0000000580)=[{r2}], 0x1, 0x1) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRESOCT=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYBLOB="72e1268d18b4fe7a5f3b54e92a90204ffdb8774a0f685157b5fa353b6e9f4b882e53532a4eed126bb96ede931c02f765e42023"], @ANYRES64=r2], 0x5) socket$nl_generic(0x10, 0x3, 0x10) [ 313.267401] CPU: 0 PID: 11688 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #44 [ 313.274696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.274702] Call Trace: [ 313.274723] dump_stack+0x1c4/0x2b4 [ 313.274743] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.295464] should_fail.cold.4+0xa/0x17 [ 313.299540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 313.304658] ? save_stack+0xa9/0xd0 [ 313.308292] ? kasan_kmalloc+0xc7/0xe0 [ 313.312176] ? kasan_slab_alloc+0x12/0x20 05:42:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'bridge0\x00', 0x2000}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000070073010000e9000000ffffffff79000000080000d80000000000000000cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96daad95bdd228ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6fbb2aa86a05f0cf0fcaddc3475ef5514e0a0fec44f78634af44b56ba45670df23536bc1c1e4b3"], 0xb9) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfffffffffffffdbb) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000001ef}, 0x10}}, 0x0) prctl$getname(0x10, &(0x7f0000000600)=""/236) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e21, 0x8, @local}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r5, 0x108, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]}) syz_open_dev$sndctrl(&(0x7f0000000740)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x101800) io_setup(0x0, &(0x7f00000000c0)) [ 313.312189] ? kmem_cache_alloc_node+0x144/0x730 [ 313.312205] ? __alloc_skb+0x119/0x770 [ 313.324969] ? __send_and_alloc_skb+0x83/0xe0 [ 313.329468] ? team_nl_send_options_get+0x1e9/0x1600 [ 313.334572] ? team_nl_cmd_options_set+0x228/0x1370 [ 313.339577] ? genl_rcv_msg+0xc6/0x168 [ 313.339592] ? netlink_rcv_skb+0x172/0x440 [ 313.339604] ? genl_rcv+0x28/0x40 [ 313.339619] ? netlink_sendmsg+0xa18/0xfc0 [ 313.339637] ? fs_reclaim_acquire+0x20/0x20 [ 313.339652] ? lock_downgrade+0x900/0x900 [ 313.339671] ? ___might_sleep+0x1ed/0x300 [ 313.339686] ? arch_local_save_flags+0x40/0x40 [ 313.339699] ? lock_downgrade+0x900/0x900 [ 313.339718] __should_failslab+0x124/0x180 [ 313.347814] should_failslab+0x9/0x14 [ 313.347832] kmem_cache_alloc_node_trace+0x270/0x740 [ 313.347844] ? kasan_unpoison_shadow+0x35/0x50 [ 313.347862] ? kasan_kmalloc+0xc7/0xe0 [ 313.398354] __kmalloc_node_track_caller+0x33/0x70 [ 313.403293] __kmalloc_reserve.isra.39+0x41/0xe0 [ 313.408061] __alloc_skb+0x155/0x770 [ 313.411777] ? __sched_text_start+0x8/0x8 [ 313.415940] ? skb_scrub_packet+0x490/0x490 [ 313.420271] ? do_raw_spin_lock+0xc1/0x200 [ 313.424523] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.430066] ? llist_add_batch+0x106/0x170 [ 313.434751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.440292] ? check_preemption_disabled+0x48/0x200 [ 313.445299] ? debug_smp_processor_id+0x1c/0x20 [ 313.449956] ? tick_nohz_tick_stopped+0x1a/0x90 [ 313.454612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.460139] ? team_notify_peers_work+0x410/0x410 [ 313.464968] __send_and_alloc_skb+0x83/0xe0 [ 313.469278] ? preempt_schedule_common+0x1f/0xd0 [ 313.474022] team_nl_send_options_get+0x1e9/0x1600 [ 313.478936] ? team_notify_peers_work+0x410/0x410 [ 313.483767] ? vprintk_emit+0x268/0x930 [ 313.487737] ? team_port_change_check+0x140/0x140 [ 313.492568] ? ___ratelimit+0x36f/0x655 [ 313.496527] ? lock_downgrade+0x900/0x900 [ 313.500667] ? trace_hardirqs_on+0xbd/0x310 [ 313.504970] ? kasan_check_read+0x11/0x20 [ 313.509102] ? ___ratelimit+0x36f/0x655 [ 313.513060] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 313.518511] ? vprintk_default+0x28/0x30 [ 313.522557] ? vprintk_func+0x85/0x181 [ 313.526427] ? printk+0xa7/0xcf [ 313.529691] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 313.534435] ? dev_get_by_index+0xf0/0x1c0 [ 313.538655] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 313.543834] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 313.549360] ? validate_nla+0x2d9/0x7b0 [ 313.553324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.558849] ? nla_parse+0x2f9/0x480 [ 313.562551] ? validate_nla+0x7b0/0x7b0 [ 313.566513] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 313.571693] team_nl_cmd_options_set+0x228/0x1370 [ 313.576541] ? team_options_unregister+0x2a0/0x2a0 [ 313.581452] ? perf_trace_lock+0x7a0/0x7a0 [ 313.585669] ? genl_rcv_msg+0x13a/0x168 [ 313.589638] ? debug_smp_processor_id+0x1c/0x20 [ 313.594291] ? mutex_trylock+0x2b0/0x2b0 [ 313.598336] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 313.603508] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 313.608507] ? validate_nla+0x2d9/0x7b0 [ 313.612987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.618507] ? nla_parse+0x2f9/0x480 [ 313.622214] ? __netlink_ns_capable+0x100/0x130 [ 313.626870] genl_family_rcv_msg+0x8a9/0x1140 [ 313.631353] ? genl_unregister_family+0x8a0/0x8a0 [ 313.636181] ? __radix_tree_insert+0x8f0/0x8f0 [ 313.640751] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 313.646538] ? lock_acquire+0x1ed/0x520 [ 313.650493] ? genl_rcv+0x19/0x40 [ 313.653935] genl_rcv_msg+0xc6/0x168 [ 313.657633] netlink_rcv_skb+0x172/0x440 [ 313.661676] ? genl_family_rcv_msg+0x1140/0x1140 [ 313.666420] ? netlink_ack+0xb80/0xb80 [ 313.670297] genl_rcv+0x28/0x40 [ 313.673560] netlink_unicast+0x5a5/0x760 [ 313.677612] ? netlink_attachskb+0x9a0/0x9a0 [ 313.682006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.687525] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 313.692527] netlink_sendmsg+0xa18/0xfc0 [ 313.696575] ? netlink_unicast+0x760/0x760 [ 313.700800] ? smack_socket_sendmsg+0xb0/0x190 [ 313.705366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.710890] ? security_socket_sendmsg+0x94/0xc0 [ 313.715627] ? netlink_unicast+0x760/0x760 [ 313.719849] sock_sendmsg+0xd5/0x120 [ 313.723548] ___sys_sendmsg+0x7fd/0x930 [ 313.727511] ? copy_msghdr_from_user+0x580/0x580 [ 313.732251] ? lock_downgrade+0x900/0x900 [ 313.736403] ? proc_fail_nth_write+0x9e/0x210 [ 313.740887] ? __fget_light+0x2e9/0x430 [ 313.744846] ? fget_raw+0x20/0x20 [ 313.748285] ? kasan_check_write+0x14/0x20 [ 313.752502] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 313.757409] ? fsnotify+0xaae/0x12f0 [ 313.761127] ? wait_for_completion+0x8a0/0x8a0 [ 313.765690] ? lock_release+0x970/0x970 [ 313.769653] ? check_preemption_disabled+0x48/0x200 [ 313.774666] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.780185] ? sockfd_lookup_light+0xc5/0x160 [ 313.784664] __sys_sendmsg+0x11d/0x280 [ 313.788534] ? __ia32_sys_shutdown+0x80/0x80 [ 313.792928] ? __sb_end_write+0xd9/0x110 [ 313.796974] ? fput+0x130/0x1a0 [ 313.800236] ? ksys_write+0x1ae/0x260 [ 313.804023] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 313.809462] __x64_sys_sendmsg+0x78/0xb0 [ 313.813507] do_syscall_64+0x1b9/0x820 [ 313.817380] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 313.822730] ? syscall_return_slowpath+0x5e0/0x5e0 [ 313.827642] ? trace_hardirqs_on_caller+0x310/0x310 [ 313.832640] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 313.837641] ? recalc_sigpending_tsk+0x180/0x180 [ 313.842390] ? kasan_check_write+0x14/0x20 [ 313.846614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.851441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.856611] RIP: 0033:0x457579 [ 313.859787] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.878669] RSP: 002b:00007f4c891ccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.886360] RAX: ffffffffffffffda RBX: 00007f4c891ccc90 RCX: 0000000000457579 [ 313.893624] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 313.900876] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 313.908128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c891cd6d4 05:42:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000052000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 313.915383] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 [ 313.939434] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.948917] bridge0: port 1(bridge_slave_0) entered disabled state 05:42:52 executing program 4 (fault-call:5 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) [ 314.422220] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 314.431530] FAULT_INJECTION: forcing a failure. [ 314.431530] name failslab, interval 1, probability 0, space 0, times 0 [ 314.442780] CPU: 0 PID: 11726 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #44 [ 314.450050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.459383] Call Trace: [ 314.461959] dump_stack+0x1c4/0x2b4 [ 314.465586] ? dump_stack_print_info.cold.2+0x52/0x52 [ 314.470776] ? debug_smp_processor_id+0x1c/0x20 [ 314.475436] ? perf_trace_lock_acquire+0x15b/0x800 [ 314.480361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.485902] should_fail.cold.4+0xa/0x17 [ 314.489951] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.495042] ? perf_trace_lock+0x7a0/0x7a0 [ 314.499280] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.504368] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 314.509129] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.514126] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 314.518887] ? is_bpf_text_address+0xac/0x170 [ 314.523381] ? lock_downgrade+0x900/0x900 [ 314.527521] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 314.533316] __should_failslab+0x124/0x180 [ 314.537545] should_failslab+0x9/0x14 [ 314.541339] kmem_cache_alloc_node_trace+0x5a/0x740 [ 314.546343] __kmalloc_node_track_caller+0x33/0x70 [ 314.551276] __kmalloc_reserve.isra.39+0x41/0xe0 [ 314.556021] pskb_expand_head+0x230/0x10f0 [ 314.560245] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 314.564719] ? __alloc_skb+0x155/0x770 [ 314.568611] ? __send_and_alloc_skb+0x83/0xe0 [ 314.573091] ? team_nl_send_options_get+0x1e9/0x1600 [ 314.578189] ? team_nl_cmd_options_set+0x228/0x1370 [ 314.583191] ? genl_family_rcv_msg+0x8a9/0x1140 [ 314.587838] ? genl_rcv_msg+0xc6/0x168 [ 314.591713] ? netlink_rcv_skb+0x172/0x440 [ 314.595936] ? genl_rcv+0x28/0x40 [ 314.599377] ? netlink_unicast+0x5a5/0x760 [ 314.603761] ? sock_sendmsg+0xd5/0x120 [ 314.607638] ? ___sys_sendmsg+0x7fd/0x930 [ 314.611771] ? __sys_sendmsg+0x11d/0x280 [ 314.615817] ? __x64_sys_sendmsg+0x78/0xb0 [ 314.620058] ? do_syscall_64+0x1b9/0x820 [ 314.624112] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.629470] ? lock_downgrade+0x900/0x900 [ 314.633601] ? ___might_sleep+0x1ed/0x300 [ 314.637819] ? trace_hardirqs_on+0xbd/0x310 [ 314.642123] ? lock_downgrade+0x900/0x900 [ 314.646265] ? __kmalloc_node_track_caller+0x33/0x70 [ 314.651353] netlink_trim+0x2ea/0x380 [ 314.655136] ? netlink_skb_destructor+0x210/0x210 [ 314.659970] ? kasan_unpoison_shadow+0x35/0x50 [ 314.664553] netlink_broadcast_filtered+0xf4/0x1680 [ 314.669557] ? __kmalloc_node_track_caller+0x47/0x70 [ 314.674649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.680172] ? __netlink_sendskb+0xd0/0xd0 [ 314.684388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.689908] ? __alloc_skb+0x4c6/0x770 [ 314.693780] ? skb_scrub_packet+0x490/0x490 [ 314.698099] ? do_raw_spin_lock+0xc1/0x200 [ 314.702325] ? llist_add_batch+0x106/0x170 [ 314.706544] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.711540] ? skb_put+0x17b/0x1e0 [ 314.715067] ? memset+0x31/0x40 [ 314.718351] netlink_broadcast+0x3a/0x50 [ 314.722407] team_nl_send_multicast+0xec/0x150 [ 314.726970] team_nl_send_options_get+0xe10/0x1600 [ 314.731880] ? team_notify_peers_work+0x410/0x410 [ 314.736733] ? team_port_change_check+0x140/0x140 [ 314.741580] ? ___ratelimit+0x36f/0x655 [ 314.745550] ? lock_downgrade+0x900/0x900 [ 314.749712] ? trace_hardirqs_on+0xbd/0x310 [ 314.754018] ? kasan_check_read+0x11/0x20 [ 314.758149] ? ___ratelimit+0x36f/0x655 [ 314.762115] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 314.767563] ? vprintk_default+0x28/0x30 [ 314.771613] ? vprintk_func+0x85/0x181 [ 314.775487] ? printk+0xa7/0xcf [ 314.778770] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 314.783519] ? dev_get_by_index+0xf0/0x1c0 [ 314.787750] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 314.792934] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 314.798464] ? validate_nla+0x2d9/0x7b0 [ 314.802419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.807936] ? nla_parse+0x2f9/0x480 [ 314.811631] ? validate_nla+0x7b0/0x7b0 [ 314.815590] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 314.820764] team_nl_cmd_options_set+0x228/0x1370 [ 314.825591] ? team_options_unregister+0x2a0/0x2a0 [ 314.830506] ? perf_trace_lock+0x7a0/0x7a0 [ 314.834735] ? genl_rcv_msg+0x13a/0x168 [ 314.838696] ? debug_smp_processor_id+0x1c/0x20 [ 314.843347] ? mutex_trylock+0x2b0/0x2b0 [ 314.847389] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 314.852574] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.857577] ? validate_nla+0x2d9/0x7b0 [ 314.861537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.867053] ? nla_parse+0x2f9/0x480 [ 314.870750] ? __netlink_ns_capable+0x100/0x130 [ 314.875410] genl_family_rcv_msg+0x8a9/0x1140 [ 314.879895] ? genl_unregister_family+0x8a0/0x8a0 [ 314.884725] ? __radix_tree_insert+0x8f0/0x8f0 [ 314.889292] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 314.895102] ? lock_acquire+0x1ed/0x520 [ 314.899064] ? genl_rcv+0x19/0x40 [ 314.902504] genl_rcv_msg+0xc6/0x168 [ 314.906214] netlink_rcv_skb+0x172/0x440 [ 314.910265] ? genl_family_rcv_msg+0x1140/0x1140 [ 314.915007] ? netlink_ack+0xb80/0xb80 [ 314.918880] genl_rcv+0x28/0x40 05:42:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) [ 314.922137] netlink_unicast+0x5a5/0x760 [ 314.926188] ? netlink_attachskb+0x9a0/0x9a0 [ 314.930583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.936104] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.941105] netlink_sendmsg+0xa18/0xfc0 [ 314.945160] ? netlink_unicast+0x760/0x760 [ 314.949375] ? smack_socket_sendmsg+0xb0/0x190 [ 314.953951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.959493] ? security_socket_sendmsg+0x94/0xc0 [ 314.964250] ? netlink_unicast+0x760/0x760 [ 314.968500] sock_sendmsg+0xd5/0x120 [ 314.972209] ___sys_sendmsg+0x7fd/0x930 [ 314.972229] ? copy_msghdr_from_user+0x580/0x580 [ 314.972244] ? lock_downgrade+0x900/0x900 [ 314.972260] ? proc_fail_nth_write+0x9e/0x210 [ 314.980962] ? __fget_light+0x2e9/0x430 [ 314.980978] ? fget_raw+0x20/0x20 [ 314.980996] ? kasan_check_write+0x14/0x20 [ 315.001237] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 315.006174] ? fsnotify+0xaae/0x12f0 [ 315.009907] ? wait_for_completion+0x8a0/0x8a0 [ 315.014484] ? lock_release+0x970/0x970 [ 315.018460] ? check_preemption_disabled+0x48/0x200 [ 315.023489] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.029021] ? sockfd_lookup_light+0xc5/0x160 [ 315.033517] __sys_sendmsg+0x11d/0x280 [ 315.037403] ? __ia32_sys_shutdown+0x80/0x80 [ 315.041810] ? __sb_end_write+0xd9/0x110 [ 315.045873] ? fput+0x130/0x1a0 [ 315.049154] ? ksys_write+0x1ae/0x260 [ 315.052961] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 315.058405] __x64_sys_sendmsg+0x78/0xb0 [ 315.062454] do_syscall_64+0x1b9/0x820 [ 315.066331] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 315.071679] ? syscall_return_slowpath+0x5e0/0x5e0 [ 315.076592] ? trace_hardirqs_on_caller+0x310/0x310 [ 315.081592] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 315.086590] ? recalc_sigpending_tsk+0x180/0x180 [ 315.091328] ? kasan_check_write+0x14/0x20 [ 315.095553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.100392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.105561] RIP: 0033:0x457579 05:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000040000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000), 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 315.108754] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.127723] RSP: 002b:00007f4c891abc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.135441] RAX: ffffffffffffffda RBX: 00007f4c891abc90 RCX: 0000000000457579 [ 315.142715] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 315.149984] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 315.157239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c891ac6d4 [ 315.164505] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:42:53 executing program 1: mmap(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1205531, &(0x7f000035dffc)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee01, 0xffffffffffffffff, 0x0]) fchown(r0, r1, r2) 05:42:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xfffffffffffffe2a) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc9) accept$unix(r3, &(0x7f0000000480), &(0x7f0000000140)=0x6e) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x3, 0x5000000}, 0x1c) getpid() ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@dev, @in=@local}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) 05:42:53 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x84800) r3 = perf_event_open(&(0x7f00000000c0)={0x8, 0x158, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20}}, 0x0, 0x8000, 0x79b3, 0x81, 0x400}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4, 0x6}, 0x8) 05:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000004c00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:53 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000b04000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x8, 0x6, 0x9, 0x5, 0x8, 0x8c, 0x100, 0x9, 0x3a}}, 0x43) socketpair$inet6_sctp(0xa, 0x2cb09a4cc1a33fd7, 0x84, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) [ 315.267060] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:42:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0xfffffffffffffebd, 0xffffffff, 0x6, 0x8001, 0x4, 0x40}) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140), 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 05:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x11}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) read(r0, &(0x7f00000002c0)=""/54, 0xfffffe05) 05:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) r3 = dup2(r2, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:53 executing program 3: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0x40046205, &(0x7f0000000140)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) 05:42:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x8}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000005200000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f00000023c0)={0xf, 0x7, 0x1, {0x6, '$em0^\''}}, 0xf) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 05:42:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10000, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820f060095299f5d56534c90080000000000c9003f16108930319fdd7bb6523e47ac39beeb2439ff5dbf7f4f957a9921814b23421d80fb56ae8199b96325d3a1349e2862bdd73c94ffc4792cb9aa937dbb0500b9c36ae4bcf4d48f16cf40b5e2755dfd3a4b75", 0xf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0xd0e6, 0x401, 0x6, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x5, 0x10001}, {0x0, 0x4}, 0x1000, 0x4}) sendmsg$netlink(r0, &(0x7f0000000680)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbff, 0x8c4}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000240)={0xb4, 0x1b, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x9c, 0x5c, [@typed={0x8, 0x11, @u32=0x8}, @generic="685cdff5d4b313a0b05cc3f621e21b324b92dfab7fa6d06389b41638a42aa5f12645fc788ff26ea59ba1dc1e59b14f8a62c55217bbf1215dbf1d3a9dd9367f4871e9b844d221c88dfd47c7989ead203589e6b6b948c5cf74fd0c4dce558bc1b6af8fe120ca173f87a29940fd8158e5c2f0fa28b8f928dc293d32f33a0f6825d7809fbcfcb97d6623cbe860568d"]}, @typed={0x8, 0x1a, @fd=r1}]}, 0xb4}, {&(0x7f0000000300)={0x2d4, 0x3a, 0x0, 0x70bd25, 0x25dfdbfe, "", [@nested={0x234, 0x91, [@generic="fa75f4d067e294567bd37ea52496bffb5d73ea2065cb", @generic="93a9912e3120ef3974d43dbddc7b8e97b35f2575ea52f2e15ac06961fcceb9d29bc6e6bbd0966b12be2acec4c27340ef8089b3da6366921ac2b9a5051b2a503b3cf0e25f7a723fcbb91d09bcf02b7b", @generic="88480b287e9ca3b4ca5bfa0854b3bba7f9e724ef8e3d7de18cf7a1335862700c5c36603c2cdb29b8c4da8fad57417b089fc32a25ccc9d1f50014da87032194d36def6e7b0659ca75fe07f22fbb97a3fa30e53317a9b34fd65ec3f796190eb09dc4ffe25d94384e1e8c09bfa20ae90b64222692c668644a95dd36f5b067f93a9a0684fc19fee0c66c814fa9639e9a81768a5499cd4ac8399291128cda8ccde7ed16960ddf593007b7175e0644a2fa73", @typed={0x4, 0x41}, @generic="acca5b3ad53b59482b49ebb8a9052dd971082e5faa807503f0fa70f8668578d6764043176b655d7c9418f7f0b713b26fd0d274bdd503fb46989f7c4a7a9062fcc6ae96a9ab08ab64023560c94a74614055b1ceb735976b341e900eaf718c741531202498b72ab2ad5b37c514c1fc27248cb3fe74b9155510e0eeca69209e85cf395dad5431a3d5a5729a357fb52a122c", @generic="fab3ece60bf9c76f10a0e311886de62d5cf6384ad29ad5ad967bfd956f508df90eaeb72730b601db1bd4d15740b80940ee09dd4b0e2d33bf93ea84c406f2bbf04a96661ce3151f4e0f1b90a6e5f67f4367847d51c673a462d0c306c6e9f4f2bf6db5530a98d6962a83ffbe5cd24a343c3046c8847abf3297cefd5fc7c8b555511d085e858e"]}, @generic="bcf6fa3aba1265f18fb0de3e202f6308c1eccad55df80719d0158e7c58f289e85fd24c692e424e77995394fe59ba82bfe11670bbb28f703fc4dbcbf8e5d9d6721da6c503f8f3b5d743a287894d8fdef970ac3f4646b0f806df684d96c46b860589d6", @generic="a51566d9d81fa870d39994cf854befc10b2a3f0dcfa3", @typed={0x18, 0x54, @str='ctr-twofish-3way\x00'}]}, 0x2d4}], 0x2, &(0x7f0000000640)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r1]}], 0x28, 0x4}, 0x400c0) 05:42:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) readahead(r0, 0x30, 0x1000) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0x4fdb, 0x9c4e, 0x4, 0x0, 0x0, [], [], [], 0x8, 0x7}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8d34, 0x20080) write$binfmt_aout(r3, &(0x7f0000000740), 0x20) close(r0) close(r2) 05:42:54 executing program 1: setrlimit(0x7, &(0x7f0000becff0)) pipe2(&(0x7f0000000040), 0xfffffffffffffffd) [ 315.826200] binder: 11793:11794 ioctl 40046205 20000140 returned -22 [ 315.852834] binder: 11793:11808 ioctl 40046205 20000140 returned -22 05:42:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xb}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000200000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 315.892135] 9pnet: p9_errstr2errno: server reported unknown error $em0^' 05:42:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) chdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000080)={0x7, 0x5}) setxattr$security_evm(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@sha1={0x1, "2172f5972bb2d0bf37e3b83fee11b4e2ca00ffc3"}, 0x15, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x100000001, 0x1}) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 05:42:54 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) [ 316.026001] 9pnet: p9_errstr2errno: server reported unknown error $em0^' 05:42:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x3}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:54 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x4000000000000a3, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='cpuset\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 05:42:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000400000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:54 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000240)={0x81}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x0, 0x8, 0x6}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000080)={[{0x10000, 0x5, 0x9, 0x1f, 0x8, 0x6, 0x2, 0x6, 0x70, 0x48, 0x2, 0x6, 0x1f}, {0x3, 0x0, 0xffffffffffffffff, 0xe2b7, 0x9, 0x40, 0x2, 0xe793, 0x6, 0x6f, 0x2, 0x80b, 0xfec}, {0x4, 0x1, 0x2, 0x8, 0xf8, 0x4, 0x3ff, 0x7, 0x6, 0x5, 0x0, 0x7, 0x4}], 0x232}) 05:42:54 executing program 1: mkdir(&(0x7f0000000040)='./control\x00', 0x0) socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) splice(r0, &(0x7f0000000080), r0, &(0x7f0000000100), 0x2, 0x1) r1 = inotify_init1(0x1) r2 = msgget(0x0, 0x500) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000200)=""/193) inotify_add_watch(r1, &(0x7f000003cff6)='./control\x00', 0x2200019a) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./control/file0\x00', 0x105000, 0x4) recvmsg$kcm(r3, &(0x7f0000001580)={&(0x7f00000013c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)=""/159, 0x9f}], 0x1, &(0x7f0000001540)=""/1, 0x1, 0x200}, 0x10101) read(r0, &(0x7f0000058fef)=""/32, 0x5) dup3(r0, r1, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0x5, 0x2, 0x7, 0x0, 0x8, 0x1002, 0x8, 0x2, 0xfffffffffffffff8, 0x10000, 0x81, 0xe6, 0x8000, 0x7, 0x4000000080000, 0x81, 0x4, 0x4, 0x8000000000, 0x4, 0x7ff, 0x1, 0x2, 0x2, 0x9, 0x10001, 0x1f, 0x7fff, 0x0, 0x1, 0x5, 0x8, 0xbe3, 0x2, 0x0, 0x0, 0x100000001, 0x0, @perf_config_ext={0x7f, 0x9}, 0x2000, 0x0, 0x4, 0x0, 0x80000000, 0x92, 0x6}, r4, 0xf, 0xffffffffffffff9c, 0x3) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 05:42:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000003f000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 316.680520] usb usb9: usbfs: process 11848 (syz-executor5) did not claim interface 0 before use 05:42:54 executing program 5: r0 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r0, 0x1000000) sendfile(r0, r0, &(0x7f00000037c0)=0x400000000, 0xfffffdef) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, r3, 0x100) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x44d44ef9) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @loopback}, @in=@loopback, 0x4e20, 0x5, 0x4e21, 0x8000, 0x2, 0x80, 0x20, 0x4, r4, r2}, {0xfffffffffffffe81, 0x401, 0xfffffffffffffff9, 0x1, 0x924c, 0x100000001, 0x8, 0x8}, {0x800, 0x3, 0x3ff, 0xffffffffffffffff}, 0xa45d, 0x6e6bba, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0xa, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0x3505, 0x1, 0x1, 0x1a3d759c, 0x1, 0x100, 0xde3d}}, 0xe8) 05:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x12}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000520200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() fsetxattr(r0, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000140)='\x00', 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2802}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$gfs2(&(0x7f00000008c0)='gfs2\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001b80)={[{@data_writeback='data=writeback'}, {@hostdata={'hostdata', 0x3d, 'vmnet1)wlan0%cgroup%'}}]}) [ 316.935449] netlink: del zone limit has 4 unknown bytes 05:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:55 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x4000000000000a3, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='cpuset\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) [ 316.956215] gfs2: not a GFS2 filesystem [ 317.000733] netlink: del zone limit has 4 unknown bytes [ 317.015413] gfs2: not a GFS2 filesystem 05:42:55 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd43db69) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000004000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 317.472678] audit: type=1804 audit(1538718175.645:62): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir980741838/syzkaller.oO2ZlR/158/control/file0" dev="sda1" ino=16553 res=1 [ 317.496699] audit: type=1800 audit(1538718175.645:63): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=16553 res=0 05:42:55 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @local}}, 0x0, 0x4, 0x0, "d0d6da7076e758bde75e37467d5bcc6e6f33a354ca80942257501777b59fa0b6fc4c6fcbb4cc3be715b69f49252dcaa248f70c0036517e49ec4b86db5c037f9b72bbda52ae894a7af084010fd24bd1f3"}, 0xd8) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000560e, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x2]}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x6, [0x5, 0x3, 0x3ff, 0x9, 0x20a477a6, 0x9]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x84) 05:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x9}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:55 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x6100000000000001, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0xfff, 0x0, 0x0, 0x0, @ib={0x1b, 0xdb, 0x6, {"ea11bf412f88acc098f56651eb25ba9f"}, 0x401, 0x7f, 0x1}, @in={0x2, 0x4e21, @multicast1}}}, 0x118) r4 = dup2(r0, r1) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0x80, 0x3}) 05:42:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x800000000000010d, 0xc, &(0x7f000031df55)=""/4, &(0x7f0000b91000)=0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f0000000200)="379f5c8396e024d4dfa4b8994015349d222fd7ce7abe32cf981edfbb17601645710961daaeb98c7b3b69e68d9457267559e7193e911858be6a82ce47f092b9a57b00f62cd42106d32723bf266c27d527e0b68ed1247f4e0004544c68a89fb10000000000000000000000000000000000000000000fdfd2f5a8f0376cec5ae6ef18dd927ff8476686b31452c2784ef03a84d4be3179025393175098e27443f285ad39b29e73b4369d53b22fdb9331cbd63a976eb8c5ca72b9d0", &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f00000002c0)="deb5ee22ae19c41822232f1595753b33c9def9b11183e4d87712f9899885b366db8afa4c57c31ee237af379d5dbc10137bf463f1fe21c95b9e640993604bfc4ea9cdcecdda2f789f6c36a5460f23e28e68ca2a079de0b0dedc8a4767a8ef82f55060610263f48e1fa494be52f5d9360180000064f5f63c27379be4f84e1fb9f425a7d1d4fae6e57389e74ec95517ce246b9787a73f410ec8e2a490854eb54d9b5d3b258d71d8ad2c83") [ 317.521145] audit: type=1804 audit(1538718175.695:64): pid=11855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir980741838/syzkaller.oO2ZlR/158/control/file0" dev="sda1" ino=16553 res=1 05:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000002000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x6}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 317.577341] binder: 11912:11918 ioctl c0306201 20007000 returned -14 05:42:55 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd43db69) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) [ 317.621615] binder: 11912:11918 ioctl c0306201 2000dfd0 returned -14 05:42:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)=""/120, 0x78, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r1, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, &(0x7f0000000000)={0x1, 0x1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4001, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@int=0x101, 0x4) [ 317.661977] binder_alloc: binder_alloc_mmap_handler: 11912 20000000-20002000 already mapped failed -16 05:42:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000052000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:55 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd43db69) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xc}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 317.713275] binder: BINDER_SET_CONTEXT_MGR already set [ 317.731445] binder: 11912:11939 ioctl c0306201 20007000 returned -14 [ 317.739281] binder: 11912:11931 ioctl c0306201 2000dfd0 returned -14 [ 317.745084] binder: 11912:11918 ioctl 40046207 0 returned -16 05:42:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000080)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x1015, 0x6, 0x6, "5ab2b514e3af7589dd756c5edbae8d7c", "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"}, 0x1015, 0x3) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x2) 05:42:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x9, 0xcf2, 0x0, 0x37, 0xffffffffffffffff, 0x10001}, 0x2c) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x3040800, &(0x7f0000000900)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000980)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000400)={0x8001, 0xfffffffffffffffc, 0x6}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) fcntl$setlease(r0, 0x400, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x1}) umount2(&(0x7f0000000340)='./file0\x00', 0x0) lstat(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000d80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_mount_image$hfsplus(&(0x7f0000000300)='hfsplus\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f626172726967cca314"]) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10200, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x0, 0xfffffdfd}) 05:42:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000003f0200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 318.002827] hfsplus: unable to parse mount options 05:42:56 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) 05:42:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x4}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000400200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:56 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x100000000000000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x515180, 0x0) recvfrom$inet6(r0, &(0x7f0000000340)=""/166, 0xa6, 0x10000, &(0x7f0000000400)={0xa, 0x4e21, 0x8, @local, 0x7}, 0x1c) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) sendto(r1, &(0x7f0000000500)="afd105ff602b283c2ac6ffabdeb6979f4441aaef57206de1ee1e6b55980579b9ac1b588f493a4b8b2b733b3e4a8593cdfd8fa9055b04d031849227f14d20c84fecda984dbe106d57c4c371d01699461f93359bafbb4d6e7fa3f7cd54e5ca7438dd2f6c073f800a0144d56b854bc73feb4b62887832b57fd6c991a3", 0x7b, 0x4000050, &(0x7f0000000580)=@sco={0x1f, {0x753, 0x3, 0x4, 0x2, 0x0, 0x5}}, 0x80) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65305f4bf1336b6469723d2e2f66696c65315c00e42264367fb685a0ffb9a709f88852b0a9d492a1717fd8c42a7b0b521cf3f8d3332d491ccdf16a417ff70220b39f0011431cd6b20f05219003f9952bf30b0a5a2a77c085ee9edee8c6102760a51e69e09eabe752ac142fa5e58503e16aaee0c144da8d23813eaaef46a98dcc8aa0bd611902515a58201320b464"]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e24, 0x7f, @remote, 0x9}, {0xa, 0x4e24, 0x678c0a3, @mcast1, 0x401}, 0x401, [0x7fffffff, 0x2, 0x7ff, 0xada9, 0x40, 0x8, 0x4, 0x3]}, 0x5c) lsetxattr$security_evm(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "8339c127fb1241d68ab7a16fdbb0c2e367683834"}, 0x15, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x0) 05:42:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) [ 318.444359] ntfs: (device loop3): parse_options(): Unrecognized mount option /dev/audio. 05:42:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x5}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 318.501509] overlayfs: missing 'workdir' 05:42:56 executing program 1: mlockall(0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x200000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x4) 05:42:56 executing program 5: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) lookup_dcookie(0xdf, &(0x7f0000000040)=""/48, 0x30) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r3 = getpid() perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000140)) fcntl$setown(r1, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x15) [ 318.556283] overlayfs: missing 'workdir' [ 318.562868] ntfs: (device loop3): parse_options(): Unrecognized mount option /dev/audio. 05:42:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xd}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000020200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x0, 0x0, 0x757, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3in6, &(0x7f0000000000)=0x80) 05:42:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffff81, 0x80) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xe, 0x4, 0x4, 0x1}, 0x2c) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x6, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000e000)={r2, &(0x7f0000000000), &(0x7f000000c000)="02"}, 0x20) 05:42:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000520200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x51}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:57 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f00000004c0)=""/249, 0xf9}], 0x4, &(0x7f00000005c0)=""/127, 0x7f}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@l2, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000500)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x0, 0x2, 0x4, 0x1}}, 0xfffffffffffffd84, &(0x7f0000000340), 0x0, &(0x7f0000000380)}, 0x1000000000) 05:42:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x64}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000005400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:57 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="181c979f8db8d7cdef469d8322dd96d0a1df5439c85fd09ab7018899e2a35205f166b7072ecadcf5774c9aefb27ea825e0c5369124c3be3eadaf4f27ba9659e23350b84cb443dc9cdb5250", 0x4b}], 0x1) semctl$GETZCNT(0x0, 0x0, 0xb, &(0x7f0000000180)=""/90) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x0, 0x0, [0x7f, 0x200, 0x5, 0x7]}) 05:42:57 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f00000000c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7f) sendfile(r0, r0, &(0x7f0000000000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x401, 0x3) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f6465762f7367ffff3e35eb528a99d133441301d2b4b1dfea8456b2ba01dde847799d55050b76c86f355fd2a11caa41e209cb3c2e9a69fdc2d21f0cf8061fb849902684a0dcdd753c37fa0a4ae6eb51f0b2dcd864627241aee02fd8007a548503a0a8846fdae1b4a26bc81c14419f4686bbaed4d9288f8b5dd77a85fbdbb3b6a916dd63ffc33c43f303874e3f31e9d5f3ac6dd6680a3174eb565b12c9dd11b7d464c49eb4546a"], &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='romfs\x00', 0x1000, &(0x7f00000001c0)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 05:42:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, 0xffffffffffffffff, 0x200, 0x0) 05:42:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x20018110}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000001100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:57 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x2, 0x200) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffe, 0xa6, 0x7, @buffer={0x0, 0x91, &(0x7f0000000200)=""/145}, &(0x7f00000002c0)="1aac38bd76d2315b47b1bf2494bd73f2feb23559785c40b2ca404017de7279e61cf7b2433a60bbbda5400f0b5fc1c350af6821dead88f6aa6c7b3cc0862e7fa5e10886af21314788b12afee8e1ed0085861b7e9cdc4339b6a1f5cd1fdf3ed3f8fcd4ff521877c6e7155d392d9d848f94e8f4cde093f23c229c98d2c555dcddeaceb6f6ea5439bc4c735566ee37d2e645ae61408320e8937c52459fc36b80a65383208514317a", &(0x7f0000000480)=""/161, 0x7fffffff, 0x10, 0xffffffffffffffff, &(0x7f0000000380)}) read(r0, &(0x7f0000000400)=""/100, 0x64) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000003c0)=0x3, &(0x7f00000005c0)=0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x2302}, 0x1}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000600)=0x2ac, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x208000, 0x0) sendto$inet6(r3, &(0x7f0000000080)="36b0b32500e15e08dafc97ca69caade409d6c7d700cffde114f2a7907e59aba7ba879f7f563424f58097de3fcd4761d03db8ef819550ca48ed30978b20e094722430bd1a49d96d087f0072cc0e70676b5fd65c299c704e25d88a057e1bac3d59e351234e861580bab093d789d4192ae54dcfdd87babc4ac9d023b6d702fed9a4d147c0a27eabcaa48026d1b530fba72f67111a1143c5f3919cee9c78ed02edab338776e374e8999364af5d6b47c43fb890483df5099473e44e05cbb914b538fbe06ad205d6", 0xc5, 0x4, &(0x7f0000000180)={0xa, 0x4e21, 0x100000000, @mcast1, 0x9}, 0x1c) 05:42:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000a80)='syscall\x00') exit(0x0) sendfile(r1, r2, &(0x7f0000000100), 0x7ff) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) 05:42:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x2f}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000004c00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x58000, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r1, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257309bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006fd7a3b91f14177f2000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0xf0ffffffffffff, 0xe, 0xa8, &(0x7f0000000200)="3ad270b8d6628495e4d16d7220e5", &(0x7f0000000480)=""/168, 0xf000}, 0x28) 05:42:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xe}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000001400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_buf(r0, 0x29, 0x12, &(0x7f0000000180), 0x0) 05:42:58 executing program 3: capset(&(0x7f0000000200)={0x20080523}, &(0x7f0000000140)) mq_open(&(0x7f0000000000)='\'vboxnet0+\'}wlan0', 0x843, 0x80, &(0x7f0000000100)={0x0, 0x7f, 0x4, 0x1ff, 0x5, 0x9, 0x8, 0x81}) 05:42:58 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x401}, &(0x7f0000000080)=0x14) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000000c0)='$\x00', 0x5) mq_timedsend(r2, &(0x7f0000000100)="09a17937a405a88333bcad487615b3ee1fcc4afa30674a7482aa842275f498260b8fd984d699f912c23133d03a8fdf16b30b980a6f4aa28e8b26b93d638fcc39a7c4c6bacf48955ff4b656942e8691803a218549f468b38fd10a5c4df37e6cda244ea949864c788ae68d7f9c5356863c6d477ff39d0774ff55cc4dd776", 0x7d, 0x7fff, &(0x7f0000000180)={0x77359400}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x60, &(0x7f0000000000), 0xc) close(r3) close(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000200)) 05:42:58 executing program 1: r0 = socket$inet6(0xa, 0x800000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_settings={0x705000, 0x0, @sync=&(0x7f0000000040)}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x22a7, 0x3, 0xf8}) 05:42:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0xb0, 0xe4, 0x8002, 0x0, 0x9, 0x0, 0x9, 0x7c71b77, r1}, &(0x7f0000000280)=0x20) r2 = dup3(r0, r0, 0x80000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x200000000020, 0x8000}, &(0x7f00000001c0)=0x10) lseek(0xffffffffffffffff, 0x8, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x0, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7}}, &(0x7f0000000400)=0xb0) ioctl$void(r3, 0xc0045878) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000009080)={0x0, 0x7}, &(0x7f00000090c0)=0x8) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b, 0x0, [0x4, 0xffffffff, 0x1ff, 0x7f]}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000009100)=ANY=[], &(0x7f0000009140)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x101000, 0x0) 05:42:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x7}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000000000000000000aa00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:42:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0x14) fallocate(r1, 0x0, 0x0, 0x7fff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x4, 0x9, 0x1, 0x7ff, 0x9, 0xd0b, 0xfff, 0x3, 0x0, 0x1, 0x0, 0x6}, {0x8a36, 0x3a, 0x6, 0x7fffffff, 0x0, 0x4, 0x1, 0x0, 0xff, 0x7, 0x0, 0x800, 0x100}, {0x7fff, 0x8, 0x9, 0x100000001, 0x36, 0x80000001, 0x4089, 0x1, 0x8001, 0x6, 0x3, 0x8, 0x2}], 0xffffffffffff6f84}) fallocate(r0, 0x0, 0x0, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x2}) 05:42:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x808, &(0x7f0000000100)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'sit0\x00', 0x100}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0)="f3", 0x1}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f00000000c0)) 05:42:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000005400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:42:59 executing program 5: lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xcb, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 05:42:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:59 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000001380)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$KDADDIO(r1, 0x4b34, 0x81) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x11c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd69}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2000000000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xf}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9d}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) [ 321.141231] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:42:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) [ 321.181960] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.188384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.188539] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.201285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.218651] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 05:42:59 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x3ffff, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x2, r1}) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)) dup2(r1, r3) 05:42:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 321.237208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.256077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:42:59 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @rand_addr}, &(0x7f00000001c0)=0xc) connect(r0, &(0x7f0000000100)=@can={0x1d, r1}, 0x1c4) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000000040), 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x6, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3a1189526afa60a4"}}, 0x48}}, 0x0) 05:42:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x4040ae9e, &(0x7f00000003c0)={"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"}) 05:42:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000001100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 321.343645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.359835] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 321.388957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:42:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000004c00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 321.440018] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:42:59 executing program 3: r0 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x114, 0x2715, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x2) accept4$alg(r0, 0x0, 0x0, 0x800) 05:42:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x30000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:42:59 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x4000000000200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000180)='./file0\x00', 0x103e, 0x7) execve(&(0x7f0000000640)='./file0\x00', &(0x7f0000000040), &(0x7f0000000400)) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x4, 0xffffffffffffffff, &(0x7f0000000140)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101000, 0x0) write$tun(r3, &(0x7f00000001c0)={@void, @val={0x3, 0x0, 0x7a31, 0x8, 0x2, 0x9d0}, @eth={@broadcast, @remote, [], {@mpls_mc={0x8848, {[{0x20, 0xfb5, 0x4, 0xffffffff}, {0x80, 0xffff, 0x2, 0x8001}, {0x2, 0x1f, 0x7, 0xfffffffffffffff8}, {0x4, 0x9b4, 0x9, 0x8}, {0x80000000, 0x1, 0x3, 0xca9}], @ipv4={{0x1e, 0x4, 0x40, 0x200, 0xb4, 0x65, 0x3, 0x80000001, 0x3f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, {[@ra={0x94, 0x6, 0xfffffffffffffffd}, @ra={0x94, 0x6, 0xfff}, @noop, @ra={0x94, 0x6}, @lsrr={0x83, 0x23, 0x100, [@loopback, @loopback, @broadcast, @multicast1, @multicast2, @rand_addr=0x400, @local, @empty]}, @lsrr={0x83, 0x2b, 0x3f, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @remote, @empty, @multicast1, @empty, @empty, @rand_addr=0xf34, @loopback, @broadcast]}]}}, @udp={0x4e24, 0x4e23, 0x3c, 0x0, [@guehdr={0x1, 0xff, 0x3, 0x5, 0x100}, @guehdr={0x1, 0x7, 0x7f, 0x9, 0x100}, @guehdr={0x1, 0x2, 0x6, 0x8001, 0x100}, @guehdr={0x1, 0x6c, 0xff, 0x40, 0x100}, @guehdr={0x1, 0x6, 0x7, 0x4de, 0x100}, @guehdr={0x1, 0x0, 0xe654, 0x8, 0x100}, @guehdr={0x2, 0x8, 0xdc18, 0x101, 0x0, [0x80]}, @guehdr={0x2, 0x7, 0xabb, 0x6f5e, 0x100, [0x80]}, @guehdr={0x1, 0x800, 0x1, 0x2, 0x100}, @guehdr={0x2, 0x20, 0x5, 0x8, 0x100, [0x80]}]}}}}}}}, 0xe0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4000000027d, 0x40) 05:42:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b6300000c6300000b630000016340a9518ceb9b3db41b5917c8043540000000000000000000000000e5ffffffff7cd7aeec7f9cbdc7ffffff0000400000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) 05:42:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000001400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 321.628581] binder: 12253:12254 ERROR: BC_REGISTER_LOOPER called without request [ 321.646656] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 321.655847] binder: 12253:12254 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 321.662132] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 321.675633] binder: 12253:12254 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 321.686279] binder: 12253:12254 unknown command -1455398143 [ 321.692507] binder: 12253:12254 ioctl c0306201 20000280 returned -22 [ 321.715979] binder: 12253:12254 ERROR: BC_REGISTER_LOOPER called without request [ 321.724252] binder: 12253:12254 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 321.734291] binder: 12253:12254 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 321.743795] binder: 12253:12254 unknown command -1455398143 [ 321.750068] binder: 12253:12254 ioctl c0306201 20000280 returned -22 05:43:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf0ffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002008000a0ffffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)}], 0x1, 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "831d2fd0b959128d99e1d9c26caa21fdb19cad57"}, 0x15, 0x3) r5 = getpgid(0xffffffffffffffff) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x2, r5}) fallocate(r4, 0x0, 0x0, 0x73e0) write$apparmor_current(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303030303030303030335e2d003a656d302973656c696e7578b2766d6e6574315d260073656375720000792e696d6100005c007368613232342d67656e657269630026656d300000c088aeb74dc52225c97a21b507299db474c4b10053bc12e3d93172a5ca205abb8421816c17e2a200ae58b2134f69c85183f463b32f0625391ad396af1f2458872c07051a72fc024e59bc69fc7484a38bcc2bb87ff1e8edd8f2b0586e36fe410a74815157f2c5"], 0x5a) sendfile(r1, r4, &(0x7f0000000100), 0x40ffe) 05:43:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:43:00 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, [], [{0xbb, 0x3, 0x3ff, 0xffffffffffffffff, 0x2, 0x10000}, {0x400, 0x101, 0x3, 0x81, 0x6, 0x4016}], [[], [], []]}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/149) set_mempolicy(0x2, &(0x7f0000001380)=0xfffffffffffffffd, 0x20) set_mempolicy(0x0, &(0x7f0000000000), 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)) 05:43:00 executing program 3: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/116, 0x74) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000180)={0x2, 0xf9, 0x7, 0x2}) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="fffdc8385005356eb623eb2709a7a68ff5aa212590300ba13cf2710b4bf4654bce04615f24c46099a767212e25af61d577a3f942a1d65ea5f98783f0984a2822a5833ac2d0057bc6d797b2357f835b119b1640265b8f00af8e4b54d7f4fea1a12665afbfde35069198875cb6a261ef4642609e1c2b40b20ad4c483a5eaddfec877c5173c7416d85700339afcce330eba49ad27f2d73beb0dc751893d017c2c807187e09127d17d1f6a6735b881ed1967400921fc0fadf156b6f5cfe15d52d52d764f491575808c614883abf5e9fb4b1c8d9684d75c609e5f745ca8a1869332697e06e44858b357d9a40593778f267b03abb7fd"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4800, &(0x7f000000a000)) [ 322.070128] input: syz1 as /devices/virtual/input/input7 [ 322.076526] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 322.094486] input: syz1 as /devices/virtual/input/input8 05:43:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:00 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000380)={0x7, 0x4d, 0xffffffffffffffff}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x27, 0x4, &(0x7f0000000540)=[{&(0x7f00000002c0)="f72fca3b2c875ba9e92e89e9c6f5581d5c506069a06a44fc83e7287d49373cb021e97f15f9566cbf948016a63995addbbcb76dee5844f5454c8c70dc42f345186c80804ebe6ecb9f4fb769b977403c5d3620dc523c077942c57fd1119022067399753d599e31314d4bd6e861598b20961cfb06f00044079791a7234de69998", 0x7f, 0x3}, {&(0x7f00000003c0)="9b364e99f24141584bd74d87088bdad0e49c62d19ea92704ed360035388b17d2f40e928927583eaaf2ae20462b936c5f549a173040ff7c9b6d592a98c2ca9ccb669b26b4df2745fb4df4a525e63b58f309538435ba9e5e39d70ffccc91ae56a09708674d877f72414db9359ee0ef26837bcca42f61425a82ad37a2abe5e060820421959f908d0fb9d652ad5916c5420385432004462deb89ca19218235e7031362d223afe4f54cecb1b18b0523b74587a9f9447cee7a30be6f30f9eb", 0xbc, 0xd312}, {&(0x7f0000000940)="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", 0x1000, 0x9}, {&(0x7f00000004c0)="2299bc6afd868a96c5d5822edd2ecdaed174b5015d4a77a40244647a514e88e52f64f0bf031b0d72ce213e0e171c94ab1877a132f4eff7920039be2b51125426739ad845aa24fb0482", 0x49, 0x2}], 0x18, &(0x7f00000005c0)={[{@nouser_xattr='nouser_xattr'}, {@nouser_xattr='nouser_xattr'}, {@acl='acl'}, {@user_xattr='user_xattr'}, {@acl='acl'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) umount2(&(0x7f0000000780)='./file0\x00', 0x0) 05:43:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:00 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffff9c, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r0, 0x0, 0x2, &(0x7f0000000140)=',\x00', r2}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000000)="abb1a501df7e659e926f555983723046e975d086b77ea44ca455de9ed59bafac37", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100)}) ftruncate(r3, 0x64) [ 322.260855] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 322.273325] erofs: read_super, device -> /dev/loop5 [ 322.290578] erofs: options -> nouser_xattr,nouser_xattr,acl,user_xattr,acl,func=KEXEC_INITRAMFS_CHECK, [ 322.337312] erofs: cannot find valid erofs superblock [ 322.409767] erofs: read_super, device -> /dev/loop5 [ 322.418847] erofs: options -> nouser_xattr,nouser_xattr,acl,user_xattr,acl,func=KEXEC_INITRAMFS_CHECK, [ 322.434457] erofs: cannot find valid erofs superblock 05:43:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xffffff9e}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:01 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20c000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x80000001, @local, 0x2}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0x3}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f0000000080), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000000100)=0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x64, 0x0, 0x5}}, 0x14) 05:43:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="01", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0x8) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) 05:43:01 executing program 3: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/116, 0x74) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000180)={0x2, 0xf9, 0x7, 0x2}) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="fffdc8385005356eb623eb2709a7a68ff5aa212590300ba13cf2710b4bf4654bce04615f24c46099a767212e25af61d577a3f942a1d65ea5f98783f0984a2822a5833ac2d0057bc6d797b2357f835b119b1640265b8f00af8e4b54d7f4fea1a12665afbfde35069198875cb6a261ef4642609e1c2b40b20ad4c483a5eaddfec877c5173c7416d85700339afcce330eba49ad27f2d73beb0dc751893d017c2c807187e09127d17d1f6a6735b881ed1967400921fc0fadf156b6f5cfe15d52d52d764f491575808c614883abf5e9fb4b1c8d9684d75c609e5f745ca8a1869332697e06e44858b357d9a40593778f267b03abb7fd"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4800, &(0x7f000000a000)) 05:43:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 322.908606] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2e2}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:01 executing program 5: r0 = socket(0x1, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000140)=""/24) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000200)="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") mprotect(&(0x7f0000456000/0x1000)=nil, 0x1000, 0x10000001000008) setsockopt(r0, 0x4, 0x800, &(0x7f0000000000)="8fa6e474be67f64f81a0213229f5bba00878ced38106a85185f906b8920e415acc1bdcf45f9834b518a8239fc86bedb80e315762c0f07b2883075d5abe67b7d8b4b76cbfd31f0aa2ec67084a15a94f63939650b05b0929c7ede3d92144d8475e0226b1235b0e8cf044cb7961aa6f63e139b454ed387e928ee9576886127a8ee1956e99e8e8273c95ebe46f7b65b1133631c09bdd157ed8652a2e9ceb6961be662580da45680ab345333d5ea7291cb773be520d7164022b31de7b3a359536a712824435ca94c5102e5cc5952b063e1a016ce48962f07811da8caff9380587ba6ca8a3fa55b219c9e30886c6e0235b", 0xee) connect$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 05:43:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 323.069766] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 323.156554] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ppp\x00', 0x2002, 0x0) write$vnet(r0, &(0x7f0000000540)={0x2100, {&(0x7f00000003c0)=""/243, 0xffffffcf, &(0x7f0000000800)=""/81}}, 0x68) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) 05:43:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0xfffffffffffffddd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000fddfff)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 05:43:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:01 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x401}, &(0x7f0000000080)=0x14) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x60, &(0x7f0000000000), 0xc) close(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") close(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 05:43:01 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) dup2(r1, r0) 05:43:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x68}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002a4ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x48}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80000) connect$can_bcm(r0, &(0x7f0000000700)={0x1d, r1}, 0xfffffffffffffd43) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1ff, 0x109000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x8000}, &(0x7f0000000180)=0x8) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5c037dc12502008000a0000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 05:43:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 1: unshare(0x8020000) socket$inet6(0xa, 0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000003c0)={@in6={0xa, 0x4e23, 0x7fffffff, @empty, 0x4}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x41}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2e8001, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) semget$private(0x0, 0x7, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) 05:43:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000100)=[{0x2, 0x0, 0x5, 0x1, @time, {0x40000000000, 0xfffffffffffffffc}, {0x4, 0xe67}, @connect={{0x100000000, 0x5}, {0x4, 0x400000000}}}, {0x5, 0xffffffff, 0x9162, 0x761, @time, {0x7, 0xb52}, {0x7, 0xfffffffffffff000}, @connect={{0x80, 0x6}, {0x6, 0x5}}}, {0x100000000, 0x2, 0xf6d7, 0x3, @tick=0x8, {0x9, 0x3}, {0x0, 0x10}, @control={0x7fffffff, 0x3, 0x100000000}}, {0xa00000000000000, 0x9, 0x80000001, 0x0, @tick, {0x8e00, 0x7}, {0x9, 0xb2b}, @addr={0x6}}, {0x6, 0x82, 0x101, 0x1f, @tick=0x9, {0x7ff}, {0x100000000, 0x4}, @addr={0x8, 0x5}}, {0x2, 0x7f, 0x7, 0x4, @time, {0x401, 0x9}, {0x2, 0x200}, @quote={{0x80000000, 0x9}, 0x1f, &(0x7f00000000c0)={0x6a, 0x9, 0x0, 0x6, @time={r1, r2+10000000}, {0x100, 0x1}, {0x0, 0x5}, @time=@tick=0xfff}}}], 0x120) timer_create(0x20000000003, &(0x7f0000000000)={0x0, 0x2c, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000006c0)) timer_gettime(0x0, &(0x7f0000000700)) 05:43:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x300}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x300000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x4, 0x280000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, [], 0x1f}, 0x7}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="06001b001f04f624212a8ce8cc7d221269c0dcc07dac47731c694e964669c4"], 0x23) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) close(r1) r4 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000280)=""/56) 05:43:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4c00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000400)=""/19) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r4, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r6 = dup2(r1, r1) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000480)) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r7, 0x5, 0x4, 0x4, 0x2}) syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r8, 0x40140921, &(0x7f0000000080)={0x0, 0x7, 0x2, &(0x7f0000000700)}) 05:43:03 executing program 1: unshare(0x8020000) socket$inet6(0xa, 0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000003c0)={@in6={0xa, 0x4e23, 0x7fffffff, @empty, 0x4}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x41}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2e8001, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) semget$private(0x0, 0x7, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) 05:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002008000a000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x400000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x200000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 325.567691] md: could not open unknown-block(7,2). [ 325.572691] md: md_import_device returned -16 05:43:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x457, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000004140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80001) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000004180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000041c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000004240)={r2, 0x1c, &(0x7f0000004200)=[@in6={0xa, 0x4e22, 0x81, @remote, 0x7}]}, &(0x7f0000004280)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x7, 0xffffffffffffffe1, 0x45, 0x800}, &(0x7f0000000180)=0x98) [ 325.736727] md: could not open unknown-block(7,2). [ 325.749185] md: md_import_device returned -16 05:43:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(0xffffffffffffffff, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:04 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x914, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}) 05:43:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xe202}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r1}) socketpair(0x0, 0x5, 0x45, &(0x7f0000000080)) 05:43:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/userio\x00', 0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x30000) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40100, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x3ddb, 0x3, 0x6, 0x80000001}, {0x8001, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x40, 0x3}, {0x6, 0x4, 0x9, 0x84e2}, {0x400, 0x1, 0x6, 0x40}, {0x4, 0x10001}]}, 0x10) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) 05:43:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 326.250935] validate_nla: 13 callbacks suppressed [ 326.250943] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:04 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000100)=0x90) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x54f6962e05b34dc3, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x1000, "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"}, &(0x7f0000000200)=0x1008) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001600)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0x1}, &(0x7f0000000240)=0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000000c0)=r5) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r7, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) shutdown(0xffffffffffffffff, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r8, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f0000000140)={0xb1, 0x18, [0xfff, 0x7ff, 0x379, 0x6, 0x100000001, 0x80000001]}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) accept$alg(r1, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000004c0)="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") 05:43:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 326.390363] Dead loop on virtual device ip6_vti0, fix it urgently! [ 326.406541] Dead loop on virtual device ip6_vti0, fix it urgently! 05:43:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 326.434860] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 326.443848] Dead loop on virtual device ip6_vti0, fix it urgently! [ 326.465248] Dead loop on virtual device ip6_vti0, fix it urgently! [ 326.482881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 326.547875] Dead loop on virtual device ip6_vti0, fix it urgently! 05:43:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(0xffffffffffffffff, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:05 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 05:43:05 executing program 3: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2ac, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00005feffc), 0x2c) close(r0) 05:43:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 327.097838] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7a}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:05 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) recvfrom(r0, &(0x7f0000000240)=""/46, 0x2e, 0x0, &(0x7f0000000180)=@l2, 0x80) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca63d89613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 327.185490] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x20073, &(0x7f00000003c0)=ANY=[@ANYBLOB='n']) 05:43:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 327.230392] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 327.277886] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 327.286927] proc: unrecognized mount option "n" or missing value [ 327.309355] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 327.328396] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 327.359370] proc: unrecognized mount option "n" or missing value [ 327.366005] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 327.383848] netlink: 'syz-executor1': attribute type 29 has an invalid length. 05:43:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(0xffffffffffffffff, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002cc0), 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0x14}, 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) 05:43:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x0, @dev}, 0x10) 05:43:06 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @multicast2}, {0x1, @local}, 0x2, {0x2, 0x0, @multicast1}, 'syz_tun\x00'}) 05:43:06 executing program 3: 05:43:06 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002f5ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6800000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:06 executing program 3: 05:43:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:06 executing program 1: 05:43:06 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x3000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:06 executing program 3: 05:43:07 executing program 3: 05:43:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x40030000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:07 executing program 1: 05:43:07 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002ffffffffa0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:07 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0xec, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x80) ftruncate(r4, 0x0) 05:43:07 executing program 3: socket(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_targets\x00') renameat(r0, &(0x7f0000005240)='./file0/file0\x00', r0, &(0x7f0000005280)='./file0/file0\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbd}) syz_open_pts(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r2, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b, 0x1}, 0xffffffff}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x100000000000023f, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000000140)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x1}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003a80)=""/3, 0x3}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x7, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={r3, r4+30000000}) write$nbd(r5, &(0x7f0000001040)={0x67446698, 0x0, 0x4, 0x3, 0x4}, 0x10) connect(r2, &(0x7f00000012c0)=@nl=@unspec, 0x80) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 05:43:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:07 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002a0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x0, 0x5, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000002100992127bd70000000000002000000000000000000000011000000080001007f000001080001000000000008000100ac14146708be10002072000008000b0000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 05:43:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x3f00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:07 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x1, [@loopback]}, 0x14) 05:43:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x6, &(0x7f0000000000)="fc106b0000000000000081e3066976323427da41307bac9f4c5c71591c9eb51deac4bb1b373847069dabc06919fade12") sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180012001d00fdff0000000000000000150000000400270002000000eeae35c4477985da45c44f6051bb8a3a12acec0e3d03bafe67bec45785c26873973f81d827a7060000000000000041fe6ab5a20dfda2465f8b11c65c092675366e397bc30166c6532c5a78a0dd708bc02ac5c559ba73c770e7d6166b02413b22548fd60463f783653854eb5bac4715972a8f2a58756c28617d7fddb69178c9866f642773cea73c1c300a5d284f6edd7309893db7c5332760"], 0x18}}, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') ioctl$BLKROSET(r2, 0x125d, &(0x7f00000001c0)=0x9b8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0xaa5) 05:43:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}, {0xa64, 0x4}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:08 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 05:43:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000025200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:08 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1d, 0x5, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0) 05:43:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:08 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0xfffffffffffffe10, 0x0, &(0x7f0000000000)={0xa, 0x40, 0x0, @loopback}, 0x1c) 05:43:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:08 executing program 3: socket$inet6(0xa, 0x3, 0x800000000000004) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000840)={[{@quota_account='quota=account'}]}) [ 330.705330] gfs2: not a GFS2 filesystem 05:43:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000140)=[{0x5, 0x7, 0xfa1, 0x9}]}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:09 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @link_local, [], {@canfd={0xd, {{0x2, 0x80, 0x3, 0xd227}, 0xe, 0x0, 0x0, 0x0, "f7cc6456aa3276314211bc111b8170679b278ec1236ffb8f662e17685192e748771f381ec5aea0f56a484b2f997bf0224e54c94addae64dd21af97a541862ce2"}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0x2, 0x0, 0x58b]}) 05:43:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:09 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x2e, &(0x7f0000000040), 0x52d) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x6) 05:43:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000180)={0x0, @speck128}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1, 0xec}, 0x1c) r3 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) syz_emit_ethernet(0x437, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) r4 = epoll_create1(0xfffffffffffffffc) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000040)=""/102, &(0x7f00000000c0)=0x66) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x2ec521ecadf7d387}) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x800, 0x0) 05:43:09 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='oom\b\x00Adj') r2 = getuid() getgroups(0x6, &(0x7f00000000c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) fchown(r1, r2, r3) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='-4', 0x2}], 0x1) [ 331.427527] validate_nla: 20 callbacks suppressed [ 331.427536] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 331.458680] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:09 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000008004500001c0000000000329078e000883391f77f328e2300000008906f3497496e5df218ee38437307911c28fc515fb6b2770c6dde389d9fe1105afd0df8965e38bf99f9779e857e5c857bfaf68eecbad3366685a6080245b5802adfa3b65cfaee873deff69daca13607d32f7e646cc3c8d8adb8f7137eceacf0522e5d805ae7de6e0cb83fb769dbef54c336751fbf4fb082c4a84c89d399c3f06c7931e24b466559d1eb0af098d06d57c16295f094f6530ddac8be15710219deedfde4df29fd801a41ee0fa40f424d510ebc69da028e37b25a0116"], 0x0) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) stat(&(0x7f0000000500)='.\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000340)='./file0\x00', 0x6, 0x3, &(0x7f0000000480)=[{&(0x7f0000000380), 0x0, 0xa761}, {&(0x7f00000003c0)="f028181d3ed7e1f9eab4a98d68d93756cd7c4864ba0cf28d6a5b3a319d40c97ff4c5fb8846f6048d85b359166346203d89e4dc218b2717ea2291ffbd1f52acb78fc3f99df437e403975649b420a425b97fb44e038ea93411c57f2f", 0x5b}, {&(0x7f0000000440)="bbac38a9aa2b", 0x6, 0x1}], 0x10000, &(0x7f00000005c0)={[{@noattr2='noattr2'}, {@biosize={'biosize', 0x3d, 0xa00000000}}, {@wsync='wsync'}], [{@obj_role={'obj_role', 0x3d, 'ppp0cgroup{vboxnet1ppp1eth0'}}, {@fowner_gt={'fowner>', r1}}]}) r2 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x88b, 0x40000) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x101280) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000000c0)=0x10001) 05:43:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 331.528052] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 331.595664] XFS (loop3): unknown mount option [biosize=00000000042949672960]. [ 331.619420] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6c000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:10 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f0000000580), 0x1000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x3ff) 05:43:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000ac00)='./file0\x00', 0x101000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f000000ac40)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xaf4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={r6, 0xa137}, &(0x7f00000002c0)=0x8) ioctl$KVM_NMI(r3, 0xae9a) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000380)=r7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:43:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)="db", 0x1, r0) keyctl$link(0x16, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x802, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000001c0)={0xffffffffffffffff, {{0xa, 0x4e21, 0x3f, @mcast2, 0x6}}, {{0xa, 0x4e23, 0x7, @empty, 0x8000}}}, 0x108) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000004c0)={0xffffffffffffa38b, 0x800, 0x5, 0x2, 0x80}) read(r4, &(0x7f0000000300)=""/75, 0x4b) r5 = dup(r2) ioctl$TIOCLINUX6(r5, 0x541c, &(0x7f0000000480)={0x6, 0x6}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'eql\x00', r6}) write(r4, &(0x7f0000000000)="240000001a0025e0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) socket$unix(0x1, 0x8d40096fb35e0f9e, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2040, 0x0) getsockopt$inet6_dccp_buf(r7, 0x21, 0xc, &(0x7f0000000100)=""/4, &(0x7f0000000140)=0x4) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000500)) 05:43:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 332.240606] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 332.274703] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 332.356009] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:10 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000004700)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r6 = dup(r5) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x4008af14, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000100)) close(r4) r7 = geteuid() getgroups(0x4, &(0x7f00000000c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) fchown(r5, r7, r8) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x25, &(0x7f0000000040), 0x4) 05:43:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:11 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) uname(&(0x7f0000000440)=""/230) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 05:43:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:11 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='sit0\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x36a) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000002c0)="c6", 0x1) sendto$inet(r1, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) [ 333.060159] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x600}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002240)={@local, @multicast2, 0x0}, &(0x7f0000002280)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000022c0)={@remote, @multicast1, r2}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4}}, 0xffffffffffffffc2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0x0, 0xc51e010000000000]}, @empty, @loopback}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000700)="d6829be1b9286ba5d65782bdd38f10cfea84d76dd60400388c4f07420cb03e4d37e4e836fee53ea0d91959beb3bc00763b7f1af61cebccbe642d4d837d39a026534ac596bf49", 0x46, 0x8, 0x0, 0x1}]) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x3ff, @mcast2, 0x6}, {0xa, 0x4e22, 0xd7, @mcast2, 0x1}, 0x7f, [0x8, 0x8, 0x7ff, 0x6, 0x0, 0x2, 0x3, 0x21]}, 0x5c) 05:43:11 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xff60}, 0xe3c7) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x0, 0x4000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x10) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) fdatasync(0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000002c0)={0x0, {{0xa, 0x4e24, 0x0, @ipv4, 0x5}}, {{0xa, 0x4e22, 0x3, @loopback, 0xa0c2}}}, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xffffffffffffffff}) write$tun(r1, &(0x7f0000000740)={@void, @void, @ipv6={0x5, 0x6, "d13563", 0x293, 0x62, 0x5c8, @mcast1, @mcast2, {[@hopopts={0x1d, 0x20, [], [@generic={0xfffffffffffffe01, 0xfa, "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"}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @gre={{0x0, 0x0, 0x1, 0x7f, 0x0, 0x5, 0x0, 0x1, 0x880b, 0xc4, 0x0, [0x6279988c], "55e210899cb0fdff218e36aadb78ef2a4a5295f3c4d49ce8338ff5b7a4d653aadda6e70ac64d363a27600637f889e76b2002220d322cea022cd68156a4812138ed10e94bb92cf80895cc1090bf8c8290144a9023af3cba7de7365271cfc8fcf33ccb34f61f03d9e5d7a8701d22fca37e3bd90283e9aa1dd74cbbb280c3b0b3bd906c74c208017257099a2b43b2c2e9875e1bd58b74e188e75606132f6326c827fbcc5dcaae87f3fa6ff9efb5ef110aaf00c4962c4af32a01df5097e9bc523aee0d7a1f71"}, {0x1, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x800, [0x8da1], "cffcdd51e726db7d84b3673e2fe3ed013b37c9f643c09849c749ea5ceda06bbf8f6080a8f2b26acdd52d90cca8bb4372e6d48121ff1b4a54fce42d9ca67ace4cc2c8b8b5dc3d0b87ee43e604ad09c4496083957100f01d31210a936cdff93d5523157a1750"}, {0xff, 0x0, 0x200, 0x1ff, 0x0, 0x0, 0x86dd, [], "902709dfa11b"}, {0x8, 0x88be, 0x0, {{0x81, 0x1, 0x1, 0x40, 0x100000000, 0x4, 0x40, 0xfff}, 0x1, 0x5542}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x400, 0x0, 0x7fffffff, 0x4, 0x7fffffff, 0x8}, 0x2, 0x5, 0xfbe, 0x8, 0x8, 0x4, 0x6, 0x4, 0x3, 0x4}}, {0x8, 0x6558, 0x3, "73a14d5a7a92b5aeaff613ceceb995540dc29afe"}}}}}, 0x2bb) [ 333.183485] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7a00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:12 executing program 3: r0 = socket$inet6(0xa, 0x8080f, 0x9) accept4(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80, 0x80000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffffffffffd, @dev, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x10000001, &(0x7f0000001400), &(0x7f0000000140)=0x14) 05:43:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x101800) pipe2(&(0x7f0000000140), 0x0) syslog(0x2, &(0x7f0000000180)=""/89, 0x59) 05:43:12 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./bus\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) mount(&(0x7f0000d04000), &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='bdev\x00', 0x0, &(0x7f0000000380)="2e42f962d086854831edd6165f551cd331e91aac89bf4a24adf27dc645a906bd7a6290905c4c939a3a715b2a69b7c672a3a150f4affea8f18255ebbe3fb67819b421cd9cd250c3915d2292a3c3d92e6c133f77e26a3be606f63337968780ad2366ef0481c51b06bb1f153a0b80f8dbab") mount(&(0x7f0000000500)=ANY=[@ANYBLOB="3fa0ab86bb39c0f80c1b637d6679db7d35770742640c0b933ed900207764100303e2507fb5ed12b12b43cb533f28f48e053aebd97b5dbc3b314efbe080315b746fb96e03975f8e50a1f1a6cf8763e991ac6943e8ee495ab65e17e6"], &(0x7f00000000c0)='.', &(0x7f0000000280)='vxfs\x00', 0x0, &(0x7f0000000200)) inotify_add_watch(r0, &(0x7f0000000200)='./bus\x00', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) ptrace$getregs(0xe, r2, 0xfd, &(0x7f0000000400)=""/126) openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0xd5fee7049ba160e4, 0x0) 05:43:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x101800) pipe2(&(0x7f0000000140), 0x0) syslog(0x2, &(0x7f0000000180)=""/89, 0x59) [ 333.923261] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x700}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x8, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x60}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x481) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x1f}, 0x1) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/33) inotify_init1(0x80000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0x7fff, 0x0, 0x1, 0xe73e, 0x1, 0x51}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ip6_vti0\x00', 0x100}) r2 = semget$private(0x0, 0x1, 0x20) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000001c0)=""/102) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bind$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) inotify_init1(0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @remote, 0x9e}}, [0x6, 0x40, 0x8, 0x6, 0x8001, 0x0, 0x101, 0xffffffffffff0001, 0x1, 0x9, 0x9, 0x800, 0xf0f0, 0x4, 0xfffffffffffffffb]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r3, 0x8000}, &(0x7f0000000440)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0xb011c0db3e47cf68}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @mcast2, 0x4}, r4}}, 0x30) r5 = getpid() perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x400, 0xcf, 0x80, 0x2, 0x0, 0x2, 0x28000, 0x1, 0x6, 0x5, 0x8, 0x1, 0x3, 0x0, 0x10001, 0x6, 0x8, 0xffffffffffffffc8, 0x1, 0x1, 0x9, 0x2, 0x9, 0xf02f, 0x4, 0x8, 0xfff, 0x0, 0x4, 0x4, 0x7, 0x2, 0xffffffffffffd0ef, 0x7fffffff, 0xffff, 0x40, 0x0, 0xf9, 0x0, @perf_bp={&(0x7f0000000540), 0x5}, 0x4020, 0x3, 0x0, 0x0, 0xffffffff, 0x6, 0x2}, r5, 0x6, r1, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x6, @loopback, 0x3}], 0x1c) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x80, 0x0) recvmsg$kcm(r6, &(0x7f0000001b80)={&(0x7f0000000680)=@l2, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/34, 0x22}, {&(0x7f0000000980)=""/61, 0x3d}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/129, 0x81}], 0xa, 0x0, 0x0, 0x8}, 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001bc0)=0x728c, 0x4) syz_mount_image$gfs2(&(0x7f0000001c00)='gfs2\x00', &(0x7f0000001c40)='./file0\x00', 0xb7d3, 0x2, &(0x7f0000001e40)=[{&(0x7f0000001c80)="64f7d80b09933ecc3af8951760727f8fb6453654478d86346762ba10edc32b92add23cb95e75b8286c5f3032af1fb9625ed32a971c166d2ddc354492cb6076c7f246469198678d4d639db34003280a752187136f6e2b1dbc790d1bf71b858467ddb23c5fb1867277d01869d42ab411da7dcc34b63e7c74c6cd6228f24ad4ab6c05e3b24da1681ecc9fb7b9873b28ad9c72772fd44cd8cfd11f5d0c14d471c316f8b994485f1777bd455f2c66cb31c2ea52c88eea04bce953b5f1df7c3eb7263f8f", 0xc1, 0x5}, {&(0x7f0000001d80)="cdd51b99048484ce20d839a7a7070bed275a6acc4e4bb0a6530caceb7624f2e3a7e45271cc13e949f0f3418a449be453e38a8ca9842456b72c1351bec987831dfc4c16844576cc538aa634e7747be071c340f94a413f2f3d61c7b0ecd8fc2656a012db2060df96706e565b73704b1ef7974011861f586c56c4c5a53994a9a9beb2ca23d2837dc7ace6307a98d92a43075a30484fcd0ad761df5aa4546501cc3292d6", 0xa2, 0x5}], 0x80050, &(0x7f0000001e80)={[{@localflocks='localflocks'}], [{@hash='hash'}, {@fsname={'fsname', 0x3d, '/dev/amidi#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) connect$unix(r0, &(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000002000)={@remote, @multicast2, 0x0}, &(0x7f0000002040)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002080)={@mcast1, 0x47, r7}) fsetxattr$security_selinux(r6, &(0x7f00000020c0)='security.selinux\x00', &(0x7f0000002100)='system_u:object_r:devicekit_exec_t:s0\x00', 0x26, 0x1) 05:43:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x98, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0xb65a, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) iopl(0x4) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000004c0)=0x7) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x1}, 0xb) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x200) setns(r2, 0x30000000) sendto$inet(r1, &(0x7f0000000380)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200002, 0x0) setns(r3, 0x28020000) 05:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xfffff000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create(0x420000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) shutdown(r0, 0x0) 05:43:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200ffffffffa0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:13 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ftruncate(r0, 0x8200) r2 = open(&(0x7f0000000580)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x3, 0x11, r2, 0x80000000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 05:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0xffffffffffffffa9, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xffffff7f}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:13 executing program 3: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x103000, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_rm_watch(r1, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x98) 05:43:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:13 executing program 1: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sync() r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x7fffffffffffffff) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f00000000c0), &(0x7f0000000140), 0x8) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x6, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @broadcast}, 0x22, 0x1, 0x1, 0x3, 0x4, 0x0, 0x7, 0x800, 0x200}) r3 = dup3(r1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000400)={0x2, "7665746831000000000000001100"}, 0x18) r4 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0) r5 = dup(r3) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000028c0)) r6 = accept4$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @local}}, 0x6, 0xfffffffffffffffd, 0x0, 0x8, 0xa0}, 0x98) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200100, 0x0) sysfs$2(0x2, 0x3, &(0x7f0000000540)=""/182) clock_gettime(0x0, &(0x7f0000008ec0)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000008c40)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/3, 0x3}], 0x4, &(0x7f00000008c0)=""/38, 0x26, 0xfffe0000}, 0x3}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=""/24, 0x18, 0x8000}, 0x5}, {{&(0x7f0000001980)=@pppol2tpv3, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000001a80)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x20}, 0x80000000}, {{&(0x7f0000001b40)=@nfc_llcp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/15, 0xf}, {&(0x7f0000001c00)=""/73, 0x49}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/31, 0x1f}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/237, 0xed}, {&(0x7f0000001e40)=""/72, 0x48}, {&(0x7f0000001ec0)=""/250, 0xfa}], 0x8, 0x0, 0x0, 0x7}}, {{&(0x7f0000002040)=@vsock, 0x80, &(0x7f0000002600)=[{&(0x7f00000020c0)=""/207, 0xcf}, {&(0x7f00000021c0)=""/200, 0xc8}, {&(0x7f00000022c0)=""/42, 0x2a}, {&(0x7f0000002300)=""/91, 0x5b}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000002380)=""/40, 0x28}, {&(0x7f00000023c0)=""/82, 0x52}, {&(0x7f0000002440)=""/209, 0xd1}, {&(0x7f0000002540)=""/116, 0x74}, {&(0x7f00000025c0)=""/18, 0x12}], 0xa, 0x0, 0x0, 0xffffffffffffffff}, 0x8000}, {{&(0x7f00000026c0)=@generic, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000002740)=""/241, 0xf1}, {&(0x7f0000002900)=""/245, 0xf5}, {&(0x7f0000002a00)=""/233, 0xe9}, {&(0x7f0000002840)=""/65, 0x41}, {&(0x7f0000005b40)=""/214, 0xd6}, {&(0x7f0000005c40)=""/180, 0xb4}, {&(0x7f0000005d00)=""/163, 0xa3}], 0x8, &(0x7f0000005e40)=""/83, 0x53, 0x3}, 0x7f}, {{&(0x7f0000005ec0)=@sco, 0x80, &(0x7f0000007080)=[{&(0x7f0000005f40)=""/20, 0x14}, {&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/10, 0xa}, {&(0x7f0000006fc0)=""/155, 0x9b}], 0x4, &(0x7f00000070c0)=""/4096, 0x1000, 0x9}}, {{&(0x7f00000080c0)=@nfc, 0x80, &(0x7f00000082c0)=[{&(0x7f0000008140)=""/4, 0x4}, {&(0x7f0000008180)=""/209, 0xd1}, {&(0x7f0000008280)=""/4, 0x4}], 0x3, &(0x7f0000008300)=""/147, 0x93, 0x774fcb55}, 0x7}, {{&(0x7f00000083c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000085c0)=[{&(0x7f0000008440)=""/45, 0x2d}, {&(0x7f0000008480)=""/51, 0x33}, {&(0x7f00000084c0)=""/81, 0x51}, {&(0x7f0000008540)=""/111, 0x6f}], 0x4, &(0x7f0000008600)=""/65, 0x41, 0x3}, 0x8000}, {{&(0x7f0000008680)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000008b00)=[{&(0x7f0000008700)=""/24, 0x18}, {&(0x7f0000008740)=""/225, 0xe1}, {&(0x7f0000008840)=""/239, 0xef}, {&(0x7f0000008940)=""/201, 0xc9}, {&(0x7f0000008a40)=""/166, 0xa6}], 0x5, &(0x7f0000008b80)=""/137, 0x89}, 0x4}], 0xa, 0x2020, &(0x7f0000008f00)={r8, r9+10000000}) syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') 05:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xa}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 335.668263] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 0, id = 0 05:43:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0x98) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x1, 0x5, 0x40, 0x1000, "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"}, 0x100a, 0x2) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xc55a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0x4, 0x6}, {0xebd9, 0xc986}, 0xdeca, 0x2, 0x5}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r3}, 0xc) 05:43:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x14, r2, 0x1}, 0x14}}, 0x0) 05:43:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6c00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:14 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000300)=0x200000000002, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) accept4(r0, 0x0, &(0x7f0000000340), 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)="7369743000000000eaff00", 0x10) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="1a17c1f3a4e8bb144c9744977ada0ed394ea5098102a56dc80751050b9eccbf4e2f3b8334bed79c1b4c8b354f17cf2c6d8f55e81738e5c6a272f5ee3a3", 0x3d, 0xfffffffffffffff9) keyctl$invalidate(0x15, r1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040)={0xffffffffffffffff}, 0x14) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x11) dup3(r2, r2, 0x80000) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getmulticast={0x14, 0x3a, 0xb00, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) close(r0) 05:43:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7400}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e24, @broadcast}}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x2000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg(r2, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10}}], 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x2) 05:43:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x14, r2, 0x1}, 0x14}}, 0x0) 05:43:14 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="469233397d4a53b2d763b7c7a5e4c83fde45ad1c91e73b5a1ae1898f1f1d358fc0da9e2432975e3870e6b306196c9a20571d84bfe4a68b800cef41c3968219fc0df71a777271af6ed425c2c0b4675f2d5c91d1b0b39a3f3fdd4a1da889d31ecfdfb9008cd15d1d40cbeffb40c22ffd8f9a2cd9a0a966eeb181c7989225f55aa4888fb275af5416869498331dd5c273e6cd890b13dc89b43e30431a116f7a397aa3253190940d26865671e8e55af28aeef03215d268d4034fdeee9a", 0xbb, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x1c060000) [ 336.446475] validate_nla: 6 callbacks suppressed [ 336.446483] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x14, r2, 0x1}, 0x14}}, 0x0) 05:43:14 executing program 3: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000040)='/dev/ashmem\x00', 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setrlimit(0x1, &(0x7f0000011000)) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0}, 0xa0) 05:43:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xa000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 336.622459] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:15 executing program 3: syz_execute_func(&(0x7f0000000000)="21641decc421a2c2a1a900000003c4a2459b31c48151676600f2400f79c066f3410f5d5d0a660f1a55f5c4a2ddb600f3420faeddc41981c5dcdc") r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7f, 0x101000) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 05:43:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x3f000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@buf={0x71, &(0x7f0000000000)="1bfd43e6ef93206b1d0360dda3c8da9273a121800461c3a619f7f2bbfdd08b0fe40da3548b40f1d23d820873ab67c0f55159787b5e54036e52f1e0c780e8be53b03efa0663ba685c25a630e7f5f85a7f6866c011945d51a7ad9d68fe14098f9669233bcc50a605e63ee2b04622adc7436b"}) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000440)={0x1f, {0x0, 0x0, 0x4}}, 0xa) [ 337.300757] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:15 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x5, &(0x7f0000eb3000/0x4000)=nil) pkey_mprotect(&(0x7f0000eb5000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x19, "001cf37c9f39143eb7e7b70c6fb99818f45d5ddd4c5b4a9966"}, &(0x7f0000000300)=0x21) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x40, 0x0) write$FUSE_LK(r4, &(0x7f0000000340)={0x28, 0x0, 0x6, {{0x5, 0x48f1c3e3, 0x0, r1}}}, 0x28) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x0, 0x20}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)=0x0) r6 = getpgrp(r5) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x80000000, 0x5, 0x2, 0x5, 0x0, 0x5, 0x10000, 0x8, 0x1, 0x2, 0x77, 0x2, 0xffffffff8bb4a80c, 0x620, 0x0, 0x10001, 0x10000, 0x7f, 0x800, 0xfff, 0x4, 0x7, 0x2, 0xfffffffffffffc00, 0x7b97d30, 0x101, 0x1ff, 0x1, 0x6, 0x6, 0x8, 0x7fffffff, 0x9, 0x8, 0xb23, 0x40, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8000}, 0x800, 0x1, 0x4, 0x0, 0x1, 0x7fffffff, 0x412}, r6, 0x9, 0xffffffffffffff9c, 0x2) 05:43:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 05:43:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 337.343929] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x5000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x3ffbffffffff, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0xa644, 0x6, 0x4, 0x3, 0x9, 0x6, 0x2, 0x1, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x9, 0x1ff}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000480)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 337.508211] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200a0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 05:43:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x80047210, &(0x7f0000000040)) ioctl$LOOP_CLR_FD(r0, 0x4c01) 05:43:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 338.155407] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000001000)) 05:43:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x20, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 05:43:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) [ 338.289934] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xe202000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x20, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 05:43:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 05:43:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x26c) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) readahead(r1, 0x6, 0x1e) tkill(r3, 0x401104000000016) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000039efd8)={0xffffffffffffffff, 0x0, 0x0, 0x33, &(0x7f00002c5000), &(0x7f00003a3fcd)=""/51}, 0x28) 05:43:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 339.018738] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x20, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 05:43:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7a00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x0, 0x100000000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000000)) futex(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0) 05:43:17 executing program 5 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 339.184012] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 339.250524] FAULT_INJECTION: forcing a failure. [ 339.250524] name failslab, interval 1, probability 0, space 0, times 0 [ 339.262593] CPU: 1 PID: 13348 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #44 [ 339.269893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.269899] Call Trace: [ 339.269920] dump_stack+0x1c4/0x2b4 [ 339.269942] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.285493] should_fail.cold.4+0xa/0x17 [ 339.285513] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.294743] ? perf_trace_lock+0x7a0/0x7a0 [ 339.294764] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.304074] ? __netlink_insert+0xddc/0x13b0 [ 339.304098] ? __netlink_dump_start+0x6f0/0x6f0 [ 339.318692] ? fs_reclaim_acquire+0x20/0x20 [ 339.323030] ? lock_downgrade+0x900/0x900 [ 339.327192] ? ___might_sleep+0x1ed/0x300 [ 339.331353] ? arch_local_save_flags+0x40/0x40 [ 339.335944] ? trace_hardirqs_on+0xbd/0x310 [ 339.340265] ? _raw_spin_unlock_bh+0x30/0x40 [ 339.344665] __should_failslab+0x124/0x180 [ 339.348882] should_failslab+0x9/0x14 [ 339.352664] kmem_cache_alloc_node+0x26e/0x730 [ 339.357252] ? __local_bh_enable_ip+0x160/0x260 [ 339.361913] ? _raw_spin_unlock_bh+0x30/0x40 [ 339.366303] __alloc_skb+0x119/0x770 [ 339.370018] ? skb_scrub_packet+0x490/0x490 [ 339.374322] ? netlink_insert+0x15a/0x3f0 [ 339.378453] ? __netlink_insert+0x13b0/0x13b0 [ 339.382944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.388473] ? netlink_autobind.isra.34+0x232/0x310 [ 339.393481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.399007] netlink_sendmsg+0xb29/0xfc0 [ 339.403053] ? netlink_unicast+0x760/0x760 [ 339.407282] ? smack_socket_sendmsg+0xb0/0x190 [ 339.411855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.417384] ? security_socket_sendmsg+0x94/0xc0 [ 339.422122] ? netlink_unicast+0x760/0x760 [ 339.426344] sock_sendmsg+0xd5/0x120 [ 339.430046] ___sys_sendmsg+0x7fd/0x930 [ 339.434197] ? copy_msghdr_from_user+0x580/0x580 [ 339.438934] ? lock_downgrade+0x900/0x900 [ 339.443067] ? proc_fail_nth_write+0x9e/0x210 [ 339.447550] ? __fget_light+0x2e9/0x430 [ 339.451506] ? fget_raw+0x20/0x20 [ 339.454945] ? kasan_check_write+0x14/0x20 [ 339.459162] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 339.464088] ? fsnotify+0xaae/0x12f0 [ 339.467819] ? wait_for_completion+0x8a0/0x8a0 [ 339.472383] ? lock_release+0x970/0x970 [ 339.476343] ? check_preemption_disabled+0x48/0x200 [ 339.481348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.486868] ? sockfd_lookup_light+0xc5/0x160 [ 339.491348] __sys_sendmsg+0x11d/0x280 [ 339.495219] ? __ia32_sys_shutdown+0x80/0x80 [ 339.499610] ? __sb_end_write+0xd9/0x110 [ 339.503657] ? fput+0x130/0x1a0 [ 339.506922] ? ksys_write+0x1ae/0x260 [ 339.510710] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 339.516143] __x64_sys_sendmsg+0x78/0xb0 [ 339.520191] do_syscall_64+0x1b9/0x820 [ 339.524062] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 339.529427] ? syscall_return_slowpath+0x5e0/0x5e0 [ 339.534345] ? trace_hardirqs_on_caller+0x310/0x310 [ 339.539345] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 339.544343] ? recalc_sigpending_tsk+0x180/0x180 [ 339.549083] ? kasan_check_write+0x14/0x20 [ 339.553308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.558140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.563310] RIP: 0033:0x457579 [ 339.566495] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.585385] RSP: 002b:00007fe9d9cadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.593075] RAX: ffffffffffffffda RBX: 00007fe9d9cadc90 RCX: 0000000000457579 [ 339.600334] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 339.607596] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 339.614846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9d9cae6d4 [ 339.622098] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:43:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200a4ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:17 executing program 1: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x240, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x1, 0x30}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x8}, &(0x7f0000000400)=0x8) 05:43:17 executing program 5 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x500}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090e0000000000e1000005000005000600000000000a0000000013256fb30b6850a854ffffff00000000000000000b0000000000000200010000000000000000040000d0f605000500000000000a00000000000000ffe7001f0002000000000000000000170000000000000000"], 0x70}}, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) sendmmsg(r1, &(0x7f0000000180), 0x40000000000ff01, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) [ 339.836769] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 339.864869] FAULT_INJECTION: forcing a failure. [ 339.864869] name failslab, interval 1, probability 0, space 0, times 0 [ 339.898754] CPU: 0 PID: 13361 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #44 [ 339.906077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.915439] Call Trace: [ 339.918050] dump_stack+0x1c4/0x2b4 [ 339.921696] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.926908] should_fail.cold.4+0xa/0x17 [ 339.930988] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.936110] ? save_stack+0xa9/0xd0 [ 339.939745] ? kasan_kmalloc+0xc7/0xe0 [ 339.943633] ? kasan_slab_alloc+0x12/0x20 [ 339.947780] ? kmem_cache_alloc_node+0x144/0x730 [ 339.952536] ? __alloc_skb+0x119/0x770 [ 339.956430] ? netlink_sendmsg+0xb29/0xfc0 [ 339.960668] ? sock_sendmsg+0xd5/0x120 [ 339.964556] ? ___sys_sendmsg+0x7fd/0x930 [ 339.968705] ? __x64_sys_sendmsg+0x78/0xb0 [ 339.972944] ? do_syscall_64+0x1b9/0x820 [ 339.977005] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.982375] ? fs_reclaim_acquire+0x20/0x20 [ 339.986715] ? lock_downgrade+0x900/0x900 [ 339.990868] ? ___might_sleep+0x1ed/0x300 [ 339.995018] ? arch_local_save_flags+0x40/0x40 [ 339.999600] ? lock_downgrade+0x900/0x900 [ 340.003756] __should_failslab+0x124/0x180 [ 340.007991] should_failslab+0x9/0x14 [ 340.011796] kmem_cache_alloc_node_trace+0x270/0x740 [ 340.016898] ? kasan_unpoison_shadow+0x35/0x50 [ 340.021479] ? kasan_kmalloc+0xc7/0xe0 [ 340.025374] __kmalloc_node_track_caller+0x33/0x70 [ 340.030316] __kmalloc_reserve.isra.39+0x41/0xe0 [ 340.035077] __alloc_skb+0x155/0x770 [ 340.038884] ? skb_scrub_packet+0x490/0x490 [ 340.043217] ? netlink_insert+0x15a/0x3f0 [ 340.047373] ? __netlink_insert+0x13b0/0x13b0 [ 340.051863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.057392] ? netlink_autobind.isra.34+0x232/0x310 [ 340.062409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.067934] netlink_sendmsg+0xb29/0xfc0 [ 340.071983] ? netlink_unicast+0x760/0x760 [ 340.076224] ? smack_socket_sendmsg+0xb0/0x190 [ 340.080793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.086325] ? security_socket_sendmsg+0x94/0xc0 [ 340.091064] ? netlink_unicast+0x760/0x760 [ 340.095281] sock_sendmsg+0xd5/0x120 [ 340.098982] ___sys_sendmsg+0x7fd/0x930 [ 340.102942] ? copy_msghdr_from_user+0x580/0x580 [ 340.107683] ? lock_downgrade+0x900/0x900 [ 340.111820] ? proc_fail_nth_write+0x9e/0x210 [ 340.116309] ? __fget_light+0x2e9/0x430 [ 340.120266] ? fget_raw+0x20/0x20 [ 340.123707] ? kasan_check_write+0x14/0x20 [ 340.127925] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 340.132836] ? fsnotify+0xaae/0x12f0 [ 340.136532] ? wait_for_completion+0x8a0/0x8a0 [ 340.141096] ? lock_release+0x970/0x970 [ 340.145053] ? check_preemption_disabled+0x48/0x200 [ 340.150058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.155575] ? sockfd_lookup_light+0xc5/0x160 [ 340.160052] __sys_sendmsg+0x11d/0x280 [ 340.163934] ? __ia32_sys_shutdown+0x80/0x80 [ 340.168346] ? __sb_end_write+0xd9/0x110 [ 340.172408] ? fput+0x130/0x1a0 [ 340.175678] ? ksys_write+0x1ae/0x260 [ 340.179471] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 340.184924] __x64_sys_sendmsg+0x78/0xb0 [ 340.188978] do_syscall_64+0x1b9/0x820 [ 340.192850] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 340.198198] ? syscall_return_slowpath+0x5e0/0x5e0 [ 340.203110] ? trace_hardirqs_on_caller+0x310/0x310 [ 340.208122] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 340.213124] ? recalc_sigpending_tsk+0x180/0x180 [ 340.217864] ? kasan_check_write+0x14/0x20 [ 340.222085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.226932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.232108] RIP: 0033:0x457579 05:43:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200008000a0ffffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xa00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 340.237130] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.256012] RSP: 002b:00007fe9d9cadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.263704] RAX: ffffffffffffffda RBX: 00007fe9d9cadc90 RCX: 0000000000457579 [ 340.270955] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 340.278207] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 340.285463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9d9cae6d4 [ 340.292720] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:43:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200f5ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x74}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:18 executing program 5 (fault-call:5 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 340.494400] FAULT_INJECTION: forcing a failure. [ 340.494400] name failslab, interval 1, probability 0, space 0, times 0 [ 340.517499] CPU: 1 PID: 13402 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #44 [ 340.524791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.534138] Call Trace: [ 340.536732] dump_stack+0x1c4/0x2b4 [ 340.540371] ? dump_stack_print_info.cold.2+0x52/0x52 [ 340.545566] should_fail.cold.4+0xa/0x17 [ 340.549616] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.554722] ? debug_smp_processor_id+0x1c/0x20 [ 340.559393] ? perf_trace_lock_acquire+0x15b/0x800 [ 340.564308] ? mark_held_locks+0x130/0x130 [ 340.568524] ? perf_trace_lock+0x7a0/0x7a0 [ 340.572743] ? smack_d_instantiate+0x136/0xea0 [ 340.577307] ? mark_held_locks+0x130/0x130 [ 340.581533] ? mark_held_locks+0x130/0x130 [ 340.585781] ? fs_reclaim_acquire+0x20/0x20 [ 340.590124] ? lock_downgrade+0x900/0x900 [ 340.594265] ? ___might_sleep+0x1ed/0x300 [ 340.598398] ? arch_local_save_flags+0x40/0x40 [ 340.602964] ? debug_smp_processor_id+0x1c/0x20 [ 340.607616] ? perf_trace_lock_acquire+0x15b/0x800 [ 340.612530] ? check_preemption_disabled+0x48/0x200 [ 340.617531] __should_failslab+0x124/0x180 [ 340.621788] should_failslab+0x9/0x14 [ 340.625588] kmem_cache_alloc_node+0x26e/0x730 [ 340.630260] __alloc_skb+0x119/0x770 [ 340.633972] ? skb_scrub_packet+0x490/0x490 [ 340.638283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:43:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) 05:43:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xe2020000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 340.643806] ? check_preemption_disabled+0x48/0x200 [ 340.648809] ? debug_smp_processor_id+0x1c/0x20 [ 340.653473] ? perf_trace_lock_acquire+0x15b/0x800 [ 340.658931] ? perf_trace_lock+0x7a0/0x7a0 [ 340.663163] ? team_notify_peers_work+0x410/0x410 [ 340.668004] __send_and_alloc_skb+0x83/0xe0 [ 340.672332] team_nl_send_options_get+0x1e9/0x1600 [ 340.672356] ? team_notify_peers_work+0x410/0x410 [ 340.672372] ? team_nl_team_get+0x112/0x1a0 [ 340.682131] ? check_preemption_disabled+0x48/0x200 [ 340.682152] ? team_port_change_check+0x140/0x140 [ 340.682172] ? ___ratelimit+0x36f/0x655 [ 340.700287] ? lock_downgrade+0x900/0x900 [ 340.704445] ? trace_hardirqs_on+0xbd/0x310 [ 340.708768] ? kasan_check_read+0x11/0x20 [ 340.712918] ? ___ratelimit+0x36f/0x655 [ 340.716902] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 340.722441] ? trace_hardirqs_on+0x310/0x310 [ 340.726856] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 340.731961] ? ___ratelimit+0xaa/0x655 [ 340.735867] ? idr_get_free+0xec0/0xec0 [ 340.739854] ? dev_get_by_index+0xf0/0x1c0 [ 340.744097] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 340.749294] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 340.754835] ? validate_nla+0x2d9/0x7b0 [ 340.758811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.764361] ? nla_parse+0x2f9/0x480 [ 340.768085] ? validate_nla+0x7b0/0x7b0 [ 340.772072] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 340.777271] team_nl_cmd_options_set+0x228/0x1370 [ 340.782131] ? team_options_unregister+0x2a0/0x2a0 [ 340.787077] ? perf_trace_lock+0x7a0/0x7a0 [ 340.791314] ? genl_rcv_msg+0x13a/0x168 [ 340.795320] ? debug_smp_processor_id+0x1c/0x20 [ 340.800002] ? mutex_trylock+0x2b0/0x2b0 [ 340.804054] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 340.809242] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 340.814252] ? validate_nla+0x2d9/0x7b0 [ 340.818210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.823728] ? nla_parse+0x2f9/0x480 [ 340.827428] ? __netlink_ns_capable+0x100/0x130 [ 340.832081] genl_family_rcv_msg+0x8a9/0x1140 [ 340.836579] ? genl_unregister_family+0x8a0/0x8a0 [ 340.841405] ? __radix_tree_insert+0x8f0/0x8f0 [ 340.845979] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 340.851763] ? lock_acquire+0x1ed/0x520 [ 340.855730] ? genl_rcv+0x19/0x40 [ 340.859191] genl_rcv_msg+0xc6/0x168 [ 340.862904] netlink_rcv_skb+0x172/0x440 [ 340.866950] ? genl_family_rcv_msg+0x1140/0x1140 [ 340.871709] ? netlink_ack+0xb80/0xb80 [ 340.875604] genl_rcv+0x28/0x40 [ 340.878883] netlink_unicast+0x5a5/0x760 [ 340.882935] ? netlink_attachskb+0x9a0/0x9a0 [ 340.887346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.892900] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 340.897933] netlink_sendmsg+0xa18/0xfc0 [ 340.901982] ? netlink_unicast+0x760/0x760 [ 340.906211] ? smack_socket_sendmsg+0xb0/0x190 [ 340.910785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.916310] ? security_socket_sendmsg+0x94/0xc0 [ 340.921057] ? netlink_unicast+0x760/0x760 [ 340.925280] sock_sendmsg+0xd5/0x120 [ 340.928975] ___sys_sendmsg+0x7fd/0x930 [ 340.932935] ? copy_msghdr_from_user+0x580/0x580 [ 340.937690] ? lock_downgrade+0x900/0x900 [ 340.941823] ? proc_fail_nth_write+0x9e/0x210 [ 340.946301] ? __fget_light+0x2e9/0x430 [ 340.950268] ? fget_raw+0x20/0x20 [ 340.953720] ? kasan_check_write+0x14/0x20 [ 340.957946] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 340.962863] ? fsnotify+0xaae/0x12f0 [ 340.966559] ? wait_for_completion+0x8a0/0x8a0 [ 340.971124] ? lock_release+0x970/0x970 [ 340.975086] ? check_preemption_disabled+0x48/0x200 [ 340.980102] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.985633] ? sockfd_lookup_light+0xc5/0x160 [ 340.990107] __sys_sendmsg+0x11d/0x280 [ 340.993980] ? __ia32_sys_shutdown+0x80/0x80 [ 340.998371] ? __sb_end_write+0xd9/0x110 [ 341.002424] ? fput+0x130/0x1a0 [ 341.005685] ? ksys_write+0x1ae/0x260 [ 341.009482] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 341.014930] __x64_sys_sendmsg+0x78/0xb0 [ 341.018977] do_syscall_64+0x1b9/0x820 [ 341.022850] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 341.028206] ? syscall_return_slowpath+0x5e0/0x5e0 [ 341.033117] ? trace_hardirqs_on_caller+0x310/0x310 [ 341.038114] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 341.043125] ? recalc_sigpending_tsk+0x180/0x180 [ 341.047873] ? kasan_check_write+0x14/0x20 [ 341.052100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.056930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.062108] RIP: 0033:0x457579 [ 341.065318] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.084224] RSP: 002b:00007fe9d9cadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:43:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 341.091934] RAX: ffffffffffffffda RBX: 00007fe9d9cadc90 RCX: 0000000000457579 [ 341.099184] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 341.106434] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 341.113687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9d9cae6d4 [ 341.120938] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:43:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x20000000000002af, 0x7ffffffff000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @loopback}], 0x30) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x8, 0x4) 05:43:19 executing program 5 (fault-call:5 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200008000a000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x8000a0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 341.240578] FAULT_INJECTION: forcing a failure. [ 341.240578] name failslab, interval 1, probability 0, space 0, times 0 [ 341.278810] CPU: 0 PID: 13434 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #44 [ 341.286115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.286121] Call Trace: [ 341.286145] dump_stack+0x1c4/0x2b4 [ 341.286165] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.286189] should_fail.cold.4+0xa/0x17 [ 341.286208] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.286233] ? save_stack+0xa9/0xd0 [ 341.286246] ? kasan_kmalloc+0xc7/0xe0 [ 341.286257] ? kasan_slab_alloc+0x12/0x20 [ 341.286272] ? kmem_cache_alloc_node+0x144/0x730 [ 341.286293] ? __alloc_skb+0x119/0x770 [ 341.286313] ? __send_and_alloc_skb+0x83/0xe0 05:43:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 341.298241] ? team_nl_send_options_get+0x1e9/0x1600 [ 341.298259] ? team_nl_cmd_options_set+0x228/0x1370 [ 341.350979] ? genl_rcv_msg+0xc6/0x168 [ 341.354869] ? netlink_rcv_skb+0x172/0x440 [ 341.354883] ? genl_rcv+0x28/0x40 [ 341.354896] ? netlink_sendmsg+0xa18/0xfc0 [ 341.354915] ? fs_reclaim_acquire+0x20/0x20 [ 341.362582] ? lock_downgrade+0x900/0x900 [ 341.362601] ? ___might_sleep+0x1ed/0x300 [ 341.362619] ? arch_local_save_flags+0x40/0x40 [ 341.371143] ? lock_downgrade+0x900/0x900 [ 341.371165] __should_failslab+0x124/0x180 [ 341.371181] should_failslab+0x9/0x14 [ 341.396144] kmem_cache_alloc_node_trace+0x270/0x740 [ 341.401242] ? kasan_unpoison_shadow+0x35/0x50 [ 341.405808] ? kasan_kmalloc+0xc7/0xe0 [ 341.409691] __kmalloc_node_track_caller+0x33/0x70 [ 341.414617] __kmalloc_reserve.isra.39+0x41/0xe0 [ 341.419359] __alloc_skb+0x155/0x770 [ 341.423058] ? skb_scrub_packet+0x490/0x490 [ 341.427382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.432908] ? check_preemption_disabled+0x48/0x200 [ 341.437915] ? debug_smp_processor_id+0x1c/0x20 [ 341.442574] ? perf_trace_lock_acquire+0x15b/0x800 [ 341.447503] ? perf_trace_lock+0x7a0/0x7a0 [ 341.451725] ? team_notify_peers_work+0x410/0x410 [ 341.456553] __send_and_alloc_skb+0x83/0xe0 [ 341.460863] team_nl_send_options_get+0x1e9/0x1600 [ 341.465775] ? team_notify_peers_work+0x410/0x410 [ 341.470611] ? team_nl_team_get+0x112/0x1a0 [ 341.474927] ? check_preemption_disabled+0x48/0x200 [ 341.479927] ? team_port_change_check+0x140/0x140 [ 341.484758] ? ___ratelimit+0x36f/0x655 [ 341.488719] ? lock_downgrade+0x900/0x900 [ 341.492857] ? trace_hardirqs_on+0xbd/0x310 [ 341.497160] ? kasan_check_read+0x11/0x20 [ 341.501297] ? ___ratelimit+0x36f/0x655 [ 341.505258] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 341.510697] ? trace_hardirqs_on+0x310/0x310 [ 341.515093] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 341.520177] ? ___ratelimit+0xaa/0x655 [ 341.524055] ? idr_get_free+0xec0/0xec0 [ 341.528025] ? dev_get_by_index+0xf0/0x1c0 [ 341.532244] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 341.537427] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 341.542948] ? validate_nla+0x2d9/0x7b0 [ 341.546910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.552517] ? nla_parse+0x2f9/0x480 [ 341.556213] ? validate_nla+0x7b0/0x7b0 [ 341.560173] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 341.565352] team_nl_cmd_options_set+0x228/0x1370 [ 341.570183] ? team_options_unregister+0x2a0/0x2a0 [ 341.575101] ? perf_trace_lock+0x7a0/0x7a0 [ 341.579330] ? genl_rcv_msg+0x13a/0x168 [ 341.583292] ? debug_smp_processor_id+0x1c/0x20 [ 341.587949] ? mutex_trylock+0x2b0/0x2b0 [ 341.591993] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 341.597182] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 341.602179] ? validate_nla+0x2d9/0x7b0 [ 341.606141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.611661] ? nla_parse+0x2f9/0x480 [ 341.615374] ? __netlink_ns_capable+0x100/0x130 [ 341.620047] genl_family_rcv_msg+0x8a9/0x1140 [ 341.624536] ? genl_unregister_family+0x8a0/0x8a0 [ 341.629367] ? __radix_tree_insert+0x8f0/0x8f0 [ 341.633938] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 341.639743] ? lock_acquire+0x1ed/0x520 [ 341.643699] ? genl_rcv+0x19/0x40 [ 341.647139] genl_rcv_msg+0xc6/0x168 [ 341.650866] netlink_rcv_skb+0x172/0x440 [ 341.654917] ? genl_family_rcv_msg+0x1140/0x1140 [ 341.659665] ? netlink_ack+0xb80/0xb80 [ 341.663550] genl_rcv+0x28/0x40 [ 341.666811] netlink_unicast+0x5a5/0x760 [ 341.670869] ? netlink_attachskb+0x9a0/0x9a0 [ 341.675265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.680781] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 341.685780] netlink_sendmsg+0xa18/0xfc0 [ 341.689830] ? netlink_unicast+0x760/0x760 [ 341.694047] ? smack_socket_sendmsg+0xb0/0x190 [ 341.698611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.704132] ? security_socket_sendmsg+0x94/0xc0 [ 341.708867] ? netlink_unicast+0x760/0x760 [ 341.713082] sock_sendmsg+0xd5/0x120 [ 341.716798] ___sys_sendmsg+0x7fd/0x930 [ 341.720780] ? copy_msghdr_from_user+0x580/0x580 [ 341.725534] ? lock_downgrade+0x900/0x900 [ 341.729681] ? proc_fail_nth_write+0x9e/0x210 [ 341.734161] ? __fget_light+0x2e9/0x430 [ 341.738133] ? fget_raw+0x20/0x20 [ 341.741571] ? kasan_check_write+0x14/0x20 [ 341.745789] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 341.750715] ? fsnotify+0xaae/0x12f0 [ 341.754412] ? wait_for_completion+0x8a0/0x8a0 [ 341.758992] ? lock_release+0x970/0x970 [ 341.762961] ? check_preemption_disabled+0x48/0x200 [ 341.767991] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.773509] ? sockfd_lookup_light+0xc5/0x160 [ 341.777990] __sys_sendmsg+0x11d/0x280 [ 341.781859] ? __ia32_sys_shutdown+0x80/0x80 [ 341.786256] ? __sb_end_write+0xd9/0x110 [ 341.790303] ? fput+0x130/0x1a0 [ 341.793564] ? ksys_write+0x1ae/0x260 [ 341.797351] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 341.802790] __x64_sys_sendmsg+0x78/0xb0 [ 341.806835] do_syscall_64+0x1b9/0x820 [ 341.810706] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 341.816053] ? syscall_return_slowpath+0x5e0/0x5e0 [ 341.820980] ? trace_hardirqs_on_caller+0x310/0x310 [ 341.825980] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 341.830977] ? recalc_sigpending_tsk+0x180/0x180 [ 341.835721] ? kasan_check_write+0x14/0x20 [ 341.839948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.844772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.849941] RIP: 0033:0x457579 [ 341.853117] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.872008] RSP: 002b:00007fe9d9cadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.879710] RAX: ffffffffffffffda RBX: 00007fe9d9cadc90 RCX: 0000000000457579 05:43:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x1f00) 05:43:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x1, 0x1, 0x10000}) [ 341.886975] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 341.894241] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 341.901503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9d9cae6d4 [ 341.908756] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:43:20 executing program 5 (fault-call:5 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4c000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:20 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x4, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cac}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) [ 342.017458] validate_nla: 7 callbacks suppressed [ 342.017466] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 342.072044] FAULT_INJECTION: forcing a failure. [ 342.072044] name failslab, interval 1, probability 0, space 0, times 0 [ 342.097358] 9pnet: Insufficient options for proto=fd [ 342.100051] CPU: 0 PID: 13463 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #44 [ 342.104109] 9pnet: Insufficient options for proto=fd 05:43:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 342.109752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.109758] Call Trace: [ 342.109782] dump_stack+0x1c4/0x2b4 [ 342.109802] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.109820] ? debug_smp_processor_id+0x1c/0x20 [ 342.109833] ? perf_trace_lock_acquire+0x15b/0x800 [ 342.109847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.109864] should_fail.cold.4+0xa/0x17 [ 342.109880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.109897] ? perf_trace_lock+0x7a0/0x7a0 [ 342.109916] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 342.109929] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 342.109964] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 342.135792] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 342.135813] ? is_bpf_text_address+0xac/0x170 [ 342.135829] ? lock_downgrade+0x900/0x900 [ 342.135846] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 342.135865] __should_failslab+0x124/0x180 [ 342.145434] should_failslab+0x9/0x14 [ 342.192405] kmem_cache_alloc_node_trace+0x5a/0x740 [ 342.192448] __kmalloc_node_track_caller+0x33/0x70 [ 342.211254] __kmalloc_reserve.isra.39+0x41/0xe0 [ 342.211275] pskb_expand_head+0x230/0x10f0 [ 342.211299] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 342.229655] ? __alloc_skb+0x155/0x770 [ 342.233551] ? __send_and_alloc_skb+0x83/0xe0 [ 342.238054] ? team_nl_send_options_get+0x1e9/0x1600 [ 342.243156] ? team_nl_cmd_options_set+0x228/0x1370 [ 342.248166] ? genl_family_rcv_msg+0x8a9/0x1140 [ 342.252845] ? genl_rcv_msg+0xc6/0x168 [ 342.256717] ? netlink_rcv_skb+0x172/0x440 [ 342.261024] ? genl_rcv+0x28/0x40 [ 342.264469] ? netlink_unicast+0x5a5/0x760 [ 342.268696] ? sock_sendmsg+0xd5/0x120 [ 342.272565] ? ___sys_sendmsg+0x7fd/0x930 [ 342.276704] ? __sys_sendmsg+0x11d/0x280 [ 342.280846] ? __x64_sys_sendmsg+0x78/0xb0 [ 342.285061] ? do_syscall_64+0x1b9/0x820 [ 342.289120] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.294475] ? lock_downgrade+0x900/0x900 [ 342.298624] ? ___might_sleep+0x1ed/0x300 [ 342.302760] ? trace_hardirqs_on+0xbd/0x310 [ 342.307060] ? lock_downgrade+0x900/0x900 [ 342.311190] ? __kmalloc_node_track_caller+0x33/0x70 [ 342.316291] netlink_trim+0x2ea/0x380 [ 342.320078] ? netlink_skb_destructor+0x210/0x210 [ 342.324901] ? kasan_unpoison_shadow+0x35/0x50 [ 342.329469] netlink_broadcast_filtered+0xf4/0x1680 [ 342.334469] ? __kmalloc_node_track_caller+0x47/0x70 [ 342.339556] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.345091] ? __netlink_sendskb+0xd0/0xd0 [ 342.349316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.354849] ? __alloc_skb+0x4c6/0x770 [ 342.358732] ? skb_scrub_packet+0x490/0x490 [ 342.363039] ? do_raw_spin_lock+0xc1/0x200 [ 342.367273] ? llist_add_batch+0x106/0x170 [ 342.371499] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 342.376494] ? skb_put+0x17b/0x1e0 [ 342.380025] ? memset+0x31/0x40 [ 342.383311] netlink_broadcast+0x3a/0x50 [ 342.387373] team_nl_send_multicast+0xec/0x150 [ 342.391939] team_nl_send_options_get+0xe10/0x1600 [ 342.396850] ? team_notify_peers_work+0x410/0x410 [ 342.401684] ? team_port_change_check+0x140/0x140 [ 342.406511] ? irq_work_claim+0xac/0xd0 [ 342.410468] ? ___ratelimit+0x36f/0x655 [ 342.414425] ? lock_downgrade+0x900/0x900 [ 342.418556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.424094] ? defer_console_output+0x8c/0xb0 [ 342.428594] ? trace_hardirqs_on+0xbd/0x310 [ 342.432922] ? kasan_check_read+0x11/0x20 [ 342.437073] ? ___ratelimit+0x36f/0x655 [ 342.441053] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 342.446515] ? devkmsg_write.cold.35+0xd/0xd [ 342.450930] ? vprintk_default+0x28/0x30 [ 342.455014] ? vprintk_func+0x85/0x181 [ 342.458907] ? printk+0xa7/0xcf [ 342.462199] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 342.466978] ? dev_get_by_index+0xf0/0x1c0 [ 342.471218] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 342.476418] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 342.481948] ? validate_nla+0x2d9/0x7b0 [ 342.485914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.491452] ? nla_parse+0x2f9/0x480 [ 342.495159] ? validate_nla+0x7b0/0x7b0 [ 342.499134] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 342.504320] team_nl_cmd_options_set+0x228/0x1370 [ 342.509168] ? team_options_unregister+0x2a0/0x2a0 [ 342.514099] ? perf_trace_lock+0x7a0/0x7a0 [ 342.518333] ? genl_rcv_msg+0x13a/0x168 [ 342.522307] ? debug_smp_processor_id+0x1c/0x20 [ 342.526968] ? mutex_trylock+0x2b0/0x2b0 [ 342.531012] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 342.536192] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 342.541200] ? validate_nla+0x2d9/0x7b0 [ 342.545183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.550720] ? nla_parse+0x2f9/0x480 [ 342.554435] ? __netlink_ns_capable+0x100/0x130 [ 342.559087] genl_family_rcv_msg+0x8a9/0x1140 [ 342.563568] ? genl_unregister_family+0x8a0/0x8a0 [ 342.568410] ? __radix_tree_insert+0x8f0/0x8f0 [ 342.572992] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 342.578783] ? lock_acquire+0x1ed/0x520 [ 342.582760] ? genl_rcv+0x19/0x40 [ 342.586227] genl_rcv_msg+0xc6/0x168 [ 342.589946] netlink_rcv_skb+0x172/0x440 [ 342.593996] ? genl_family_rcv_msg+0x1140/0x1140 [ 342.598944] ? netlink_ack+0xb80/0xb80 [ 342.602823] genl_rcv+0x28/0x40 [ 342.606084] netlink_unicast+0x5a5/0x760 [ 342.610134] ? netlink_attachskb+0x9a0/0x9a0 [ 342.614524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.620046] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 342.625049] netlink_sendmsg+0xa18/0xfc0 [ 342.629095] ? netlink_unicast+0x760/0x760 [ 342.633316] ? smack_socket_sendmsg+0xb0/0x190 [ 342.637881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.643404] ? security_socket_sendmsg+0x94/0xc0 [ 342.648153] ? netlink_unicast+0x760/0x760 [ 342.652390] sock_sendmsg+0xd5/0x120 [ 342.656088] ___sys_sendmsg+0x7fd/0x930 [ 342.660058] ? copy_msghdr_from_user+0x580/0x580 [ 342.664799] ? lock_downgrade+0x900/0x900 [ 342.668943] ? proc_fail_nth_write+0x9e/0x210 [ 342.673435] ? __fget_light+0x2e9/0x430 [ 342.677390] ? fget_raw+0x20/0x20 [ 342.680826] ? kasan_check_write+0x14/0x20 [ 342.685047] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 342.689956] ? fsnotify+0xaae/0x12f0 [ 342.693654] ? wait_for_completion+0x8a0/0x8a0 [ 342.698234] ? lock_release+0x970/0x970 [ 342.702196] ? check_preemption_disabled+0x48/0x200 [ 342.707209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.712727] ? sockfd_lookup_light+0xc5/0x160 [ 342.717230] __sys_sendmsg+0x11d/0x280 [ 342.721115] ? __ia32_sys_shutdown+0x80/0x80 [ 342.725504] ? __sb_end_write+0xd9/0x110 [ 342.729561] ? fput+0x130/0x1a0 [ 342.732848] ? ksys_write+0x1ae/0x260 [ 342.736647] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 342.742208] __x64_sys_sendmsg+0x78/0xb0 [ 342.746255] do_syscall_64+0x1b9/0x820 [ 342.750126] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 342.755471] ? syscall_return_slowpath+0x5e0/0x5e0 [ 342.760399] ? trace_hardirqs_on_caller+0x310/0x310 [ 342.765422] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 342.770437] ? recalc_sigpending_tsk+0x180/0x180 [ 342.775213] ? kasan_check_write+0x14/0x20 [ 342.779436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.784406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.789597] RIP: 0033:0x457579 [ 342.792793] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.811691] RSP: 002b:00007fe9d9cadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:43:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0x1, 0x10000}) 05:43:21 executing program 1: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0xe) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x40) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) [ 342.819405] RAX: ffffffffffffffda RBX: 00007fe9d9cadc90 RCX: 0000000000457579 [ 342.826666] RDX: 0000000000000000 RSI: 0000000020018140 RDI: 0000000000000005 [ 342.833917] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 342.841167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9d9cae6d4 [ 342.848430] R13: 00000000004c37dc R14: 00000000004d55b0 R15: 0000000000000006 05:43:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x13ffffffffff, 0x204203) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000180)='/dev/audio#\x00', 0xc, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) ptrace$cont(0x20, r0, 0x0, 0x3) writev(0xffffffffffffffff, &(0x7f0000000a80), 0x0) capset(&(0x7f0000000100), &(0x7f0000000140)) 05:43:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 342.977981] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:21 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400300, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="dede390caaa6d48d6bd50c68061b1db09cbf0766d198e8b930dd31419fc75934c30ec296663b280d78bfa4ace58877b1c51f5bd5e854bbc99edda8d13bcdd56e0b41dc3e2a7ce7bf200cbec40d8b6269a856bd56fa") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000600210021000000080000000000ac1414aa000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005c00110000000000000000000000000000000001ac1414aa000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000a00000000000000000000000000"], 0xac}}, 0x0) 05:43:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xa, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 343.038639] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xa00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 343.150756] 9pnet: Insufficient options for proto=fd [ 343.158074] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0xa, 0x1}, 0x14) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) 05:43:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x3, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0x1, 0x10000}) 05:43:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x600000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 343.731353] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 343.745759] 9pnet: Insufficient options for proto=fd 05:43:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000f5ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x5, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000010307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) 05:43:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x68000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 343.859195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 343.889174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 05:43:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xb, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 343.910475] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000ffffffffa0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 344.032645] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x10000}) 05:43:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:22 executing program 1: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$FICLONE(r0, 0x40049409, r2) r3 = socket$inet6_sctp(0xa, 0x200000005, 0x84) fcntl$setlease(r2, 0x400, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) close(r3) close(r2) 05:43:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6000000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x6, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x7, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 344.583691] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x48000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 344.682194] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7a000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x8, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 344.786781] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d00000000"], 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x10000}) 05:43:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x149) write$P9_RREADDIR(r2, &(0x7f0000000200)={0x49, 0x29, 0x1, {0xffffffffffff4efb, [{{0x8, 0x0, 0x8}, 0x7, 0x1, 0x7, './file0'}, {{0x0, 0x0, 0x6}, 0xfff, 0x3, 0x7, './file0'}]}}, 0x49) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x80000000}, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) r3 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x28f, 0x101000) ioctl$KDSKBLED(r4, 0x4b65, 0xf8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r6, &(0x7f00000002c0)=0xd00, 0x1000007ffff000) 05:43:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x11, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x854, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0xc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xecec) 05:43:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x5}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x2f, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x4, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x10000}) 05:43:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) 05:43:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x9, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x400300}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 346.325456] program syz-executor1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.349462] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 05:43:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x1000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xd, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = getpgid(0xffffffffffffffff) prctl$setptracer(0x59616d61, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045300, &(0x7f0000000340)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000013) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4081, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="91000000de9693b3e49ca2f7759a99c2b5673bc1400099235a6c773fe2046b9c37e5080d54d1e2a90a65e7085c0000000029198bd09afcfbf088ba696a520e0d661a31f98b41010618ecfd37b810ef2a3ea4c156faa4dd8183ea74ce475898059e90eeffa7e9244da01b5bedf290b974111fc7acdf980ee07fdb6f7eab12810ef29911c2e0cf68ac239c0109df51e2a1d0"], &(0x7f0000000140)=0x99) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000240)={r4, 0x158, 0x20, 0x7f, 0x100000001}, &(0x7f0000000280)=0x18) [ 346.376884] program syz-executor1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.388130] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 05:43:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10000}) 05:43:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x12, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 347.163279] validate_nla: 8 callbacks suppressed [ 347.163286] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xc, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x8000a0ffffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000008000a0ffffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 347.273319] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:25 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pppoe, &(0x7f0000000140)=0x80, 0x80800) accept4$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x800) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000600900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) 05:43:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0xe, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 347.402956] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 347.449487] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 347.467816] MINIX-fs: bad superblock or unable to read bitmaps [ 347.522935] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 347.532999] MINIX-fs: bad superblock or unable to read bitmaps 05:43:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000}) 05:43:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x51, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x60000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:26 executing program 1: pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000006c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x30, 0x9, r4, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="006a381784e045957c9e17008a94889908821c6c8b45d57f036ef780b7c70425889eb1a3"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) r7 = dup2(r5, r2) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000400)={r6, @loopback, @rand_addr=0x1cb}, 0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r7, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @local, 0x2d3}, 0x1c) fcntl$notify(r7, 0x402, 0x20000000004) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x2ec) exit(0x0) r9 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x200000, 0x0) close(r9) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @local, 0x1}}, 0x9, 0x7, 0x8, 0x5, 0x4}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000140)={r11, 0x4693af02}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) sendto$inet(r2, &(0x7f0000fa0fff), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r12, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) 05:43:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 348.046636] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000a0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x20018110, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x74000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 348.211225] 9pnet: Insufficient options for proto=fd 05:43:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 348.305130] 9pnet: Insufficient options for proto=fd [ 348.563227] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 05:43:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x2, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:27 executing program 1: pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000006c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x30, 0x9, r4, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="006a381784e045957c9e17008a94889908821c6c8b45d57f036ef780b7c70425889eb1a3"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) r7 = dup2(r5, r2) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000400)={r6, @loopback, @rand_addr=0x1cb}, 0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r7, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @local, 0x2d3}, 0x1c) fcntl$notify(r7, 0x402, 0x20000000004) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x2ec) exit(0x0) r9 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x200000, 0x0) close(r9) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @local, 0x1}}, 0x9, 0x7, 0x8, 0x5, 0x4}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000140)={r11, 0x4693af02}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) sendto$inet(r2, &(0x7f0000fa0fff), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r12, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) 05:43:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000a4ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 348.935182] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 05:43:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000068}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x4800000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000008000a000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 349.079390] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 349.097800] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 349.131943] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x80000000000003, @local}}, 0x1e) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x30) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) 05:43:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x100000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000500}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:27 executing program 2 (fault-call:7 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:27 executing program 3 (fault-call:6 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 349.788770] FAULT_INJECTION: forcing a failure. [ 349.788770] name failslab, interval 1, probability 0, space 0, times 0 [ 349.789621] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 349.817970] CPU: 0 PID: 13911 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 349.825382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.834746] Call Trace: [ 349.837345] dump_stack+0x1c4/0x2b4 [ 349.840984] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.846198] should_fail.cold.4+0xa/0x17 [ 349.850276] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.855387] ? zap_class+0x640/0x640 [ 349.859118] ? __f_unlock_pos+0x19/0x20 [ 349.863102] ? lock_downgrade+0x900/0x900 [ 349.867260] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.872804] ? proc_fail_nth_write+0x9e/0x210 [ 349.877317] ? kasan_check_read+0x11/0x20 [ 349.881491] ? zap_class+0x640/0x640 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 349.885215] ? fs_reclaim_acquire+0x20/0x20 [ 349.889546] ? lock_downgrade+0x900/0x900 [ 349.893694] ? ___might_sleep+0x1ed/0x300 [ 349.897850] ? arch_local_save_flags+0x40/0x40 [ 349.902437] ? fsnotify_first_mark+0x350/0x350 [ 349.907046] ? fsnotify+0x12f0/0x12f0 [ 349.910860] __should_failslab+0x124/0x180 [ 349.915101] should_failslab+0x9/0x14 [ 349.918911] __kmalloc_track_caller+0x2d0/0x750 [ 349.923644] ? strncpy_from_user+0x510/0x510 [ 349.928051] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.933604] ? strndup_user+0x77/0xd0 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x3000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 349.937418] memdup_user+0x2c/0xa0 [ 349.940961] strndup_user+0x77/0xd0 [ 349.944639] ksys_mount+0x3c/0x140 [ 349.948177] __x64_sys_mount+0xbe/0x150 [ 349.952152] do_syscall_64+0x1b9/0x820 [ 349.956045] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 349.961418] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.966362] ? trace_hardirqs_on_caller+0x310/0x310 [ 349.971386] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 349.976409] ? recalc_sigpending_tsk+0x180/0x180 [ 349.981171] ? kasan_check_write+0x14/0x20 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 349.985428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.990378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.995574] RIP: 0033:0x457579 [ 349.998774] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.017679] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.025399] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 350.032664] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 350.039936] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 350.047206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 350.054468] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x356) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000040)={0x100000000, {{0x2, 0x4e22, @rand_addr=0x80000001}}, {{0x2, 0x0, @rand_addr=0x7}}}, 0x108) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x400, 0x4) eventfd2(0x96ad, 0x800) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8) 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x700000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000600}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:28 executing program 3 (fault-call:6 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20004800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf20000000000000070000f19e97d3f23fed0008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d430100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) 05:43:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xf9a, 0x200000) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @local}, {0x1, @random="cd53d56d8ffd"}, 0xa, {0x2, 0x4e21, @remote}, 'syz_tun\x00'}) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYBLOB=';'], 0x1) recvmmsg(r2, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x400000000000215, 0x0, &(0x7f0000002240)={0x77359400}) 05:43:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20004c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 350.671382] FAULT_INJECTION: forcing a failure. [ 350.671382] name failslab, interval 1, probability 0, space 0, times 0 [ 350.729718] CPU: 1 PID: 13974 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 350.737039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.746398] Call Trace: [ 350.749011] dump_stack+0x1c4/0x2b4 [ 350.752664] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.757882] should_fail.cold.4+0xa/0x17 [ 350.761964] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.767084] ? perf_trace_lock+0x7a0/0x7a0 [ 350.771327] ? kasan_kmalloc+0xc7/0xe0 [ 350.775213] ? __kmalloc_track_caller+0x14a/0x750 [ 350.780048] ? memdup_user+0x2c/0xa0 [ 350.780059] ? strndup_user+0x77/0xd0 [ 350.780071] ? ksys_mount+0x3c/0x140 [ 350.780086] ? __x64_sys_mount+0xbe/0x150 [ 350.795407] ? do_syscall_64+0x1b9/0x820 [ 350.795424] ? proc_fail_nth_write+0x9e/0x210 [ 350.795448] ? kasan_check_read+0x11/0x20 [ 350.808127] ? fs_reclaim_acquire+0x20/0x20 [ 350.808143] ? lock_downgrade+0x900/0x900 [ 350.808162] ? ___might_sleep+0x1ed/0x300 [ 350.820752] ? arch_local_save_flags+0x40/0x40 [ 350.825354] ? lock_release+0x970/0x970 [ 350.829334] ? arch_local_save_flags+0x40/0x40 [ 350.833921] ? usercopy_warn+0x110/0x110 [ 350.837996] __should_failslab+0x124/0x180 [ 350.842233] should_failslab+0x9/0x14 [ 350.842251] kmem_cache_alloc_trace+0x2d7/0x750 [ 350.842271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.850702] ? _copy_from_user+0xdf/0x150 [ 350.850733] copy_mount_options+0x5f/0x380 [ 350.850751] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.870144] ksys_mount+0xd0/0x140 [ 350.873697] __x64_sys_mount+0xbe/0x150 [ 350.877682] do_syscall_64+0x1b9/0x820 [ 350.881586] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 350.886979] ? syscall_return_slowpath+0x5e0/0x5e0 [ 350.891921] ? trace_hardirqs_on_caller+0x310/0x310 [ 350.896948] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 350.901983] ? recalc_sigpending_tsk+0x180/0x180 [ 350.906743] ? kasan_check_write+0x14/0x20 [ 350.910994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.915863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.921057] RIP: 0033:0x457579 05:43:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000003}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x6000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000048}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 350.924257] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.943153] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.943170] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 350.943198] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 350.943207] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 350.943216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 350.943224] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:29 executing program 3 (fault-call:6 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x1f000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x7400000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x9, 0x3}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000440)=ANY=[]}, 0x0) 05:43:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000007}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 351.485176] FAULT_INJECTION: forcing a failure. [ 351.485176] name failslab, interval 1, probability 0, space 0, times 0 05:43:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xa0008000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 351.556473] CPU: 0 PID: 14024 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 351.563903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.573271] Call Trace: [ 351.575877] dump_stack+0x1c4/0x2b4 [ 351.579520] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.584734] should_fail.cold.4+0xa/0x17 [ 351.588816] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.593925] ? lock_downgrade+0x900/0x900 [ 351.593949] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 351.603863] ? kasan_check_read+0x11/0x20 [ 351.608018] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 351.613303] ? rcu_bh_qs+0xc0/0xc0 [ 351.616874] ? fs_reclaim_acquire+0x20/0x20 [ 351.621200] ? lock_downgrade+0x900/0x900 [ 351.625358] ? ___might_sleep+0x1ed/0x300 [ 351.629515] ? arch_local_save_flags+0x40/0x40 [ 351.634105] __should_failslab+0x124/0x180 [ 351.638372] should_failslab+0x9/0x14 [ 351.642178] kmem_cache_alloc+0x2be/0x730 [ 351.646339] ? kasan_check_read+0x11/0x20 [ 351.650771] getname_flags+0xd0/0x5a0 [ 351.654587] user_path_at_empty+0x2d/0x50 [ 351.658742] do_mount+0x177/0x31f0 [ 351.658761] ? ___might_sleep+0x1ed/0x300 [ 351.658777] ? copy_mount_string+0x40/0x40 [ 351.666431] ? copy_mount_options+0x5f/0x380 [ 351.666447] ? kasan_unpoison_shadow+0x35/0x50 [ 351.666460] ? kasan_kmalloc+0xc7/0xe0 [ 351.666480] ? kmem_cache_alloc_trace+0x31f/0x750 [ 351.688389] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.693940] ? _copy_from_user+0xdf/0x150 [ 351.698100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.703642] ? copy_mount_options+0x288/0x380 [ 351.708147] ksys_mount+0x12d/0x140 [ 351.711788] __x64_sys_mount+0xbe/0x150 [ 351.715771] do_syscall_64+0x1b9/0x820 [ 351.719664] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 351.719682] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.719701] ? trace_hardirqs_on_caller+0x310/0x310 [ 351.729958] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 351.729972] ? recalc_sigpending_tsk+0x180/0x180 [ 351.729985] ? kasan_check_write+0x14/0x20 [ 351.730002] ? trace_hardirqs_off_thunk+0x1a/0x1c 05:43:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20006800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 351.730022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.758981] RIP: 0033:0x457579 [ 351.762178] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.781081] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.788796] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 351.796064] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 351.803346] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 351.810619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 351.817890] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x80045440, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x3f00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20007400}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:30 executing program 3 (fault-call:6 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:30 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0xffffffffffffff6d) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000500cf", 0x1f) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4602000801060000000000000002000600810000001100000000000000400000000000000024010000000000008d9f000005003800010003000180090005000000040000000600000000000000020000000000000005000000000000000000000000000000fbffffffffffffff00000000010000001501218b9b16bdd44f0b3ee1e5719f7aca8e1df0f9d35c57d7c1f1fc44ce16ccd408b340e9ecf762517885ce47d137a5b3711b5c425f0ba9845675e2ce25a8693ec6ad08549e9f2aa32a1f0eb5495a609f787ef61a4bced6d744f2937be43475a86735b1ea33dd250d42fc56c5d9e14ec1a1b279933365b29fc8cc158c6d8b0f675d0ecf017e949e7823c98ee577693be6b3cb250d2bac0e15d2c396b7f6971729904bbf677e0000000000000000000000000000000000000000000000000000000000000000000000000000000000a19800000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac5c80fb14e9288014f3a8634ffa816bd7368b370b347a892a3ff5fd8dc642e38abc6a2cff524453eb84e43531821bbc2ceaf4066d716f09582e9ad5a2ca7f6a288f254341546b9b5920af16aee2ab95b49721ab2ae47abdd6937aa22d7523b66dc0db26581423a61033e2eb687b9da6cf010a881bce38db4e2b3c85"], 0x31e) [ 352.386779] validate_nla: 20 callbacks suppressed [ 352.386787] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 352.408387] FAULT_INJECTION: forcing a failure. [ 352.408387] name failslab, interval 1, probability 0, space 0, times 0 [ 352.425886] CPU: 0 PID: 14070 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 352.433629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.442988] Call Trace: [ 352.445588] dump_stack+0x1c4/0x2b4 [ 352.449228] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.454436] should_fail.cold.4+0xa/0x17 [ 352.458506] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.463617] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 352.469419] ? kasan_check_read+0x11/0x20 [ 352.473571] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 352.478851] ? rcu_bh_qs+0xc0/0xc0 [ 352.482439] ? unwind_dump+0x190/0x190 [ 352.486357] ? is_bpf_text_address+0xd3/0x170 [ 352.490855] ? kernel_text_address+0x79/0xf0 [ 352.495265] ? __kernel_text_address+0xd/0x40 [ 352.499770] ? unwind_get_return_address+0x61/0xa0 [ 352.504708] ? fs_reclaim_acquire+0x20/0x20 [ 352.509037] ? lock_downgrade+0x900/0x900 [ 352.513196] ? ___might_sleep+0x1ed/0x300 [ 352.517349] ? arch_local_save_flags+0x40/0x40 [ 352.521926] ? save_stack+0x43/0xd0 [ 352.525548] ? __kasan_slab_free+0x102/0x150 [ 352.529954] ? kasan_slab_free+0xe/0x10 [ 352.533930] ? kmem_cache_free+0x83/0x290 [ 352.538082] ? user_path_at_empty+0x40/0x50 [ 352.542405] ? do_mount+0x177/0x31f0 [ 352.546124] __should_failslab+0x124/0x180 [ 352.550363] should_failslab+0x9/0x14 [ 352.554164] kmem_cache_alloc+0x2be/0x730 [ 352.558325] ? debug_smp_processor_id+0x1c/0x20 [ 352.562999] ? perf_trace_lock_acquire+0x15b/0x800 [ 352.567934] alloc_vfsmnt+0xe9/0x990 [ 352.571656] ? m_stop+0x20/0x20 [ 352.574944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.580510] ? check_preemption_disabled+0x48/0x200 [ 352.585535] ? trace_hardirqs_on+0xbd/0x310 [ 352.589851] ? putname+0xf2/0x130 [ 352.593297] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 352.599023] ? __kasan_slab_free+0x119/0x150 [ 352.603435] ? putname+0xf2/0x130 [ 352.606902] ? kmem_cache_free+0x21a/0x290 [ 352.611152] ? __get_fs_type+0x97/0xc0 [ 352.615046] ? lock_downgrade+0x900/0x900 [ 352.619202] ? lock_release+0x970/0x970 [ 352.623191] ? digsig_verify+0x1530/0x1530 [ 352.627455] vfs_kern_mount.part.35+0x90/0x4f0 [ 352.632044] ? may_umount+0xb0/0xb0 05:43:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xffffffffa0008000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 352.632753] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 352.635685] ? _raw_read_unlock+0x2c/0x50 [ 352.635703] ? __get_fs_type+0x97/0xc0 [ 352.650984] do_mount+0x581/0x31f0 [ 352.654530] ? copy_mount_string+0x40/0x40 [ 352.658766] ? kasan_unpoison_shadow+0x35/0x50 [ 352.663352] ? kasan_kmalloc+0xc7/0xe0 [ 352.667244] ? kmem_cache_alloc_trace+0x31f/0x750 [ 352.667272] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.667286] ? _copy_from_user+0xdf/0x150 [ 352.667306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:43:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 352.667318] ? copy_mount_options+0x288/0x380 [ 352.667334] ksys_mount+0x12d/0x140 [ 352.677698] __x64_sys_mount+0xbe/0x150 [ 352.677718] do_syscall_64+0x1b9/0x820 [ 352.677734] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 352.677750] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.677768] ? trace_hardirqs_on_caller+0x310/0x310 [ 352.698347] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 352.699505] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 352.699519] ? recalc_sigpending_tsk+0x180/0x180 [ 352.699536] ? kasan_check_write+0x14/0x20 [ 352.738000] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 352.739946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.739968] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.757244] RIP: 0033:0x457579 [ 352.760472] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.779388] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:43:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x500000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect(r0, &(0x7f00000000c0)=@hci={0x1f, r1, 0x3}, 0x80) socketpair(0x19, 0x803, 0xfffffffffffffffe, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x7) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x2}, 0x10, &(0x7f000000eff0)={&(0x7f0000001d80)={0x0, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9804a20e62c58ebf8abdfc075ea59a83273fd61acf97eac68970d87ae0d0d2ee65ee051d7330c86b7fd6d60ee709ac502b7313566fd54ee0b76b149baf93dfd1"}}, 0x80}}, 0x0) 05:43:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000f00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 352.787094] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 352.787101] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 352.787109] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 352.787117] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 352.787125] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 352.808281] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 352.844735] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 352.880864] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x600000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x800, 0x106) write$FUSE_OPEN(r1, &(0x7f0000000480)={0x20, 0x0, 0x3, {0x0, 0x4}}, 0x20) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900)="173074fb8c62c7934719212e2502da2d2f2a5736bcec670f5da0de3b165e6999d4d12b2a1bf0c14ea0a482a6a489facd33e339ac611aa3828eec3052ac33e4ee2e302e785bc1a66d113b3ae1d278b4b33eae3f472da0d4f6542c0a334a4d7753274b6bf1d12e5caf93e59ec306bd9411fe50dd075d8f26ae818e2a9591d5fa01639213e19f2b57538e7d1388d93fc3b61e91863581720b44d230b7872dc57e7a9055c111a1d760c1b77d8143a666bf65ae4f6e89c13717c6b8de1ba7", 0xbc, 0x0, &(0x7f0000000340)) mount(&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='mslos\x00', 0x0, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00000000c0)}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) gettid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r4, 0x5}, &(0x7f0000000400)=0x8) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xf4002, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 05:43:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xa000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:31 executing program 3 (fault-call:6 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 353.298039] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 353.309080] FAULT_INJECTION: forcing a failure. [ 353.309080] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 353.320916] CPU: 0 PID: 14130 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 353.328191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.337557] Call Trace: [ 353.340164] dump_stack+0x1c4/0x2b4 05:43:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 353.343825] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.349036] should_fail.cold.4+0xa/0x17 [ 353.353114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.358236] ? check_preemption_disabled+0x48/0x200 [ 353.363265] ? debug_smp_processor_id+0x1c/0x20 [ 353.367944] ? perf_trace_lock_acquire+0x15b/0x800 [ 353.372886] ? mark_held_locks+0x130/0x130 [ 353.377131] ? perf_trace_lock+0x7a0/0x7a0 [ 353.381391] ? perf_trace_lock+0x7a0/0x7a0 [ 353.385634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.391183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:43:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 353.396765] ? check_preemption_disabled+0x48/0x200 [ 353.401793] ? debug_smp_processor_id+0x1c/0x20 [ 353.406469] ? perf_trace_lock_acquire+0x15b/0x800 [ 353.411406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.416952] ? should_fail+0x22d/0xd01 [ 353.420870] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.420894] __alloc_pages_nodemask+0x34b/0xde0 [ 353.431042] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 353.431062] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 353.431081] ? rcu_bh_qs+0xc0/0xc0 05:43:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 353.445409] ? fs_reclaim_acquire+0x20/0x20 [ 353.449760] ? lock_downgrade+0x900/0x900 [ 353.453919] ? ___might_sleep+0x1ed/0x300 [ 353.458074] ? trace_hardirqs_off+0xb8/0x310 [ 353.462493] cache_grow_begin+0x91/0x8c0 [ 353.466562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.472110] ? check_preemption_disabled+0x48/0x200 [ 353.477134] kmem_cache_alloc+0x665/0x730 [ 353.477156] getname_flags+0xd0/0x5a0 [ 353.477172] user_path_at_empty+0x2d/0x50 [ 353.485096] do_mount+0x177/0x31f0 [ 353.485110] ? kasan_check_read+0x11/0x20 05:43:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x25000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 353.485124] ? do_raw_spin_unlock+0xa7/0x2f0 [ 353.485141] ? copy_mount_string+0x40/0x40 [ 353.505542] ? kasan_check_write+0x14/0x20 [ 353.509867] ? copy_mount_options+0x5f/0x380 [ 353.509885] ? kasan_unpoison_shadow+0x35/0x50 [ 353.509897] ? kasan_kmalloc+0xc7/0xe0 [ 353.509917] ? kmem_cache_alloc_trace+0x31f/0x750 [ 353.518882] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.518901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.518913] ? copy_mount_options+0x288/0x380 [ 353.518929] ksys_mount+0x12d/0x140 05:43:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 353.518943] __x64_sys_mount+0xbe/0x150 [ 353.518962] do_syscall_64+0x1b9/0x820 [ 353.535119] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 353.538715] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 353.538734] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.538753] ? trace_hardirqs_on_caller+0x310/0x310 [ 353.538768] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 353.538782] ? recalc_sigpending_tsk+0x180/0x180 [ 353.538816] ? kasan_check_write+0x14/0x20 [ 353.551881] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 353.554781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.554805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.587072] RIP: 0033:0x457579 [ 353.598552] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.598561] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.598577] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 353.598586] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 353.598594] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 353.598603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 353.598610] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 353.614067] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:43:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000005}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x400) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="95b397f71222052f39d7f9c637f35fb6", 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0xfffffffffffffe6e, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000100)=[@release={0x40046305}, @request_death={0x40406301}], 0x34c, 0x0, &(0x7f0000000080)}) 05:43:32 executing program 3 (fault-call:6 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20006c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4c000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 354.397335] FAULT_INJECTION: forcing a failure. [ 354.397335] name failslab, interval 1, probability 0, space 0, times 0 [ 354.406270] binder: 14194:14195 got reply transaction with no transaction stack [ 354.415459] CPU: 1 PID: 14192 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 354.423285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.430594] binder: 14194:14195 transaction failed 29201/-71, size 0-0 line 2762 [ 354.432637] Call Trace: [ 354.432664] dump_stack+0x1c4/0x2b4 [ 354.432686] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.441976] binder: BINDER_SET_CONTEXT_MGR already set [ 354.442793] should_fail.cold.4+0xa/0x17 [ 354.442812] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.447011] binder: 14194:14195 ioctl 40046207 0 returned -16 [ 354.451599] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 354.451616] ? kasan_check_read+0x11/0x20 [ 354.481823] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 354.487115] ? rcu_bh_qs+0xc0/0xc0 [ 354.490674] ? unwind_dump+0x190/0x190 [ 354.494579] ? is_bpf_text_address+0xd3/0x170 [ 354.499079] ? kernel_text_address+0x79/0xf0 [ 354.499116] ? __kernel_text_address+0xd/0x40 [ 354.507989] ? unwind_get_return_address+0x61/0xa0 [ 354.508022] ? fs_reclaim_acquire+0x20/0x20 [ 354.508040] ? lock_downgrade+0x900/0x900 [ 354.521414] ? ___might_sleep+0x1ed/0x300 [ 354.525570] ? arch_local_save_flags+0x40/0x40 [ 354.530178] ? save_stack+0x43/0xd0 [ 354.533808] ? __kasan_slab_free+0x102/0x150 [ 354.538217] ? kasan_slab_free+0xe/0x10 [ 354.542197] ? kmem_cache_free+0x83/0x290 [ 354.546352] ? user_path_at_empty+0x40/0x50 [ 354.550680] ? do_mount+0x177/0x31f0 [ 354.554401] __should_failslab+0x124/0x180 [ 354.554418] should_failslab+0x9/0x14 [ 354.562427] kmem_cache_alloc+0x2be/0x730 [ 354.562450] ? debug_smp_processor_id+0x1c/0x20 [ 354.571231] ? perf_trace_lock_acquire+0x15b/0x800 [ 354.576177] alloc_vfsmnt+0xe9/0x990 [ 354.579898] ? m_stop+0x20/0x20 [ 354.583191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.588738] ? check_preemption_disabled+0x48/0x200 05:43:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 354.593766] ? trace_hardirqs_on+0xbd/0x310 [ 354.598584] ? putname+0xf2/0x130 [ 354.602043] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 354.607500] ? __kasan_slab_free+0x119/0x150 [ 354.611908] ? putname+0xf2/0x130 [ 354.611924] ? kmem_cache_free+0x21a/0x290 [ 354.611944] ? __get_fs_type+0x97/0xc0 [ 354.619594] ? lock_downgrade+0x900/0x900 [ 354.619611] ? lock_release+0x970/0x970 [ 354.619637] ? digsig_verify+0x1530/0x1530 [ 354.635822] vfs_kern_mount.part.35+0x90/0x4f0 [ 354.640415] ? may_umount+0xb0/0xb0 [ 354.644045] ? _raw_read_unlock+0x2c/0x50 [ 354.648206] ? __get_fs_type+0x97/0xc0 [ 354.652100] do_mount+0x581/0x31f0 [ 354.655640] ? kasan_check_read+0x11/0x20 [ 354.659790] ? do_raw_spin_unlock+0xa7/0x2f0 [ 354.664203] ? copy_mount_string+0x40/0x40 [ 354.668425] ? kasan_check_write+0x14/0x20 [ 354.668442] ? kasan_unpoison_shadow+0x35/0x50 [ 354.668454] ? kasan_kmalloc+0xc7/0xe0 [ 354.668473] ? kmem_cache_alloc_trace+0x31f/0x750 [ 354.686003] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.691541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.697061] ? copy_mount_options+0x288/0x380 [ 354.701543] ksys_mount+0x12d/0x140 [ 354.705148] __x64_sys_mount+0xbe/0x150 [ 354.709111] do_syscall_64+0x1b9/0x820 [ 354.712978] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 354.718321] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.723230] ? trace_hardirqs_on_caller+0x310/0x310 [ 354.728226] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 354.733224] ? recalc_sigpending_tsk+0x180/0x180 [ 354.737960] ? kasan_check_write+0x14/0x20 [ 354.742180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.747007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.752175] RIP: 0033:0x457579 [ 354.755350] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.774243] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.781931] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 354.789193] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 354.796451] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 354.803702] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 354.810950] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5434, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20007a00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 05:43:33 executing program 3 (fault-call:6 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 355.102644] FAULT_INJECTION: forcing a failure. [ 355.102644] name failslab, interval 1, probability 0, space 0, times 0 [ 355.129415] CPU: 1 PID: 14225 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 355.136733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.146101] Call Trace: [ 355.148711] dump_stack+0x1c4/0x2b4 05:43:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x200000f0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000a0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 355.152356] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.157587] should_fail.cold.4+0xa/0x17 [ 355.161670] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.166784] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 355.172254] ? fs_reclaim_acquire+0x20/0x20 [ 355.176596] ? mark_free_pages+0x3c0/0x3c0 [ 355.180845] ? fs_reclaim_acquire+0x20/0x20 [ 355.185189] ? lock_downgrade+0x900/0x900 [ 355.189358] ? ___might_sleep+0x1ed/0x300 [ 355.193514] ? arch_local_save_flags+0x40/0x40 [ 355.198111] ? putname+0xf2/0x130 [ 355.201602] __should_failslab+0x124/0x180 [ 355.205855] should_failslab+0x9/0x14 [ 355.209672] kmem_cache_alloc_trace+0x2d7/0x750 [ 355.214351] ? free_pages+0x44/0x50 [ 355.218071] v9fs_mount+0x62/0x8f0 [ 355.221619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.227172] mount_fs+0xae/0x31d [ 355.230550] vfs_kern_mount.part.35+0xdc/0x4f0 [ 355.235145] ? may_umount+0xb0/0xb0 [ 355.238783] ? _raw_read_unlock+0x2c/0x50 [ 355.242944] ? __get_fs_type+0x97/0xc0 [ 355.246841] do_mount+0x581/0x31f0 05:43:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000300}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 355.250405] ? copy_mount_string+0x40/0x40 [ 355.254644] ? kasan_unpoison_shadow+0x35/0x50 [ 355.259228] ? kasan_kmalloc+0xc7/0xe0 [ 355.263128] ? kmem_cache_alloc_trace+0x31f/0x750 [ 355.267980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.273534] ? _copy_from_user+0xdf/0x150 [ 355.277696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.283239] ? copy_mount_options+0x288/0x380 [ 355.287749] ksys_mount+0x12d/0x140 [ 355.291385] __x64_sys_mount+0xbe/0x150 [ 355.295372] do_syscall_64+0x1b9/0x820 05:43:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000074}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 355.299271] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.304653] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.309664] ? trace_hardirqs_on_caller+0x310/0x310 [ 355.314718] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.319749] ? recalc_sigpending_tsk+0x180/0x180 [ 355.324511] ? kasan_check_write+0x14/0x20 [ 355.328751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.333609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.338800] RIP: 0033:0x457579 [ 355.341997] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.360951] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.368746] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 355.376032] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 355.383308] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 355.390579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 355.397852] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000002}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:34 executing program 3 (fault-call:6 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000750000170000004a658a8000000000000000000000000000000000000000"], 0x22) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8e, 0x2000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000700)={{0x7, 0x1, 0x2, 0x6c3138b9, 'syz0\x00', 0x7ff}, 0x0, [0x1, 0x4, 0x2, 0x8, 0x549, 0x7e, 0x2, 0xff33, 0x2ff, 0x0, 0x10000, 0x8000, 0x3e78, 0x5, 0x9, 0x0, 0x100000000, 0x9, 0x0, 0x1000000000, 0x0, 0x2, 0x7ff, 0xfffffffffffffffe, 0x9c8d, 0x1, 0x0, 0x5, 0x1, 0x2, 0x2, 0x0, 0x7, 0x8, 0x44, 0x100000000, 0x204, 0x8, 0x5499, 0x101, 0xf9, 0x3, 0x5, 0x4, 0x81, 0x1000, 0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x10001, 0x8a30, 0x3, 0x1, 0x0, 0x2, 0x2, 0x3, 0x8, 0x1f, 0x1, 0x10001, 0x7, 0x5, 0x0, 0x5, 0x10000, 0x8180, 0x6, 0x80, 0x1, 0x7f, 0x4, 0x10000, 0x7, 0x8, 0x6, 0x89e2, 0x8, 0x80000001, 0xffff, 0xeec, 0xdc90, 0x6, 0x7fffffff, 0x100000000, 0x9, 0x1, 0x100000001, 0x40, 0x9, 0x0, 0x4bb36b72, 0x8, 0x0, 0x80000001, 0x4, 0x5f102e72, 0x5, 0x10000000000000, 0xfffffffffffeffff, 0x200, 0x4, 0xdc, 0x7de2, 0xa8c7, 0x80000001, 0x5, 0x6, 0xff, 0x3, 0x7, 0x4, 0x2, 0x4, 0xb7a2, 0x7fffffff, 0x30b7, 0x4, 0x100000001, 0x8, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0x7fff, 0x80000001, 0x95a, 0x7fff], {r3, r4+10000000}}) r5 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000040), 0x10000000000443) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r5, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r5, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x2000000101000, 0x0) write$binfmt_misc(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="164e9096ce016540627accafc3d41db9c916981893d5440ab73545e08303ad6c318837d35f2292a9798689962087eed30150286b08082d6b4c39248ed584992e1d80519d2cdbb81325cb69427160055ecabbdd738d10642a99a3ab75f00c13957af67f309b6af3cc00df5f98fcdfec2e266edde059"], 0x75) [ 356.012677] FAULT_INJECTION: forcing a failure. [ 356.012677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:43:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x500}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x51000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 356.097788] CPU: 1 PID: 14279 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 356.105099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.114464] Call Trace: [ 356.117070] dump_stack+0x1c4/0x2b4 [ 356.120734] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.125938] ? debug_smp_processor_id+0x1c/0x20 [ 356.130654] ? perf_trace_lock_acquire+0x15b/0x800 [ 356.135596] should_fail.cold.4+0xa/0x17 [ 356.139666] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.144773] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 356.149797] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 356.154825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.160372] ? should_fail+0x22d/0xd01 [ 356.164251] ? perf_trace_lock+0x7a0/0x7a0 [ 356.168481] ? cpumask_next+0x41/0x50 [ 356.168514] ? fs_reclaim_acquire+0x20/0x20 [ 356.168530] ? lock_downgrade+0x900/0x900 [ 356.180762] ? ___might_sleep+0x1ed/0x300 [ 356.184914] ? lock_release+0x970/0x970 [ 356.188922] ? arch_local_save_flags+0x40/0x40 [ 356.193514] ? fs_reclaim_acquire+0x20/0x20 [ 356.197834] ? __might_sleep+0x95/0x190 [ 356.201815] __alloc_pages_nodemask+0x34b/0xde0 [ 356.206498] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 356.211521] ? __alloc_pages_nodemask+0x6e4/0xde0 [ 356.216399] ? trace_hardirqs_on+0xbd/0x310 [ 356.220752] ? putname+0xf2/0x130 [ 356.224220] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 356.229685] ? __kasan_slab_free+0x119/0x150 [ 356.234102] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 356.239642] alloc_pages_current+0x10c/0x210 [ 356.244060] get_zeroed_page+0x14/0x50 [ 356.247956] smack_sb_copy_data+0x2b/0x2d0 [ 356.252204] security_sb_copy_data+0x54/0xb0 [ 356.256620] mount_fs+0x234/0x31d [ 356.260088] vfs_kern_mount.part.35+0xdc/0x4f0 [ 356.264675] ? may_umount+0xb0/0xb0 [ 356.268306] ? _raw_read_unlock+0x2c/0x50 [ 356.272461] ? __get_fs_type+0x97/0xc0 [ 356.276359] do_mount+0x581/0x31f0 [ 356.279907] ? trace_hardirqs_on+0x310/0x310 [ 356.284323] ? retint_kernel+0x1b/0x2d [ 356.288214] ? copy_mount_string+0x40/0x40 [ 356.292459] ? trace_hardirqs_off+0xaf/0x310 [ 356.296873] ? retint_kernel+0x2d/0x2d [ 356.300770] ? copy_mount_options+0x1e2/0x380 [ 356.305277] ? write_comp_data+0x6c/0x70 [ 356.309349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.314890] ? copy_mount_options+0x288/0x380 [ 356.319391] ksys_mount+0x12d/0x140 [ 356.323022] __x64_sys_mount+0xbe/0x150 [ 356.327008] do_syscall_64+0x1b9/0x820 [ 356.330897] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 356.336269] ? syscall_return_slowpath+0x5e0/0x5e0 [ 356.341206] ? trace_hardirqs_on_caller+0x310/0x310 [ 356.346228] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 356.351251] ? recalc_sigpending_tsk+0x180/0x180 [ 356.356005] ? kasan_check_write+0x14/0x20 [ 356.360244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.365118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.370305] RIP: 0033:0x457579 [ 356.373508] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:43:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000a4ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000f000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 356.392410] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.400121] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 356.407390] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 356.414656] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 356.421929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 356.429195] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4c00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:35 executing program 3 (fault-call:6 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000006c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x8000a0ffffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000750000170000004a658a8000000000000000000000000000000000000000"], 0x22) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8e, 0x2000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000700)={{0x7, 0x1, 0x2, 0x6c3138b9, 'syz0\x00', 0x7ff}, 0x0, [0x1, 0x4, 0x2, 0x8, 0x549, 0x7e, 0x2, 0xff33, 0x2ff, 0x0, 0x10000, 0x8000, 0x3e78, 0x5, 0x9, 0x0, 0x100000000, 0x9, 0x0, 0x1000000000, 0x0, 0x2, 0x7ff, 0xfffffffffffffffe, 0x9c8d, 0x1, 0x0, 0x5, 0x1, 0x2, 0x2, 0x0, 0x7, 0x8, 0x44, 0x100000000, 0x204, 0x8, 0x5499, 0x101, 0xf9, 0x3, 0x5, 0x4, 0x81, 0x1000, 0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x10001, 0x8a30, 0x3, 0x1, 0x0, 0x2, 0x2, 0x3, 0x8, 0x1f, 0x1, 0x10001, 0x7, 0x5, 0x0, 0x5, 0x10000, 0x8180, 0x6, 0x80, 0x1, 0x7f, 0x4, 0x10000, 0x7, 0x8, 0x6, 0x89e2, 0x8, 0x80000001, 0xffff, 0xeec, 0xdc90, 0x6, 0x7fffffff, 0x100000000, 0x9, 0x1, 0x100000001, 0x40, 0x9, 0x0, 0x4bb36b72, 0x8, 0x0, 0x80000001, 0x4, 0x5f102e72, 0x5, 0x10000000000000, 0xfffffffffffeffff, 0x200, 0x4, 0xdc, 0x7de2, 0xa8c7, 0x80000001, 0x5, 0x6, 0xff, 0x3, 0x7, 0x4, 0x2, 0x4, 0xb7a2, 0x7fffffff, 0x30b7, 0x4, 0x100000001, 0x8, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0x7fff, 0x80000001, 0x95a, 0x7fff], {r3, r4+10000000}}) r5 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r5, r6, &(0x7f0000000040), 0x10000000000443) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r5, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r5, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x2000000101000, 0x0) write$binfmt_misc(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="164e9096ce016540627accafc3d41db9c916981893d5440ab73545e08303ad6c318837d35f2292a9798689962087eed30150286b08082d6b4c39248ed584992e1d80519d2cdbb81325cb69427160055ecabbdd738d10642a99a3ab75f00c13957af67f309b6af3cc00df5f98fcdfec2e266edde059"], 0x75) 05:43:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000004}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000ffffffffa0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 356.950083] FAULT_INJECTION: forcing a failure. [ 356.950083] name failslab, interval 1, probability 0, space 0, times 0 [ 357.029447] CPU: 0 PID: 14334 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 357.036769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.046146] Call Trace: [ 357.048753] dump_stack+0x1c4/0x2b4 [ 357.052398] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.057617] should_fail.cold.4+0xa/0x17 [ 357.061711] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.066822] ? save_stack+0xa9/0xd0 [ 357.070458] ? save_stack+0x43/0xd0 [ 357.074067] ? kasan_kmalloc+0xc7/0xe0 [ 357.077951] ? __kmalloc_track_caller+0x14a/0x750 [ 357.082881] ? kstrdup+0x39/0x70 [ 357.086268] ? v9fs_session_init+0xdd/0x1a70 [ 357.090681] ? v9fs_mount+0x7d/0x8f0 [ 357.094398] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 357.099155] ? do_mount+0x581/0x31f0 [ 357.102875] ? ksys_mount+0x12d/0x140 [ 357.106679] ? __x64_sys_mount+0xbe/0x150 [ 357.110834] ? do_syscall_64+0x1b9/0x820 [ 357.114916] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.120291] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 357.126091] ? kasan_check_read+0x11/0x20 [ 357.130263] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 357.135571] ? fs_reclaim_acquire+0x20/0x20 [ 357.139907] ? lock_downgrade+0x900/0x900 [ 357.144069] ? ___might_sleep+0x1ed/0x300 [ 357.148225] ? arch_local_save_flags+0x40/0x40 [ 357.152822] ? trace_hardirqs_on+0xbd/0x310 [ 357.157151] ? unwind_get_return_address+0x61/0xa0 [ 357.162094] __should_failslab+0x124/0x180 [ 357.166344] should_failslab+0x9/0x14 [ 357.170166] __kmalloc_track_caller+0x2d0/0x750 [ 357.174841] ? save_stack+0xa9/0xd0 [ 357.178475] ? save_stack+0x43/0xd0 [ 357.182112] ? v9fs_session_init+0x115/0x1a70 [ 357.186613] kstrdup+0x39/0x70 [ 357.189813] v9fs_session_init+0x115/0x1a70 [ 357.194161] ? v9fs_show_options+0x7e0/0x7e0 [ 357.198571] ? lock_downgrade+0x900/0x900 [ 357.202727] ? ___might_sleep+0x1ed/0x300 [ 357.206914] ? trace_hardirqs_on+0xbd/0x310 [ 357.211243] ? v9fs_mount+0x62/0x8f0 [ 357.214955] ? kasan_unpoison_shadow+0x35/0x50 [ 357.219541] ? kasan_kmalloc+0xc7/0xe0 [ 357.223444] ? kmem_cache_alloc_trace+0x31f/0x750 [ 357.228285] ? free_pages+0x44/0x50 [ 357.231935] v9fs_mount+0x7d/0x8f0 [ 357.235478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.241019] mount_fs+0xae/0x31d [ 357.244395] vfs_kern_mount.part.35+0xdc/0x4f0 [ 357.248989] ? may_umount+0xb0/0xb0 [ 357.252616] ? _raw_read_unlock+0x2c/0x50 [ 357.256767] ? __get_fs_type+0x97/0xc0 [ 357.260660] do_mount+0x581/0x31f0 [ 357.264220] ? copy_mount_string+0x40/0x40 [ 357.268465] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 357.273232] ? retint_kernel+0x2d/0x2d [ 357.277135] ? __sanitizer_cov_trace_const_cmp8+0xf/0x20 [ 357.282597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.288144] ? copy_mount_options+0x288/0x380 [ 357.292642] ksys_mount+0x12d/0x140 [ 357.296280] __x64_sys_mount+0xbe/0x150 [ 357.300271] do_syscall_64+0x1b9/0x820 [ 357.304168] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 357.309541] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.314483] ? trace_hardirqs_on_caller+0x310/0x310 [ 357.319506] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 357.324526] ? recalc_sigpending_tsk+0x180/0x180 05:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 357.329279] ? kasan_check_write+0x14/0x20 [ 357.333519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.338372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.338384] RIP: 0033:0x457579 [ 357.338400] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.338408] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.338427] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 357.346783] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 357.346793] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 357.346802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 357.346812] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x540a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:36 executing program 3 (fault-call:6 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x60000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:36 executing program 1: r0 = socket$inet(0x2, 0x806, 0x20) sendmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000940)}}, {{&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="990db42d", 0x4}], 0x1}}], 0x2, 0xc0c0) [ 357.867739] validate_nla: 14 callbacks suppressed [ 357.867747] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 357.886408] FAULT_INJECTION: forcing a failure. [ 357.886408] name failslab, interval 1, probability 0, space 0, times 0 05:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 357.914191] CPU: 1 PID: 14387 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 357.921494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.930856] Call Trace: [ 357.933459] dump_stack+0x1c4/0x2b4 [ 357.937102] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.942316] should_fail.cold.4+0xa/0x17 [ 357.946393] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.951507] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 357.956551] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 357.961322] ? is_bpf_text_address+0xac/0x170 [ 357.965826] ? lock_downgrade+0x900/0x900 [ 357.965845] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 357.965861] ? kasan_check_read+0x11/0x20 [ 357.975772] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 357.975798] ? fs_reclaim_acquire+0x20/0x20 [ 357.975826] ? lock_downgrade+0x900/0x900 [ 357.993670] ? ___might_sleep+0x1ed/0x300 [ 357.997826] ? arch_local_save_flags+0x40/0x40 [ 358.002410] ? unwind_get_return_address+0x61/0xa0 [ 358.007420] ? __save_stack_trace+0x8d/0xf0 [ 358.011752] __should_failslab+0x124/0x180 [ 358.015997] should_failslab+0x9/0x14 [ 358.019816] __kmalloc_track_caller+0x2d0/0x750 [ 358.024494] ? save_stack+0xa9/0xd0 [ 358.028124] ? save_stack+0x43/0xd0 [ 358.031760] ? kmem_cache_alloc_trace+0x152/0x750 [ 358.036617] ? v9fs_session_init+0xdd/0x1a70 [ 358.041038] kstrdup+0x39/0x70 [ 358.044238] v9fs_session_init+0xdd/0x1a70 [ 358.048490] ? v9fs_show_options+0x7e0/0x7e0 [ 358.052901] ? lock_downgrade+0x900/0x900 [ 358.057054] ? ___might_sleep+0x1ed/0x300 [ 358.061208] ? trace_hardirqs_on+0xbd/0x310 05:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 358.065545] ? v9fs_mount+0x62/0x8f0 [ 358.069262] ? kasan_unpoison_shadow+0x35/0x50 [ 358.073857] ? kasan_kmalloc+0xc7/0xe0 [ 358.077782] ? kmem_cache_alloc_trace+0x31f/0x750 [ 358.082641] ? free_pages+0x44/0x50 [ 358.086283] v9fs_mount+0x7d/0x8f0 [ 358.089827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.095379] mount_fs+0xae/0x31d [ 358.098765] vfs_kern_mount.part.35+0xdc/0x4f0 [ 358.103364] ? may_umount+0xb0/0xb0 [ 358.106990] ? _raw_read_unlock+0x2c/0x50 [ 358.111141] ? __get_fs_type+0x97/0xc0 [ 358.115033] do_mount+0x581/0x31f0 [ 358.118589] ? kasan_check_read+0x11/0x20 [ 358.122742] ? do_raw_spin_unlock+0xa7/0x2f0 [ 358.127184] ? copy_mount_string+0x40/0x40 [ 358.131422] ? kasan_check_write+0x14/0x20 [ 358.135659] ? kasan_unpoison_shadow+0x35/0x50 [ 358.140239] ? kasan_kmalloc+0xc7/0xe0 [ 358.144129] ? kmem_cache_alloc_trace+0x31f/0x750 [ 358.148977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.154518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.160058] ? copy_mount_options+0x288/0x380 [ 358.164563] ksys_mount+0x12d/0x140 05:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x3000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 358.168197] __x64_sys_mount+0xbe/0x150 [ 358.172182] do_syscall_64+0x1b9/0x820 [ 358.176075] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 358.181448] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.186387] ? trace_hardirqs_on_caller+0x310/0x310 [ 358.191414] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 358.196437] ? recalc_sigpending_tsk+0x180/0x180 [ 358.201202] ? kasan_check_write+0x14/0x20 [ 358.205450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.210316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.215509] RIP: 0033:0x457579 05:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x700000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 358.218473] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 358.218701] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.218708] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.252573] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 358.259843] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 05:43:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x200003aa}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 358.267115] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 358.269213] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 358.274393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 358.274403] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 358.377980] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5418, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:36 executing program 3 (fault-call:6 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000008000a000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local}, {}, {0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, 0xe8) 05:43:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x600}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000006}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2000) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1b) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) [ 358.756686] FAULT_INJECTION: forcing a failure. [ 358.756686] name failslab, interval 1, probability 0, space 0, times 0 [ 358.778907] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 358.809370] CPU: 1 PID: 14433 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 358.816676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.826044] Call Trace: [ 358.828738] dump_stack+0x1c4/0x2b4 [ 358.832380] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.837586] should_fail.cold.4+0xa/0x17 [ 358.841653] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.846764] ? save_stack+0xa9/0xd0 [ 358.850499] ? save_stack+0x43/0xd0 [ 358.854126] ? kasan_kmalloc+0xc7/0xe0 [ 358.858016] ? __kmalloc_track_caller+0x14a/0x750 [ 358.862863] ? kstrdup+0x39/0x70 [ 358.866235] ? v9fs_session_init+0xdd/0x1a70 [ 358.870653] ? v9fs_mount+0x7d/0x8f0 [ 358.874371] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 358.879124] ? do_mount+0x581/0x31f0 [ 358.882843] ? ksys_mount+0x12d/0x140 [ 358.886645] ? __x64_sys_mount+0xbe/0x150 [ 358.890800] ? do_syscall_64+0x1b9/0x820 [ 358.894865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.900249] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 05:43:37 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) unlink(&(0x7f00000004c0)='./bus\x00') fcntl$setstatus(r0, 0x4, 0x44000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x3, 0xc2, &(0x7f00000000c0)="eb9bcc998fe9f5d584c0316b702847ea8ebfd1f62776a0f466a28bbf85c692099386002a8fc0683a54798458a94d60bcdabbd004e3ee48bba054671c22c4687fcfbd6592ff885610cb116ab6bc94c9f328d304d76fb53abfd8e5e1fc527fd62ed925e0f8e03d1ef953ace076b1b058e931c0236e13ce0493fa336649af7251ac040130e572c89391c8e46343e16794dee42e8e59edb0562557c35a3628e0d293ae93c31eb986d57bfd37038866cc3cc8cd0ae283730aa86e0795783b7273a3470596"}) r1 = fcntl$getown(r0, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x322, &(0x7f0000000500)={0x0, 0x0}}, 0xfffffffffffffdb0) syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x3, 0x0) ioctl$void(r0, 0xc0045878) readlink(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)=""/252, 0xfc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, r0, 0x0, 0x10, &(0x7f0000000200)='md5sum:vboxnet0\x00', r2}, 0x30) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x26}, 0xffffff29) 05:43:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 358.906046] ? kasan_check_read+0x11/0x20 [ 358.910199] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 358.915478] ? fs_reclaim_acquire+0x20/0x20 [ 358.919800] ? lock_downgrade+0x900/0x900 [ 358.919819] ? ___might_sleep+0x1ed/0x300 [ 358.919836] ? arch_local_save_flags+0x40/0x40 [ 358.928130] ? trace_hardirqs_on+0xbd/0x310 [ 358.928146] ? unwind_get_return_address+0x61/0xa0 [ 358.928167] __should_failslab+0x124/0x180 [ 358.928183] should_failslab+0x9/0x14 [ 358.949979] __kmalloc_track_caller+0x2d0/0x750 [ 358.954647] ? save_stack+0xa9/0xd0 [ 358.954662] ? save_stack+0x43/0xd0 [ 358.954677] ? v9fs_session_init+0x115/0x1a70 [ 358.954703] kstrdup+0x39/0x70 [ 358.969586] v9fs_session_init+0x115/0x1a70 [ 358.969612] ? v9fs_show_options+0x7e0/0x7e0 [ 358.978300] ? lock_downgrade+0x900/0x900 [ 358.982453] ? ___might_sleep+0x1ed/0x300 [ 358.986613] ? trace_hardirqs_on+0xbd/0x310 [ 358.990942] ? v9fs_mount+0x62/0x8f0 [ 358.994665] ? kasan_unpoison_shadow+0x35/0x50 [ 358.999271] ? kasan_kmalloc+0xc7/0xe0 [ 359.003171] ? kmem_cache_alloc_trace+0x31f/0x750 05:43:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x7400000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 359.008023] ? free_pages+0x44/0x50 [ 359.011658] v9fs_mount+0x7d/0x8f0 [ 359.015211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.020756] mount_fs+0xae/0x31d [ 359.020778] vfs_kern_mount.part.35+0xdc/0x4f0 [ 359.020795] ? may_umount+0xb0/0xb0 [ 359.028712] ? _raw_read_unlock+0x2c/0x50 [ 359.028727] ? __get_fs_type+0x97/0xc0 [ 359.028746] do_mount+0x581/0x31f0 [ 359.028761] ? kasan_check_read+0x11/0x20 [ 359.048043] ? do_raw_spin_unlock+0xa7/0x2f0 [ 359.052458] ? copy_mount_string+0x40/0x40 [ 359.055049] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 359.056697] ? kasan_check_write+0x14/0x20 [ 359.056716] ? kasan_unpoison_shadow+0x35/0x50 [ 359.056731] ? kasan_kmalloc+0xc7/0xe0 [ 359.056752] ? kmem_cache_alloc_trace+0x31f/0x750 [ 359.056769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.056788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.092615] ? copy_mount_options+0x288/0x380 [ 359.097123] ksys_mount+0x12d/0x140 [ 359.100771] __x64_sys_mount+0xbe/0x150 [ 359.104802] do_syscall_64+0x1b9/0x820 [ 359.108704] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 359.113122] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 359.114069] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.114090] ? trace_hardirqs_on_caller+0x310/0x310 [ 359.131263] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 359.136372] ? recalc_sigpending_tsk+0x180/0x180 [ 359.141125] ? kasan_check_write+0x14/0x20 [ 359.145366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.150223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.155415] RIP: 0033:0x457579 [ 359.158608] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.177508] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 359.185223] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 359.192488] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 359.199756] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 05:43:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000700}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 359.207044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 359.214310] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 359.279406] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x540d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20004000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:37 executing program 3 (fault-call:6 fault-nth:11): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 359.666438] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 359.674659] FAULT_INJECTION: forcing a failure. [ 359.674659] name failslab, interval 1, probability 0, space 0, times 0 [ 359.695917] CPU: 0 PID: 14487 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 359.703220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.712572] Call Trace: [ 359.715168] dump_stack+0x1c4/0x2b4 [ 359.718805] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.724014] should_fail.cold.4+0xa/0x17 [ 359.728107] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.733228] ? is_bpf_text_address+0xac/0x170 [ 359.737725] ? lock_downgrade+0x900/0x900 [ 359.741891] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 359.747709] ? kasan_check_read+0x11/0x20 [ 359.751860] ? rcu_bh_qs+0xc0/0xc0 [ 359.755404] ? fs_reclaim_acquire+0x20/0x20 [ 359.759732] ? lock_downgrade+0x900/0x900 [ 359.763885] ? ___might_sleep+0x1ed/0x300 [ 359.768040] ? arch_local_save_flags+0x40/0x40 [ 359.772636] ? __save_stack_trace+0x8d/0xf0 [ 359.776969] __should_failslab+0x124/0x180 [ 359.776986] should_failslab+0x9/0x14 [ 359.785003] kmem_cache_alloc_trace+0x2d7/0x750 [ 359.789674] ? save_stack+0x43/0xd0 [ 359.789687] ? kasan_kmalloc+0xc7/0xe0 [ 359.789702] ? __kmalloc_track_caller+0x14a/0x750 [ 359.789716] ? kstrdup+0x39/0x70 [ 359.789730] ? v9fs_session_init+0x115/0x1a70 [ 359.789745] ? v9fs_mount+0x7d/0x8f0 [ 359.813693] p9_client_create+0x106/0x160a [ 359.817947] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 359.823757] ? p9_client_read+0xc70/0xc70 [ 359.827919] ? fs_reclaim_acquire+0x20/0x20 [ 359.832249] ? lock_downgrade+0x900/0x900 [ 359.836402] ? __lockdep_init_map+0x105/0x590 [ 359.840903] ? lockdep_init_map+0x9/0x10 [ 359.844964] ? kasan_check_write+0x14/0x20 [ 359.849201] ? __init_rwsem+0x1cc/0x2a0 [ 359.853178] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 359.858193] ? kasan_kmalloc+0xc7/0xe0 [ 359.862086] ? save_stack+0xa9/0xd0 [ 359.865714] ? save_stack+0x43/0xd0 [ 359.869343] ? memcpy+0x45/0x50 [ 359.872635] v9fs_session_init+0x217/0x1a70 [ 359.876973] ? v9fs_show_options+0x7e0/0x7e0 [ 359.881384] ? lock_downgrade+0x900/0x900 [ 359.885539] ? ___might_sleep+0x1ed/0x300 [ 359.889692] ? trace_hardirqs_on+0xbd/0x310 [ 359.894013] ? v9fs_mount+0x62/0x8f0 [ 359.897726] ? kasan_unpoison_shadow+0x35/0x50 [ 359.902309] ? kasan_kmalloc+0xc7/0xe0 [ 359.906202] ? kmem_cache_alloc_trace+0x31f/0x750 [ 359.911047] ? free_pages+0x44/0x50 05:43:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 359.914685] v9fs_mount+0x7d/0x8f0 [ 359.918225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.923774] mount_fs+0xae/0x31d [ 359.927147] vfs_kern_mount.part.35+0xdc/0x4f0 [ 359.931737] ? may_umount+0xb0/0xb0 [ 359.935368] ? _raw_read_unlock+0x3f/0x50 [ 359.939517] ? __get_fs_type+0x97/0xc0 [ 359.943408] do_mount+0x581/0x31f0 [ 359.946951] ? kasan_check_read+0x11/0x20 [ 359.951096] ? do_raw_spin_unlock+0xa7/0x2f0 [ 359.955488] ? copy_mount_string+0x40/0x40 [ 359.959714] ? kasan_check_write+0x14/0x20 05:43:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 359.959785] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 359.963950] ? kasan_unpoison_shadow+0x35/0x50 [ 359.963965] ? kasan_kmalloc+0xc7/0xe0 [ 359.963988] ? kmem_cache_alloc_trace+0x31f/0x750 [ 359.984529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.990090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.995623] ? copy_mount_options+0x288/0x380 [ 360.000139] ksys_mount+0x12d/0x140 [ 360.000156] __x64_sys_mount+0xbe/0x150 [ 360.000173] do_syscall_64+0x1b9/0x820 [ 360.000191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.016996] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.021935] ? trace_hardirqs_on_caller+0x310/0x310 [ 360.026956] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 360.031986] ? recalc_sigpending_tsk+0x180/0x180 [ 360.036745] ? kasan_check_write+0x14/0x20 [ 360.040990] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.045844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.051026] RIP: 0033:0x457579 [ 360.054206] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.073086] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.080771] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 360.088018] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 360.095262] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 360.102509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 360.109760] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x40000, 0x1, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r1, 0xc000, 0x3000000}], 0x2000000000000111, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x2}, 0x8) clock_gettime(0x7, &(0x7f0000000000)) 05:43:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x2000000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0xc00e0000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:38 executing program 3 (fault-call:6 fault-nth:12): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 360.195152] FAULT_INJECTION: forcing a failure. [ 360.195152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.207094] CPU: 0 PID: 14513 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 360.214363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.223732] Call Trace: [ 360.226325] dump_stack+0x1c4/0x2b4 [ 360.226345] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.226370] should_fail.cold.4+0xa/0x17 [ 360.235154] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.235169] ? mark_held_locks+0x130/0x130 [ 360.235188] ? __isolate_free_page+0x610/0x610 [ 360.253133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.258681] ? check_preemption_disabled+0x48/0x200 [ 360.263715] ? mark_held_locks+0x130/0x130 [ 360.263731] ? perf_trace_lock_acquire+0x15b/0x800 [ 360.272869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.278442] ? perf_trace_lock+0x7a0/0x7a0 [ 360.282680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.282701] ? check_preemption_disabled+0x48/0x200 [ 360.293215] ? lock_release+0x970/0x970 [ 360.297196] ? debug_smp_processor_id+0x1c/0x20 [ 360.301863] ? perf_trace_lock_acquire+0x15b/0x800 [ 360.306802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.312351] ? should_fail+0x22d/0xd01 [ 360.316253] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.321365] __alloc_pages_nodemask+0x34b/0xde0 [ 360.326038] ? is_bpf_text_address+0xac/0x170 [ 360.330540] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 360.335581] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 360.341387] ? kasan_check_read+0x11/0x20 [ 360.345518] ? rcu_bh_qs+0xc0/0xc0 [ 360.349056] ? fs_reclaim_acquire+0x20/0x20 [ 360.353373] ? lock_downgrade+0x900/0x900 [ 360.357514] ? ___might_sleep+0x1ed/0x300 [ 360.361643] ? trace_hardirqs_off+0xb8/0x310 [ 360.366033] cache_grow_begin+0x91/0x8c0 [ 360.370078] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.375600] ? check_preemption_disabled+0x48/0x200 [ 360.380604] kmem_cache_alloc_trace+0x67e/0x750 [ 360.385257] ? save_stack+0x43/0xd0 [ 360.388868] ? __kmalloc_track_caller+0x14a/0x750 [ 360.393696] p9_client_create+0x106/0x160a [ 360.397925] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 360.403716] ? p9_client_read+0xc70/0xc70 [ 360.407842] ? fs_reclaim_acquire+0x20/0x20 [ 360.412142] ? lock_downgrade+0x900/0x900 [ 360.416269] ? __lockdep_init_map+0x105/0x590 [ 360.420746] ? lockdep_init_map+0x9/0x10 [ 360.424790] ? kasan_check_write+0x14/0x20 [ 360.429004] ? __init_rwsem+0x1cc/0x2a0 [ 360.432961] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 360.437956] ? kasan_kmalloc+0xc7/0xe0 [ 360.441824] ? save_stack+0xa9/0xd0 [ 360.445440] ? save_stack+0x43/0xd0 [ 360.449056] ? memcpy+0x45/0x50 [ 360.452322] v9fs_session_init+0x217/0x1a70 [ 360.456651] ? v9fs_show_options+0x7e0/0x7e0 [ 360.461040] ? lock_downgrade+0x900/0x900 [ 360.465171] ? ___might_sleep+0x1ed/0x300 [ 360.469310] ? trace_hardirqs_on+0xbd/0x310 [ 360.473619] ? v9fs_mount+0x62/0x8f0 [ 360.477331] ? kasan_unpoison_shadow+0x35/0x50 [ 360.481891] ? kasan_kmalloc+0xc7/0xe0 [ 360.485776] ? kmem_cache_alloc_trace+0x31f/0x750 [ 360.490621] ? free_pages+0x44/0x50 [ 360.494257] v9fs_mount+0x7d/0x8f0 [ 360.497802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.503348] mount_fs+0xae/0x31d [ 360.506721] vfs_kern_mount.part.35+0xdc/0x4f0 [ 360.511305] ? may_umount+0xb0/0xb0 [ 360.514932] ? _raw_read_unlock+0x2c/0x50 [ 360.519081] ? __get_fs_type+0x97/0xc0 [ 360.522981] do_mount+0x581/0x31f0 [ 360.526521] ? kasan_check_read+0x11/0x20 [ 360.530680] ? do_raw_spin_unlock+0xa7/0x2f0 [ 360.535091] ? copy_mount_string+0x40/0x40 [ 360.539327] ? kasan_check_write+0x14/0x20 [ 360.543580] ? kasan_unpoison_shadow+0x35/0x50 [ 360.548167] ? kasan_kmalloc+0xc7/0xe0 [ 360.552075] ? kmem_cache_alloc_trace+0x31f/0x750 [ 360.556921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.562462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.568001] ? copy_mount_options+0x288/0x380 [ 360.572506] ksys_mount+0x12d/0x140 [ 360.576136] __x64_sys_mount+0xbe/0x150 [ 360.580292] do_syscall_64+0x1b9/0x820 [ 360.584182] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 360.589556] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.594492] ? trace_hardirqs_on_caller+0x310/0x310 [ 360.599689] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 360.604707] ? recalc_sigpending_tsk+0x180/0x180 [ 360.609460] ? kasan_check_write+0x14/0x20 [ 360.613697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.618555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.623744] RIP: 0033:0x457579 [ 360.626932] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000008000a0ffffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xa000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0x8010aebb, 0x0) 05:43:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000060}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 360.645834] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.653559] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 360.660836] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 360.668123] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 360.675379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 360.675391] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20003f00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:38 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000380)={0x18, 0x0, 0x4, {0x3}}, 0x18) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e24, 0x1f, @local, 0x3}, 0x80) keyctl$set_reqkey_keyring(0xe, 0x3) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000280)=""/76}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="0024ad1d000000aa35bb6818218ead0842000000000000000000000000000000000000000000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r4}) setsockopt$inet6_int(r3, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xb, 0x220800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0xfe3b) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000700)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x80000000, 0x80000000, {"5ae78ab9950e3702d8240a08fb8292d0"}, 0xbc, 0x80000001, 0x57}}}, 0x90) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x500, 0x100000000, 0x1c0270}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x13, r5, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000007c0)=@known='security.capability\x00') r7 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x7fffffff, 0x400) set_robust_list(&(0x7f0000000540)={&(0x7f0000000480), 0x5, &(0x7f0000000500)={&(0x7f00000004c0)}}, 0xc) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="ec6e66"], &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='cgroup2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 05:43:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x7000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20006000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 3 (fault-call:6 fault-nth:13): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000f5ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000aa03}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 360.936200] FAULT_INJECTION: forcing a failure. [ 360.936200] name failslab, interval 1, probability 0, space 0, times 0 [ 360.956931] CPU: 1 PID: 14575 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 360.964240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.973601] Call Trace: [ 360.976203] dump_stack+0x1c4/0x2b4 [ 360.979844] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.985047] should_fail.cold.4+0xa/0x17 [ 360.989126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.994233] ? save_stack+0xa9/0xd0 [ 360.994244] ? save_stack+0x43/0xd0 [ 360.994258] ? kasan_kmalloc+0xc7/0xe0 [ 361.001484] ? __kmalloc_track_caller+0x14a/0x750 [ 361.001498] ? kstrdup+0x39/0x70 [ 361.001525] ? p9_client_create+0x483/0x160a [ 361.017987] ? v9fs_session_init+0x217/0x1a70 [ 361.022486] ? mount_fs+0xae/0x31d [ 361.026033] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 361.030774] ? do_mount+0x581/0x31f0 [ 361.034467] ? ksys_mount+0x12d/0x140 [ 361.038249] ? __x64_sys_mount+0xbe/0x150 [ 361.042387] ? do_syscall_64+0x1b9/0x820 [ 361.046426] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.051789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.057306] ? node_tag_clear+0xc2/0x1c0 [ 361.061354] ? fs_reclaim_acquire+0x20/0x20 [ 361.065659] ? lock_downgrade+0x900/0x900 [ 361.069807] ? ___might_sleep+0x1ed/0x300 [ 361.073940] ? arch_local_save_flags+0x40/0x40 [ 361.078518] ? trace_hardirqs_on+0xbd/0x310 [ 361.082841] __should_failslab+0x124/0x180 [ 361.087064] should_failslab+0x9/0x14 [ 361.090847] __kmalloc+0x2d4/0x760 [ 361.094432] ? match_wildcard+0x3c0/0x3c0 [ 361.098566] ? match_strdup+0x5e/0xa0 [ 361.102348] match_strdup+0x5e/0xa0 [ 361.105956] p9_client_create+0x6d8/0x160a [ 361.110174] ? p9_client_read+0xc70/0xc70 [ 361.114303] ? fs_reclaim_acquire+0x20/0x20 [ 361.118607] ? lock_downgrade+0x900/0x900 [ 361.122737] ? __lockdep_init_map+0x105/0x590 [ 361.127213] ? lockdep_init_map+0x9/0x10 [ 361.131256] ? kasan_check_write+0x14/0x20 [ 361.135470] ? __init_rwsem+0x1cc/0x2a0 [ 361.139431] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 361.144424] ? kasan_kmalloc+0xc7/0xe0 [ 361.148296] ? save_stack+0x43/0xd0 [ 361.151902] ? memcpy+0x45/0x50 [ 361.155178] v9fs_session_init+0x217/0x1a70 [ 361.159505] ? v9fs_show_options+0x7e0/0x7e0 [ 361.163895] ? lock_downgrade+0x900/0x900 [ 361.168047] ? ___might_sleep+0x1ed/0x300 [ 361.172179] ? trace_hardirqs_on+0xbd/0x310 [ 361.176477] ? v9fs_mount+0x62/0x8f0 [ 361.180174] ? kasan_unpoison_shadow+0x35/0x50 [ 361.184731] ? kasan_kmalloc+0xc7/0xe0 [ 361.188611] ? kmem_cache_alloc_trace+0x31f/0x750 [ 361.193441] ? free_pages+0x44/0x50 [ 361.197057] v9fs_mount+0x7d/0x8f0 [ 361.200584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.206120] mount_fs+0xae/0x31d [ 361.209475] vfs_kern_mount.part.35+0xdc/0x4f0 [ 361.214061] ? may_umount+0xb0/0xb0 [ 361.217671] ? _raw_read_unlock+0x2c/0x50 [ 361.221798] ? __get_fs_type+0x97/0xc0 [ 361.225678] do_mount+0x581/0x31f0 [ 361.229211] ? trace_hardirqs_off+0x310/0x310 [ 361.233686] ? retint_kernel+0x1b/0x2d [ 361.237555] ? copy_mount_string+0x40/0x40 [ 361.241775] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.246517] ? trace_hardirqs_off+0xaf/0x310 [ 361.250906] ? retint_kernel+0x2d/0x2d [ 361.254776] ? copy_mount_options+0x1f3/0x380 [ 361.259250] ? copy_mount_options+0x205/0x380 [ 361.263727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.269246] ? copy_mount_options+0x288/0x380 [ 361.273733] ksys_mount+0x12d/0x140 [ 361.277342] __x64_sys_mount+0xbe/0x150 [ 361.281311] do_syscall_64+0x1b9/0x820 [ 361.285190] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 361.290536] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.295447] ? trace_hardirqs_on_caller+0x310/0x310 [ 361.300442] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 361.305436] ? recalc_sigpending_tsk+0x180/0x180 [ 361.310174] ? kasan_check_write+0x14/0x20 [ 361.314393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.319223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.324414] RIP: 0033:0x457579 [ 361.327589] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.346470] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.354170] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 361.361421] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 361.368677] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 361.375927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 361.383175] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x3f00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/pid\x00') ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000240)={0x800, 0x8, 0x93c, 0x2, 0x80000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="66b80829a5710f23d00f21f86635300000030f23f8ba200066ed66b9c40800000f3266b98704000066b89b00000066ba000000000f30f30fbdc92ed2770c0f01cb0fc71fb800008ec0baf80c66b85fe6228b66efbafc0cec", 0x58}], 0x1, 0x54, &(0x7f00000000c0)=[@dstype0={0x6, 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x28, 0x6, @tid=r3}, &(0x7f00000003c0)=0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_gettime(r4, &(0x7f0000000400)) 05:43:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000007a}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 3 (fault-call:6 fault-nth:14): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 361.588513] FAULT_INJECTION: forcing a failure. [ 361.588513] name failslab, interval 1, probability 0, space 0, times 0 [ 361.645500] CPU: 1 PID: 14592 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 361.652822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.662172] Call Trace: [ 361.664765] dump_stack+0x1c4/0x2b4 [ 361.668419] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.673633] should_fail.cold.4+0xa/0x17 [ 361.677706] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.682815] ? save_stack+0xa9/0xd0 [ 361.686441] ? save_stack+0x43/0xd0 [ 361.690077] ? kasan_kmalloc+0xc7/0xe0 [ 361.693967] ? __kmalloc_track_caller+0x14a/0x750 [ 361.698837] ? kstrdup+0x39/0x70 [ 361.702212] ? p9_client_create+0x483/0x160a [ 361.706626] ? v9fs_session_init+0x217/0x1a70 [ 361.711145] ? mount_fs+0xae/0x31d [ 361.714695] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 361.719462] ? do_mount+0x581/0x31f0 [ 361.723179] ? ksys_mount+0x12d/0x140 [ 361.726980] ? __x64_sys_mount+0xbe/0x150 [ 361.731135] ? do_syscall_64+0x1b9/0x820 [ 361.735201] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.740572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.746114] ? node_tag_clear+0xc2/0x1c0 [ 361.750184] ? fs_reclaim_acquire+0x20/0x20 [ 361.754514] ? lock_downgrade+0x900/0x900 [ 361.758670] ? ___might_sleep+0x1ed/0x300 [ 361.762812] ? arch_local_save_flags+0x40/0x40 [ 361.767393] ? trace_hardirqs_on+0xbd/0x310 [ 361.771743] __should_failslab+0x124/0x180 [ 361.775986] should_failslab+0x9/0x14 [ 361.779790] __kmalloc+0x2d4/0x760 [ 361.783334] ? match_wildcard+0x3c0/0x3c0 [ 361.787485] ? match_strdup+0x5e/0xa0 [ 361.791405] match_strdup+0x5e/0xa0 [ 361.795058] p9_client_create+0x6d8/0x160a [ 361.799307] ? p9_client_read+0xc70/0xc70 [ 361.803473] ? fs_reclaim_acquire+0x20/0x20 [ 361.807802] ? lock_downgrade+0x900/0x900 [ 361.811958] ? __lockdep_init_map+0x105/0x590 [ 361.816468] ? lockdep_init_map+0x9/0x10 [ 361.820538] ? kasan_check_write+0x14/0x20 [ 361.824775] ? __init_rwsem+0x1cc/0x2a0 [ 361.828774] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 361.833795] ? kasan_kmalloc+0xc7/0xe0 [ 361.837691] ? save_stack+0x43/0xd0 [ 361.841331] ? memcpy+0x45/0x50 05:43:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000000f}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x5}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x2000004c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 361.844618] v9fs_session_init+0x217/0x1a70 [ 361.848956] ? v9fs_show_options+0x7e0/0x7e0 [ 361.853376] ? lock_downgrade+0x900/0x900 [ 361.857532] ? ___might_sleep+0x1ed/0x300 [ 361.861685] ? trace_hardirqs_on+0xbd/0x310 [ 361.866011] ? v9fs_mount+0x62/0x8f0 [ 361.869726] ? kasan_unpoison_shadow+0x35/0x50 [ 361.874326] ? kasan_kmalloc+0xc7/0xe0 [ 361.878226] ? kmem_cache_alloc_trace+0x31f/0x750 [ 361.883073] ? free_pages+0x44/0x50 [ 361.886712] v9fs_mount+0x7d/0x8f0 [ 361.890256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.895822] mount_fs+0xae/0x31d [ 361.899201] vfs_kern_mount.part.35+0xdc/0x4f0 [ 361.903793] ? may_umount+0xb0/0xb0 [ 361.907419] ? _raw_read_unlock+0x2c/0x50 [ 361.911573] ? __get_fs_type+0x97/0xc0 [ 361.915466] do_mount+0x581/0x31f0 [ 361.919013] ? copy_mount_string+0x40/0x40 [ 361.923250] ? kasan_unpoison_shadow+0x35/0x50 [ 361.927840] ? kasan_kmalloc+0xc7/0xe0 [ 361.931735] ? kmem_cache_alloc_trace+0x31f/0x750 [ 361.936589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.942123] ? copy_mount_options+0x288/0x380 [ 361.946624] ksys_mount+0x12d/0x140 [ 361.950256] __x64_sys_mount+0xbe/0x150 [ 361.954236] do_syscall_64+0x1b9/0x820 [ 361.958126] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 361.963503] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.968441] ? trace_hardirqs_on_caller+0x310/0x310 [ 361.973459] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 361.978475] ? recalc_sigpending_tsk+0x180/0x180 [ 361.983232] ? kasan_check_write+0x14/0x20 [ 361.987470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.992317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.997498] RIP: 0033:0x457579 [ 362.000693] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.019588] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.027302] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 362.034570] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 362.041842] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 362.049105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 362.056370] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5457, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4800000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:41 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffe25, &(0x7f0000000240)=0x9) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/205, 0xcd}, 0x120) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0), 0x4) r0 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2918bb8dacac617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000680)="dfb2e8ae58c47354068f636919b051d0fe1d25fec10b38eaf23f0a4e1dca322763c72f758a8954d95c5080376b97543e8f6dadc7e837b419b127f508", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000480)=""/89, &(0x7f0000000500)=0x59) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x37, 0x5}, &(0x7f0000000440)=0x0) timer_delete(r1) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000005040)=""/4096, 0x1000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace(0x420f, r2) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6) 05:43:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20002000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000008000a000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:41 executing program 3 (fault-call:6 fault-nth:15): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xa}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5423, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 363.810070] FAULT_INJECTION: forcing a failure. [ 363.810070] name failslab, interval 1, probability 0, space 0, times 0 [ 363.823020] validate_nla: 12 callbacks suppressed [ 363.823027] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:43:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 363.859892] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 363.868324] CPU: 1 PID: 14650 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 363.875615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.884974] Call Trace: [ 363.887573] dump_stack+0x1c4/0x2b4 [ 363.891214] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.896515] should_fail.cold.4+0xa/0x17 [ 363.896535] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.896553] ? save_stack+0xa9/0xd0 05:43:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x300000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 363.905678] ? save_stack+0x43/0xd0 [ 363.905690] ? kasan_kmalloc+0xc7/0xe0 [ 363.905702] ? __kmalloc_track_caller+0x14a/0x750 [ 363.905722] ? kstrdup+0x39/0x70 [ 363.925014] ? p9_client_create+0x483/0x160a [ 363.929432] ? v9fs_session_init+0x217/0x1a70 [ 363.933933] ? mount_fs+0xae/0x31d [ 363.937472] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 363.937485] ? do_mount+0x581/0x31f0 [ 363.937499] ? ksys_mount+0x12d/0x140 [ 363.945937] ? __x64_sys_mount+0xbe/0x150 [ 363.945951] ? do_syscall_64+0x1b9/0x820 [ 363.945965] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.945982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.946000] ? node_tag_clear+0xc2/0x1c0 [ 363.972882] ? fs_reclaim_acquire+0x20/0x20 [ 363.977207] ? lock_downgrade+0x900/0x900 [ 363.981377] ? ___might_sleep+0x1ed/0x300 [ 363.985536] ? arch_local_save_flags+0x40/0x40 [ 363.987999] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 363.990125] ? trace_hardirqs_on+0xbd/0x310 [ 363.990147] __should_failslab+0x124/0x180 [ 363.990164] should_failslab+0x9/0x14 05:43:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x2000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x60}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 364.009745] __kmalloc+0x2d4/0x760 [ 364.013297] ? match_wildcard+0x3c0/0x3c0 [ 364.017444] ? match_strdup+0x5e/0xa0 [ 364.021254] match_strdup+0x5e/0xa0 [ 364.024885] p9_client_create+0x6d8/0x160a [ 364.029131] ? p9_client_read+0xc70/0xc70 [ 364.033285] ? fs_reclaim_acquire+0x20/0x20 [ 364.037611] ? lock_downgrade+0x900/0x900 [ 364.037629] ? __lockdep_init_map+0x105/0x590 [ 364.037645] ? lockdep_init_map+0x9/0x10 [ 364.037657] ? kasan_check_write+0x14/0x20 [ 364.037667] ? __init_rwsem+0x1cc/0x2a0 05:43:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 364.037682] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 364.037691] ? kasan_kmalloc+0xc7/0xe0 [ 364.037710] ? save_stack+0x43/0xd0 [ 364.050369] ? memcpy+0x45/0x50 [ 364.050388] v9fs_session_init+0x217/0x1a70 [ 364.050412] ? v9fs_show_options+0x7e0/0x7e0 [ 364.067445] ? lock_downgrade+0x900/0x900 [ 364.067466] ? ___might_sleep+0x1ed/0x300 [ 364.067484] ? trace_hardirqs_on+0xbd/0x310 [ 364.067502] ? v9fs_mount+0x62/0x8f0 [ 364.083108] ? kasan_unpoison_shadow+0x35/0x50 [ 364.083124] ? kasan_kmalloc+0xc7/0xe0 05:43:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x4000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 364.107834] ? kmem_cache_alloc_trace+0x31f/0x750 [ 364.112681] ? free_pages+0x44/0x50 [ 364.116335] v9fs_mount+0x7d/0x8f0 [ 364.119883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.125522] mount_fs+0xae/0x31d [ 364.128901] vfs_kern_mount.part.35+0xdc/0x4f0 [ 364.133487] ? may_umount+0xb0/0xb0 [ 364.137115] ? _raw_read_unlock+0x2c/0x50 [ 364.141263] ? __get_fs_type+0x97/0xc0 [ 364.145157] do_mount+0x581/0x31f0 [ 364.148694] ? kasan_check_read+0x11/0x20 [ 364.152844] ? do_raw_spin_unlock+0xa7/0x2f0 [ 364.157264] ? copy_mount_string+0x40/0x40 [ 364.161497] ? kasan_check_write+0x14/0x20 [ 364.165733] ? kasan_unpoison_shadow+0x35/0x50 [ 364.170315] ? kasan_kmalloc+0xc7/0xe0 [ 364.174210] ? kmem_cache_alloc_trace+0x31f/0x750 [ 364.179068] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.184611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.190253] ? copy_mount_options+0x288/0x380 [ 364.190270] ksys_mount+0x12d/0x140 [ 364.198377] __x64_sys_mount+0xbe/0x150 [ 364.198395] do_syscall_64+0x1b9/0x820 [ 364.198409] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.198427] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.216537] ? trace_hardirqs_on_caller+0x310/0x310 [ 364.221558] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 364.226590] ? recalc_sigpending_tsk+0x180/0x180 [ 364.231342] ? kasan_check_write+0x14/0x20 [ 364.235580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.240429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.245616] RIP: 0033:0x457579 05:43:42 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffe25, &(0x7f0000000240)=0x9) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/205, 0xcd}, 0x120) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0), 0x4) r0 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2918bb8dacac617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000680)="dfb2e8ae58c47354068f636919b051d0fe1d25fec10b38eaf23f0a4e1dca322763c72f758a8954d95c5080376b97543e8f6dadc7e837b419b127f508", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000480)=""/89, &(0x7f0000000500)=0x59) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x37, 0x5}, &(0x7f0000000440)=0x0) timer_delete(r1) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000005040)=""/4096, 0x1000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace(0x420f, r2) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x6) 05:43:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xffffff7f}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 364.248804] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.248812] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.248827] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 364.248836] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 364.248844] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 364.248851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 364.248863] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:42 executing program 3 (fault-call:6 fault-nth:16): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 364.402490] FAULT_INJECTION: forcing a failure. [ 364.402490] name failslab, interval 1, probability 0, space 0, times 0 [ 364.423847] CPU: 1 PID: 14701 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 364.431162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.440523] Call Trace: [ 364.443123] dump_stack+0x1c4/0x2b4 [ 364.446777] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.451983] should_fail.cold.4+0xa/0x17 [ 364.456054] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.456083] ? save_stack+0xa9/0xd0 [ 364.456100] ? save_stack+0x43/0xd0 [ 364.464804] ? __kasan_slab_free+0x102/0x150 [ 364.472800] ? kfree+0xcf/0x230 [ 364.476084] ? match_number.isra.0+0x19b/0x280 [ 364.480664] ? match_int+0x23/0x30 [ 364.484208] ? parse_opts+0x32e/0x510 [ 364.488014] ? p9_fd_create+0x8b/0x3f0 [ 364.491906] ? p9_client_create+0x866/0x160a [ 364.491926] ? v9fs_session_init+0x217/0x1a70 [ 364.500810] ? mount_fs+0xae/0x31d [ 364.500832] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 364.509106] ? do_mount+0x581/0x31f0 [ 364.512818] ? ksys_mount+0x12d/0x140 [ 364.516630] ? fs_reclaim_acquire+0x20/0x20 [ 364.520954] ? lock_downgrade+0x900/0x900 [ 364.525114] ? ___might_sleep+0x1ed/0x300 [ 364.529282] ? arch_local_save_flags+0x40/0x40 [ 364.533882] __should_failslab+0x124/0x180 [ 364.538098] should_failslab+0x9/0x14 [ 364.541879] __kmalloc+0x2d4/0x760 [ 364.545402] ? match_number.isra.0+0xbf/0x280 [ 364.549881] match_number.isra.0+0xbf/0x280 [ 364.554184] ? match_strdup+0xa0/0xa0 [ 364.557972] ? match_wildcard+0x3c0/0x3c0 [ 364.562107] match_int+0x23/0x30 [ 364.565455] parse_opts+0x32e/0x510 [ 364.569065] ? p9_fd_poll+0x2b0/0x2b0 [ 364.572847] ? kasan_check_write+0x14/0x20 [ 364.577064] ? trace_hardirqs_off+0xb8/0x310 [ 364.581451] ? trace_hardirqs_on+0x310/0x310 [ 364.585846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.591379] ? check_preemption_disabled+0x48/0x200 [ 364.596406] p9_fd_create+0x8b/0x3f0 [ 364.600118] ? p9_fd_show_options+0x1c0/0x1c0 [ 364.604618] ? p9_client_create+0x7c3/0x160a [ 364.609533] p9_client_create+0x866/0x160a [ 364.613778] ? p9_client_read+0xc70/0xc70 [ 364.617930] ? fs_reclaim_acquire+0x20/0x20 [ 364.622254] ? lock_downgrade+0x900/0x900 [ 364.626406] ? __lockdep_init_map+0x105/0x590 [ 364.630908] ? lockdep_init_map+0x9/0x10 [ 364.634967] ? kasan_check_write+0x14/0x20 [ 364.639202] ? __init_rwsem+0x1cc/0x2a0 [ 364.643188] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 364.648207] ? kasan_kmalloc+0xc7/0xe0 [ 364.652102] ? save_stack+0x43/0xd0 [ 364.655730] ? memcpy+0x45/0x50 [ 364.659016] v9fs_session_init+0x217/0x1a70 [ 364.663350] ? v9fs_show_options+0x7e0/0x7e0 [ 364.667755] ? lock_downgrade+0x900/0x900 [ 364.671930] ? ___might_sleep+0x1ed/0x300 [ 364.676079] ? trace_hardirqs_on+0xbd/0x310 [ 364.680400] ? v9fs_mount+0x62/0x8f0 [ 364.684104] ? kasan_unpoison_shadow+0x35/0x50 [ 364.688666] ? kasan_kmalloc+0xc7/0xe0 [ 364.692536] ? kmem_cache_alloc_trace+0x31f/0x750 [ 364.697364] ? free_pages+0x44/0x50 [ 364.700974] v9fs_mount+0x7d/0x8f0 [ 364.704498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.710019] mount_fs+0xae/0x31d [ 364.713367] vfs_kern_mount.part.35+0xdc/0x4f0 [ 364.717930] ? may_umount+0xb0/0xb0 [ 364.721540] ? _raw_read_unlock+0x2c/0x50 [ 364.725666] ? __get_fs_type+0x97/0xc0 [ 364.729537] do_mount+0x581/0x31f0 [ 364.733071] ? copy_mount_string+0x40/0x40 [ 364.737286] ? kasan_unpoison_shadow+0x35/0x50 [ 364.741848] ? kasan_kmalloc+0xc7/0xe0 [ 364.745733] ? kmem_cache_alloc_trace+0x31f/0x750 [ 364.750564] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.756085] ? _copy_from_user+0xdf/0x150 [ 364.760215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.765738] ? copy_mount_options+0x288/0x380 [ 364.770219] ksys_mount+0x12d/0x140 [ 364.773829] __x64_sys_mount+0xbe/0x150 [ 364.777786] do_syscall_64+0x1b9/0x820 [ 364.781652] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.786994] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.791904] ? trace_hardirqs_on_caller+0x310/0x310 [ 364.796902] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 364.801899] ? recalc_sigpending_tsk+0x180/0x180 [ 364.806637] ? kasan_check_write+0x14/0x20 [ 364.810856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.815691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.820868] RIP: 0033:0x457579 [ 364.824039] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.842926] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:43:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xffffff9e}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x30000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="8217000006000000000000150000000004000700000008dacd6d52e9c3a36aac84af000000000000000000001700000009fc0e435d9e55f6494c264d3c6877ca422c001568fa1c3e21dcde7f7f704e9e54ece86b9b5e48ce822f366054ea02bc2f7781a83cfc41ef12cc15ad17c9fb57f857326130fd8e5fcba3fe41f06871f0ebe96de16462c6dc939ba9d7eae143da1a61962eb089a0c77e4fd2e5b32d7e412d5153e4eb26251cf9a12321eda780147ed08272673cbbc43374b0c7a7f64d51d0543042caf6e7eeed3e95038fc265a97e54e1c7890c993502458b8b6f98ce196ca3c3"], 0x30}}, 0x0) 05:43:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 364.850612] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 364.857858] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 364.865103] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 364.872349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 364.879599] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 364.888318] 9pnet: Insufficient options for proto=fd 05:43:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x4c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:43 executing program 3 (fault-call:6 fault-nth:17): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000340), 0x2d8, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) socket$inet6(0xa, 0xfbb692eb6e63a5b0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0xff0, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000006c0)}, {&(0x7f00000017c0)=""/4096, 0x3cc}], 0x3, &(0x7f0000000340)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f0000003280)) [ 364.998312] FAULT_INJECTION: forcing a failure. [ 364.998312] name failslab, interval 1, probability 0, space 0, times 0 05:43:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x40030000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 365.059759] CPU: 1 PID: 14729 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 365.067080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.076432] Call Trace: [ 365.079035] dump_stack+0x1c4/0x2b4 [ 365.082676] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.087906] should_fail.cold.4+0xa/0x17 [ 365.091982] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.097091] ? __kernel_text_address+0xd/0x40 [ 365.101616] ? unwind_get_return_address+0x61/0xa0 05:43:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x700}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 365.106551] ? __save_stack_trace+0x8d/0xf0 [ 365.110885] ? save_stack+0xa9/0xd0 [ 365.114510] ? save_stack+0x43/0xd0 [ 365.118143] ? kasan_kmalloc+0xc7/0xe0 [ 365.122030] ? kstrdup+0x39/0x70 [ 365.125394] ? parse_opts+0x176/0x510 [ 365.129189] ? p9_fd_create+0x8b/0x3f0 [ 365.133101] ? p9_client_create+0x866/0x160a [ 365.137529] ? fs_reclaim_acquire+0x20/0x20 [ 365.141857] ? lock_downgrade+0x900/0x900 [ 365.146010] ? ___might_sleep+0x1ed/0x300 [ 365.150168] ? arch_local_save_flags+0x40/0x40 [ 365.154800] __should_failslab+0x124/0x180 [ 365.159039] should_failslab+0x9/0x14 [ 365.162847] __kmalloc+0x2d4/0x760 [ 365.166385] ? kstrdup+0x39/0x70 [ 365.169749] ? match_number.isra.0+0xbf/0x280 [ 365.174256] match_number.isra.0+0xbf/0x280 [ 365.174272] ? match_strdup+0xa0/0xa0 [ 365.182360] ? match_wildcard+0x3c0/0x3c0 [ 365.186511] match_int+0x23/0x30 [ 365.186527] parse_opts+0x32e/0x510 [ 365.186544] ? p9_fd_poll+0x2b0/0x2b0 [ 365.186560] ? kasan_check_write+0x14/0x20 [ 365.193520] ? trace_hardirqs_off+0xb8/0x310 [ 365.193536] ? trace_hardirqs_on+0x310/0x310 [ 365.193554] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.201604] ? check_preemption_disabled+0x48/0x200 [ 365.201623] p9_fd_create+0x8b/0x3f0 [ 365.201638] ? p9_fd_show_options+0x1c0/0x1c0 [ 365.215937] ? p9_client_create+0x7c3/0x160a [ 365.215957] p9_client_create+0x866/0x160a [ 365.215977] ? p9_client_read+0xc70/0xc70 [ 365.215995] ? fs_reclaim_acquire+0x20/0x20 [ 365.224685] ? lock_downgrade+0x900/0x900 [ 365.224703] ? __lockdep_init_map+0x105/0x590 [ 365.224719] ? lockdep_init_map+0x9/0x10 [ 365.231331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 365.233584] ? kasan_check_write+0x14/0x20 [ 365.271944] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 365.276412] ? __init_rwsem+0x1cc/0x2a0 [ 365.276431] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 365.276442] ? kasan_kmalloc+0xc7/0xe0 [ 365.276460] ? save_stack+0x43/0xd0 [ 365.287951] ? memcpy+0x45/0x50 [ 365.287971] v9fs_session_init+0x217/0x1a70 [ 365.287998] ? v9fs_show_options+0x7e0/0x7e0 [ 365.296942] ? lock_downgrade+0x900/0x900 [ 365.296963] ? ___might_sleep+0x1ed/0x300 [ 365.296979] ? trace_hardirqs_on+0xbd/0x310 [ 365.296996] ? v9fs_mount+0x62/0x8f0 [ 365.332724] ? kasan_unpoison_shadow+0x35/0x50 [ 365.337309] ? kasan_kmalloc+0xc7/0xe0 [ 365.341208] ? kmem_cache_alloc_trace+0x31f/0x750 [ 365.346058] ? free_pages+0x44/0x50 [ 365.349706] v9fs_mount+0x7d/0x8f0 [ 365.353255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.358806] mount_fs+0xae/0x31d [ 365.362185] vfs_kern_mount.part.35+0xdc/0x4f0 [ 365.366789] ? may_umount+0xb0/0xb0 [ 365.370412] ? _raw_read_unlock+0x2c/0x50 [ 365.374542] ? __get_fs_type+0x97/0xc0 [ 365.378414] do_mount+0x581/0x31f0 [ 365.381932] ? kasan_check_read+0x11/0x20 [ 365.386060] ? do_raw_spin_unlock+0xa7/0x2f0 [ 365.390449] ? copy_mount_string+0x40/0x40 [ 365.394680] ? kasan_check_write+0x14/0x20 [ 365.398897] ? kasan_unpoison_shadow+0x35/0x50 [ 365.403458] ? kasan_kmalloc+0xc7/0xe0 [ 365.407329] ? kmem_cache_alloc_trace+0x31f/0x750 [ 365.412154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.417682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.423205] ? copy_mount_options+0x288/0x380 [ 365.427694] ksys_mount+0x12d/0x140 [ 365.431484] __x64_sys_mount+0xbe/0x150 [ 365.435445] do_syscall_64+0x1b9/0x820 [ 365.439311] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 365.444661] ? syscall_return_slowpath+0x5e0/0x5e0 [ 365.449576] ? trace_hardirqs_on_caller+0x310/0x310 [ 365.454572] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 365.459571] ? recalc_sigpending_tsk+0x180/0x180 [ 365.464306] ? kasan_check_write+0x14/0x20 [ 365.468537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.473363] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.478532] RIP: 0033:0x457579 [ 365.481709] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.500595] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 365.508297] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 365.515548] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 365.522799] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 365.530061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 365.537311] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 365.547516] 9pnet: Insufficient options for proto=fd 05:43:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000ffffffffa0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xe202}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40087602, &(0x7f0000000000)=0xff) socket$inet6(0xa, 0x80004, 0x0) 05:43:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x6000000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:43 executing program 3 (fault-call:6 fault-nth:18): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 365.803348] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 365.805255] FAULT_INJECTION: forcing a failure. [ 365.805255] name failslab, interval 1, probability 0, space 0, times 0 [ 365.821861] CPU: 0 PID: 14762 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 365.829138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.838490] Call Trace: [ 365.841094] dump_stack+0x1c4/0x2b4 [ 365.844742] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.849934] ? perf_trace_lock+0x7a0/0x7a0 [ 365.854192] should_fail.cold.4+0xa/0x17 [ 365.858264] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.863370] ? debug_smp_processor_id+0x1c/0x20 [ 365.868048] ? perf_trace_lock_acquire+0x15b/0x800 [ 365.872992] ? perf_trace_lock_acquire+0x15b/0x800 [ 365.877940] ? perf_trace_lock+0x7a0/0x7a0 [ 365.882188] ? __debug_object_init+0x57d/0x1290 [ 365.886865] ? lock_downgrade+0x900/0x900 [ 365.891018] ? lock_downgrade+0x900/0x900 [ 365.895173] ? trace_hardirqs_on+0xbd/0x310 [ 365.899499] ? kasan_check_read+0x11/0x20 [ 365.903651] ? __debug_object_init+0x57d/0x1290 [ 365.908328] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 365.913779] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 365.918363] ? kasan_check_write+0x14/0x20 [ 365.922604] ? lock_acquire+0x1ed/0x520 [ 365.926583] ? p9_client_prepare_req.part.8+0x5d0/0xc30 [ 365.931962] __should_failslab+0x124/0x180 [ 365.936205] should_failslab+0x9/0x14 [ 365.940006] kmem_cache_alloc_trace+0x4b/0x750 [ 365.944594] ? kasan_check_write+0x14/0x20 [ 365.948833] ? do_raw_spin_lock+0xc1/0x200 [ 365.953088] p9_client_prepare_req.part.8+0x68d/0xc30 [ 365.958294] ? p9_free_req.isra.7+0x140/0x140 [ 365.962808] ? p9_pollwait+0x83/0x210 [ 365.966627] ? p9_conn_create+0x720/0x720 [ 365.970776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.976315] p9_client_rpc+0x1c2/0x1480 [ 365.980298] ? p9_fd_poll+0x1e0/0x2b0 [ 365.984112] ? p9_conn_create+0x565/0x720 [ 365.988266] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 365.993643] ? ksys_dup3+0x680/0x680 [ 365.997366] ? p9_fd_poll+0x2b0/0x2b0 [ 366.001177] ? p9_fd_create+0x1a7/0x3f0 [ 366.005161] ? kasan_unpoison_shadow+0x35/0x50 [ 366.009758] ? kmem_cache_alloc_trace+0x31f/0x750 [ 366.014614] ? p9_fd_show_options+0x1c0/0x1c0 [ 366.019147] p9_client_create+0xc1b/0x160a [ 366.023406] ? p9_client_read+0xc70/0xc70 [ 366.027557] ? fs_reclaim_acquire+0x20/0x20 [ 366.031879] ? lock_downgrade+0x900/0x900 [ 366.036125] ? __lockdep_init_map+0x105/0x590 [ 366.040630] ? kasan_check_write+0x14/0x20 [ 366.044861] ? __init_rwsem+0x1cc/0x2a0 [ 366.048843] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 366.053856] ? kasan_kmalloc+0xc7/0xe0 [ 366.053876] ? save_stack+0x43/0xd0 [ 366.053891] ? memcpy+0x45/0x50 [ 366.064654] v9fs_session_init+0x217/0x1a70 [ 366.064682] ? v9fs_show_options+0x7e0/0x7e0 [ 366.073374] ? lock_downgrade+0x900/0x900 [ 366.077530] ? ___might_sleep+0x1ed/0x300 [ 366.081682] ? trace_hardirqs_on+0xbd/0x310 [ 366.086018] ? v9fs_mount+0x62/0x8f0 [ 366.089746] ? kasan_unpoison_shadow+0x35/0x50 [ 366.094330] ? kasan_kmalloc+0xc7/0xe0 [ 366.094351] ? kmem_cache_alloc_trace+0x31f/0x750 [ 366.094368] ? free_pages+0x44/0x50 [ 366.106701] v9fs_mount+0x7d/0x8f0 [ 366.110253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.115794] mount_fs+0xae/0x31d [ 366.115814] vfs_kern_mount.part.35+0xdc/0x4f0 [ 366.123740] ? may_umount+0xb0/0xb0 [ 366.127374] ? _raw_read_unlock+0x2c/0x50 [ 366.131523] ? __get_fs_type+0x97/0xc0 [ 366.135420] do_mount+0x581/0x31f0 [ 366.138967] ? copy_mount_string+0x40/0x40 [ 366.143209] ? kasan_unpoison_shadow+0x35/0x50 [ 366.147792] ? kasan_kmalloc+0xc7/0xe0 [ 366.151685] ? kmem_cache_alloc_trace+0x31f/0x750 [ 366.151702] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.151718] ? _copy_from_user+0xdf/0x150 [ 366.162079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.162095] ? copy_mount_options+0x288/0x380 [ 366.162112] ksys_mount+0x12d/0x140 [ 366.179863] __x64_sys_mount+0xbe/0x150 [ 366.183843] do_syscall_64+0x1b9/0x820 [ 366.183858] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 366.183875] ? syscall_return_slowpath+0x5e0/0x5e0 [ 366.198029] ? trace_hardirqs_on_caller+0x310/0x310 [ 366.203064] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 366.203080] ? recalc_sigpending_tsk+0x180/0x180 [ 366.203098] ? kasan_check_write+0x14/0x20 [ 366.217084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.221939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.227138] RIP: 0033:0x457579 [ 366.230334] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:43:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x7, 0xa, 0x10000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000240)=""/4096) close(r0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) 05:43:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x17}, &(0x7f0000000040)=0x0) timer_gettime(r2, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000), 0x1c) 05:43:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xffffffffa0008000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6c000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000040)='.:\x00', 0x0, 0x0, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000000)={@remote, @multicast2, @remote}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x2179}, {r3, 0x8000}, {r2, 0x4b}, {r4, 0x401}, {r3, 0x1010}, {r3, 0x3000}], 0x6, &(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)={0x1000}, 0x8) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000001c0)={0x7, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000080)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000140)) [ 366.249230] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.249247] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 366.249257] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 366.249264] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 366.249272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 366.249281] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 366.249312] 9pnet: Couldn't grow tag array 05:43:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x80045432, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xf000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:44 executing program 3 (fault-call:6 fault-nth:19): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000000000"], 0xfffffffffffffef8, 0x3) msgrcv(r0, &(0x7f0000000140), 0xffffff33, 0x3, 0x0) socketpair(0x3, 0x6, 0xff, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0xb1, @local, 0x5}, {0xa, 0x4e21, 0x1, @ipv4={[], [], @rand_addr=0x1}, 0x3}, 0x200, [0x3, 0x30000000, 0x9, 0x0, 0x55, 0x4, 0x2, 0x3ff]}, 0x5c) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) 05:43:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000ffffffa400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 366.714189] FAULT_INJECTION: forcing a failure. [ 366.714189] name failslab, interval 1, probability 0, space 0, times 0 [ 366.747205] CPU: 1 PID: 14830 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 366.754522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:43:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x4000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 366.763872] Call Trace: [ 366.763901] dump_stack+0x1c4/0x2b4 [ 366.770104] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.775313] should_fail.cold.4+0xa/0x17 [ 366.779393] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 366.784495] ? kasan_check_write+0x14/0x20 [ 366.784514] ? trace_hardirqs_off+0xb8/0x310 [ 366.793125] ? trace_hardirqs_on+0x310/0x310 [ 366.797543] ? debug_check_no_obj_freed+0x305/0x58d [ 366.802560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.802579] ? check_preemption_disabled+0x48/0x200 05:43:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x60}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 366.813106] ? trace_hardirqs_on+0xbd/0x310 [ 366.817431] ? parse_opts+0x3ba/0x510 [ 366.821235] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 366.826696] ? fs_reclaim_acquire+0x20/0x20 [ 366.831017] ? lock_downgrade+0x900/0x900 [ 366.831035] ? ___might_sleep+0x1ed/0x300 [ 366.839307] ? arch_local_save_flags+0x40/0x40 [ 366.843891] ? p9_fd_poll+0x2b0/0x2b0 [ 366.847695] ? kasan_check_write+0x14/0x20 [ 366.851950] __should_failslab+0x124/0x180 [ 366.856207] should_failslab+0x9/0x14 [ 366.860019] kmem_cache_alloc_trace+0x2d7/0x750 05:43:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x7400000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 366.864696] ? check_preemption_disabled+0x48/0x200 [ 366.869724] p9_fd_create+0x1a7/0x3f0 [ 366.873532] ? p9_fd_show_options+0x1c0/0x1c0 [ 366.878035] ? p9_client_create+0x7c3/0x160a [ 366.882451] p9_client_create+0x866/0x160a [ 366.886696] ? p9_client_read+0xc70/0xc70 [ 366.886715] ? __kmalloc_track_caller+0x57d/0x750 [ 366.886729] ? lock_downgrade+0x900/0x900 [ 366.886745] ? __lockdep_init_map+0x105/0x590 [ 366.895707] ? lockdep_init_map+0x9/0x10 [ 366.908366] ? kasan_check_write+0x14/0x20 05:43:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x9effffff00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 366.910008] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 366.912609] ? __init_rwsem+0x1cc/0x2a0 [ 366.912627] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 366.912642] ? kasan_kmalloc+0xc7/0xe0 [ 366.932779] ? memcpy+0x45/0x50 [ 366.936072] v9fs_session_init+0x217/0x1a70 [ 366.940417] ? v9fs_show_options+0x7e0/0x7e0 [ 366.944825] ? lock_downgrade+0x900/0x900 [ 366.948983] ? ___might_sleep+0x1ed/0x300 [ 366.953128] ? trace_hardirqs_on+0xbd/0x310 [ 366.957443] ? v9fs_mount+0x62/0x8f0 05:43:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x4000000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 366.957459] ? kasan_unpoison_shadow+0x35/0x50 [ 366.957470] ? kasan_kmalloc+0xc7/0xe0 [ 366.957489] ? kmem_cache_alloc_trace+0x31f/0x750 [ 366.974458] ? free_pages+0x44/0x50 [ 366.978095] v9fs_mount+0x7d/0x8f0 [ 366.981647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.984448] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 366.987199] mount_fs+0xae/0x31d [ 366.987221] vfs_kern_mount.part.35+0xdc/0x4f0 [ 366.987239] ? may_umount+0xb0/0xb0 [ 367.006063] ? _raw_read_unlock+0x2c/0x50 [ 367.010214] ? __get_fs_type+0x97/0xc0 [ 367.014108] do_mount+0x581/0x31f0 [ 367.017649] ? kasan_check_read+0x11/0x20 [ 367.017668] ? do_raw_spin_unlock+0xa7/0x2f0 [ 367.017683] ? copy_mount_string+0x40/0x40 [ 367.017697] ? kasan_check_write+0x14/0x20 [ 367.026220] ? kasan_unpoison_shadow+0x35/0x50 [ 367.026233] ? kasan_kmalloc+0xc7/0xe0 [ 367.026253] ? kmem_cache_alloc_trace+0x31f/0x750 [ 367.047561] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 367.047950] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.060740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.066292] ? copy_mount_options+0x288/0x380 [ 367.070808] ksys_mount+0x12d/0x140 [ 367.074436] __x64_sys_mount+0xbe/0x150 [ 367.078419] do_syscall_64+0x1b9/0x820 [ 367.082309] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 367.082325] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.082344] ? trace_hardirqs_on_caller+0x310/0x310 [ 367.092602] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 367.092616] ? recalc_sigpending_tsk+0x180/0x180 [ 367.092631] ? kasan_check_write+0x14/0x20 [ 367.111625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.116480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.121665] RIP: 0033:0x457579 [ 367.124849] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.143751] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 367.151474] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 367.158746] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 367.166020] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 367.173296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 367.180550] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5410, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x7a00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x48000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000a4ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:45 executing program 3 (fault-call:6 fault-nth:20): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 367.621886] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 367.636269] FAULT_INJECTION: forcing a failure. [ 367.636269] name failslab, interval 1, probability 0, space 0, times 0 [ 367.647494] CPU: 1 PID: 14879 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 367.654765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.664118] Call Trace: [ 367.666711] dump_stack+0x1c4/0x2b4 [ 367.670353] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.675548] ? perf_trace_lock+0x7a0/0x7a0 [ 367.679800] should_fail.cold.4+0xa/0x17 [ 367.683868] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.683888] ? debug_smp_processor_id+0x1c/0x20 [ 367.693637] ? perf_trace_lock_acquire+0x15b/0x800 [ 367.698567] ? perf_trace_lock_acquire+0x15b/0x800 [ 367.698587] ? perf_trace_lock+0x7a0/0x7a0 [ 367.698609] ? __debug_object_init+0x57d/0x1290 [ 367.712391] ? lock_downgrade+0x900/0x900 [ 367.712407] ? lock_downgrade+0x900/0x900 05:43:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x3f000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 367.720675] ? trace_hardirqs_on+0xbd/0x310 [ 367.724998] ? kasan_check_read+0x11/0x20 [ 367.725010] ? __debug_object_init+0x57d/0x1290 [ 367.725029] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 367.739247] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 367.743852] ? kasan_check_write+0x14/0x20 [ 367.748099] ? lock_acquire+0x1ed/0x520 [ 367.752075] ? p9_client_prepare_req.part.8+0x5d0/0xc30 [ 367.757447] __should_failslab+0x124/0x180 [ 367.761689] should_failslab+0x9/0x14 [ 367.765490] kmem_cache_alloc_trace+0x4b/0x750 [ 367.765504] ? kasan_check_write+0x14/0x20 [ 367.765522] ? do_raw_spin_lock+0xc1/0x200 [ 367.778542] p9_client_prepare_req.part.8+0x68d/0xc30 [ 367.783742] ? p9_free_req.isra.7+0x140/0x140 [ 367.788243] ? p9_pollwait+0x83/0x210 [ 367.792055] ? p9_conn_create+0x720/0x720 [ 367.792073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.792091] p9_client_rpc+0x1c2/0x1480 [ 367.801738] ? p9_fd_poll+0x1e0/0x2b0 [ 367.809504] ? p9_conn_create+0x565/0x720 [ 367.813661] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 367.819034] ? ksys_dup3+0x680/0x680 05:43:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xe2020000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 367.822766] ? p9_fd_poll+0x2b0/0x2b0 [ 367.826566] ? p9_fd_create+0x1a7/0x3f0 [ 367.830544] ? kasan_unpoison_shadow+0x35/0x50 [ 367.835154] ? kmem_cache_alloc_trace+0x31f/0x750 [ 367.840011] ? p9_fd_show_options+0x1c0/0x1c0 [ 367.844515] p9_client_create+0xc1b/0x160a [ 367.848761] ? p9_client_read+0xc70/0xc70 [ 367.852935] ? __kmalloc_track_caller+0x57d/0x750 [ 367.857789] ? lock_downgrade+0x900/0x900 [ 367.861943] ? __lockdep_init_map+0x105/0x590 [ 367.866441] ? kasan_check_write+0x14/0x20 [ 367.866455] ? __init_rwsem+0x1cc/0x2a0 [ 367.866472] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 367.866483] ? kasan_kmalloc+0xc7/0xe0 [ 367.866503] ? memcpy+0x45/0x50 [ 367.886969] v9fs_session_init+0x217/0x1a70 [ 367.891312] ? v9fs_show_options+0x7e0/0x7e0 [ 367.895729] ? lock_downgrade+0x900/0x900 [ 367.899899] ? ___might_sleep+0x1ed/0x300 [ 367.904057] ? trace_hardirqs_on+0xbd/0x310 [ 367.908393] ? v9fs_mount+0x62/0x8f0 [ 367.912108] ? kasan_unpoison_shadow+0x35/0x50 [ 367.916691] ? kasan_kmalloc+0xc7/0xe0 05:43:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x400300}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 367.920587] ? kmem_cache_alloc_trace+0x31f/0x750 [ 367.925449] ? free_pages+0x44/0x50 [ 367.929094] v9fs_mount+0x7d/0x8f0 [ 367.932645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.938191] mount_fs+0xae/0x31d [ 367.941568] vfs_kern_mount.part.35+0xdc/0x4f0 [ 367.946157] ? may_umount+0xb0/0xb0 [ 367.949787] ? _raw_read_unlock+0x2c/0x50 [ 367.953945] ? __get_fs_type+0x97/0xc0 [ 367.957847] do_mount+0x581/0x31f0 [ 367.961407] ? kasan_check_read+0x11/0x20 [ 367.965568] ? do_raw_spin_unlock+0xa7/0x2f0 [ 367.969984] ? copy_mount_string+0x40/0x40 [ 367.974218] ? kasan_check_write+0x14/0x20 [ 367.978463] ? kasan_unpoison_shadow+0x35/0x50 [ 367.983047] ? kasan_kmalloc+0xc7/0xe0 [ 367.986958] ? kmem_cache_alloc_trace+0x31f/0x750 [ 367.991807] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.997352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.002902] ? copy_mount_options+0x288/0x380 [ 368.007412] ksys_mount+0x12d/0x140 [ 368.011052] __x64_sys_mount+0xbe/0x150 [ 368.015036] do_syscall_64+0x1b9/0x820 [ 368.018929] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 368.024302] ? syscall_return_slowpath+0x5e0/0x5e0 [ 368.029231] ? trace_hardirqs_on_caller+0x310/0x310 [ 368.029249] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 368.029263] ? recalc_sigpending_tsk+0x180/0x180 [ 368.029279] ? kasan_check_write+0x14/0x20 [ 368.039282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.039301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.039315] RIP: 0033:0x457579 [ 368.061449] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.080346] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.088037] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 368.095290] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 368.102551] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 368.109799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 368.117047] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 368.124314] 9pnet: Couldn't grow tag array 05:43:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5413, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x600}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:46 executing program 3 (fault-call:6 fault-nth:21): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 368.547805] FAULT_INJECTION: forcing a failure. [ 368.547805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.559665] CPU: 1 PID: 14923 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 368.566953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.576310] Call Trace: [ 368.578908] dump_stack+0x1c4/0x2b4 [ 368.582553] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.587753] ? mark_held_locks+0x130/0x130 [ 368.592011] should_fail.cold.4+0xa/0x17 [ 368.596441] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.601553] ? mark_held_locks+0x130/0x130 [ 368.605790] ? check_preemption_disabled+0x48/0x200 [ 368.610839] ? mark_held_locks+0x130/0x130 [ 368.610859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.610873] ? check_preemption_disabled+0x48/0x200 [ 368.610891] ? debug_smp_processor_id+0x1c/0x20 [ 368.630304] ? mark_held_locks+0x130/0x130 [ 368.634539] ? mark_held_locks+0x130/0x130 [ 368.638780] ? perf_trace_lock+0x7a0/0x7a0 [ 368.643015] ? perf_trace_lock_acquire+0x15b/0x800 [ 368.647954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.653494] ? should_fail+0x22d/0xd01 [ 368.657388] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.662497] ? debug_smp_processor_id+0x1c/0x20 [ 368.667173] ? perf_trace_lock_acquire+0x15b/0x800 [ 368.672114] __alloc_pages_nodemask+0x34b/0xde0 [ 368.676793] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 368.681826] ? __debug_object_init+0x57d/0x1290 [ 368.681843] ? lock_downgrade+0x900/0x900 [ 368.681866] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 368.690654] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 368.690671] ? kasan_check_write+0x14/0x20 [ 368.690691] ? trace_hardirqs_off+0xb8/0x310 [ 368.709318] cache_grow_begin+0x91/0x8c0 [ 368.713389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.718933] ? check_preemption_disabled+0x48/0x200 [ 368.723951] kmem_cache_alloc_trace+0x67e/0x750 [ 368.723963] ? kasan_check_write+0x14/0x20 [ 368.723986] p9_client_prepare_req.part.8+0x68d/0xc30 [ 368.738037] ? p9_free_req.isra.7+0x140/0x140 [ 368.738053] ? p9_pollwait+0x83/0x210 [ 368.738066] ? p9_conn_create+0x720/0x720 [ 368.738079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.738096] p9_client_rpc+0x1c2/0x1480 [ 368.759974] ? p9_fd_poll+0x1e0/0x2b0 [ 368.763792] ? p9_conn_create+0x565/0x720 [ 368.767957] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 368.773318] ? ksys_dup3+0x680/0x680 [ 368.777018] ? p9_fd_poll+0x2b0/0x2b0 [ 368.780799] ? p9_fd_create+0x1a7/0x3f0 [ 368.784763] ? kasan_unpoison_shadow+0x35/0x50 [ 368.789333] ? kmem_cache_alloc_trace+0x31f/0x750 [ 368.794162] ? p9_fd_show_options+0x1c0/0x1c0 [ 368.798646] p9_client_create+0xc1b/0x160a [ 368.802870] ? p9_client_read+0xc70/0xc70 [ 368.807003] ? fs_reclaim_acquire+0x20/0x20 [ 368.811308] ? lock_downgrade+0x900/0x900 [ 368.815447] ? __lockdep_init_map+0x105/0x590 [ 368.819937] ? kasan_check_write+0x14/0x20 [ 368.824153] ? __init_rwsem+0x1cc/0x2a0 [ 368.828108] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 368.833105] ? kasan_kmalloc+0xc7/0xe0 [ 368.836977] ? save_stack+0x43/0xd0 [ 368.840584] ? memcpy+0x45/0x50 [ 368.843848] v9fs_session_init+0x217/0x1a70 [ 368.848160] ? v9fs_show_options+0x7e0/0x7e0 [ 368.852546] ? lock_downgrade+0x900/0x900 [ 368.856695] ? ___might_sleep+0x1ed/0x300 [ 368.860827] ? trace_hardirqs_on+0xbd/0x310 [ 368.865132] ? v9fs_mount+0x62/0x8f0 [ 368.868827] ? kasan_unpoison_shadow+0x35/0x50 [ 368.873392] ? kasan_kmalloc+0xc7/0xe0 [ 368.877267] ? kmem_cache_alloc_trace+0x31f/0x750 [ 368.882090] ? free_pages+0x44/0x50 [ 368.885699] v9fs_mount+0x7d/0x8f0 [ 368.889257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.894782] mount_fs+0xae/0x31d [ 368.898141] vfs_kern_mount.part.35+0xdc/0x4f0 [ 368.902709] ? may_umount+0xb0/0xb0 [ 368.906319] ? _raw_read_unlock+0x2c/0x50 [ 368.910457] ? __get_fs_type+0x97/0xc0 [ 368.914327] do_mount+0x581/0x31f0 [ 368.917862] ? kasan_check_read+0x11/0x20 [ 368.922012] ? do_raw_spin_unlock+0xa7/0x2f0 [ 368.926413] ? copy_mount_string+0x40/0x40 [ 368.930627] ? kasan_check_write+0x14/0x20 [ 368.934852] ? kasan_unpoison_shadow+0x35/0x50 [ 368.939417] ? kasan_kmalloc+0xc7/0xe0 [ 368.943289] ? kmem_cache_alloc_trace+0x31f/0x750 [ 368.948242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.953763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.959277] ? copy_mount_options+0x288/0x380 [ 368.963752] ksys_mount+0x12d/0x140 [ 368.967371] __x64_sys_mount+0xbe/0x150 [ 368.971349] do_syscall_64+0x1b9/0x820 [ 368.975222] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 368.980578] ? syscall_return_slowpath+0x5e0/0x5e0 [ 368.985490] ? trace_hardirqs_on_caller+0x310/0x310 [ 368.990495] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 368.995491] ? recalc_sigpending_tsk+0x180/0x180 [ 369.000241] ? kasan_check_write+0x14/0x20 [ 369.004457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.009281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.014450] RIP: 0033:0x457579 [ 369.017624] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.036507] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 05:43:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r2}) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000040)="153f62344885d25d766070") ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r2}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x5) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000300)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2, 0x5}) 05:43:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xf00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:47 executing program 3 (fault-call:6 fault-nth:22): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 369.044197] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 369.051464] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 369.058713] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 369.065962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 369.073210] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x3}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 369.122033] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x3f00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 369.183677] FAULT_INJECTION: forcing a failure. [ 369.183677] name failslab, interval 1, probability 0, space 0, times 0 [ 369.227852] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 369.238696] CPU: 1 PID: 14955 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 369.245994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.255357] Call Trace: [ 369.257954] dump_stack+0x1c4/0x2b4 [ 369.261595] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.266799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.272346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.277884] should_fail.cold.4+0xa/0x17 [ 369.281931] ? finish_task_switch+0x1b5/0x900 [ 369.286411] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.291507] ? preempt_notifier_register+0x200/0x200 [ 369.296593] ? __switch_to_asm+0x34/0x70 [ 369.300633] ? __switch_to_asm+0x34/0x70 [ 369.304674] ? __switch_to_asm+0x40/0x70 [ 369.308713] ? __switch_to_asm+0x34/0x70 [ 369.312755] ? __switch_to_asm+0x40/0x70 [ 369.316801] ? __switch_to_asm+0x34/0x70 [ 369.320850] ? __switch_to_asm+0x40/0x70 [ 369.324905] ? __switch_to_asm+0x34/0x70 [ 369.328947] ? __switch_to_asm+0x40/0x70 [ 369.332986] ? __switch_to_asm+0x34/0x70 [ 369.337027] ? __switch_to_asm+0x40/0x70 [ 369.341065] ? __switch_to_asm+0x34/0x70 [ 369.345107] ? __switch_to_asm+0x40/0x70 [ 369.349160] ? __schedule+0x874/0x1ed0 [ 369.353043] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 369.357779] ? do_mount+0x581/0x31f0 [ 369.361475] ? ksys_mount+0x12d/0x140 [ 369.365260] ? __sched_text_start+0x8/0x8 [ 369.369395] ? cache_grow_end+0xa8/0x190 [ 369.373441] ? retint_kernel+0x2d/0x2d [ 369.377318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.382054] ? trace_hardirqs_off+0x310/0x310 [ 369.386537] ? ___might_sleep+0x1ed/0x300 [ 369.390668] ? kasan_check_read+0x11/0x20 [ 369.394800] ? arch_local_save_flags+0x40/0x40 [ 369.399369] __should_failslab+0x124/0x180 [ 369.403595] should_failslab+0x9/0x14 [ 369.407384] __kmalloc+0x2d4/0x760 [ 369.410907] ? preempt_schedule+0x4d/0x60 [ 369.415078] ? ___preempt_schedule+0x16/0x18 [ 369.419470] ? p9_fcall_alloc+0x1e/0x90 [ 369.423435] p9_fcall_alloc+0x1e/0x90 [ 369.427218] p9_client_prepare_req.part.8+0x887/0xc30 [ 369.432396] ? p9_free_req.isra.7+0x140/0x140 [ 369.437123] ? p9_pollwait+0x83/0x210 [ 369.440905] ? p9_conn_create+0x720/0x720 [ 369.445046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.450570] p9_client_rpc+0x1c2/0x1480 [ 369.454527] ? p9_fd_poll+0x1e0/0x2b0 [ 369.458314] ? p9_conn_create+0x565/0x720 [ 369.462458] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 369.467816] ? ksys_dup3+0x680/0x680 [ 369.471512] ? p9_fd_poll+0x2b0/0x2b0 [ 369.475295] ? p9_fd_create+0x1a7/0x3f0 [ 369.479252] ? kasan_unpoison_shadow+0x35/0x50 [ 369.483845] ? kmem_cache_alloc_trace+0x31f/0x750 [ 369.488687] ? p9_fd_show_options+0x1c0/0x1c0 [ 369.493169] p9_client_create+0xc1b/0x160a [ 369.497392] ? p9_client_read+0xc70/0xc70 [ 369.501528] ? fs_reclaim_acquire+0x20/0x20 [ 369.505835] ? lock_downgrade+0x900/0x900 [ 369.509967] ? __lockdep_init_map+0x105/0x590 [ 369.514450] ? kasan_check_write+0x14/0x20 [ 369.518666] ? __init_rwsem+0x1cc/0x2a0 [ 369.522622] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 369.527617] ? kasan_kmalloc+0xc7/0xe0 [ 369.531491] ? save_stack+0x43/0xd0 [ 369.535097] ? memcpy+0x45/0x50 [ 369.538365] v9fs_session_init+0x217/0x1a70 [ 369.542675] ? v9fs_show_options+0x7e0/0x7e0 [ 369.547064] ? lock_downgrade+0x900/0x900 [ 369.551198] ? ___might_sleep+0x1ed/0x300 [ 369.555329] ? trace_hardirqs_on+0xbd/0x310 [ 369.559636] ? v9fs_mount+0x62/0x8f0 [ 369.563330] ? kasan_unpoison_shadow+0x35/0x50 [ 369.567895] ? kasan_kmalloc+0xc7/0xe0 [ 369.571767] ? kmem_cache_alloc_trace+0x31f/0x750 [ 369.576592] ? free_pages+0x44/0x50 [ 369.580202] v9fs_mount+0x7d/0x8f0 [ 369.583724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.589266] mount_fs+0xae/0x31d [ 369.592621] vfs_kern_mount.part.35+0xdc/0x4f0 [ 369.597185] ? may_umount+0xb0/0xb0 [ 369.600796] ? _raw_read_unlock+0x2c/0x50 [ 369.604927] ? __get_fs_type+0x97/0xc0 [ 369.608798] do_mount+0x581/0x31f0 [ 369.612319] ? trace_hardirqs_off+0x310/0x310 [ 369.616805] ? retint_kernel+0x1b/0x2d [ 369.620682] ? copy_mount_string+0x40/0x40 [ 369.624900] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.629640] ? trace_hardirqs_off+0xaf/0x310 [ 369.634030] ? retint_kernel+0x2d/0x2d [ 369.637903] ? copy_mount_options+0x214/0x380 [ 369.642379] ? copy_mount_options+0x217/0x380 [ 369.646857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.652375] ? copy_mount_options+0x288/0x380 [ 369.656854] ksys_mount+0x12d/0x140 [ 369.660466] __x64_sys_mount+0xbe/0x150 [ 369.664423] do_syscall_64+0x1b9/0x820 [ 369.668307] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 369.673657] ? syscall_return_slowpath+0x5e0/0x5e0 [ 369.678569] ? trace_hardirqs_on_caller+0x310/0x310 [ 369.683566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 369.688565] ? recalc_sigpending_tsk+0x180/0x180 [ 369.693313] ? kasan_check_write+0x14/0x20 [ 369.697540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.702368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.707541] RIP: 0033:0x457579 [ 369.710734] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.729640] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.737333] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 369.744595] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 369.751846] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 369.759099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 369.766352] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 369.777710] 9pnet: Couldn't grow tag array [ 369.808130] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5422, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x424e00, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000580)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f00000000c0)) 05:43:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x7}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:48 executing program 3 (fault-call:6 fault-nth:23): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 369.918063] FAULT_INJECTION: forcing a failure. [ 369.918063] name failslab, interval 1, probability 0, space 0, times 0 [ 369.936722] f2fs_msg: 14 callbacks suppressed [ 369.936741] F2FS-fs (loop1): Fix alignment : done, start(5120) end(19456) block(13312) [ 369.951107] CPU: 0 PID: 14974 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 369.958397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 369.958404] Call Trace: [ 369.958428] dump_stack+0x1c4/0x2b4 [ 369.958450] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.979187] should_fail.cold.4+0xa/0x17 [ 369.983261] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.983280] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 369.983298] ? __kasan_slab_free+0x119/0x150 [ 369.998219] ? p9_client_create+0xe45/0x160a [ 370.002639] ? p9_free_req.isra.7+0x95/0x140 [ 370.007055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.012598] ? p9_client_create+0x358/0x160a 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 370.017023] ? fs_reclaim_acquire+0x20/0x20 [ 370.021352] ? lock_downgrade+0x900/0x900 [ 370.025511] ? ___might_sleep+0x1ed/0x300 [ 370.029184] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 370.029663] ? arch_local_save_flags+0x40/0x40 [ 370.029682] ? kasan_check_write+0x14/0x20 [ 370.029710] __should_failslab+0x124/0x180 [ 370.049989] should_failslab+0x9/0x14 [ 370.053813] __kmalloc_track_caller+0x2d0/0x750 [ 370.058480] ? save_stack+0x43/0xd0 [ 370.058499] ? v9fs_session_init+0x4ec/0x1a70 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 370.058516] kstrdup+0x39/0x70 [ 370.058529] v9fs_session_init+0x4ec/0x1a70 [ 370.058554] ? v9fs_show_options+0x7e0/0x7e0 [ 370.066635] ? lock_downgrade+0x900/0x900 [ 370.066655] ? ___might_sleep+0x1ed/0x300 [ 370.066697] ? trace_hardirqs_on+0xbd/0x310 [ 370.066714] ? v9fs_mount+0x62/0x8f0 [ 370.095049] ? kasan_unpoison_shadow+0x35/0x50 [ 370.099641] ? kasan_kmalloc+0xc7/0xe0 [ 370.103535] ? kmem_cache_alloc_trace+0x31f/0x750 [ 370.108388] ? free_pages+0x44/0x50 [ 370.112040] v9fs_mount+0x7d/0x8f0 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 370.112056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.112073] mount_fs+0xae/0x31d [ 370.121117] vfs_kern_mount.part.35+0xdc/0x4f0 [ 370.121131] ? may_umount+0xb0/0xb0 [ 370.121143] ? _raw_read_unlock+0x2c/0x50 [ 370.121158] ? __get_fs_type+0x97/0xc0 [ 370.140709] do_mount+0x581/0x31f0 [ 370.144261] ? copy_mount_string+0x40/0x40 [ 370.148503] ? kasan_unpoison_shadow+0x35/0x50 [ 370.153092] ? kasan_kmalloc+0xc7/0xe0 [ 370.156998] ? kmem_cache_alloc_trace+0x31f/0x750 [ 370.161846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.167384] ? _copy_from_user+0xdf/0x150 [ 370.171533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.171566] ? copy_mount_options+0x288/0x380 [ 370.171584] ksys_mount+0x12d/0x140 [ 370.185218] __x64_sys_mount+0xbe/0x150 [ 370.185239] do_syscall_64+0x1b9/0x820 [ 370.185257] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 370.198538] ? syscall_return_slowpath+0x5e0/0x5e0 [ 370.203476] ? trace_hardirqs_on_caller+0x310/0x310 [ 370.208501] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 370.213524] ? recalc_sigpending_tsk+0x180/0x180 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x7a00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 370.218285] ? kasan_check_write+0x14/0x20 [ 370.222528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.227380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.227395] RIP: 0033:0x457579 [ 370.235745] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.235753] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.235772] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 370.265320] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 370.269686] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 370.269696] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 370.269704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 370.269737] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 370.306415] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.315969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 370.342916] attempt to access beyond end of device [ 370.348446] loop1: rw=12288, want=8200, limit=64 [ 370.354386] attempt to access beyond end of device [ 370.362032] loop1: rw=12288, want=12296, limit=64 [ 370.375354] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 370.384467] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.392391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 370.400211] attempt to access beyond end of device [ 370.409431] loop1: rw=12288, want=8200, limit=64 [ 370.420584] attempt to access beyond end of device [ 370.426443] loop1: rw=12288, want=12296, limit=64 [ 370.431411] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 370.471956] F2FS-fs (loop1): Fix alignment : done, start(5120) end(19456) block(13312) [ 370.480645] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.487884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 370.495566] attempt to access beyond end of device [ 370.500689] loop1: rw=12288, want=8200, limit=64 [ 370.505576] attempt to access beyond end of device [ 370.510714] loop1: rw=12288, want=12296, limit=64 [ 370.516138] attempt to access beyond end of device [ 370.521266] loop1: rw=12288, want=8200, limit=64 [ 370.526245] attempt to access beyond end of device [ 370.531230] loop1: rw=12288, want=12296, limit=64 05:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x4c00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6c00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:48 executing program 3 (fault-call:6 fault-nth:24): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:48 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 05:43:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8200000, &(0x7f0000000180), &(0x7f0000000400), &(0x7f00000003c0), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x80, 0xfffffffffffffffb, 0x44, 0x3, 0x1, 0xffffffffffff7fff}, 0xa000000000}, 0xa) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='attr/exec\x00', &(0x7f0000000380)='/posix_acl_access\x00'], &(0x7f0000000340)=[&(0x7f0000000240)='(\x00', &(0x7f0000000280)='attr/exec\x00', &(0x7f00000002c0)='nodevtrustedppp0:\x00', &(0x7f0000000300)='attr/exec\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x150) recvfrom$unix(r3, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) fcntl$setown(r2, 0x8, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(r2, 0xffffffffffffffff) tkill(0x0, 0x16) [ 370.825864] FAULT_INJECTION: forcing a failure. [ 370.825864] name failslab, interval 1, probability 0, space 0, times 0 [ 370.837093] CPU: 0 PID: 15033 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 370.844373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.853725] Call Trace: [ 370.856331] dump_stack+0x1c4/0x2b4 [ 370.859967] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.865174] ? update_curr+0x4ec/0xbe0 [ 370.869082] should_fail.cold.4+0xa/0x17 [ 370.873154] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.878268] ? debug_smp_processor_id+0x1c/0x20 [ 370.882945] ? perf_trace_lock_acquire+0x15b/0x800 [ 370.887884] ? select_task_rq_fair+0x34f0/0x34f0 [ 370.892687] ? mark_held_locks+0x130/0x130 [ 370.896926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.902466] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 370.907666] ? trace_hardirqs_on+0x310/0x310 [ 370.912080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.917629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.923177] ? perf_trace_lock_acquire+0x15b/0x800 [ 370.928109] ? finish_task_switch+0x1f5/0x900 [ 370.932627] __should_failslab+0x124/0x180 [ 370.936867] should_failslab+0x9/0x14 [ 370.940676] kmem_cache_alloc+0x47/0x730 [ 370.944743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.950282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.955831] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 370.961550] radix_tree_extend+0x294/0x660 [ 370.965792] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 370.971699] ? lock_downgrade+0x900/0x900 [ 370.975857] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 370.981663] ? kasan_check_read+0x11/0x20 [ 370.985815] idr_get_free+0x83d/0xec0 [ 370.989620] ? is_bpf_text_address+0xd3/0x170 [ 370.994103] ? ida_pre_get+0x130/0x130 [ 370.997985] ? debug_smp_processor_id+0x1c/0x20 [ 371.002646] ? perf_trace_lock_acquire+0x15b/0x800 [ 371.007564] ? perf_trace_lock+0x7a0/0x7a0 [ 371.011781] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 371.016791] ? mark_held_locks+0x130/0x130 [ 371.021035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.026567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.032088] ? check_preemption_disabled+0x48/0x200 [ 371.037091] idr_alloc_u32+0x201/0x3f0 [ 371.040965] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 371.045796] ? p9_idpool_get+0x23/0x90 [ 371.049683] idr_alloc+0x111/0x1b0 [ 371.053217] ? idr_alloc_u32+0x3f0/0x3f0 [ 371.057262] ? do_raw_spin_lock+0xc1/0x200 [ 371.061483] p9_idpool_get+0x3d/0x90 [ 371.065195] p9_client_prepare_req.part.8+0xec/0xc30 [ 371.070298] ? __kernel_text_address+0xd/0x40 [ 371.074806] ? unwind_get_return_address+0x61/0xa0 [ 371.079740] ? p9_free_req.isra.7+0x140/0x140 [ 371.084238] ? idr_get_free+0xa83/0xec0 [ 371.088220] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.093758] ? replace_slot+0x151/0x520 [ 371.097736] p9_client_rpc+0x1c2/0x1480 [ 371.101720] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 371.107086] ? is_bpf_text_address+0xd3/0x170 [ 371.111589] ? __radix_tree_replace+0x258/0x3c0 [ 371.116269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.121804] ? node_tag_clear+0xc2/0x1c0 [ 371.125868] ? p9_fid_create+0x1e2/0x2b0 [ 371.129929] ? lock_downgrade+0x900/0x900 [ 371.134074] ? idr_alloc_u32+0x235/0x3f0 [ 371.138138] ? trace_hardirqs_on+0xbd/0x310 [ 371.142456] ? kasan_check_read+0x11/0x20 [ 371.146609] ? p9_fid_create+0x1e2/0x2b0 [ 371.150674] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 371.156124] ? kasan_check_write+0x14/0x20 [ 371.160363] ? do_raw_spin_lock+0xc1/0x200 [ 371.164702] p9_client_attach+0x18c/0x860 [ 371.168852] ? debug_check_no_obj_freed+0x305/0x58d 05:43:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200400) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x2}, &(0x7f0000000180)=0x8) r3 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) [ 371.173864] ? p9_client_walk+0xb30/0xb30 [ 371.178016] ? check_preemption_disabled+0x48/0x200 [ 371.183038] ? trace_hardirqs_on+0xbd/0x310 [ 371.187360] ? v9fs_session_init+0xd46/0x1a70 [ 371.191856] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 371.197314] ? __kasan_slab_free+0x119/0x150 [ 371.201734] v9fs_session_init+0xf4d/0x1a70 [ 371.206057] ? v9fs_session_init+0xf4d/0x1a70 [ 371.210566] ? v9fs_show_options+0x7e0/0x7e0 [ 371.214982] ? lock_downgrade+0x900/0x900 [ 371.219140] ? ___might_sleep+0x1ed/0x300 [ 371.223295] ? trace_hardirqs_on+0xbd/0x310 05:43:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x43e) [ 371.227653] ? v9fs_mount+0x62/0x8f0 [ 371.231369] ? kasan_unpoison_shadow+0x35/0x50 [ 371.235946] ? kasan_kmalloc+0xc7/0xe0 [ 371.239842] ? kmem_cache_alloc_trace+0x31f/0x750 [ 371.244698] ? free_pages+0x44/0x50 [ 371.248340] v9fs_mount+0x7d/0x8f0 [ 371.251889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.257438] mount_fs+0xae/0x31d [ 371.260820] vfs_kern_mount.part.35+0xdc/0x4f0 [ 371.265426] ? may_umount+0xb0/0xb0 [ 371.269055] ? _raw_read_unlock+0x2c/0x50 [ 371.273209] ? __get_fs_type+0x97/0xc0 [ 371.277109] do_mount+0x581/0x31f0 [ 371.280662] ? copy_mount_string+0x40/0x40 [ 371.284910] ? kasan_unpoison_shadow+0x35/0x50 [ 371.289486] ? kasan_kmalloc+0xc7/0xe0 [ 371.293368] ? kmem_cache_alloc_trace+0x31f/0x750 [ 371.298207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.303732] ? copy_mount_options+0x288/0x380 [ 371.308218] ksys_mount+0x12d/0x140 [ 371.311831] __x64_sys_mount+0xbe/0x150 [ 371.315810] do_syscall_64+0x1b9/0x820 [ 371.319683] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 371.325033] ? syscall_return_slowpath+0x5e0/0x5e0 [ 371.329949] ? trace_hardirqs_on_caller+0x310/0x310 [ 371.334953] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 371.339951] ? recalc_sigpending_tsk+0x180/0x180 [ 371.344690] ? kasan_check_write+0x14/0x20 [ 371.348914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.353761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.358933] RIP: 0033:0x457579 [ 371.362112] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.380997] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.388690] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 371.395947] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 371.403219] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 371.410478] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 371.417733] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 371.431278] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 371.471199] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x8000a0ffffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 371.629869] netlink: 'syz-executor4': attribute type 3 has an invalid length. 05:43:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x700000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f00000002c0)=[&(0x7f0000000200)='.ppp0mime_type/.\x00', &(0x7f0000000240)='-):cgroupselinuxem0#cpuset\x00']) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) socket$inet6_dccp(0xa, 0x6, 0x0) close(r0) 05:43:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:50 executing program 3 (fault-call:6 fault-nth:25): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x68000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 372.346697] FAULT_INJECTION: forcing a failure. [ 372.346697] name failslab, interval 1, probability 0, space 0, times 0 [ 372.350104] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 372.373696] CPU: 0 PID: 15087 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 372.381004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.390356] Call Trace: [ 372.392955] dump_stack+0x1c4/0x2b4 [ 372.396611] ? dump_stack_print_info.cold.2+0x52/0x52 [ 372.401822] should_fail.cold.4+0xa/0x17 [ 372.405895] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 372.411011] ? save_stack+0xa9/0xd0 [ 372.414647] ? save_stack+0x43/0xd0 [ 372.418274] ? kasan_kmalloc+0xc7/0xe0 [ 372.422180] ? __kmalloc_track_caller+0x14a/0x750 [ 372.427025] ? kstrdup+0x39/0x70 [ 372.430396] ? v9fs_session_init+0x4ec/0x1a70 [ 372.434893] ? v9fs_mount+0x7d/0x8f0 [ 372.438626] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 372.443378] ? do_mount+0x581/0x31f0 [ 372.447090] ? ksys_mount+0x12d/0x140 [ 372.450897] ? __x64_sys_mount+0xbe/0x150 [ 372.455048] ? do_syscall_64+0x1b9/0x820 [ 372.459110] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.464502] ? fs_reclaim_acquire+0x20/0x20 [ 372.468830] ? lock_downgrade+0x900/0x900 [ 372.472983] ? ___might_sleep+0x1ed/0x300 [ 372.477134] ? arch_local_save_flags+0x40/0x40 [ 372.481716] ? trace_hardirqs_on+0xbd/0x310 [ 372.486047] __should_failslab+0x124/0x180 [ 372.490281] should_failslab+0x9/0x14 [ 372.494080] __kmalloc+0x2d4/0x760 [ 372.497625] ? match_wildcard+0x3c0/0x3c0 [ 372.501768] ? save_stack+0x43/0xd0 [ 372.505391] ? match_strdup+0x5e/0xa0 [ 372.509194] match_strdup+0x5e/0xa0 [ 372.512823] v9fs_session_init+0x782/0x1a70 [ 372.517164] ? v9fs_show_options+0x7e0/0x7e0 [ 372.521585] ? trace_hardirqs_on+0xbd/0x310 [ 372.525904] ? v9fs_mount+0x62/0x8f0 [ 372.529620] ? kasan_unpoison_shadow+0x35/0x50 [ 372.534202] ? kasan_kmalloc+0xc7/0xe0 [ 372.538098] ? kmem_cache_alloc_trace+0x31f/0x750 [ 372.542951] v9fs_mount+0x7d/0x8f0 [ 372.546506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.552051] mount_fs+0xae/0x31d [ 372.555426] vfs_kern_mount.part.35+0xdc/0x4f0 [ 372.560011] ? may_umount+0xb0/0xb0 [ 372.563642] ? _raw_read_unlock+0x2c/0x50 [ 372.567801] ? __get_fs_type+0x97/0xc0 [ 372.571697] do_mount+0x581/0x31f0 [ 372.575240] ? kasan_check_read+0x11/0x20 [ 372.579415] ? do_raw_spin_unlock+0xa7/0x2f0 [ 372.583825] ? copy_mount_string+0x40/0x40 [ 372.588149] ? kasan_check_write+0x14/0x20 [ 372.592385] ? kasan_unpoison_shadow+0x35/0x50 05:43:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x3000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 372.597267] ? kasan_kmalloc+0xc7/0xe0 [ 372.601152] ? kmem_cache_alloc_trace+0x31f/0x750 [ 372.606002] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.611553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.617094] ? copy_mount_options+0x288/0x380 [ 372.621597] ksys_mount+0x12d/0x140 [ 372.625225] __x64_sys_mount+0xbe/0x150 [ 372.629205] do_syscall_64+0x1b9/0x820 [ 372.629220] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 372.629238] ? syscall_return_slowpath+0x5e0/0x5e0 [ 372.643388] ? trace_hardirqs_on_caller+0x310/0x310 05:43:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x20000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x6c}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 372.648411] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 372.653434] ? recalc_sigpending_tsk+0x180/0x180 [ 372.658199] ? kasan_check_write+0x14/0x20 [ 372.662440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.667300] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.672495] RIP: 0033:0x457579 [ 372.675696] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:43:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x74}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x5000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000008000a0ffffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 372.694600] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.702314] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 372.709586] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 372.716947] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 372.724208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 372.731486] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xffffffffa0008000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c00075e1dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 05:43:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:51 executing program 3 (fault-call:6 fault-nth:26): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 373.252898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 373.272112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 373.299887] FAULT_INJECTION: forcing a failure. [ 373.299887] name failslab, interval 1, probability 0, space 0, times 0 [ 373.325751] CPU: 1 PID: 15140 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 373.333069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.342444] Call Trace: [ 373.345043] dump_stack+0x1c4/0x2b4 [ 373.348683] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.353883] should_fail.cold.4+0xa/0x17 [ 373.357952] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 373.363060] ? save_stack+0xa9/0xd0 [ 373.366683] ? save_stack+0x43/0xd0 [ 373.370308] ? kasan_kmalloc+0xc7/0xe0 [ 373.374192] ? __kmalloc_track_caller+0x14a/0x750 [ 373.379043] ? kstrdup+0x39/0x70 [ 373.382424] ? v9fs_session_init+0x4ec/0x1a70 [ 373.386921] ? v9fs_mount+0x7d/0x8f0 [ 373.390644] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 373.395405] ? do_mount+0x581/0x31f0 [ 373.399118] ? ksys_mount+0x12d/0x140 [ 373.402919] ? __x64_sys_mount+0xbe/0x150 [ 373.407070] ? do_syscall_64+0x1b9/0x820 [ 373.411127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.416501] ? fs_reclaim_acquire+0x20/0x20 [ 373.420822] ? lock_downgrade+0x900/0x900 [ 373.424978] ? ___might_sleep+0x1ed/0x300 [ 373.429461] ? arch_local_save_flags+0x40/0x40 [ 373.434044] ? trace_hardirqs_on+0xbd/0x310 [ 373.438374] __should_failslab+0x124/0x180 [ 373.442612] should_failslab+0x9/0x14 [ 373.446452] __kmalloc+0x2d4/0x760 05:43:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 373.450083] ? match_wildcard+0x3c0/0x3c0 [ 373.454319] ? save_stack+0x43/0xd0 [ 373.457950] ? match_strdup+0x5e/0xa0 [ 373.461758] match_strdup+0x5e/0xa0 [ 373.465396] v9fs_session_init+0x782/0x1a70 [ 373.469729] ? v9fs_show_options+0x7e0/0x7e0 [ 373.474147] ? lock_downgrade+0x900/0x900 [ 373.478298] ? ___might_sleep+0x1ed/0x300 [ 373.482465] ? trace_hardirqs_on+0xbd/0x310 [ 373.486237] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 373.486789] ? v9fs_mount+0x62/0x8f0 [ 373.486805] ? kasan_unpoison_shadow+0x35/0x50 05:43:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6800000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x4800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 373.486820] ? kasan_kmalloc+0xc7/0xe0 [ 373.506226] ? kmem_cache_alloc_trace+0x31f/0x750 [ 373.511075] ? free_pages+0x44/0x50 [ 373.514711] v9fs_mount+0x7d/0x8f0 [ 373.518250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.523796] mount_fs+0xae/0x31d [ 373.527172] vfs_kern_mount.part.35+0xdc/0x4f0 [ 373.531757] ? may_umount+0xb0/0xb0 [ 373.535397] ? _raw_read_unlock+0x2c/0x50 [ 373.539554] ? __get_fs_type+0x97/0xc0 [ 373.543451] do_mount+0x581/0x31f0 [ 373.546995] ? retint_kernel+0x1b/0x2d 05:43:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6000000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 373.550889] ? trace_hardirqs_on+0x310/0x310 [ 373.550909] ? copy_mount_string+0x40/0x40 [ 373.559516] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 373.559534] ? trace_hardirqs_off+0xaf/0x310 [ 373.559548] ? retint_kernel+0x2d/0x2d [ 373.559574] ? __sanitizer_cov_trace_const_cmp8+0x1/0x20 [ 373.578079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.583624] ? copy_mount_options+0x288/0x380 [ 373.588123] ksys_mount+0x12d/0x140 [ 373.591757] __x64_sys_mount+0xbe/0x150 [ 373.596279] do_syscall_64+0x1b9/0x820 05:43:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 373.600168] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 373.605537] ? syscall_return_slowpath+0x5e0/0x5e0 [ 373.610470] ? trace_hardirqs_on_caller+0x310/0x310 [ 373.615495] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 373.620532] ? recalc_sigpending_tsk+0x180/0x180 [ 373.625293] ? kasan_check_write+0x14/0x20 [ 373.629538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.634401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.639587] RIP: 0033:0x457579 [ 373.639602] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.639610] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 373.639625] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 373.639637] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 373.661716] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 373.661725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 05:43:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 373.661734] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x6c00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000000)="15bf6234488dd28bd1125d726070") syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x80, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100)="56f58c590f25d0a855d5cd51f2385824e83db58978859edd594a9afc48c88e276b8e7a99b4056282d3c4b57e2c806d154f43a8cc183bd3eb093fab77e94bef1ca66bb6ccae62ef83c820de96fda6008e8cbba0bbecedf47cda3f1683151efee3c4dbcd038987804b0c0868ee2dea6314948a0818d09fac63aaf1dfc5ad070d04317c546a31d07b16e9", 0x89, 0x7}, {&(0x7f0000000200)="9c4741f6e6d68729d33f28ee92743fd2e3553856eef179691076775f4575bcee693c33c6a8a07cd2114c44dca6df5d4f905fa73595ad758319725488640b460dbc27fe129b7c3ed19dc2d952653a16ef0cf8f3e0132dd42619794b7fb27f7833136476234b1042a17e366d9253df980ccb44a796544bbb94e78500cac9a710e88ec644086c30b6c506ec409667034e09ca19bf92f01f594516585145f544fc85487e249e646695a35b27c019d7d044a5380764092c58a3c5afdfb41d3767b568a7ed2b874ae5bcb1e3526e29e5b905901cb291267fe2952eb40df87443d5db9db01dfb75733cfc5d2b9c120c", 0xec, 0x10000}, {&(0x7f0000000300)="8422cc54f79a416656b664d525e0a85b6ccf428e3d758d2ce95dd9bd1f00ec8425cfd1093af922d65c0551328c1a2a61bf0ffab616fa90de2bc987108f59771ceb25460a0d43ec6bc4b4cf4d3c89932bd08aba11b01a7a3351cdaa19e60f7b55b2962c", 0x63, 0x10001}, {&(0x7f0000000380)="32e6dd776adc953d7b727e7fdc1583008917d04761720f6ff853ef9dd55dbbb2ee55626d112229069078b32ac14a8a8d2fad9902a003d0d6", 0x38, 0x7}], 0x2020000, &(0x7f0000000440)={[{@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@umask={'umask'}}], [{@smackfshat={'smackfshat', 0x3d, 'msdos\x00'}}, {@subj_type={'subj_type'}}]}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000b40)={[{@fat=@allow_utime={'allow_utime'}}]}) 05:43:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:52 executing program 3 (fault-call:6 fault-nth:27): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 374.174183] FAULT_INJECTION: forcing a failure. [ 374.174183] name failslab, interval 1, probability 0, space 0, times 0 [ 374.192146] validate_nla: 2 callbacks suppressed [ 374.192154] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 374.201111] CPU: 0 PID: 15181 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 374.211659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.221003] Call Trace: [ 374.221026] dump_stack+0x1c4/0x2b4 [ 374.221044] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.232410] ? __kernel_text_address+0xd/0x40 [ 374.236907] ? unwind_get_return_address+0x61/0xa0 [ 374.236928] should_fail.cold.4+0xa/0x17 [ 374.236947] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.251008] ? save_stack+0xa9/0xd0 [ 374.254640] ? save_stack+0x43/0xd0 [ 374.258361] ? kasan_kmalloc+0xc7/0xe0 [ 374.262247] ? __kmalloc+0x14e/0x760 [ 374.265965] ? p9_fcall_alloc+0x1e/0x90 [ 374.269947] ? p9_client_prepare_req.part.8+0x887/0xc30 [ 374.275329] ? p9_client_rpc+0x1c2/0x1480 [ 374.279495] ? v9fs_session_init+0xf4d/0x1a70 [ 374.283994] ? v9fs_mount+0x7d/0x8f0 [ 374.287711] ? mount_fs+0xae/0x31d [ 374.291263] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 374.296018] ? do_mount+0x581/0x31f0 [ 374.299732] ? ksys_mount+0x12d/0x140 [ 374.303534] ? __x64_sys_mount+0xbe/0x150 [ 374.307683] ? do_syscall_64+0x1b9/0x820 [ 374.311748] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.317115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.322667] ? node_tag_clear+0xc2/0x1c0 [ 374.326733] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 374.331666] ? radix_tree_iter_replace+0x4c/0x60 [ 374.336426] ? idr_alloc_u32+0x235/0x3f0 [ 374.340506] ? ___might_sleep+0x1ed/0x300 [ 374.344662] ? arch_local_save_flags+0x40/0x40 [ 374.349242] ? trace_hardirqs_on+0xbd/0x310 [ 374.353569] ? lock_downgrade+0x900/0x900 [ 374.357721] ? p9_fcall_alloc+0x1e/0x90 [ 374.361702] __should_failslab+0x124/0x180 [ 374.365936] should_failslab+0x9/0x14 [ 374.369737] __kmalloc+0x2d4/0x760 [ 374.373285] ? do_raw_spin_lock+0xc1/0x200 [ 374.377531] ? p9_fcall_alloc+0x1e/0x90 [ 374.381511] p9_fcall_alloc+0x1e/0x90 [ 374.385324] p9_client_prepare_req.part.8+0x812/0xc30 [ 374.390514] ? __kernel_text_address+0xd/0x40 [ 374.395011] ? unwind_get_return_address+0x61/0xa0 [ 374.399947] ? p9_free_req.isra.7+0x140/0x140 [ 374.404444] ? idr_get_free+0xa83/0xec0 [ 374.408428] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.413969] ? replace_slot+0x151/0x520 [ 374.417957] p9_client_rpc+0x1c2/0x1480 [ 374.421941] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 374.427319] ? is_bpf_text_address+0xd3/0x170 [ 374.431829] ? __radix_tree_replace+0x258/0x3c0 [ 374.436506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.442047] ? node_tag_clear+0xc2/0x1c0 [ 374.446127] ? p9_fid_create+0x1e2/0x2b0 [ 374.450193] ? lock_downgrade+0x900/0x900 [ 374.454358] ? idr_alloc_u32+0x235/0x3f0 [ 374.458423] ? trace_hardirqs_on+0xbd/0x310 [ 374.462741] ? kasan_check_read+0x11/0x20 [ 374.466889] ? p9_fid_create+0x1e2/0x2b0 [ 374.470951] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 374.476407] ? kasan_check_write+0x14/0x20 [ 374.480659] ? do_raw_spin_lock+0xc1/0x200 [ 374.484899] p9_client_attach+0x18c/0x860 [ 374.489056] ? debug_check_no_obj_freed+0x305/0x58d [ 374.494077] ? p9_client_walk+0xb30/0xb30 [ 374.498230] ? check_preemption_disabled+0x48/0x200 [ 374.503250] ? trace_hardirqs_on+0xbd/0x310 [ 374.507587] ? v9fs_session_init+0xd46/0x1a70 [ 374.512084] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 374.517535] ? __kasan_slab_free+0x119/0x150 [ 374.521957] v9fs_session_init+0xf4d/0x1a70 [ 374.526284] ? v9fs_session_init+0xf4d/0x1a70 [ 374.530806] ? v9fs_show_options+0x7e0/0x7e0 [ 374.535238] ? lock_downgrade+0x900/0x900 [ 374.539404] ? ___might_sleep+0x1ed/0x300 [ 374.543553] ? trace_hardirqs_on+0xbd/0x310 [ 374.547874] ? v9fs_mount+0x62/0x8f0 [ 374.551592] ? kasan_unpoison_shadow+0x35/0x50 [ 374.556263] ? kasan_kmalloc+0xc7/0xe0 [ 374.560170] ? kmem_cache_alloc_trace+0x31f/0x750 [ 374.565018] ? free_pages+0x44/0x50 [ 374.568660] v9fs_mount+0x7d/0x8f0 [ 374.572215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.577757] mount_fs+0xae/0x31d [ 374.581135] vfs_kern_mount.part.35+0xdc/0x4f0 [ 374.585730] ? may_umount+0xb0/0xb0 [ 374.589357] ? _raw_read_unlock+0x2c/0x50 [ 374.593511] ? __get_fs_type+0x97/0xc0 [ 374.597600] do_mount+0x581/0x31f0 [ 374.601149] ? copy_mount_string+0x40/0x40 [ 374.605392] ? kasan_unpoison_shadow+0x35/0x50 [ 374.609975] ? kasan_kmalloc+0xc7/0xe0 [ 374.613865] ? kmem_cache_alloc_trace+0x31f/0x750 [ 374.613884] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.624231] ? _copy_from_user+0xdf/0x150 [ 374.624251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.624267] ? copy_mount_options+0x288/0x380 [ 374.638402] ksys_mount+0x12d/0x140 [ 374.638418] __x64_sys_mount+0xbe/0x150 [ 374.638435] do_syscall_64+0x1b9/0x820 [ 374.638453] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 374.646017] ? syscall_return_slowpath+0x5e0/0x5e0 [ 374.646035] ? trace_hardirqs_on_caller+0x310/0x310 [ 374.646050] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 374.646067] ? recalc_sigpending_tsk+0x180/0x180 05:43:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xa00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x48}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000003f00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x2e2}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000a0008000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 374.655268] ? kasan_check_write+0x14/0x20 [ 374.655297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.655323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.665210] RIP: 0033:0x457579 [ 374.665227] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.665235] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.674971] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 374.674980] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 374.674989] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 374.674998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 374.675010] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 374.688131] 9pnet: Couldn't grow tag array [ 374.729318] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 374.787354] FAT-fs (loop1): bogus number of reserved sectors [ 374.793180] FAT-fs (loop1): Can't find a valid FAT filesystem 05:43:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe8000000000000002000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:53 executing program 3 (fault-call:6 fault-nth:28): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x500}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0xa000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x2000, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x1000000000013) socketpair$unix(0x1, 0x40100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x61, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000002c0), 0xffffffffffffff36, &(0x7f0000000100)={&(0x7f0000000480)=@ipv6_newrule={0x84, 0x20, 0x20, 0x70bd2c, 0x25dfdbff, {0xa, 0x30, 0x14, 0x1, 0x400, 0x0, 0x0, 0x4, 0x10009}, [@FRA_SRC={0x14}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6, r7}}, @FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x2}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @local}]}, 0xffffffffffffffed}}, 0x4000000) dup2(r1, r2) [ 375.065892] FAULT_INJECTION: forcing a failure. [ 375.065892] name failslab, interval 1, probability 0, space 0, times 0 [ 375.106469] CPU: 1 PID: 15238 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 375.113793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.123140] Call Trace: [ 375.123162] dump_stack+0x1c4/0x2b4 [ 375.123183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.134537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.134557] should_fail.cold.4+0xa/0x17 [ 375.144118] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.149221] ? debug_smp_processor_id+0x1c/0x20 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x6800}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x2000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 375.153897] ? perf_trace_lock_acquire+0x15b/0x800 [ 375.158839] ? __radix_tree_replace+0x258/0x3c0 [ 375.163510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.169066] ? node_tag_clear+0xc2/0x1c0 [ 375.173136] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 375.178070] ? radix_tree_iter_replace+0x4c/0x60 [ 375.182826] ? idr_alloc_u32+0x235/0x3f0 [ 375.186899] ? ___might_sleep+0x1ed/0x300 [ 375.191054] ? arch_local_save_flags+0x40/0x40 [ 375.195644] ? lock_downgrade+0x900/0x900 [ 375.199807] __should_failslab+0x124/0x180 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x68}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 375.204041] should_failslab+0x9/0x14 [ 375.204054] __kmalloc+0x2d4/0x760 [ 375.204073] ? do_raw_spin_lock+0xc1/0x200 [ 375.211386] ? p9_fcall_alloc+0x1e/0x90 [ 375.211406] p9_fcall_alloc+0x1e/0x90 [ 375.223363] p9_client_prepare_req.part.8+0x887/0xc30 [ 375.228557] ? __kernel_text_address+0xd/0x40 [ 375.233055] ? unwind_get_return_address+0x61/0xa0 [ 375.237991] ? p9_free_req.isra.7+0x140/0x140 [ 375.242480] ? idr_get_free+0xa83/0xec0 [ 375.246453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.252003] ? replace_slot+0x151/0x520 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xf00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 375.255983] p9_client_rpc+0x1c2/0x1480 [ 375.259971] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 375.265340] ? is_bpf_text_address+0xd3/0x170 [ 375.269844] ? __radix_tree_replace+0x258/0x3c0 [ 375.274523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.280060] ? node_tag_clear+0xc2/0x1c0 [ 375.284120] ? p9_fid_create+0x1e2/0x2b0 [ 375.288185] ? lock_downgrade+0x900/0x900 [ 375.292339] ? idr_alloc_u32+0x235/0x3f0 [ 375.296397] ? trace_hardirqs_on+0xbd/0x310 [ 375.300721] ? kasan_check_read+0x11/0x20 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x60000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 375.304870] ? p9_fid_create+0x1e2/0x2b0 [ 375.308271] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 375.308953] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 375.308970] ? kasan_check_write+0x14/0x20 [ 375.325891] ? do_raw_spin_lock+0xc1/0x200 [ 375.330136] p9_client_attach+0x18c/0x860 [ 375.334293] ? debug_check_no_obj_freed+0x305/0x58d [ 375.339316] ? p9_client_walk+0xb30/0xb30 [ 375.343469] ? check_preemption_disabled+0x48/0x200 [ 375.348493] ? trace_hardirqs_on+0xbd/0x310 [ 375.352823] ? v9fs_session_init+0xd46/0x1a70 05:43:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xaa030000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 375.357323] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 375.362783] ? __kasan_slab_free+0x119/0x150 [ 375.367203] v9fs_session_init+0xf4d/0x1a70 [ 375.371536] ? v9fs_session_init+0xf4d/0x1a70 [ 375.376041] ? v9fs_show_options+0x7e0/0x7e0 [ 375.376056] ? lock_downgrade+0x900/0x900 [ 375.376075] ? ___might_sleep+0x1ed/0x300 [ 375.388737] ? trace_hardirqs_on+0xbd/0x310 [ 375.393066] ? v9fs_mount+0x62/0x8f0 [ 375.396792] ? kasan_unpoison_shadow+0x35/0x50 [ 375.401380] ? kasan_kmalloc+0xc7/0xe0 [ 375.405273] ? kmem_cache_alloc_trace+0x31f/0x750 [ 375.410115] ? free_pages+0x44/0x50 [ 375.413746] v9fs_mount+0x7d/0x8f0 [ 375.417302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.422848] mount_fs+0xae/0x31d [ 375.426223] vfs_kern_mount.part.35+0xdc/0x4f0 [ 375.431005] ? may_umount+0xb0/0xb0 [ 375.434624] ? _raw_read_unlock+0x2c/0x50 [ 375.438756] ? __get_fs_type+0x97/0xc0 [ 375.442626] do_mount+0x581/0x31f0 [ 375.446169] ? copy_mount_string+0x40/0x40 [ 375.450408] ? kasan_unpoison_shadow+0x35/0x50 [ 375.454971] ? kasan_kmalloc+0xc7/0xe0 [ 375.458846] ? kmem_cache_alloc_trace+0x31f/0x750 [ 375.463673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.469189] ? copy_mount_options+0x288/0x380 [ 375.473683] ksys_mount+0x12d/0x140 [ 375.477293] __x64_sys_mount+0xbe/0x150 [ 375.481257] do_syscall_64+0x1b9/0x820 [ 375.485126] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 375.490571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 375.495502] ? trace_hardirqs_on_caller+0x310/0x310 [ 375.500498] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 375.505494] ? recalc_sigpending_tsk+0x180/0x180 [ 375.510229] ? kasan_check_write+0x14/0x20 [ 375.514445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.519284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.524450] RIP: 0033:0x457579 [ 375.527633] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.546528] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.554225] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 375.561493] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 375.568747] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 375.575997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 375.583293] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 375.597504] 9pnet: Couldn't grow tag array 05:43:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x540b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xf0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000f5ffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x7400}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:54 executing program 3 (fault-call:6 fault-nth:29): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 375.970889] FAULT_INJECTION: forcing a failure. [ 375.970889] name failslab, interval 1, probability 0, space 0, times 0 [ 376.012892] CPU: 1 PID: 15277 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 376.020201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.029552] Call Trace: [ 376.032149] dump_stack+0x1c4/0x2b4 [ 376.035796] ? dump_stack_print_info.cold.2+0x52/0x52 [ 376.040988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.046535] should_fail.cold.4+0xa/0x17 [ 376.050597] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 376.055701] ? debug_smp_processor_id+0x1c/0x20 [ 376.060370] ? perf_trace_lock_acquire+0x15b/0x800 [ 376.065309] ? __radix_tree_replace+0x258/0x3c0 [ 376.069990] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.075522] ? node_tag_clear+0xc2/0x1c0 [ 376.079584] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 376.084507] ? radix_tree_iter_replace+0x4c/0x60 [ 376.089264] ? idr_alloc_u32+0x235/0x3f0 [ 376.093327] ? ___might_sleep+0x1ed/0x300 [ 376.097469] ? arch_local_save_flags+0x40/0x40 [ 376.102052] ? lock_downgrade+0x900/0x900 [ 376.106208] __should_failslab+0x124/0x180 [ 376.110437] should_failslab+0x9/0x14 [ 376.114236] __kmalloc+0x2d4/0x760 [ 376.117777] ? do_raw_spin_lock+0xc1/0x200 [ 376.122013] ? p9_fcall_alloc+0x1e/0x90 [ 376.125977] p9_fcall_alloc+0x1e/0x90 [ 376.129759] p9_client_prepare_req.part.8+0x887/0xc30 [ 376.134923] ? __kernel_text_address+0xd/0x40 [ 376.139395] ? unwind_get_return_address+0x61/0xa0 [ 376.144392] ? p9_free_req.isra.7+0x140/0x140 [ 376.148861] ? idr_get_free+0xa83/0xec0 [ 376.152811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.158321] ? replace_slot+0x151/0x520 [ 376.162273] p9_client_rpc+0x1c2/0x1480 [ 376.166233] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 376.171695] ? is_bpf_text_address+0xd3/0x170 [ 376.176172] ? __radix_tree_replace+0x258/0x3c0 [ 376.180823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.186350] ? node_tag_clear+0xc2/0x1c0 [ 376.190407] ? p9_fid_create+0x1e2/0x2b0 [ 376.194448] ? lock_downgrade+0x900/0x900 [ 376.198576] ? idr_alloc_u32+0x235/0x3f0 [ 376.202616] ? trace_hardirqs_on+0xbd/0x310 [ 376.206926] ? kasan_check_read+0x11/0x20 [ 376.211053] ? p9_fid_create+0x1e2/0x2b0 [ 376.215089] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 376.220531] ? kasan_check_write+0x14/0x20 [ 376.224741] ? do_raw_spin_lock+0xc1/0x200 [ 376.228958] p9_client_attach+0x18c/0x860 [ 376.233084] ? debug_check_no_obj_freed+0x305/0x58d [ 376.238076] ? p9_client_walk+0xb30/0xb30 [ 376.242214] ? check_preemption_disabled+0x48/0x200 [ 376.247212] ? trace_hardirqs_on+0xbd/0x310 [ 376.251527] ? v9fs_session_init+0xd46/0x1a70 [ 376.256003] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 376.261434] ? __kasan_slab_free+0x119/0x150 [ 376.265826] v9fs_session_init+0xf4d/0x1a70 [ 376.270127] ? v9fs_session_init+0xf4d/0x1a70 [ 376.274724] ? v9fs_show_options+0x7e0/0x7e0 [ 376.279116] ? lock_downgrade+0x900/0x900 [ 376.283248] ? ___might_sleep+0x1ed/0x300 [ 376.287376] ? trace_hardirqs_on+0xbd/0x310 [ 376.291680] ? v9fs_mount+0x62/0x8f0 [ 376.295377] ? kasan_unpoison_shadow+0x35/0x50 [ 376.299937] ? kasan_kmalloc+0xc7/0xe0 [ 376.303830] ? kmem_cache_alloc_trace+0x31f/0x750 [ 376.308655] ? free_pages+0x44/0x50 [ 376.312268] v9fs_mount+0x7d/0x8f0 [ 376.315790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.321311] mount_fs+0xae/0x31d [ 376.324659] vfs_kern_mount.part.35+0xdc/0x4f0 [ 376.329224] ? may_umount+0xb0/0xb0 [ 376.332840] ? _raw_read_unlock+0x2c/0x50 [ 376.336968] ? __get_fs_type+0x97/0xc0 [ 376.340834] do_mount+0x581/0x31f0 [ 376.344353] ? kasan_check_read+0x11/0x20 [ 376.348481] ? do_raw_spin_unlock+0xa7/0x2f0 [ 376.352870] ? copy_mount_string+0x40/0x40 [ 376.357083] ? kasan_check_write+0x14/0x20 [ 376.361301] ? kasan_unpoison_shadow+0x35/0x50 [ 376.365862] ? kasan_kmalloc+0xc7/0xe0 [ 376.369731] ? kmem_cache_alloc_trace+0x31f/0x750 [ 376.374555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.380072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.385588] ? copy_mount_options+0x288/0x380 [ 376.390063] ksys_mount+0x12d/0x140 [ 376.393678] __x64_sys_mount+0xbe/0x150 [ 376.397642] do_syscall_64+0x1b9/0x820 [ 376.401510] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 376.406852] ? syscall_return_slowpath+0x5e0/0x5e0 [ 376.411763] ? trace_hardirqs_on_caller+0x310/0x310 [ 376.416758] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 376.421842] ? recalc_sigpending_tsk+0x180/0x180 [ 376.426579] ? kasan_check_write+0x14/0x20 [ 376.430825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.435649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.440821] RIP: 0033:0x457579 [ 376.443995] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.462874] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.470561] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 376.477810] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 376.485057] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 376.492305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 376.499551] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x7a}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x3f000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000000000004000", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:54 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$nl_generic(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) [ 376.520517] 9pnet: Couldn't grow tag array 05:43:54 executing program 3 (fault-call:6 fault-nth:30): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x8000a0}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b005", 0x5) chdir(&(0x7f0000001840)='./file0\x00') r1 = memfd_create(&(0x7f0000000100)='ecb(cast5)\x00', 0x1) r2 = msgget(0x1, 0x0) msgsnd(r2, &(0x7f0000001880)={0x3, "b6bce5fa5442e6c88c89139bff9413871e423e4d71ffe3f6808271dec84950a4ad77ff1b159a918b584bea271d662e8570dcd662f30677ccaa5cc38353322d269ea0b18b40b72504b5b4dd932e455e15286997ec1fbd28505976eb4f45c17e858e2c0fc31421156d12359715a9f805309e3e44e47fe77f2ae29f96e5a166f5134504b48d9ba8333204a1d5abe00acb5d1c517acb3b"}, 0x9d, 0x800) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000480)={0xde, "c64862b1a81c97c6d31780ebba7f4f5c31c9e64cabc8daa209f187a817254b3091707fb62aa86aeb75ab92e00e8d63ef7193ec38ea964d32ae9ae3d898a7f4ae124011b2a288fafd4863848e3b0ef0970ebb499190b4f653d7996db5bc02a01de1edf7e91ea779a52486a6eb72b4f30f86d3c49ba6168868f59d44238008e9cfe1142df78661985252fac1fea7db151fc93ac9a8dfe96bb1fb27c38e174ba6e1b5b34678d7c6fb82cb3ddd26d146f59eea42a1f10be2416d020482d6a377e239277dd2b2d9b460c0724623b75ad6b638a4c084a1acd135c104188e89e59d"}) accept$alg(r0, 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000007c0)=""/4096, 0x1000, 0x0, 0x0, 0x8000, 0xa89a}, 0x120) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000300)={r3, 0x80000000}, 0xfffffffffffffda9) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt(0xffffffffffffffff, 0x8907, &(0x7f0000000180)="851c75fab512a39b5eed294393947dda0c3cf0c9a3912a015c8f634c2dc7503818ae724183") r4 = perf_event_open(&(0x7f00004e7000)={0x2, 0x2a7, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x0, 0x20ff) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000001800)={0xfff, 0x36db, 0x4, 0x0, 0x5, 0x9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)="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") getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000200)=@can={0x1d, r6}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)="da9fa48f801b3da4bcd7192c9fdc6f3cd30c096f69fcc1f273d2b3fc2140a84eb5787f27d13230c460ecf1e263678bb9c77003025507ee5db7721738bdc78359d9584fefdb60e99f137528072f88ca6cb5257343a7a3518924b3661f94cdef584547d83980feb3568c206ea0c60ea6bc74341fc712152f60b8016142adf5ac9ffd6309bede13b12eacb237e2e677ee30a1e10e26c1d7d0351357a9f8bf0ed6fc5d447187e00977d9bf30f19389f539d91dd5072143f2ce9431a31590374229db", 0xc0}], 0x1, &(0x7f0000001bc0)=[{0x68, 0x0, 0x6, "3fe581993eecbe5395c072b4cf8034322255ee42154e383a8e72dc99d1baef9639f4e9fecf048ed823f0331606ea5eed91763ba48a35d8676a9dbd9c8e196ace3aaca72f6d47c5c2922b0a3d2b19b871778aa3c5"}], 0x68, 0x80}, 0x4008000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) pkey_free(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, 0x17, 0xc, 0x10, "5e8d099c409bb19cb2232ae7ab2a0f3d0c8e7ccc82c516a3a0f29e3cba8d24a8287a36f9c64a8e1958ce8c97f2adf416fbdc665d1e26beb3f801075702d3806b", "6315aca0e0b83a1ed7330199f86e55882733f2d4ed846f1d3d9ab1bbd1364390", [0x1ff, 0x9]}) [ 376.617203] FAULT_INJECTION: forcing a failure. [ 376.617203] name failslab, interval 1, probability 0, space 0, times 0 [ 376.651868] CPU: 1 PID: 15309 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 376.659181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.668537] Call Trace: [ 376.671143] dump_stack+0x1c4/0x2b4 [ 376.674779] ? dump_stack_print_info.cold.2+0x52/0x52 [ 376.679991] should_fail.cold.4+0xa/0x17 [ 376.684065] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 376.689190] ? perf_trace_lock_acquire+0x15b/0x800 [ 376.694129] ? debug_smp_processor_id+0x1c/0x20 [ 376.698802] ? perf_trace_lock_acquire+0x15b/0x800 [ 376.703737] ? perf_trace_lock+0x7a0/0x7a0 [ 376.707985] ? perf_trace_lock+0x7a0/0x7a0 [ 376.708014] ? kasan_check_read+0x11/0x20 [ 376.708088] ? fscache_free_cookie+0x199/0x280 [ 376.708132] ? __fscache_check_consistency+0xba0/0xba0 [ 376.716496] ? fs_reclaim_acquire+0x20/0x20 [ 376.716511] ? lock_downgrade+0x900/0x900 [ 376.716530] ? ___might_sleep+0x1ed/0x300 [ 376.726377] ? arch_local_save_flags+0x40/0x40 [ 376.726390] ? sget_userns+0x1a9/0xf10 [ 376.726413] __should_failslab+0x124/0x180 [ 376.734838] should_failslab+0x9/0x14 [ 376.743531] kmem_cache_alloc_trace+0x2d7/0x750 [ 376.743547] ? kasan_check_write+0x14/0x20 [ 376.751626] ? do_raw_spin_lock+0xc1/0x200 [ 376.751651] sget_userns+0x1cf/0xf10 [ 376.772219] ? v9fs_kill_super+0xa0/0xa0 [ 376.776299] ? destroy_unused_super.part.10+0x110/0x110 [ 376.781681] ? v9fs_show_options+0x7e0/0x7e0 [ 376.786106] ? lock_downgrade+0x900/0x900 [ 376.790277] ? ___might_sleep+0x1ed/0x300 [ 376.794436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.799977] ? cap_capable+0x1f9/0x260 [ 376.803870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.809410] ? security_capable+0x99/0xc0 [ 376.813561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.819106] ? ns_capable_common+0x13f/0x170 [ 376.823520] ? v9fs_kill_super+0xa0/0xa0 [ 376.827576] sget+0x10b/0x150 [ 376.830685] v9fs_mount+0xe4/0x8f0 [ 376.834225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.839769] mount_fs+0xae/0x31d [ 376.843145] vfs_kern_mount.part.35+0xdc/0x4f0 [ 376.847729] ? may_umount+0xb0/0xb0 [ 376.851354] ? _raw_read_unlock+0x2c/0x50 [ 376.856121] ? __get_fs_type+0x97/0xc0 [ 376.860011] do_mount+0x581/0x31f0 [ 376.863560] ? copy_mount_string+0x40/0x40 [ 376.867803] ? kasan_unpoison_shadow+0x35/0x50 [ 376.872388] ? kasan_kmalloc+0xc7/0xe0 [ 376.876281] ? kmem_cache_alloc_trace+0x31f/0x750 [ 376.881142] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.886684] ? _copy_from_user+0xdf/0x150 [ 376.890839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.896377] ? copy_mount_options+0x288/0x380 [ 376.900887] ksys_mount+0x12d/0x140 [ 376.904517] __x64_sys_mount+0xbe/0x150 [ 376.908589] do_syscall_64+0x1b9/0x820 [ 376.912481] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 05:43:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x541d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x74000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x30000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 376.917854] ? syscall_return_slowpath+0x5e0/0x5e0 [ 376.922792] ? trace_hardirqs_on_caller+0x310/0x310 [ 376.927815] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 376.932835] ? recalc_sigpending_tsk+0x180/0x180 [ 376.937597] ? kasan_check_write+0x14/0x20 [ 376.941843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.946692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.951882] RIP: 0033:0x457579 05:43:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 376.955082] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.955104] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.955128] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 376.988970] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 376.996240] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 377.003512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 377.010785] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:55 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)="2f6a7374617400c65381b47aaedf2af5c8af3423fc41891bd2a3c56d8c88e29bad43f1da906e855ff182de04227edcbbc2b1df8f180e158e8abd442cc049cffda030ff277875ee010000000000000000000000000000000000000000000000f532144d1671a6cdf5069e5bddcf25cd7f23956b4a82df900f5eb5763b4fe8cc7172962d2590b2dca2a1308c382541b053194d9027d83ee7ba2e3280857f8f9f63fc90bae959c6e67078bf97e615bfd9409914958aadcfb37973543c60d83526e5c267f7dfa54bd524cc9671dedd665199322bdadee125a35b40b7be0c07301f439a7edfa26fa98277c8078b02e2076291c33787c58b0eabbc39288fc10509409de108f5ca26a8c8e1afb70b2a9569cf8f4cdb6d4e97eb7fdf241dee160e6071618333cc0b0e8bc6a17a0b7d604550fd149ad078ffe54c6392fba29015a3ae73774cd12c9c0ed251a7cf843d712d", 0x2761, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x85, &(0x7f0000000040)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x18, 0x1b, 0xe, 0x7, 0x8, 0x7f, 0x4, 0xd3, 0xffffffffffffffdf}) r2 = getuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000200)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@nodevmap='nodevmap'}, {@version_u='version=9p2000.u'}, {@access_client='access=client'}, {@access_any='access=any'}, {@fscache='fscache'}, {@version_u='version=9p2000.u'}, {@version_9p2000='version=9p2000'}, {@uname={'uname', 0x3d, "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"}}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@permit_directio='permit_directio'}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) 05:43:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x74000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:55 executing program 3 (fault-call:6 fault-nth:31): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x500000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) close(r0) pipe2(&(0x7f0000000040), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000180)="67660f384075800f01d166b8be0000000f23d80f21f86635400000e00f23f8a5440f20c0663502000000440f22c0670f22dd652680e7020fc71d0f01bfb3bf9a0020ae00", 0x44}], 0x1, 0x0, &(0x7f0000000200), 0xb7) 05:43:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xaa03}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 377.184073] FAULT_INJECTION: forcing a failure. [ 377.184073] name failslab, interval 1, probability 0, space 0, times 0 [ 377.217318] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 377.257142] CPU: 0 PID: 15354 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 377.264450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.264457] Call Trace: [ 377.264480] dump_stack+0x1c4/0x2b4 [ 377.264503] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.276421] should_fail.cold.4+0xa/0x17 [ 377.276442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.276459] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 377.276471] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 377.276487] ? find_next_bit+0x104/0x130 [ 377.289343] ? cpumask_next+0x41/0x50 [ 377.289359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 377.289376] ? pcpu_alloc+0x190/0x15e0 [ 377.299464] ? pcpu_balance_workfn+0x1740/0x1740 [ 377.299485] ? fs_reclaim_acquire+0x20/0x20 [ 377.299500] ? lock_downgrade+0x900/0x900 [ 377.299518] ? ___might_sleep+0x1ed/0x300 [ 377.312336] ? arch_local_save_flags+0x40/0x40 [ 377.312352] ? lockdep_init_map+0x9/0x10 [ 377.312370] __should_failslab+0x124/0x180 [ 377.321749] should_failslab+0x9/0x14 [ 377.321763] __kmalloc+0x2d4/0x760 [ 377.321783] ? __init_waitqueue_head+0x9e/0x150 [ 377.363790] ? init_wait_entry+0x1c0/0x1c0 [ 377.368008] ? prealloc_shrinker+0xe5/0x330 [ 377.372326] prealloc_shrinker+0xe5/0x330 [ 377.376459] sget_userns+0x969/0xf10 [ 377.380157] ? v9fs_kill_super+0xa0/0xa0 [ 377.384208] ? destroy_unused_super.part.10+0x110/0x110 [ 377.389562] ? v9fs_show_options+0x7e0/0x7e0 [ 377.393954] ? lock_downgrade+0x900/0x900 [ 377.398099] ? ___might_sleep+0x1ed/0x300 [ 377.402234] ? cap_capable+0x1f9/0x260 [ 377.406109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.411630] ? security_capable+0x99/0xc0 [ 377.415766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.421288] ? ns_capable_common+0x13f/0x170 [ 377.425688] ? v9fs_kill_super+0xa0/0xa0 [ 377.430174] sget+0x10b/0x150 [ 377.433273] v9fs_mount+0xe4/0x8f0 [ 377.436798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.442318] mount_fs+0xae/0x31d [ 377.445675] vfs_kern_mount.part.35+0xdc/0x4f0 [ 377.450245] ? may_umount+0xb0/0xb0 [ 377.453855] ? _raw_read_unlock+0x2c/0x50 [ 377.457984] ? __get_fs_type+0x97/0xc0 [ 377.461852] do_mount+0x581/0x31f0 [ 377.465374] ? copy_mount_string+0x40/0x40 [ 377.469593] ? kasan_unpoison_shadow+0x35/0x50 [ 377.474159] ? kasan_kmalloc+0xc7/0xe0 [ 377.478040] ? kmem_cache_alloc_trace+0x31f/0x750 [ 377.482965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.488512] ? copy_mount_options+0x288/0x380 [ 377.492991] ksys_mount+0x12d/0x140 [ 377.496605] __x64_sys_mount+0xbe/0x150 [ 377.500568] do_syscall_64+0x1b9/0x820 [ 377.504437] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 377.509799] ? syscall_return_slowpath+0x5e0/0x5e0 [ 377.514724] ? trace_hardirqs_on_caller+0x310/0x310 [ 377.519721] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 377.524731] ? recalc_sigpending_tsk+0x180/0x180 [ 377.529468] ? kasan_check_write+0x14/0x20 [ 377.533693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.538544] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.543718] RIP: 0033:0x457579 [ 377.546897] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.566394] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.574083] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 377.581342] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 377.588594] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 377.595859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 377.603112] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 05:43:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000008000a0ffffffff00", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x4c00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x666, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000280)='./file0/file0\x00', 0x2, 0x5, &(0x7f0000000640)=[{&(0x7f00000002c0)="e29dd6c7892b5ab73ffcb944126ec861ffc9e5e16272654aced4a251dfae0d1e65eac6ebddae7f3a3e536f34b7b26727b18c28289816e694898ab7a178b9550b5f551316c71a1586bd1d0e4f7fea988a8995c79bf63189056e343647668f69966d0ddc4e1c4d9136bf5802d983838e31f7f609288b64d8302f788e5e20a4c14acfd3e1649d1b9ed8f0daa07d6018d354b7b96e53d98a174806421e64a2a33656b98fba07ac2afcbb554d16cb4be1837bd176d9a8e95864e022dabdcbc0046274c66d6553a2e608a04ccd9ffceda8092ec0fc241bd4f5b543c135fa67432863", 0xdf, 0x5a}, {&(0x7f00000003c0)="50f7a20d31b6093036c56af60d43c9b85a75d715d80e36944279648df0198d2cf1b82ffe9b78fd40d31e685587bd7b192803303da0c742c230faeed2fcbb97505ab269ddee3ac6e9ddd6b9cd9d69f0c8507ec50fc7672235c132fcf998dc", 0x5e, 0x6}, {&(0x7f0000000440)="d91d17cca4deb459ad12b0cef2c084c5f24c8c12af444baadf924c85950d54dcd1ca9213ce5c5b20bd8945a2233896d84bca9995a83db13019c8055934db64a5ea38c0cf072a272aece5baef0153bb744312c463886ed46eaa8d06473d3e3e6e63c0dd42fb4ed452a73d392f1d4aeab61c773ca70b336d4510dbbfaf91821383c9976359e3df553acb5c0d81fa0cd6b503d3b16fff68b56f7567c0f2faca9d2e15549dd740962673425dd38583e117bd39535292f51965", 0xb7, 0xff}, {&(0x7f0000000500)="3e93cfbaccef4a05eeb378c1d1a4b801a1bdb72491e04462a067e8c5bf0f6ece3f678280b3c460fca0a8e80cf4500fc9a50f12176af1a2ba5e7188c3fceb7283912578e56441a4fcf0fe2d34d913d1833fb9ffb5a36c67dfb36551ad8836d3f38d544c55f791a6bd0f29612127e7ed02e9ef307dd9b93909a0f8c7991257ef483f727c25bed1d5c717ad528f11d6541dfbf69815e31ef2413f73a2d7fe51d3a60ccd9b592a236505f7b0fc3a7d84a4cdd8fa2deb1e496a21e3de", 0xba, 0x8}, {&(0x7f00000005c0)="4d6e33b134bfd21e410b383ef0a2b8441366373b487c71d9a34de721776dee88578a6add52423f86bd6d02115f6d40656c0d2d924843516ffdb3209c4f2df941b425c86c", 0x44, 0x9}], 0x10000, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001600)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/packet\x00') ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000001c0)) 05:43:56 executing program 3 (fault-call:6 fault-nth:32): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 377.894502] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 377.896360] FAULT_INJECTION: forcing a failure. [ 377.896360] name failslab, interval 1, probability 0, space 0, times 0 [ 377.918795] CPU: 1 PID: 15384 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 377.926090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.935441] Call Trace: [ 377.938036] dump_stack+0x1c4/0x2b4 05:43:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x2}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000000000000400", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 377.941669] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.946867] ? __kernel_text_address+0xd/0x40 [ 377.951371] ? unwind_get_return_address+0x61/0xa0 [ 377.956301] should_fail.cold.4+0xa/0x17 [ 377.960361] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.965479] ? save_stack+0xa9/0xd0 [ 377.969108] ? save_stack+0x43/0xd0 [ 377.972736] ? kasan_kmalloc+0xc7/0xe0 [ 377.972749] ? __kmalloc+0x14e/0x760 [ 377.972767] ? p9_fcall_alloc+0x1e/0x90 [ 377.980337] ? p9_client_prepare_req.part.8+0x887/0xc30 [ 377.980352] ? p9_client_rpc+0x1c2/0x1480 05:43:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x3000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000fffffff500", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 377.993789] ? v9fs_session_init+0xf4d/0x1a70 [ 377.998285] ? v9fs_mount+0x7d/0x8f0 [ 378.002018] ? mount_fs+0xae/0x31d [ 378.005564] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 378.010317] ? do_mount+0x581/0x31f0 [ 378.014033] ? ksys_mount+0x12d/0x140 [ 378.017833] ? __x64_sys_mount+0xbe/0x150 [ 378.021997] ? do_syscall_64+0x1b9/0x820 [ 378.026055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.031423] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.036982] ? cache_grow_end+0xa8/0x190 [ 378.041049] ? lock_downgrade+0x900/0x900 [ 378.045205] ? kasan_check_read+0x11/0x20 [ 378.049360] ? ___might_sleep+0x1ed/0x300 [ 378.053507] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 378.058104] ? arch_local_save_flags+0x40/0x40 [ 378.058118] ? trace_hardirqs_on+0xbd/0x310 [ 378.058133] ? kasan_check_write+0x14/0x20 [ 378.067085] ? p9_fcall_alloc+0x1e/0x90 [ 378.067105] __should_failslab+0x124/0x180 [ 378.067121] should_failslab+0x9/0x14 [ 378.080714] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 378.083301] __kmalloc+0x2d4/0x760 05:43:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000000005200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 378.083319] ? p9_fcall_alloc+0x1e/0x90 [ 378.083337] p9_fcall_alloc+0x1e/0x90 [ 378.101857] p9_client_prepare_req.part.8+0x812/0xc30 [ 378.107049] ? __kernel_text_address+0xd/0x40 [ 378.111546] ? unwind_get_return_address+0x61/0xa0 [ 378.116501] ? p9_free_req.isra.7+0x140/0x140 [ 378.121008] ? idr_get_free+0xa83/0xec0 [ 378.124994] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.130542] ? replace_slot+0x151/0x520 [ 378.134523] p9_client_rpc+0x1c2/0x1480 [ 378.134543] ? p9_client_prepare_req.part.8+0xc30/0xc30 05:43:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xf0ffffffffffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 378.143860] ? is_bpf_text_address+0xd3/0x170 [ 378.143881] ? __radix_tree_replace+0x258/0x3c0 [ 378.153010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.158547] ? node_tag_clear+0xc2/0x1c0 [ 378.162614] ? p9_fid_create+0x1e2/0x2b0 [ 378.166686] ? lock_downgrade+0x900/0x900 [ 378.170838] ? idr_alloc_u32+0x235/0x3f0 [ 378.174913] ? trace_hardirqs_on+0xbd/0x310 [ 378.179260] ? kasan_check_read+0x11/0x20 [ 378.183425] ? p9_fid_create+0x1e2/0x2b0 [ 378.187491] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 378.192940] ? kasan_check_write+0x14/0x20 [ 378.192955] ? do_raw_spin_lock+0xc1/0x200 [ 378.192985] p9_client_attach+0x18c/0x860 [ 378.201436] ? debug_check_no_obj_freed+0x305/0x58d [ 378.201455] ? p9_client_walk+0xb30/0xb30 [ 378.214715] ? check_preemption_disabled+0x48/0x200 [ 378.219730] ? trace_hardirqs_on+0xbd/0x310 [ 378.223075] f2fs_msg: 4 callbacks suppressed [ 378.223087] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.224065] ? v9fs_session_init+0xd46/0x1a70 [ 378.224083] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 378.240035] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.245387] ? __kasan_slab_free+0x119/0x150 [ 378.245412] v9fs_session_init+0xf4d/0x1a70 [ 378.257237] ? v9fs_session_init+0xf4d/0x1a70 [ 378.266027] ? v9fs_show_options+0x7e0/0x7e0 [ 378.266042] ? lock_downgrade+0x900/0x900 [ 378.266060] ? ___might_sleep+0x1ed/0x300 [ 378.266076] ? trace_hardirqs_on+0xbd/0x310 [ 378.266089] ? v9fs_mount+0x62/0x8f0 [ 378.266103] ? kasan_unpoison_shadow+0x35/0x50 [ 378.266113] ? kasan_kmalloc+0xc7/0xe0 [ 378.266132] ? kmem_cache_alloc_trace+0x31f/0x750 [ 378.266145] ? free_pages+0x44/0x50 [ 378.266160] v9fs_mount+0x7d/0x8f0 [ 378.266175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.266190] mount_fs+0xae/0x31d [ 378.266210] vfs_kern_mount.part.35+0xdc/0x4f0 [ 378.266226] ? may_umount+0xb0/0xb0 [ 378.266241] ? _raw_read_unlock+0x2c/0x50 [ 378.266255] ? __get_fs_type+0x97/0xc0 [ 378.266271] do_mount+0x581/0x31f0 [ 378.266287] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 378.266302] ? copy_mount_string+0x40/0x40 [ 378.266313] ? retint_kernel+0x2d/0x2d [ 378.266329] ? kasan_unpoison_shadow+0x35/0x50 [ 378.266341] ? kasan_kmalloc+0xc7/0xe0 [ 378.266360] ? kmem_cache_alloc_trace+0x31f/0x750 [ 378.266376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.266388] ? _copy_from_user+0xdf/0x150 [ 378.266405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.266416] ? copy_mount_options+0x288/0x380 [ 378.266431] ksys_mount+0x12d/0x140 [ 378.266446] __x64_sys_mount+0xbe/0x150 [ 378.266463] do_syscall_64+0x1b9/0x820 [ 378.266476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 378.266492] ? syscall_return_slowpath+0x5e0/0x5e0 [ 378.266512] ? trace_hardirqs_on_caller+0x310/0x310 [ 378.266527] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 378.266541] ? recalc_sigpending_tsk+0x180/0x180 [ 378.266553] ? kasan_check_write+0x14/0x20 [ 378.266572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.266591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.266601] RIP: 0033:0x457579 [ 378.266616] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.266623] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 378.266637] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 378.266646] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 378.266654] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 378.266662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 378.266671] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 378.288510] 9pnet: Couldn't grow tag array [ 378.308510] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.324853] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 378.418583] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.424222] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.424237] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.424246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 378.561720] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.569721] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 05:43:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfd43db69) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) ioctl$TCSETA(r2, 0x5401, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) 05:43:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x7000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe800000000000000200000000000200", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) 05:43:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0xe202000000000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:56 executing program 3 (fault-call:6 fault-nth:33): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 05:43:56 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x800000}}, 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xeda, 0x4a000000, 0x8, 0x10100}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0xe6, "8417cbfe9a12c480b92668f24af231bd8a1cf0e564d7ae49807f8c1d1ef8f3245bcd8e55ddc6d69a3550844644ca8e62555f84138b05d528c8d3cd0637a756a3fa6849455f211f566b7434af22b76ab22def75d69f718d2e3a12c33cf39778a053f04295978316c5f398df4b9e76cd449744359248d16076986b0dfb477a6a28ab288121cac8cf1839dee217706265d89b239b4013a2958df105e36e626272695793934e3bddebb0014dba12d9b1c0edcd8c04aa404fcdd10143af097b669aea8ea92cd06b860549707e5c31fcd9e31399a5903f88a5cbae57800d3d1b755a5d8d1b10f95137"}, &(0x7f00000001c0)=0xee) 05:43:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0xf0ffff}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 378.817503] RDS: rds_bind could not find a transport for 0:0:80::1, load rds_tcp or rds_rdma? [ 378.836616] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 378.854985] FAULT_INJECTION: forcing a failure. [ 378.854985] name failslab, interval 1, probability 0, space 0, times 0 05:43:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x1b, &(0x7f0000000040)={"fe80000000000000020000000000000000000000000100", 0xa, [{}, {}]}, 0x48) close(r2) close(r1) [ 378.876659] RDS: rds_bind could not find a transport for 0:0:80::1, load rds_tcp or rds_rdma? [ 378.893038] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 378.895012] CPU: 1 PID: 15439 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 378.907604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.916955] Call Trace: [ 378.919550] dump_stack+0x1c4/0x2b4 [ 378.923185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 378.928399] should_fail.cold.4+0xa/0x17 [ 378.932473] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 378.937583] ? save_stack+0xa9/0xd0 [ 378.941210] ? save_stack+0x43/0xd0 [ 378.944840] ? kasan_kmalloc+0xc7/0xe0 [ 378.948728] ? kasan_slab_alloc+0x12/0x20 [ 378.952880] ? kmem_cache_alloc+0x12e/0x730 [ 378.957214] ? fscache_alloc_cookie+0xcb/0x880 [ 378.961800] ? __fscache_acquire_cookie+0x230/0xb60 [ 378.966820] ? v9fs_session_init+0xffe/0x1a70 [ 378.971319] ? v9fs_mount+0x7d/0x8f0 [ 378.975037] ? mount_fs+0xae/0x31d [ 378.978583] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 378.983340] ? do_mount+0x581/0x31f0 [ 378.987052] ? ksys_mount+0x12d/0x140 [ 378.990849] ? __x64_sys_mount+0xbe/0x150 [ 378.995004] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.000377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.005926] ? delete_node+0x30e/0xd20 [ 379.009824] ? fs_reclaim_acquire+0x20/0x20 [ 379.014151] ? lock_downgrade+0x900/0x900 [ 379.018304] ? ___might_sleep+0x1ed/0x300 [ 379.022460] ? arch_local_save_flags+0x40/0x40 [ 379.027045] ? trace_hardirqs_on+0xbd/0x310 [ 379.031376] ? fscache_alloc_cookie+0xcb/0x880 [ 379.035965] __should_failslab+0x124/0x180 [ 379.040292] should_failslab+0x9/0x14 [ 379.044095] __kmalloc+0x2d4/0x760 [ 379.047638] ? kmem_cache_alloc+0x306/0x730 [ 379.051969] ? fscache_alloc_cookie+0x6f7/0x880 [ 379.056662] fscache_alloc_cookie+0x6f7/0x880 [ 379.061185] ? fscache_cookie_init_once+0x80/0x80 [ 379.066036] ? lock_downgrade+0x900/0x900 [ 379.070200] ? trace_hardirqs_on+0xbd/0x310 05:43:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x6000000}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x7a00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x0, 0x74}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 05:43:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000018140)={&(0x7f0000000000)={0x10, 0x20000000, 0x7a00}, 0xc, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 379.074521] ? kasan_check_read+0x11/0x20 [ 379.078675] ? p9_idpool_put+0x36/0x40 [ 379.082566] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 379.088020] ? kasan_check_write+0x14/0x20 [ 379.092263] __fscache_acquire_cookie+0x230/0xb60 [ 379.097106] ? fscache_cookie_put+0x880/0x880 [ 379.101611] ? p9_client_attach+0x1f1/0x860 [ 379.105942] ? debug_check_no_obj_freed+0x305/0x58d [ 379.110968] ? p9_client_walk+0xb30/0xb30 [ 379.115122] ? check_preemption_disabled+0x48/0x200 [ 379.120140] ? trace_hardirqs_on+0xbd/0x310 [ 379.124458] ? v9fs_session_init+0xd46/0x1a70 [ 379.128956] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 379.128976] v9fs_cache_session_get_cookie+0xc4/0x270 [ 379.129009] v9fs_session_init+0xffe/0x1a70 [ 379.139651] ? v9fs_show_options+0x7e0/0x7e0 [ 379.139667] ? lock_downgrade+0x900/0x900 [ 379.148371] ? ___might_sleep+0x1ed/0x300 [ 379.148390] ? trace_hardirqs_on+0xbd/0x310 [ 379.148410] ? v9fs_mount+0x62/0x8f0 [ 379.156671] ? kasan_unpoison_shadow+0x35/0x50 [ 379.156685] ? kasan_kmalloc+0xc7/0xe0 [ 379.156701] ? kmem_cache_alloc_trace+0x31f/0x750 [ 379.156717] ? free_pages+0x44/0x50 [ 379.164715] v9fs_mount+0x7d/0x8f0 [ 379.164737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.173171] mount_fs+0xae/0x31d [ 379.173193] vfs_kern_mount.part.35+0xdc/0x4f0 [ 379.181620] ? may_umount+0xb0/0xb0 [ 379.181632] ? _raw_read_unlock+0x2c/0x50 [ 379.181648] ? __get_fs_type+0x97/0xc0 [ 379.190693] do_mount+0x581/0x31f0 [ 379.190714] ? copy_mount_string+0x40/0x40 [ 379.190732] ? kasan_unpoison_shadow+0x35/0x50 [ 379.222635] ? kasan_kmalloc+0xc7/0xe0 [ 379.226555] ? kmem_cache_alloc_trace+0x31f/0x750 [ 379.231421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.236982] ? copy_mount_options+0x288/0x380 [ 379.241484] ksys_mount+0x12d/0x140 [ 379.245115] __x64_sys_mount+0xbe/0x150 [ 379.249103] do_syscall_64+0x1b9/0x820 [ 379.252996] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 379.258353] ? syscall_return_slowpath+0x5e0/0x5e0 [ 379.263266] ? trace_hardirqs_on_caller+0x310/0x310 [ 379.268267] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 379.273268] ? recalc_sigpending_tsk+0x180/0x180 [ 379.278005] ? kasan_check_write+0x14/0x20 [ 379.282226] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.287054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.292225] RIP: 0033:0x457579 [ 379.295424] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.314306] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.321995] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 379.329249] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 379.336499] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 379.343836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 379.351098] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 379.360231] ------------[ cut here ]------------ [ 379.365007] kernel BUG at arch/x86/mm/physaddr.c:27! [ 379.370121] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 379.372815] kobject: 'loop1' (000000001587e3da): kobject_uevent_env [ 379.375483] CPU: 0 PID: 15439 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #44 [ 379.375492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.375563] RIP: 0010:__phys_addr+0xb5/0x120 [ 379.375579] Code: 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 e4 5a 46 00 48 85 db 75 0f e8 aa 59 46 00 4c 89 e0 5b 41 5c 41 5d 5d c3 e8 9b 59 46 00 <0f> 0b e8 94 59 46 00 48 c7 c7 10 20 27 89 48 b8 00 00 00 00 00 fc [ 379.382081] kobject: 'loop1' (000000001587e3da): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 379.389212] RSP: 0018:ffff8801802a7400 EFLAGS: 00010046 [ 379.389227] RAX: 0000000000040000 RBX: 30323739b4393234 RCX: ffffc90007e9e000 [ 379.389235] RDX: 0000000000040000 RSI: ffffffff81385be5 RDI: 0000000000000006 [ 379.389245] RBP: ffff8801802a7418 R08: ffff88018431e1c0 R09: fffffbfff1287592 [ 379.389254] R10: fffffbfff1287592 R11: ffffffff8943ac93 R12: 3032af3934393234 [ 379.389265] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 379.472927] FS: 00007f1a8d4b2700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 379.481137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.486999] CR2: 0000000000806e80 CR3: 00000001d758c000 CR4: 00000000001426f0 [ 379.494254] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.501508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 379.508760] Call Trace: [ 379.511338] ? fscache_free_cookie+0x230/0x280 [ 379.515910] kfree+0x7b/0x230 [ 379.518998] fscache_free_cookie+0x230/0x280 [ 379.523389] ? __fscache_check_consistency+0xba0/0xba0 [ 379.528645] ? kmem_cache_alloc+0x306/0x730 [ 379.532950] ? fscache_alloc_cookie+0x6f7/0x880 [ 379.537601] fscache_alloc_cookie+0x74c/0x880 [ 379.542096] ? fscache_cookie_init_once+0x80/0x80 [ 379.547038] ? lock_downgrade+0x900/0x900 [ 379.551175] ? trace_hardirqs_on+0xbd/0x310 [ 379.555476] ? kasan_check_read+0x11/0x20 [ 379.559607] ? p9_idpool_put+0x36/0x40 [ 379.563477] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 379.568910] ? kasan_check_write+0x14/0x20 [ 379.573130] __fscache_acquire_cookie+0x230/0xb60 [ 379.577956] ? fscache_cookie_put+0x880/0x880 [ 379.582430] ? p9_client_attach+0x1f1/0x860 [ 379.586736] ? debug_check_no_obj_freed+0x305/0x58d [ 379.591734] ? p9_client_walk+0xb30/0xb30 [ 379.595890] ? check_preemption_disabled+0x48/0x200 [ 379.600894] ? trace_hardirqs_on+0xbd/0x310 [ 379.605198] ? v9fs_session_init+0xd46/0x1a70 [ 379.609679] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 379.615120] v9fs_cache_session_get_cookie+0xc4/0x270 [ 379.620294] v9fs_session_init+0xffe/0x1a70 [ 379.624605] ? v9fs_show_options+0x7e0/0x7e0 [ 379.628997] ? lock_downgrade+0x900/0x900 [ 379.633142] ? ___might_sleep+0x1ed/0x300 [ 379.637273] ? trace_hardirqs_on+0xbd/0x310 [ 379.641575] ? v9fs_mount+0x62/0x8f0 [ 379.645271] ? kasan_unpoison_shadow+0x35/0x50 [ 379.649837] ? kasan_kmalloc+0xc7/0xe0 [ 379.653707] ? kmem_cache_alloc_trace+0x31f/0x750 [ 379.658537] ? free_pages+0x44/0x50 [ 379.662154] v9fs_mount+0x7d/0x8f0 [ 379.665674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.671196] mount_fs+0xae/0x31d [ 379.674546] vfs_kern_mount.part.35+0xdc/0x4f0 [ 379.679112] ? may_umount+0xb0/0xb0 [ 379.682720] ? _raw_read_unlock+0x2c/0x50 [ 379.686857] ? __get_fs_type+0x97/0xc0 [ 379.690740] do_mount+0x581/0x31f0 [ 379.694260] ? copy_mount_string+0x40/0x40 [ 379.698477] ? kasan_unpoison_shadow+0x35/0x50 [ 379.703038] ? kasan_kmalloc+0xc7/0xe0 [ 379.706908] ? kmem_cache_alloc_trace+0x31f/0x750 [ 379.711735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.717255] ? copy_mount_options+0x288/0x380 [ 379.721740] ksys_mount+0x12d/0x140 [ 379.725351] __x64_sys_mount+0xbe/0x150 [ 379.729324] do_syscall_64+0x1b9/0x820 [ 379.733215] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 379.738563] ? syscall_return_slowpath+0x5e0/0x5e0 [ 379.743478] ? trace_hardirqs_on_caller+0x310/0x310 [ 379.748480] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 379.753475] ? recalc_sigpending_tsk+0x180/0x180 [ 379.758211] ? kasan_check_write+0x14/0x20 [ 379.762428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.767254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.772426] RIP: 0033:0x457579 [ 379.775600] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.794479] RSP: 002b:00007f1a8d4b1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.802193] RAX: ffffffffffffffda RBX: 00007f1a8d4b1c90 RCX: 0000000000457579 [ 379.809445] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 379.816693] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 379.823946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a8d4b26d4 [ 379.831198] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 379.838455] Modules linked in: [ 379.841635] ---[ end trace 8f1ac0cda9511fb1 ]--- [ 379.846372] RIP: 0010:__phys_addr+0xb5/0x120 [ 379.850763] Code: 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 e4 5a 46 00 48 85 db 75 0f e8 aa 59 46 00 4c 89 e0 5b 41 5c 41 5d 5d c3 e8 9b 59 46 00 <0f> 0b e8 94 59 46 00 48 c7 c7 10 20 27 89 48 b8 00 00 00 00 00 fc [ 379.869676] RSP: 0018:ffff8801802a7400 EFLAGS: 00010046 [ 379.875027] RAX: 0000000000040000 RBX: 30323739b4393234 RCX: ffffc90007e9e000 [ 379.882276] RDX: 0000000000040000 RSI: ffffffff81385be5 RDI: 0000000000000006 [ 379.889543] RBP: ffff8801802a7418 R08: ffff88018431e1c0 R09: fffffbfff1287592 [ 379.896794] R10: fffffbfff1287592 R11: ffffffff8943ac93 R12: 3032af3934393234 [ 379.904053] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 379.911317] FS: 00007f1a8d4b2700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 379.919521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.925382] CR2: 0000000000806e80 CR3: 00000001d758c000 CR4: 00000000001426f0 [ 379.932632] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.939892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 379.947141] Kernel panic - not syncing: Fatal exception [ 379.953575] Kernel Offset: disabled [ 379.957197] Rebooting in 86400 seconds..