0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x18}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x0, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x8000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x25}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x0, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:34 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 34) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:34 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x2}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x4}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 685.980063][ T8770] FAULT_INJECTION: forcing a failure. [ 685.980063][ T8770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 685.993360][ T8770] CPU: 1 PID: 8770 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 686.001753][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.011878][ T8770] Call Trace: [ 686.015136][ T8770] [ 686.018074][ T8770] dump_stack_lvl+0xd6/0x122 [ 686.022658][ T8770] dump_stack+0x11/0x1b [ 686.026794][ T8770] should_fail+0x23c/0x250 [ 686.031192][ T8770] __alloc_pages+0x102/0x330 [ 686.035816][ T8770] alloc_pages_vma+0x5ee/0x770 [ 686.040634][ T8770] ? lru_cache_add+0x37/0x50 [ 686.045302][ T8770] wp_page_copy+0x12a/0x10e0 [ 686.049877][ T8770] do_wp_page+0x4fb/0xa80 [ 686.054238][ T8770] ? __rcu_read_unlock+0x5c/0x290 [ 686.059318][ T8770] handle_mm_fault+0x975/0x1590 [ 686.064151][ T8770] do_user_addr_fault+0x609/0xbe0 [ 686.069163][ T8770] exc_page_fault+0x91/0x290 [ 686.073738][ T8770] asm_exc_page_fault+0x1e/0x30 [ 686.078572][ T8770] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 686.085292][ T8770] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 686.104952][ T8770] RSP: 0018:ffffc9000ed9b878 EFLAGS: 00050206 [ 686.111013][ T8770] RAX: ffff888108a19a78 RBX: ffff88813bf10000 RCX: 0000000000002b00 [ 686.120113][ T8770] RDX: 0000000000008000 RSI: ffff88813bf15500 RDI: 000000002001a000 [ 686.128087][ T8770] RBP: 0000000000012c40 R08: 0000000000000000 R09: 0001ffffffffffff [ 686.136059][ T8770] R10: 000188813bf17fff R11: ffff888108a19000 R12: 0000000000008000 [ 686.144006][ T8770] R13: 0000000000000000 R14: ffffc9000ed9be08 R15: 0000000020014b00 [ 686.152020][ T8770] _copy_to_iter+0x1a5/0xbe0 [ 686.156641][ T8770] ? check_stack_object+0x61/0x70 [ 686.161659][ T8770] ? __virt_addr_valid+0x15a/0x1a0 [ 686.166842][ T8770] ? __check_object_size+0x253/0x310 [ 686.172107][ T8770] simple_copy_to_iter+0x4c/0x60 [ 686.177033][ T8770] __skb_datagram_iter+0x23c/0x520 [ 686.182157][ T8770] ? skb_copy_datagram_iter+0xf0/0xf0 [ 686.187512][ T8770] skb_copy_datagram_iter+0x36/0xf0 [ 686.192770][ T8770] unix_stream_read_actor+0x40/0x60 [ 686.198062][ T8770] unix_stream_read_generic+0x79f/0x1430 [ 686.203699][ T8770] ? selinux_socket_recvmsg+0x11a/0x150 [ 686.209260][ T8770] ? should_fail+0xd6/0x250 [ 686.213805][ T8770] unix_stream_recvmsg+0xbc/0xe0 [ 686.218736][ T8770] ? __unix_stream_recvmsg+0xa0/0xa0 [ 686.224065][ T8770] ? unix_stream_sendmsg+0xf10/0xf10 [ 686.229329][ T8770] ____sys_recvmsg+0x16c/0x320 [ 686.234077][ T8770] do_recvmmsg+0x3f5/0xae0 [ 686.238536][ T8770] __x64_sys_recvmmsg+0xde/0x160 [ 686.243457][ T8770] do_syscall_64+0x44/0xd0 [ 686.247894][ T8770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.253791][ T8770] RIP: 0033:0x7f3c6b9daae9 [ 686.258214][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x6}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x7}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 686.277799][ T8770] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 686.286192][ T8770] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 686.294254][ T8770] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 686.302211][ T8770] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.310353][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.318330][ T8770] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 686.326285][ T8770] 23:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc00e000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x0, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x9}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:35 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 35) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:35 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0xa}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0xb}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0xc}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0xd}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 686.911948][ T8817] FAULT_INJECTION: forcing a failure. [ 686.911948][ T8817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 686.925316][ T8817] CPU: 1 PID: 8817 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 686.933670][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.943868][ T8817] Call Trace: [ 686.947132][ T8817] [ 686.950118][ T8817] dump_stack_lvl+0xd6/0x122 [ 686.954829][ T8817] dump_stack+0x11/0x1b [ 686.958975][ T8817] should_fail+0x23c/0x250 [ 686.963400][ T8817] __alloc_pages+0x102/0x330 [ 686.968074][ T8817] alloc_pages_vma+0x5ee/0x770 [ 686.972844][ T8817] ? lru_cache_add+0x37/0x50 [ 686.977416][ T8817] wp_page_copy+0x12a/0x10e0 [ 686.982017][ T8817] do_wp_page+0x4fb/0xa80 [ 686.986401][ T8817] ? __rcu_read_unlock+0x5c/0x290 [ 686.991461][ T8817] handle_mm_fault+0x975/0x1590 [ 686.996294][ T8817] do_user_addr_fault+0x609/0xbe0 [ 687.001413][ T8817] exc_page_fault+0x91/0x290 [ 687.005981][ T8817] asm_exc_page_fault+0x1e/0x30 [ 687.010949][ T8817] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 687.017550][ T8817] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 687.037282][ T8817] RSP: 0018:ffffc9000ef1b878 EFLAGS: 00050206 [ 687.043344][ T8817] RAX: ffff888107c12a78 RBX: ffff88813ea98000 RCX: 0000000000001b00 [ 687.051292][ T8817] RDX: 0000000000008000 RSI: ffff88813ea9e500 RDI: 000000002001b000 [ 687.059285][ T8817] RBP: 0000000000012c40 R08: 0000000000000000 R09: 0001ffffffffffff [ 687.067242][ T8817] R10: 000188813ea9ffff R11: ffff888107c12000 R12: 0000000000008000 [ 687.075220][ T8817] R13: 0000000000000000 R14: ffffc9000ef1be08 R15: 0000000020014b00 [ 687.083178][ T8817] _copy_to_iter+0x1a5/0xbe0 [ 687.087753][ T8817] ? check_stack_object+0x61/0x70 [ 687.092800][ T8817] ? __virt_addr_valid+0x15a/0x1a0 [ 687.097897][ T8817] ? __check_object_size+0x253/0x310 [ 687.103182][ T8817] simple_copy_to_iter+0x4c/0x60 [ 687.108200][ T8817] __skb_datagram_iter+0x23c/0x520 [ 687.113371][ T8817] ? skb_copy_datagram_iter+0xf0/0xf0 [ 687.118753][ T8817] skb_copy_datagram_iter+0x36/0xf0 [ 687.123932][ T8817] unix_stream_read_actor+0x40/0x60 [ 687.129111][ T8817] unix_stream_read_generic+0x79f/0x1430 [ 687.134727][ T8817] ? selinux_socket_recvmsg+0x11a/0x150 [ 687.140255][ T8817] ? should_fail+0xd6/0x250 [ 687.144739][ T8817] unix_stream_recvmsg+0xbc/0xe0 [ 687.149665][ T8817] ? __unix_stream_recvmsg+0xa0/0xa0 [ 687.154949][ T8817] ? unix_stream_sendmsg+0xf10/0xf10 [ 687.160228][ T8817] ____sys_recvmsg+0x16c/0x320 [ 687.165033][ T8817] do_recvmmsg+0x3f5/0xae0 [ 687.169496][ T8817] __x64_sys_recvmmsg+0xde/0x160 [ 687.174418][ T8817] do_syscall_64+0x44/0xd0 [ 687.178894][ T8817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 687.184798][ T8817] RIP: 0033:0x7f3c6b9daae9 [ 687.189197][ T8817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0xe}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 687.208859][ T8817] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 687.217688][ T8817] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 687.225651][ T8817] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 687.233599][ T8817] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.241735][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.249707][ T8817] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 687.257663][ T8817] 23:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x10}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc08e000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x11}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x0, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:36 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:36 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:36 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 36) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x12}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x9800}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0xc000}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x2}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 687.810972][ T8857] FAULT_INJECTION: forcing a failure. [ 687.810972][ T8857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 687.824233][ T8857] CPU: 0 PID: 8857 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 687.832561][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.842620][ T8857] Call Trace: [ 687.845894][ T8857] [ 687.848822][ T8857] dump_stack_lvl+0xd6/0x122 [ 687.853453][ T8857] dump_stack+0x11/0x1b 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x3}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x4}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 687.857701][ T8857] should_fail+0x23c/0x250 [ 687.862131][ T8857] __alloc_pages+0x102/0x330 [ 687.866754][ T8857] alloc_pages_vma+0x5ee/0x770 [ 687.871555][ T8857] ? lru_cache_add+0x37/0x50 [ 687.876166][ T8857] wp_page_copy+0x12a/0x10e0 [ 687.880807][ T8857] do_wp_page+0x4fb/0xa80 [ 687.885370][ T8857] ? __rcu_read_unlock+0x5c/0x290 [ 687.890394][ T8857] handle_mm_fault+0x975/0x1590 [ 687.895305][ T8857] do_user_addr_fault+0x609/0xbe0 [ 687.900518][ T8857] exc_page_fault+0x91/0x290 [ 687.905173][ T8857] asm_exc_page_fault+0x1e/0x30 [ 687.910032][ T8857] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 687.916647][ T8857] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 687.936238][ T8857] RSP: 0018:ffffc9000f0f7878 EFLAGS: 00050206 [ 687.942321][ T8857] RAX: ffff88813bd70a78 RBX: ffff88813e468000 RCX: 0000000000000b00 [ 687.950494][ T8857] RDX: 0000000000008000 RSI: ffff88813e46f500 RDI: 000000002001c000 [ 687.958442][ T8857] RBP: 0000000000012c40 R08: 0000000000000000 R09: 0001ffffffffffff [ 687.966401][ T8857] R10: 000188813e46ffff R11: ffff88813bd70000 R12: 0000000000008000 [ 687.974351][ T8857] R13: 0000000000000000 R14: ffffc9000f0f7e08 R15: 0000000020014b00 [ 687.982306][ T8857] _copy_to_iter+0x1a5/0xbe0 [ 687.986956][ T8857] ? check_stack_object+0x61/0x70 [ 687.992022][ T8857] ? __virt_addr_valid+0x15a/0x1a0 [ 687.997123][ T8857] ? __check_object_size+0x253/0x310 [ 688.002439][ T8857] simple_copy_to_iter+0x4c/0x60 [ 688.007390][ T8857] __skb_datagram_iter+0x23c/0x520 [ 688.012548][ T8857] ? skb_copy_datagram_iter+0xf0/0xf0 [ 688.017921][ T8857] skb_copy_datagram_iter+0x36/0xf0 [ 688.023102][ T8857] unix_stream_read_actor+0x40/0x60 [ 688.028282][ T8857] unix_stream_read_generic+0x79f/0x1430 [ 688.033943][ T8857] ? selinux_socket_recvmsg+0x11a/0x150 [ 688.039554][ T8857] ? should_fail+0xd6/0x250 [ 688.044094][ T8857] unix_stream_recvmsg+0xbc/0xe0 [ 688.049120][ T8857] ? __unix_stream_recvmsg+0xa0/0xa0 [ 688.054384][ T8857] ? unix_stream_sendmsg+0xf10/0xf10 [ 688.059724][ T8857] ____sys_recvmsg+0x16c/0x320 [ 688.064474][ T8857] do_recvmmsg+0x3f5/0xae0 [ 688.068950][ T8857] __x64_sys_recvmmsg+0xde/0x160 [ 688.073980][ T8857] do_syscall_64+0x44/0xd0 [ 688.078377][ T8857] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 688.084294][ T8857] RIP: 0033:0x7f3c6b9daae9 [ 688.088688][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.108358][ T8857] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 688.116760][ T8857] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 688.124727][ T8857] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 688.132677][ T8857] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.140627][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.148610][ T8857] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 688.156625][ T8857] 23:43:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x6}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x0, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:37 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 37) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x7}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x9}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 688.724004][ T8895] FAULT_INJECTION: forcing a failure. [ 688.724004][ T8895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.737146][ T8895] CPU: 0 PID: 8895 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 688.745473][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.755526][ T8895] Call Trace: [ 688.758830][ T8895] [ 688.761754][ T8895] dump_stack_lvl+0xd6/0x122 [ 688.766356][ T8895] dump_stack+0x11/0x1b 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0xa}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 688.770568][ T8895] should_fail+0x23c/0x250 [ 688.774989][ T8895] should_fail_usercopy+0x16/0x20 [ 688.780158][ T8895] _copy_to_iter+0x131/0xbe0 [ 688.784822][ T8895] ? check_stack_object+0x61/0x70 [ 688.789911][ T8895] ? __virt_addr_valid+0x15a/0x1a0 [ 688.795034][ T8895] ? __check_object_size+0x253/0x310 [ 688.800510][ T8895] simple_copy_to_iter+0x4c/0x60 [ 688.805436][ T8895] ? skb_copy_datagram_iter+0xf0/0xf0 [ 688.810863][ T8895] __skb_datagram_iter+0xac/0x520 [ 688.815867][ T8895] ? kfree+0xf8/0x1f0 [ 688.819828][ T8895] ? __kfree_skb+0xfe/0x150 [ 688.824311][ T8895] skb_copy_datagram_iter+0x36/0xf0 [ 688.829505][ T8895] unix_stream_read_actor+0x40/0x60 [ 688.834886][ T8895] unix_stream_read_generic+0x79f/0x1430 [ 688.840569][ T8895] ? selinux_socket_recvmsg+0x11a/0x150 [ 688.846095][ T8895] ? should_fail+0xd6/0x250 [ 688.850606][ T8895] unix_stream_recvmsg+0xbc/0xe0 [ 688.855528][ T8895] ? __unix_stream_recvmsg+0xa0/0xa0 [ 688.860819][ T8895] ? unix_stream_sendmsg+0xf10/0xf10 [ 688.866094][ T8895] ____sys_recvmsg+0x16c/0x320 [ 688.870867][ T8895] do_recvmmsg+0x3f5/0xae0 [ 688.875269][ T8895] __x64_sys_recvmmsg+0xde/0x160 [ 688.880184][ T8895] do_syscall_64+0x44/0xd0 [ 688.884624][ T8895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 688.890639][ T8895] RIP: 0033:0x7f3c6b9daae9 [ 688.895033][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.914689][ T8895] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0xb}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0xc}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 688.923129][ T8895] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 688.931171][ T8895] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 688.939128][ T8895] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.947080][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.955106][ T8895] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 688.963075][ T8895] 23:43:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0xd}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x0, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:38 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 38) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0xe}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x10}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x11}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x12}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 689.647176][ T8940] FAULT_INJECTION: forcing a failure. [ 689.647176][ T8940] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 689.660684][ T8940] CPU: 1 PID: 8940 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 689.669117][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.679170][ T8940] Call Trace: [ 689.682445][ T8940] [ 689.685381][ T8940] dump_stack_lvl+0xd6/0x122 [ 689.690005][ T8940] dump_stack+0x11/0x1b [ 689.694160][ T8940] should_fail+0x23c/0x250 [ 689.698695][ T8940] __alloc_pages+0x102/0x330 [ 689.703345][ T8940] alloc_pages_vma+0x5ee/0x770 [ 689.708115][ T8940] ? lru_cache_add+0x37/0x50 [ 689.712737][ T8940] wp_page_copy+0x12a/0x10e0 [ 689.717310][ T8940] do_wp_page+0x4fb/0xa80 [ 689.721653][ T8940] ? __rcu_read_unlock+0x5c/0x290 [ 689.726662][ T8940] handle_mm_fault+0x975/0x1590 [ 689.731558][ T8940] do_user_addr_fault+0x609/0xbe0 [ 689.736572][ T8940] exc_page_fault+0x91/0x290 [ 689.741155][ T8940] asm_exc_page_fault+0x1e/0x30 [ 689.746010][ T8940] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 689.752700][ T8940] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 689.772284][ T8940] RSP: 0018:ffffc9000f42f878 EFLAGS: 00050202 [ 689.778327][ T8940] RAX: ffff888107162a78 RBX: ffff88813a056000 RCX: 00000000000009c0 [ 689.786336][ T8940] RDX: 0000000000000ec0 RSI: ffff88813a056500 RDI: 000000002001d000 [ 689.794291][ T8940] RBP: 000000000001ac40 R08: 0000000000000000 R09: 0001ffffffffffff [ 689.802265][ T8940] R10: 000188813a056ebf R11: ffff888107162000 R12: 0000000000000ec0 [ 689.810217][ T8940] R13: 0000000000000000 R14: ffffc9000f42fe08 R15: 000000002001cb00 [ 689.818221][ T8940] _copy_to_iter+0x1a5/0xbe0 [ 689.822903][ T8940] ? check_stack_object+0x61/0x70 [ 689.827920][ T8940] ? __virt_addr_valid+0x15a/0x1a0 [ 689.833034][ T8940] ? __check_object_size+0x253/0x310 [ 689.838370][ T8940] simple_copy_to_iter+0x4c/0x60 [ 689.843298][ T8940] ? skb_copy_datagram_iter+0xf0/0xf0 [ 689.848756][ T8940] __skb_datagram_iter+0xac/0x520 [ 689.853800][ T8940] ? kfree+0xf8/0x1f0 [ 689.857760][ T8940] ? __kfree_skb+0xfe/0x150 [ 689.862264][ T8940] skb_copy_datagram_iter+0x36/0xf0 [ 689.867510][ T8940] unix_stream_read_actor+0x40/0x60 [ 689.872710][ T8940] unix_stream_read_generic+0x79f/0x1430 [ 689.878423][ T8940] ? selinux_socket_recvmsg+0x11a/0x150 [ 689.883966][ T8940] ? should_fail+0xd6/0x250 [ 689.888484][ T8940] unix_stream_recvmsg+0xbc/0xe0 [ 689.893479][ T8940] ? __unix_stream_recvmsg+0xa0/0xa0 [ 689.898757][ T8940] ? unix_stream_sendmsg+0xf10/0xf10 [ 689.904079][ T8940] ____sys_recvmsg+0x16c/0x320 [ 689.908838][ T8940] do_recvmmsg+0x3f5/0xae0 [ 689.913248][ T8940] __x64_sys_recvmmsg+0xde/0x160 [ 689.918279][ T8940] do_syscall_64+0x44/0xd0 [ 689.922798][ T8940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 689.928730][ T8940] RIP: 0033:0x7f3c6b9daae9 [ 689.933124][ T8940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.952902][ T8940] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 689.961294][ T8940] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 689.969261][ T8940] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 689.977209][ T8940] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.985308][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x18}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5, 0x3, 0x25}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 689.993270][ T8940] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 690.001265][ T8940] [ 690.007049][ T8950] validate_nla: 26 callbacks suppressed [ 690.007063][ T8950] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 690.020839][ T8950] __nla_validate_parse: 18 callbacks suppressed [ 690.020855][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x0, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x2, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:38 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 39) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x4, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 690.519582][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.530260][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.559970][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.569358][ T8979] team0: No ports can be present during mode change [ 690.576740][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.586128][ T8981] team0: No ports can be present during mode change [ 690.586654][ T8984] FAULT_INJECTION: forcing a failure. [ 690.586654][ T8984] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x5, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 690.605881][ T8984] CPU: 1 PID: 8984 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 690.614207][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.624261][ T8984] Call Trace: [ 690.627538][ T8984] [ 690.630464][ T8984] dump_stack_lvl+0xd6/0x122 [ 690.635063][ T8984] dump_stack+0x11/0x1b [ 690.639303][ T8984] should_fail+0x23c/0x250 [ 690.643722][ T8984] should_fail_usercopy+0x16/0x20 [ 690.648852][ T8984] _copy_to_iter+0x131/0xbe0 [ 690.653528][ T8984] ? check_stack_object+0x61/0x70 [ 690.658619][ T8984] ? __virt_addr_valid+0x15a/0x1a0 [ 690.663783][ T8984] ? __check_object_size+0x253/0x310 [ 690.669099][ T8984] simple_copy_to_iter+0x4c/0x60 [ 690.674151][ T8984] __skb_datagram_iter+0x23c/0x520 [ 690.679458][ T8984] ? skb_copy_datagram_iter+0xf0/0xf0 [ 690.684836][ T8984] skb_copy_datagram_iter+0x36/0xf0 [ 690.690098][ T8984] unix_stream_read_actor+0x40/0x60 [ 690.695362][ T8984] unix_stream_read_generic+0x79f/0x1430 [ 690.701074][ T8984] ? selinux_socket_recvmsg+0x11a/0x150 [ 690.706639][ T8984] ? should_fail+0xd6/0x250 [ 690.711120][ T8984] unix_stream_recvmsg+0xbc/0xe0 [ 690.716112][ T8984] ? __unix_stream_recvmsg+0xa0/0xa0 [ 690.721469][ T8984] ? unix_stream_sendmsg+0xf10/0xf10 [ 690.726808][ T8984] ____sys_recvmsg+0x16c/0x320 [ 690.731574][ T8984] do_recvmmsg+0x3f5/0xae0 [ 690.736028][ T8984] __x64_sys_recvmmsg+0xde/0x160 [ 690.740974][ T8984] do_syscall_64+0x44/0xd0 [ 690.745403][ T8984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 690.751297][ T8984] RIP: 0033:0x7f3c6b9daae9 23:43:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 690.755711][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.775656][ T8984] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 690.784073][ T8984] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 690.792036][ T8984] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 690.799990][ T8984] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 690.808124][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.816101][ T8984] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 690.824086][ T8984] [ 690.833568][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.842856][ T8987] team0: No ports can be present during mode change [ 690.851303][ T8988] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x6, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 690.859454][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 690.871957][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.881275][ T8994] team0: No ports can be present during mode change 23:43:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x0, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xa, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 690.910004][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.919251][ T8996] team0: No ports can be present during mode change [ 690.926760][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.936015][ T8998] team0: No ports can be present during mode change 23:43:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x3}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xc, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x24, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 690.976812][ T9005] team0: No ports can be present during mode change [ 690.985143][ T9006] team0: No ports can be present during mode change [ 691.008061][ T9010] team0: No ports can be present during mode change [ 691.018587][ T9012] team0: No ports can be present during mode change [ 691.058480][ T9000] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x29, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:39 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x8000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:39 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 40) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:39 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x2c, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x6558, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x8100, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 691.470988][ T9046] FAULT_INJECTION: forcing a failure. [ 691.470988][ T9046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.484301][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 691.492850][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.502930][ T9046] Call Trace: [ 691.506204][ T9046] [ 691.509129][ T9046] dump_stack_lvl+0xd6/0x122 [ 691.513735][ T9046] dump_stack+0x11/0x1b 23:43:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x8847, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 691.517932][ T9046] should_fail+0x23c/0x250 [ 691.522357][ T9046] __alloc_pages+0x102/0x330 [ 691.526957][ T9046] alloc_pages_vma+0x5ee/0x770 [ 691.531805][ T9046] ? lru_cache_add+0x37/0x50 [ 691.536398][ T9046] wp_page_copy+0x12a/0x10e0 [ 691.540994][ T9046] do_wp_page+0x4fb/0xa80 [ 691.545379][ T9046] ? __rcu_read_unlock+0x5c/0x290 [ 691.550407][ T9046] handle_mm_fault+0x975/0x1590 [ 691.555263][ T9046] do_user_addr_fault+0x609/0xbe0 [ 691.560316][ T9046] exc_page_fault+0x91/0x290 [ 691.564906][ T9046] asm_exc_page_fault+0x1e/0x30 [ 691.569848][ T9046] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 691.576560][ T9046] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 691.596202][ T9046] RSP: 0018:ffffc9000f687878 EFLAGS: 00050206 [ 691.602356][ T9046] RAX: ffff88813bedba78 RBX: ffff8881405c0000 RCX: 00000000000079c0 [ 691.610350][ T9046] RDX: 0000000000008000 RSI: ffff8881405c0640 RDI: 000000002001e000 23:43:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x7}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 691.618408][ T9046] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 691.626475][ T9046] R10: 00018881405c7fff R11: ffff88813bedb000 R12: 0000000000008000 [ 691.634444][ T9046] R13: 0000000000000000 R14: ffffc9000f687e08 R15: 000000002001d9c0 [ 691.642435][ T9046] _copy_to_iter+0x1a5/0xbe0 [ 691.647033][ T9046] ? check_stack_object+0x61/0x70 [ 691.652189][ T9046] ? __virt_addr_valid+0x15a/0x1a0 [ 691.657328][ T9046] ? __check_object_size+0x253/0x310 [ 691.662629][ T9046] simple_copy_to_iter+0x4c/0x60 [ 691.667566][ T9046] __skb_datagram_iter+0x23c/0x520 [ 691.672726][ T9046] ? skb_copy_datagram_iter+0xf0/0xf0 [ 691.678085][ T9046] skb_copy_datagram_iter+0x36/0xf0 [ 691.683303][ T9046] unix_stream_read_actor+0x40/0x60 [ 691.688505][ T9046] unix_stream_read_generic+0x79f/0x1430 [ 691.694121][ T9046] ? selinux_socket_recvmsg+0x11a/0x150 [ 691.699715][ T9046] ? should_fail+0xd6/0x250 [ 691.704464][ T9046] unix_stream_recvmsg+0xbc/0xe0 [ 691.709423][ T9046] ? __unix_stream_recvmsg+0xa0/0xa0 [ 691.714725][ T9046] ? unix_stream_sendmsg+0xf10/0xf10 [ 691.720118][ T9046] ____sys_recvmsg+0x16c/0x320 [ 691.724960][ T9046] do_recvmmsg+0x3f5/0xae0 [ 691.729457][ T9046] __x64_sys_recvmmsg+0xde/0x160 [ 691.734398][ T9046] do_syscall_64+0x44/0xd0 [ 691.738880][ T9046] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 691.744809][ T9046] RIP: 0033:0x7f3c6b9daae9 [ 691.749250][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.768902][ T9046] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 691.777397][ T9046] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 691.785435][ T9046] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 691.793389][ T9046] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.801415][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.809726][ T9046] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 691.817728][ T9046] 23:43:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x8848, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 691.825377][ T9054] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:43:40 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc00e000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x2, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x10}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:40 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0xc00e0000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:40 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 41) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x3, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x5, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 692.302233][ T9083] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 692.311522][ T9085] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 692.341570][ T9088] FAULT_INJECTION: forcing a failure. [ 692.341570][ T9088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.354843][ T9088] CPU: 0 PID: 9088 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 692.363172][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.373225][ T9088] Call Trace: [ 692.376499][ T9088] [ 692.379510][ T9088] dump_stack_lvl+0xd6/0x122 [ 692.384170][ T9088] dump_stack+0x11/0x1b [ 692.388331][ T9088] should_fail+0x23c/0x250 [ 692.392865][ T9088] __alloc_pages+0x102/0x330 [ 692.397463][ T9088] alloc_pages_vma+0x5ee/0x770 [ 692.402336][ T9088] ? lru_cache_add+0x37/0x50 [ 692.406951][ T9088] wp_page_copy+0x12a/0x10e0 [ 692.411605][ T9088] do_wp_page+0x4fb/0xa80 [ 692.415916][ T9088] ? __rcu_read_unlock+0x5c/0x290 [ 692.421063][ T9088] handle_mm_fault+0x975/0x1590 [ 692.425981][ T9088] do_user_addr_fault+0x609/0xbe0 [ 692.431058][ T9088] exc_page_fault+0x91/0x290 [ 692.435630][ T9088] asm_exc_page_fault+0x1e/0x30 [ 692.440463][ T9088] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 23:43:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x300}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 692.447102][ T9088] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 692.466709][ T9088] RSP: 0018:ffffc9000f9c7878 EFLAGS: 00050206 [ 692.472788][ T9088] RAX: ffff88813ac91a78 RBX: ffff88813f078000 RCX: 00000000000069c0 [ 692.480885][ T9088] RDX: 0000000000008000 RSI: ffff88813f079640 RDI: 000000002001f000 [ 692.488874][ T9088] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 692.496857][ T9088] R10: 000188813f07ffff R11: ffff88813ac91000 R12: 0000000000008000 [ 692.504841][ T9088] R13: 0000000000000000 R14: ffffc9000f9c7e08 R15: 000000002001d9c0 [ 692.512847][ T9088] _copy_to_iter+0x1a5/0xbe0 [ 692.517487][ T9088] ? check_stack_object+0x61/0x70 [ 692.522520][ T9088] ? __virt_addr_valid+0x15a/0x1a0 [ 692.527623][ T9088] ? __check_object_size+0x253/0x310 [ 692.533447][ T9088] simple_copy_to_iter+0x4c/0x60 [ 692.538450][ T9088] __skb_datagram_iter+0x23c/0x520 [ 692.543548][ T9088] ? skb_copy_datagram_iter+0xf0/0xf0 [ 692.548986][ T9088] skb_copy_datagram_iter+0x36/0xf0 [ 692.554201][ T9088] unix_stream_read_actor+0x40/0x60 [ 692.559430][ T9088] unix_stream_read_generic+0x79f/0x1430 [ 692.565069][ T9088] ? selinux_socket_recvmsg+0x11a/0x150 [ 692.570617][ T9088] ? should_fail+0xd6/0x250 [ 692.575179][ T9088] unix_stream_recvmsg+0xbc/0xe0 [ 692.580158][ T9088] ? __unix_stream_recvmsg+0xa0/0xa0 [ 692.585449][ T9088] ? unix_stream_sendmsg+0xf10/0xf10 [ 692.590780][ T9088] ____sys_recvmsg+0x16c/0x320 [ 692.595548][ T9088] do_recvmmsg+0x3f5/0xae0 [ 692.600018][ T9088] __x64_sys_recvmmsg+0xde/0x160 [ 692.604960][ T9088] do_syscall_64+0x44/0xd0 [ 692.609470][ T9088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 692.615428][ T9088] RIP: 0033:0x7f3c6b9daae9 [ 692.619962][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 692.639569][ T9088] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 23:43:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x700}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x6, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 692.648246][ T9088] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 692.656202][ T9088] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 692.664255][ T9088] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 692.672284][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.680244][ T9088] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 692.688256][ T9088] [ 692.695590][ T9097] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:43:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 692.731613][ T9104] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 692.742629][ T9105] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 692.847364][ T9107] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:43:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc08e000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x7, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xec0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:41 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0xc08e0000, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:41 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 42) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x8, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x9, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0xa, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 693.217306][ T9139] FAULT_INJECTION: forcing a failure. [ 693.217306][ T9139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 693.230728][ T9139] CPU: 0 PID: 9139 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 693.239080][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.249134][ T9139] Call Trace: [ 693.252408][ T9139] [ 693.255334][ T9139] dump_stack_lvl+0xd6/0x122 [ 693.259938][ T9139] dump_stack+0x11/0x1b 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0xb, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0xc, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 693.264101][ T9139] should_fail+0x23c/0x250 [ 693.268541][ T9139] __alloc_pages+0x102/0x330 [ 693.273183][ T9139] alloc_pages_vma+0x5ee/0x770 [ 693.277958][ T9139] ? lru_cache_add+0x37/0x50 [ 693.282555][ T9139] wp_page_copy+0x12a/0x10e0 [ 693.287160][ T9139] do_wp_page+0x4fb/0xa80 [ 693.291488][ T9139] ? __rcu_read_unlock+0x5c/0x290 [ 693.296518][ T9139] handle_mm_fault+0x975/0x1590 [ 693.301420][ T9139] do_user_addr_fault+0x609/0xbe0 [ 693.306455][ T9139] exc_page_fault+0x91/0x290 [ 693.311255][ T9139] asm_exc_page_fault+0x1e/0x30 23:43:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0xd, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 693.316107][ T9139] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 693.322701][ T9139] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 693.342305][ T9139] RSP: 0018:ffffc9000fdd3878 EFLAGS: 00050206 [ 693.348372][ T9139] RAX: ffff8881390dea78 RBX: ffff88813f078000 RCX: 00000000000059c0 [ 693.356401][ T9139] RDX: 0000000000008000 RSI: ffff88813f07a640 RDI: 0000000020020000 [ 693.364379][ T9139] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 693.372347][ T9139] R10: 000188813f07ffff R11: ffff8881390de000 R12: 0000000000008000 [ 693.380765][ T9139] R13: 0000000000000000 R14: ffffc9000fdd3e08 R15: 000000002001d9c0 [ 693.388746][ T9139] _copy_to_iter+0x1a5/0xbe0 [ 693.393351][ T9139] ? check_stack_object+0x61/0x70 [ 693.398381][ T9139] ? __virt_addr_valid+0x15a/0x1a0 [ 693.403536][ T9139] ? __check_object_size+0x253/0x310 [ 693.409046][ T9139] simple_copy_to_iter+0x4c/0x60 [ 693.414043][ T9139] __skb_datagram_iter+0x23c/0x520 [ 693.419730][ T9139] ? skb_copy_datagram_iter+0xf0/0xf0 [ 693.425111][ T9139] skb_copy_datagram_iter+0x36/0xf0 [ 693.430310][ T9139] unix_stream_read_actor+0x40/0x60 [ 693.435570][ T9139] unix_stream_read_generic+0x79f/0x1430 [ 693.441292][ T9139] ? selinux_socket_recvmsg+0x11a/0x150 [ 693.446884][ T9139] ? should_fail+0xd6/0x250 [ 693.451534][ T9139] unix_stream_recvmsg+0xbc/0xe0 [ 693.456489][ T9139] ? __unix_stream_recvmsg+0xa0/0xa0 [ 693.461771][ T9139] ? unix_stream_sendmsg+0xf10/0xf10 [ 693.467113][ T9139] ____sys_recvmsg+0x16c/0x320 [ 693.472101][ T9139] do_recvmmsg+0x3f5/0xae0 [ 693.476510][ T9139] __x64_sys_recvmmsg+0xde/0x160 [ 693.481481][ T9139] do_syscall_64+0x44/0xd0 [ 693.485884][ T9139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 693.491848][ T9139] RIP: 0033:0x7f3c6b9daae9 [ 693.496237][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 693.515830][ T9139] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 693.524389][ T9139] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 693.532343][ T9139] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 693.540568][ T9139] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 693.548555][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.556507][ T9139] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 693.564510][ T9139] 23:43:42 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:42 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0xe, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:42 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:42 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 43) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x10, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x11, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x12, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x24, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 694.084974][ T9179] FAULT_INJECTION: forcing a failure. [ 694.084974][ T9179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.098236][ T9179] CPU: 1 PID: 9179 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 694.106580][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.116628][ T9179] Call Trace: [ 694.119900][ T9179] [ 694.122826][ T9179] dump_stack_lvl+0xd6/0x122 [ 694.127431][ T9179] dump_stack+0x11/0x1b 23:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x0, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 694.131767][ T9179] should_fail+0x23c/0x250 [ 694.136233][ T9179] __alloc_pages+0x102/0x330 [ 694.140828][ T9179] alloc_pages_vma+0x5ee/0x770 [ 694.145617][ T9179] ? lru_cache_add+0x37/0x50 [ 694.150349][ T9179] wp_page_copy+0x12a/0x10e0 [ 694.154977][ T9179] do_wp_page+0x4fb/0xa80 [ 694.159377][ T9179] ? __rcu_read_unlock+0x5c/0x290 [ 694.164403][ T9179] handle_mm_fault+0x975/0x1590 [ 694.169260][ T9179] do_user_addr_fault+0x609/0xbe0 [ 694.174391][ T9179] exc_page_fault+0x91/0x290 [ 694.178976][ T9179] asm_exc_page_fault+0x1e/0x30 23:43:42 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 694.183875][ T9179] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 694.190466][ T9179] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 694.210073][ T9179] RSP: 0018:ffffc9000ff63878 EFLAGS: 00050206 [ 694.216208][ T9179] RAX: ffff88813982ba78 RBX: ffff888106c40000 RCX: 00000000000049c0 [ 694.224218][ T9179] RDX: 0000000000008000 RSI: ffff888106c43640 RDI: 0000000020021000 [ 694.232175][ T9179] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 694.240160][ T9179] R10: 0001888106c47fff R11: ffff88813982b000 R12: 0000000000008000 [ 694.248110][ T9179] R13: 0000000000000000 R14: ffffc9000ff63e08 R15: 000000002001d9c0 [ 694.256141][ T9179] _copy_to_iter+0x1a5/0xbe0 [ 694.260788][ T9179] ? check_stack_object+0x61/0x70 [ 694.265843][ T9179] ? __virt_addr_valid+0x15a/0x1a0 [ 694.271075][ T9179] ? __check_object_size+0x253/0x310 [ 694.276350][ T9179] simple_copy_to_iter+0x4c/0x60 [ 694.281386][ T9179] __skb_datagram_iter+0x23c/0x520 [ 694.286541][ T9179] ? skb_copy_datagram_iter+0xf0/0xf0 [ 694.291915][ T9179] skb_copy_datagram_iter+0x36/0xf0 [ 694.297187][ T9179] unix_stream_read_actor+0x40/0x60 [ 694.302398][ T9179] unix_stream_read_generic+0x79f/0x1430 [ 694.308043][ T9179] ? selinux_socket_recvmsg+0x11a/0x150 [ 694.313602][ T9179] ? should_fail+0xd6/0x250 [ 694.318123][ T9179] unix_stream_recvmsg+0xbc/0xe0 [ 694.323063][ T9179] ? __unix_stream_recvmsg+0xa0/0xa0 [ 694.328381][ T9179] ? unix_stream_sendmsg+0xf10/0xf10 [ 694.333672][ T9179] ____sys_recvmsg+0x16c/0x320 [ 694.338449][ T9179] do_recvmmsg+0x3f5/0xae0 [ 694.342892][ T9179] __x64_sys_recvmmsg+0xde/0x160 [ 694.347839][ T9179] do_syscall_64+0x44/0xd0 [ 694.352271][ T9179] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 694.358237][ T9179] RIP: 0033:0x7f3c6b9daae9 [ 694.362637][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 694.382371][ T9179] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 694.390790][ T9179] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 694.398739][ T9179] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 694.406692][ T9179] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 694.414656][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 694.422625][ T9179] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 694.430594][ T9179] 23:43:43 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8ec0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x3100, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x0, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:43 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:43 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 44) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4a00, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xf}}, 0x0) 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x10}}, 0x0) 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x14}}, 0x0) [ 694.942793][ T9223] FAULT_INJECTION: forcing a failure. [ 694.942793][ T9223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.956139][ T9223] CPU: 0 PID: 9223 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 694.964464][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.974582][ T9223] Call Trace: [ 694.977860][ T9223] [ 694.980840][ T9223] dump_stack_lvl+0xd6/0x122 [ 694.985453][ T9223] dump_stack+0x11/0x1b 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xc0}}, 0x0) [ 694.989666][ T9223] should_fail+0x23c/0x250 [ 694.994182][ T9223] __alloc_pages+0x102/0x330 [ 694.998821][ T9223] alloc_pages_vma+0x5ee/0x770 [ 695.003617][ T9223] ? lru_cache_add+0x37/0x50 [ 695.008241][ T9223] wp_page_copy+0x12a/0x10e0 [ 695.011709][ T9229] team0: No ports can be present during mode change [ 695.012836][ T9223] do_wp_page+0x4fb/0xa80 [ 695.020502][ T9230] team0: No ports can be present during mode change [ 695.023736][ T9223] ? __rcu_read_unlock+0x5c/0x290 [ 695.035298][ T9223] handle_mm_fault+0x975/0x1590 23:43:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xec0}}, 0x0) [ 695.040154][ T9223] do_user_addr_fault+0x609/0xbe0 [ 695.045185][ T9223] exc_page_fault+0x91/0x290 [ 695.049782][ T9223] asm_exc_page_fault+0x1e/0x30 [ 695.053520][ T9233] team0: No ports can be present during mode change [ 695.054721][ T9223] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 695.054752][ T9223] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 695.087660][ T9223] RSP: 0018:ffffc9001012b878 EFLAGS: 00050206 [ 695.092730][ T9234] team0: No ports can be present during mode change [ 695.093742][ T9223] RAX: ffff888108988a78 RBX: ffff888107c18000 RCX: 00000000000039c0 [ 695.093758][ T9223] RDX: 0000000000008000 RSI: ffff888107c1c640 RDI: 0000000020022000 [ 695.093772][ T9223] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 695.124242][ T9223] R10: 0001888107c1ffff R11: ffff888108988000 R12: 0000000000008000 [ 695.132278][ T9223] R13: 0000000000000000 R14: ffffc9001012be08 R15: 000000002001d9c0 [ 695.140371][ T9223] _copy_to_iter+0x1a5/0xbe0 [ 695.145023][ T9223] ? check_stack_object+0x61/0x70 [ 695.150060][ T9223] ? __virt_addr_valid+0x15a/0x1a0 [ 695.155186][ T9223] ? __check_object_size+0x253/0x310 [ 695.160493][ T9223] simple_copy_to_iter+0x4c/0x60 [ 695.165414][ T9223] __skb_datagram_iter+0x23c/0x520 [ 695.170568][ T9223] ? skb_copy_datagram_iter+0xf0/0xf0 [ 695.175950][ T9223] skb_copy_datagram_iter+0x36/0xf0 [ 695.181233][ T9223] unix_stream_read_actor+0x40/0x60 [ 695.186430][ T9223] unix_stream_read_generic+0x79f/0x1430 [ 695.192135][ T9223] ? selinux_socket_recvmsg+0x11a/0x150 [ 695.197659][ T9223] ? should_fail+0xd6/0x250 [ 695.202150][ T9223] unix_stream_recvmsg+0xbc/0xe0 [ 695.207129][ T9223] ? __unix_stream_recvmsg+0xa0/0xa0 [ 695.212451][ T9223] ? unix_stream_sendmsg+0xf10/0xf10 [ 695.217767][ T9223] ____sys_recvmsg+0x16c/0x320 [ 695.222538][ T9223] do_recvmmsg+0x3f5/0xae0 [ 695.226936][ T9223] __x64_sys_recvmmsg+0xde/0x160 [ 695.231933][ T9223] do_syscall_64+0x44/0xd0 [ 695.236524][ T9223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 695.242448][ T9223] RIP: 0033:0x7f3c6b9daae9 [ 695.246846][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 695.266429][ T9223] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 695.274872][ T9223] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 695.282826][ T9223] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 695.290826][ T9223] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 695.298817][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 695.306775][ T9223] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 695.314724][ T9223] 23:43:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc00e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x33fe0}}, 0x0) 23:43:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x0, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:44 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 45) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x200019e0}}, 0x0) [ 695.697204][ T9244] team0: No ports can be present during mode change [ 695.705931][ T9246] team0: No ports can be present during mode change 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x7ffff000}}, 0x0) [ 695.817882][ T9260] FAULT_INJECTION: forcing a failure. [ 695.817882][ T9260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 695.831466][ T9260] CPU: 1 PID: 9260 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 695.839796][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.850026][ T9260] Call Trace: [ 695.853303][ T9260] [ 695.856226][ T9260] dump_stack_lvl+0xd6/0x122 [ 695.858262][ T9242] validate_nla: 6 callbacks suppressed [ 695.858275][ T9242] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 695.860897][ T9260] dump_stack+0x11/0x1b [ 695.866467][ T9242] __nla_validate_parse: 26 callbacks suppressed [ 695.866479][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.874513][ T9260] should_fail+0x23c/0x250 [ 695.874566][ T9260] __alloc_pages+0x102/0x330 [ 695.874591][ T9260] alloc_pages_vma+0x5ee/0x770 [ 695.908096][ T9260] ? lru_cache_add+0x37/0x50 [ 695.912702][ T9260] wp_page_copy+0x12a/0x10e0 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xfffffdef}}, 0x0) 23:43:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x0, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 695.917327][ T9260] do_wp_page+0x4fb/0xa80 [ 695.921830][ T9260] ? __rcu_read_unlock+0x5c/0x290 [ 695.926858][ T9260] handle_mm_fault+0x975/0x1590 [ 695.931747][ T9260] do_user_addr_fault+0x609/0xbe0 [ 695.936828][ T9260] exc_page_fault+0x91/0x290 [ 695.941416][ T9260] asm_exc_page_fault+0x1e/0x30 [ 695.946271][ T9260] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x2}, 0x0) [ 695.952903][ T9260] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 695.972508][ T9260] RSP: 0018:ffffc9001033f878 EFLAGS: 00050206 [ 695.978572][ T9260] RAX: ffff888108689a78 RBX: ffff888106750000 RCX: 00000000000029c0 [ 695.986584][ T9260] RDX: 0000000000008000 RSI: ffff888106755640 RDI: 0000000020023000 [ 695.994552][ T9260] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 696.002561][ T9260] R10: 0001888106757fff R11: ffff888108689000 R12: 0000000000008000 [ 696.010556][ T9260] R13: 0000000000000000 R14: ffffc9001033fe08 R15: 000000002001d9c0 [ 696.015480][ T9272] team0: No ports can be present during mode change [ 696.018590][ T9260] _copy_to_iter+0x1a5/0xbe0 [ 696.018617][ T9260] ? check_stack_object+0x61/0x70 [ 696.018708][ T9260] ? __virt_addr_valid+0x15a/0x1a0 [ 696.040025][ T9260] ? __check_object_size+0x253/0x310 [ 696.045314][ T9260] simple_copy_to_iter+0x4c/0x60 [ 696.050267][ T9260] __skb_datagram_iter+0x23c/0x520 [ 696.055455][ T9260] ? skb_copy_datagram_iter+0xf0/0xf0 [ 696.060829][ T9260] skb_copy_datagram_iter+0x36/0xf0 23:43:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc08e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x3}, 0x0) [ 696.066028][ T9260] unix_stream_read_actor+0x40/0x60 [ 696.068673][ T9274] team0: No ports can be present during mode change [ 696.071234][ T9260] unix_stream_read_generic+0x79f/0x1430 [ 696.071269][ T9260] ? selinux_socket_recvmsg+0x11a/0x150 [ 696.089010][ T9260] ? should_fail+0xd6/0x250 [ 696.093630][ T9260] unix_stream_recvmsg+0xbc/0xe0 [ 696.098635][ T9260] ? __unix_stream_recvmsg+0xa0/0xa0 [ 696.103943][ T9260] ? unix_stream_sendmsg+0xf10/0xf10 [ 696.109337][ T9260] ____sys_recvmsg+0x16c/0x320 [ 696.114107][ T9260] do_recvmmsg+0x3f5/0xae0 [ 696.118607][ T9260] __x64_sys_recvmmsg+0xde/0x160 [ 696.123574][ T9260] do_syscall_64+0x44/0xd0 [ 696.128016][ T9260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 696.133990][ T9260] RIP: 0033:0x7f3c6b9daae9 [ 696.138484][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 696.158106][ T9260] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 696.166564][ T9260] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 696.174621][ T9260] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 696.182590][ T9260] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 696.190644][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.198703][ T9260] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 696.206682][ T9260] 23:43:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x3}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x4}, 0x0) [ 696.213298][ T9276] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 696.221419][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 696.232416][ T9282] team0: No ports can be present during mode change [ 696.239850][ T9285] team0: No ports can be present during mode change [ 696.264550][ T9289] team0: No ports can be present during mode change [ 696.278160][ T9290] team0: No ports can be present during mode change 23:43:45 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:45 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 46) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:45 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x40000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x5}, 0x0) 23:43:45 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x6}, 0x0) [ 696.626573][ T9301] team0: No ports can be present during mode change [ 696.634344][ T9307] team0: No ports can be present during mode change [ 696.663142][ T9311] team0: No ports can be present during mode change 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x7}, 0x0) [ 696.670544][ T9312] team0: No ports can be present during mode change [ 696.672062][ T9313] FAULT_INJECTION: forcing a failure. [ 696.672062][ T9313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 696.690374][ T9313] CPU: 0 PID: 9313 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 696.698712][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.700840][ T9317] team0: No ports can be present during mode change [ 696.708852][ T9313] Call Trace: [ 696.708866][ T9313] [ 696.708874][ T9313] dump_stack_lvl+0xd6/0x122 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x8}, 0x0) [ 696.708904][ T9313] dump_stack+0x11/0x1b [ 696.718990][ T9318] team0: No ports can be present during mode change [ 696.721670][ T9313] should_fail+0x23c/0x250 [ 696.721701][ T9313] __alloc_pages+0x102/0x330 [ 696.745928][ T9313] alloc_pages_vma+0x5ee/0x770 [ 696.750705][ T9313] ? lru_cache_add+0x37/0x50 [ 696.755479][ T9313] wp_page_copy+0x12a/0x10e0 [ 696.760078][ T9313] do_wp_page+0x4fb/0xa80 [ 696.764437][ T9313] ? __rcu_read_unlock+0x5c/0x290 [ 696.765999][ T9322] team0: No ports can be present during mode change 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x9}, 0x0) [ 696.769594][ T9313] handle_mm_fault+0x975/0x1590 [ 696.769623][ T9313] do_user_addr_fault+0x609/0xbe0 [ 696.782621][ T9323] team0: No ports can be present during mode change [ 696.786409][ T9313] exc_page_fault+0x91/0x290 [ 696.786433][ T9313] asm_exc_page_fault+0x1e/0x30 [ 696.802430][ T9313] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 696.809119][ T9313] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 696.828776][ T9313] RSP: 0018:ffffc9001056f878 EFLAGS: 00050206 [ 696.834850][ T9313] RAX: ffff888107431a78 RBX: ffff888107d90000 RCX: 00000000000019c0 [ 696.838336][ T9325] team0: No ports can be present during mode change [ 696.842814][ T9313] RDX: 0000000000008000 RSI: ffff888107d96640 RDI: 0000000020024000 [ 696.842831][ T9313] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 696.861688][ T9326] team0: No ports can be present during mode change 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0xa}, 0x0) [ 696.865432][ T9313] R10: 0001888107d97fff R11: ffff888107431000 R12: 0000000000008000 [ 696.865450][ T9313] R13: 0000000000000000 R14: ffffc9001056fe08 R15: 000000002001d9c0 [ 696.865469][ T9313] _copy_to_iter+0x1a5/0xbe0 [ 696.892552][ T9313] ? check_stack_object+0x61/0x70 [ 696.897640][ T9313] ? __virt_addr_valid+0x15a/0x1a0 [ 696.902824][ T9313] ? __check_object_size+0x253/0x310 [ 696.908122][ T9313] simple_copy_to_iter+0x4c/0x60 [ 696.913070][ T9313] __skb_datagram_iter+0x23c/0x520 [ 696.916438][ T9328] team0: No ports can be present during mode change 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0xb}, 0x0) [ 696.918185][ T9313] ? skb_copy_datagram_iter+0xf0/0xf0 [ 696.918216][ T9313] skb_copy_datagram_iter+0x36/0xf0 [ 696.926189][ T9329] team0: No ports can be present during mode change [ 696.930137][ T9313] unix_stream_read_actor+0x40/0x60 [ 696.930169][ T9313] unix_stream_read_generic+0x79f/0x1430 [ 696.952796][ T9313] ? selinux_socket_recvmsg+0x11a/0x150 [ 696.958355][ T9313] ? should_fail+0xd6/0x250 [ 696.962927][ T9313] unix_stream_recvmsg+0xbc/0xe0 [ 696.967909][ T9313] ? __unix_stream_recvmsg+0xa0/0xa0 [ 696.973290][ T9313] ? unix_stream_sendmsg+0xf10/0xf10 [ 696.978666][ T9313] ____sys_recvmsg+0x16c/0x320 [ 696.983481][ T9313] do_recvmmsg+0x3f5/0xae0 [ 696.987916][ T9313] __x64_sys_recvmmsg+0xde/0x160 [ 696.992970][ T9313] do_syscall_64+0x44/0xd0 [ 696.997478][ T9313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 697.003389][ T9313] RIP: 0033:0x7f3c6b9daae9 [ 697.007802][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 697.028486][ T9313] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 697.036895][ T9313] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 697.044869][ T9313] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 697.052902][ T9313] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 697.060892][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 697.067386][ T9331] team0: No ports can be present during mode change [ 697.068888][ T9313] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 697.068908][ T9313] [ 697.076660][ T9332] team0: No ports can be present during mode change [ 697.132113][ T9303] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 697.140283][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:45 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:45 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 47) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:45 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x7}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x10}, 0x0) 23:43:45 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x200000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x11}, 0x0) [ 697.487098][ T9343] team0: No ports can be present during mode change [ 697.497322][ T9350] team0: No ports can be present during mode change [ 697.523871][ T9353] team0: No ports can be present during mode change [ 697.531321][ T9355] team0: No ports can be present during mode change [ 697.540976][ T9357] FAULT_INJECTION: forcing a failure. [ 697.540976][ T9357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 697.554277][ T9357] CPU: 1 PID: 9357 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 697.562607][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.569796][ T9359] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 697.572681][ T9357] Call Trace: [ 697.580780][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 697.584030][ T9357] [ 697.584039][ T9357] dump_stack_lvl+0xd6/0x122 [ 697.600779][ T9357] dump_stack+0x11/0x1b [ 697.604942][ T9357] should_fail+0x23c/0x250 [ 697.609368][ T9357] __alloc_pages+0x102/0x330 [ 697.613990][ T9357] alloc_pages_vma+0x5ee/0x770 [ 697.619177][ T9357] ? lru_cache_add+0x37/0x50 [ 697.623803][ T9357] wp_page_copy+0x12a/0x10e0 [ 697.628402][ T9357] do_wp_page+0x4fb/0xa80 [ 697.632802][ T9357] ? __rcu_read_unlock+0x5c/0x290 23:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x300}, 0x0) [ 697.637827][ T9357] handle_mm_fault+0x975/0x1590 [ 697.642797][ T9357] do_user_addr_fault+0x609/0xbe0 [ 697.647878][ T9357] exc_page_fault+0x91/0x290 [ 697.652470][ T9357] asm_exc_page_fault+0x1e/0x30 [ 697.657324][ T9357] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 697.664117][ T9357] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 697.683724][ T9357] RSP: 0018:ffffc90010733878 EFLAGS: 00050206 [ 697.689823][ T9357] RAX: ffff888107431a78 RBX: ffff888106750000 RCX: 00000000000009c0 [ 697.697795][ T9357] RDX: 0000000000008000 RSI: ffff888106757640 RDI: 0000000020025000 [ 697.705765][ T9357] RBP: 000000000001bb00 R08: 0000000000000000 R09: 0001ffffffffffff [ 697.713732][ T9357] R10: 0001888106757fff R11: ffff888107431000 R12: 0000000000008000 [ 697.721766][ T9357] R13: 0000000000000000 R14: ffffc90010733e08 R15: 000000002001d9c0 [ 697.729743][ T9357] _copy_to_iter+0x1a5/0xbe0 23:43:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 697.734338][ T9357] ? check_stack_object+0x61/0x70 [ 697.739403][ T9357] ? __virt_addr_valid+0x15a/0x1a0 [ 697.744520][ T9357] ? __check_object_size+0x253/0x310 [ 697.749858][ T9357] simple_copy_to_iter+0x4c/0x60 [ 697.754906][ T9357] __skb_datagram_iter+0x23c/0x520 [ 697.760021][ T9357] ? skb_copy_datagram_iter+0xf0/0xf0 [ 697.765484][ T9357] skb_copy_datagram_iter+0x36/0xf0 [ 697.770693][ T9357] unix_stream_read_actor+0x40/0x60 [ 697.775952][ T9357] unix_stream_read_generic+0x79f/0x1430 [ 697.781650][ T9357] ? selinux_socket_recvmsg+0x11a/0x150 23:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x7ffffff2}, 0x0) 23:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x7ffffff8}, 0x0) [ 697.787249][ T9357] ? should_fail+0xd6/0x250 [ 697.791811][ T9357] unix_stream_recvmsg+0xbc/0xe0 [ 697.796758][ T9357] ? __unix_stream_recvmsg+0xa0/0xa0 [ 697.802115][ T9357] ? unix_stream_sendmsg+0xf10/0xf10 [ 697.807476][ T9357] ____sys_recvmsg+0x16c/0x320 [ 697.812325][ T9357] do_recvmmsg+0x3f5/0xae0 [ 697.816801][ T9357] __x64_sys_recvmmsg+0xde/0x160 [ 697.821751][ T9357] do_syscall_64+0x44/0xd0 [ 697.826238][ T9357] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 697.832138][ T9357] RIP: 0033:0x7f3c6b9daae9 23:43:46 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 697.836547][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 697.856461][ T9357] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 697.864922][ T9357] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 697.872914][ T9357] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 697.880889][ T9357] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 697.888863][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 697.896885][ T9357] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 697.904861][ T9357] 23:43:46 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:46 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x10}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:46 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x7ffffff9}, 0x0) 23:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x7ffffffe}, 0x0) 23:43:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x2}, 0x0) [ 698.387696][ T9401] team0: No ports can be present during mode change [ 698.395023][ T9403] team0: No ports can be present during mode change [ 698.405330][ T9405] FAULT_INJECTION: forcing a failure. [ 698.405330][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.418924][ T9405] CPU: 1 PID: 9405 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 698.427324][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.437427][ T9405] Call Trace: [ 698.440801][ T9405] [ 698.443730][ T9405] dump_stack_lvl+0xd6/0x122 [ 698.448336][ T9405] dump_stack+0x11/0x1b [ 698.452554][ T9405] should_fail+0x23c/0x250 [ 698.456996][ T9405] should_fail_usercopy+0x16/0x20 [ 698.462107][ T9405] _copy_to_iter+0x131/0xbe0 [ 698.466736][ T9405] ? check_stack_object+0x61/0x70 [ 698.471760][ T9405] ? __virt_addr_valid+0x15a/0x1a0 [ 698.476914][ T9405] ? __check_object_size+0x253/0x310 [ 698.482224][ T9405] simple_copy_to_iter+0x4c/0x60 [ 698.487192][ T9405] ? skb_copy_datagram_iter+0xf0/0xf0 [ 698.492569][ T9405] __skb_datagram_iter+0xac/0x520 [ 698.497604][ T9405] ? kfree+0xf8/0x1f0 [ 698.501583][ T9405] ? __kfree_skb+0xfe/0x150 [ 698.506086][ T9405] skb_copy_datagram_iter+0x36/0xf0 [ 698.511369][ T9405] unix_stream_read_actor+0x40/0x60 [ 698.516572][ T9405] unix_stream_read_generic+0x79f/0x1430 [ 698.522212][ T9405] ? selinux_socket_recvmsg+0x11a/0x150 [ 698.527772][ T9405] ? should_fail+0xd6/0x250 [ 698.532286][ T9405] unix_stream_recvmsg+0xbc/0xe0 23:43:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x300}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 698.537327][ T9405] ? __unix_stream_recvmsg+0xa0/0xa0 [ 698.542620][ T9405] ? unix_stream_sendmsg+0xf10/0xf10 [ 698.548013][ T9405] ____sys_recvmsg+0x16c/0x320 [ 698.552846][ T9405] do_recvmmsg+0x3f5/0xae0 [ 698.557412][ T9405] __x64_sys_recvmmsg+0xde/0x160 [ 698.562369][ T9405] do_syscall_64+0x44/0xd0 [ 698.566794][ T9405] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.572696][ T9405] RIP: 0033:0x7f3c6b9daae9 23:43:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x3}, 0x0) [ 698.577116][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.596725][ T9405] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 698.605318][ T9405] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 698.613287][ T9405] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 698.621281][ T9405] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.629282][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:43:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4}, 0x0) [ 698.637323][ T9405] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 698.645309][ T9405] [ 698.654721][ T9411] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 698.662819][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 698.674741][ T9412] team0: No ports can be present during mode change [ 698.682164][ T9413] team0: No ports can be present during mode change [ 698.732406][ T9419] team0: No ports can be present during mode change [ 698.740720][ T9420] team0: No ports can be present during mode change [ 698.848471][ T9422] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 698.856583][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x5}, 0x0) 23:43:47 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x10, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:47 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 49) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:47 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x3000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x700}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6}, 0x0) [ 699.161671][ T9425] team0: No ports can be present during mode change [ 699.169189][ T9428] team0: No ports can be present during mode change 23:43:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7}, 0x0) [ 699.211961][ T9438] team0: No ports can be present during mode change [ 699.219377][ T9440] team0: No ports can be present during mode change [ 699.248073][ T9445] team0: No ports can be present during mode change [ 699.255344][ T9447] team0: No ports can be present during mode change [ 699.264950][ T9449] FAULT_INJECTION: forcing a failure. [ 699.264950][ T9449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 699.278244][ T9449] CPU: 1 PID: 9449 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 699.286597][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.296698][ T9449] Call Trace: [ 699.299996][ T9449] [ 699.302936][ T9449] dump_stack_lvl+0xd6/0x122 [ 699.307539][ T9449] dump_stack+0x11/0x1b [ 699.311705][ T9449] should_fail+0x23c/0x250 [ 699.316324][ T9449] __alloc_pages+0x102/0x330 [ 699.320923][ T9449] alloc_pages_vma+0x5ee/0x770 [ 699.325711][ T9449] ? lru_cache_add+0x37/0x50 [ 699.330306][ T9449] wp_page_copy+0x12a/0x10e0 [ 699.334918][ T9449] do_wp_page+0x4fb/0xa80 [ 699.339248][ T9449] ? __rcu_read_unlock+0x5c/0x290 [ 699.344358][ T9449] handle_mm_fault+0x975/0x1590 [ 699.349222][ T9449] do_user_addr_fault+0x609/0xbe0 [ 699.354355][ T9449] exc_page_fault+0x91/0x290 [ 699.358946][ T9449] asm_exc_page_fault+0x1e/0x30 [ 699.363888][ T9449] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 699.370541][ T9449] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 699.390164][ T9449] RSP: 0018:ffffc90010acf878 EFLAGS: 00050202 [ 699.396243][ T9449] RAX: ffff88813f3b1a78 RBX: ffff88810857c000 RCX: 0000000000000880 [ 699.404216][ T9449] RDX: 0000000000000ec0 RSI: ffff88810857c640 RDI: 0000000020026000 23:43:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x8}, 0x0) [ 699.412212][ T9449] RBP: 0000000000023b00 R08: 0000000000000000 R09: 0001ffffffffffff [ 699.420244][ T9449] R10: 000188810857cebf R11: ffff88813f3b1000 R12: 0000000000000ec0 [ 699.428281][ T9449] R13: 0000000000000000 R14: ffffc90010acfe08 R15: 00000000200259c0 [ 699.436346][ T9449] _copy_to_iter+0x1a5/0xbe0 [ 699.441013][ T9449] ? check_stack_object+0x61/0x70 [ 699.446036][ T9449] ? __virt_addr_valid+0x15a/0x1a0 [ 699.451306][ T9449] ? __check_object_size+0x253/0x310 [ 699.457085][ T9449] simple_copy_to_iter+0x4c/0x60 23:43:47 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xec0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 699.462031][ T9449] ? skb_copy_datagram_iter+0xf0/0xf0 [ 699.467404][ T9449] __skb_datagram_iter+0xac/0x520 [ 699.472438][ T9449] ? kfree+0xf8/0x1f0 [ 699.476460][ T9449] ? __kfree_skb+0xfe/0x150 [ 699.480960][ T9449] skb_copy_datagram_iter+0x36/0xf0 [ 699.486244][ T9449] unix_stream_read_actor+0x40/0x60 [ 699.491493][ T9449] unix_stream_read_generic+0x79f/0x1430 [ 699.497151][ T9449] ? selinux_socket_recvmsg+0x11a/0x150 [ 699.502696][ T9449] ? should_fail+0xd6/0x250 [ 699.507390][ T9449] unix_stream_recvmsg+0xbc/0xe0 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x9}, 0x0) [ 699.512389][ T9449] ? __unix_stream_recvmsg+0xa0/0xa0 [ 699.517680][ T9449] ? unix_stream_sendmsg+0xf10/0xf10 [ 699.522971][ T9449] ____sys_recvmsg+0x16c/0x320 [ 699.524402][ T9455] team0: No ports can be present during mode change [ 699.527742][ T9449] do_recvmmsg+0x3f5/0xae0 [ 699.527774][ T9449] __x64_sys_recvmmsg+0xde/0x160 [ 699.536191][ T9458] team0: No ports can be present during mode change [ 699.538812][ T9449] do_syscall_64+0x44/0xd0 [ 699.538872][ T9449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 699.560624][ T9449] RIP: 0033:0x7f3c6b9daae9 [ 699.565039][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.570535][ T9461] team0: No ports can be present during mode change [ 699.584789][ T9449] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.584814][ T9449] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 699.584826][ T9449] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xa}, 0x0) [ 699.584838][ T9449] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.615380][ T9464] team0: No ports can be present during mode change [ 699.616217][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.616233][ T9449] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 699.616252][ T9449] [ 699.680197][ T9469] team0: No ports can be present during mode change [ 699.699803][ T9439] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 699.707912][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 699.718239][ T9471] team0: No ports can be present during mode change 23:43:48 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x300, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:48 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xb}, 0x0) 23:43:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xc}, 0x0) [ 700.055848][ T9477] team0: No ports can be present during mode change [ 700.070710][ T9485] team0: No ports can be present during mode change [ 700.098520][ T9490] team0: No ports can be present during mode change [ 700.105865][ T9492] team0: No ports can be present during mode change [ 700.130519][ T9495] FAULT_INJECTION: forcing a failure. [ 700.130519][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.143672][ T9495] CPU: 0 PID: 9495 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 700.152003][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.162094][ T9495] Call Trace: [ 700.165367][ T9495] [ 700.168297][ T9495] dump_stack_lvl+0xd6/0x122 [ 700.172910][ T9495] dump_stack+0x11/0x1b [ 700.177080][ T9495] should_fail+0x23c/0x250 [ 700.181505][ T9495] should_fail_usercopy+0x16/0x20 [ 700.186571][ T9495] _copy_to_iter+0x131/0xbe0 [ 700.191160][ T9495] ? check_stack_object+0x61/0x70 [ 700.196188][ T9495] ? __virt_addr_valid+0x15a/0x1a0 [ 700.201335][ T9495] ? __check_object_size+0x253/0x310 [ 700.206625][ T9495] simple_copy_to_iter+0x4c/0x60 [ 700.211804][ T9495] __skb_datagram_iter+0x23c/0x520 [ 700.217402][ T9495] ? skb_copy_datagram_iter+0xf0/0xf0 [ 700.222779][ T9495] skb_copy_datagram_iter+0x36/0xf0 [ 700.227982][ T9495] unix_stream_read_actor+0x40/0x60 [ 700.233194][ T9495] unix_stream_read_generic+0x79f/0x1430 [ 700.238830][ T9495] ? selinux_socket_recvmsg+0x11a/0x150 [ 700.244401][ T9495] ? should_fail+0xd6/0x250 [ 700.248970][ T9495] unix_stream_recvmsg+0xbc/0xe0 [ 700.254171][ T9495] ? __unix_stream_recvmsg+0xa0/0xa0 [ 700.259472][ T9495] ? unix_stream_sendmsg+0xf10/0xf10 [ 700.264815][ T9495] ____sys_recvmsg+0x16c/0x320 [ 700.269587][ T9495] do_recvmmsg+0x3f5/0xae0 [ 700.274008][ T9495] __x64_sys_recvmmsg+0xde/0x160 [ 700.279219][ T9495] do_syscall_64+0x44/0xd0 [ 700.283642][ T9495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 700.289588][ T9495] RIP: 0033:0x7f3c6b9daae9 23:43:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xd}, 0x0) [ 700.294011][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.307468][ T9498] team0: No ports can be present during mode change [ 700.313679][ T9495] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 700.313709][ T9495] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 700.324028][ T9500] team0: No ports can be present during mode change 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xe}, 0x0) [ 700.328767][ T9495] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 700.328785][ T9495] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 700.328797][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.360026][ T9503] team0: No ports can be present during mode change [ 700.367200][ T9495] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 700.367221][ T9495] [ 700.389570][ T9507] team0: No ports can be present during mode change 23:43:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xf}, 0x0) 23:43:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 700.396355][ T9504] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 700.404569][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.432615][ T9509] team0: No ports can be present during mode change [ 700.448218][ T9512] team0: No ports can be present during mode change 23:43:49 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x700, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:49 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 51) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x10}, 0x0) 23:43:49 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8ec0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x10000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x11}, 0x0) [ 700.932504][ T9525] team0: No ports can be present during mode change [ 700.939930][ T9528] team0: No ports can be present during mode change [ 700.966773][ T9532] team0: No ports can be present during mode change [ 700.974005][ T9534] team0: No ports can be present during mode change 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x12}, 0x0) [ 700.993802][ T9537] FAULT_INJECTION: forcing a failure. [ 700.993802][ T9537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.007096][ T9537] CPU: 0 PID: 9537 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 701.009089][ T9539] team0: No ports can be present during mode change [ 701.015424][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.015444][ T9537] Call Trace: [ 701.015451][ T9537] [ 701.015458][ T9537] dump_stack_lvl+0xd6/0x122 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x25}, 0x0) [ 701.024724][ T9540] team0: No ports can be present during mode change [ 701.032155][ T9537] dump_stack+0x11/0x1b [ 701.038401][ T9541] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 701.042940][ T9537] should_fail+0x23c/0x250 [ 701.042970][ T9537] __alloc_pages+0x102/0x330 [ 701.049554][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 701.053679][ T9537] alloc_pages_vma+0x5ee/0x770 [ 701.083502][ T9543] team0: No ports can be present during mode change 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x48}, 0x0) [ 701.084831][ T9537] ? lru_cache_add+0x37/0x50 [ 701.084858][ T9537] wp_page_copy+0x12a/0x10e0 [ 701.092962][ T9544] team0: No ports can be present during mode change [ 701.095996][ T9537] do_wp_page+0x4fb/0xa80 [ 701.096022][ T9537] ? __rcu_read_unlock+0x5c/0x290 [ 701.116458][ T9537] handle_mm_fault+0x975/0x1590 [ 701.121319][ T9537] do_user_addr_fault+0x609/0xbe0 [ 701.122594][ T9546] team0: No ports can be present during mode change [ 701.126343][ T9537] exc_page_fault+0x91/0x290 [ 701.126367][ T9537] asm_exc_page_fault+0x1e/0x30 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4c}, 0x0) [ 701.134724][ T9547] team0: No ports can be present during mode change [ 701.137674][ T9537] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 701.137705][ T9537] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 701.137723][ T9537] RSP: 0018:ffffc90010e17878 EFLAGS: 00050206 [ 701.179546][ T9549] team0: No ports can be present during mode change [ 701.181304][ T9537] RAX: ffff888108689a78 RBX: ffff88813d848000 RCX: 0000000000007880 [ 701.195896][ T9537] RDX: 0000000000008000 RSI: ffff88813d848780 RDI: 0000000020027000 [ 701.200509][ T9550] team0: No ports can be present during mode change [ 701.203864][ T9537] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 701.203881][ T9537] R10: 000188813d84ffff R11: ffff888108689000 R12: 0000000000008000 [ 701.226436][ T9537] R13: 0000000000000000 R14: ffffc90010e17e08 R15: 0000000020026880 [ 701.234485][ T9537] _copy_to_iter+0x1a5/0xbe0 [ 701.239077][ T9537] ? check_stack_object+0x61/0x70 23:43:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x60}, 0x0) [ 701.244137][ T9537] ? __virt_addr_valid+0x15a/0x1a0 [ 701.249257][ T9537] ? __check_object_size+0x253/0x310 [ 701.254602][ T9537] simple_copy_to_iter+0x4c/0x60 [ 701.259550][ T9537] __skb_datagram_iter+0x23c/0x520 [ 701.264673][ T9537] ? skb_copy_datagram_iter+0xf0/0xf0 [ 701.265531][ T9552] team0: No ports can be present during mode change [ 701.270086][ T9537] skb_copy_datagram_iter+0x36/0xf0 [ 701.270116][ T9537] unix_stream_read_actor+0x40/0x60 [ 701.282925][ T9553] team0: No ports can be present during mode change [ 701.287046][ T9537] unix_stream_read_generic+0x79f/0x1430 [ 701.300396][ T9537] ? selinux_socket_recvmsg+0x11a/0x150 [ 701.305945][ T9537] ? should_fail+0xd6/0x250 [ 701.310485][ T9537] unix_stream_recvmsg+0xbc/0xe0 [ 701.315560][ T9537] ? __unix_stream_recvmsg+0xa0/0xa0 [ 701.320864][ T9537] ? unix_stream_sendmsg+0xf10/0xf10 [ 701.326155][ T9537] ____sys_recvmsg+0x16c/0x320 [ 701.330924][ T9537] do_recvmmsg+0x3f5/0xae0 [ 701.335382][ T9537] __x64_sys_recvmmsg+0xde/0x160 [ 701.340324][ T9537] do_syscall_64+0x44/0xd0 [ 701.344819][ T9537] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 701.350728][ T9537] RIP: 0033:0x7f3c6b9daae9 [ 701.355142][ T9537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.374776][ T9537] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 701.383308][ T9537] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 701.391281][ T9537] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 701.399252][ T9537] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.407219][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.415196][ T9537] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 701.423183][ T9537] 23:43:50 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xec0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:50 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 52) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:50 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc00e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x68}, 0x0) 23:43:50 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x40000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6c}, 0x0) [ 701.796582][ T9564] team0: No ports can be present during mode change [ 701.803959][ T9571] team0: No ports can be present during mode change [ 701.830707][ T9574] team0: No ports can be present during mode change [ 701.838262][ T9576] team0: No ports can be present during mode change [ 701.856190][ T9579] FAULT_INJECTION: forcing a failure. [ 701.856190][ T9579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.869485][ T9579] CPU: 0 PID: 9579 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 701.877817][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.887914][ T9579] Call Trace: [ 701.891286][ T9579] [ 701.894280][ T9579] dump_stack_lvl+0xd6/0x122 [ 701.898915][ T9579] dump_stack+0x11/0x1b [ 701.903075][ T9579] should_fail+0x23c/0x250 [ 701.907491][ T9579] __alloc_pages+0x102/0x330 [ 701.912243][ T9579] alloc_pages_vma+0x5ee/0x770 [ 701.917177][ T9579] ? lru_cache_add+0x37/0x50 [ 701.921763][ T9579] wp_page_copy+0x12a/0x10e0 [ 701.926361][ T9579] do_wp_page+0x4fb/0xa80 [ 701.930713][ T9579] ? __rcu_read_unlock+0x5c/0x290 [ 701.935844][ T9579] handle_mm_fault+0x975/0x1590 [ 701.940728][ T9579] do_user_addr_fault+0x609/0xbe0 [ 701.945756][ T9579] exc_page_fault+0x91/0x290 [ 701.950342][ T9579] asm_exc_page_fault+0x1e/0x30 [ 701.955584][ T9579] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 701.962231][ T9579] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 701.981890][ T9579] RSP: 0018:ffffc90010fe3878 EFLAGS: 00050206 [ 701.987955][ T9579] RAX: ffff88813a062a78 RBX: ffff88813e998000 RCX: 0000000000006880 [ 701.995971][ T9579] RDX: 0000000000008000 RSI: ffff88813e999780 RDI: 0000000020028000 23:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x74}, 0x0) 23:43:50 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc08e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 702.004008][ T9579] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 702.011978][ T9579] R10: 000188813e99ffff R11: ffff88813a062000 R12: 0000000000008000 [ 702.019951][ T9579] R13: 0000000000000000 R14: ffffc90010fe3e08 R15: 0000000020026880 [ 702.028008][ T9579] _copy_to_iter+0x1a5/0xbe0 [ 702.032673][ T9579] ? check_stack_object+0x61/0x70 [ 702.037705][ T9579] ? __virt_addr_valid+0x15a/0x1a0 [ 702.041138][ T9581] team0: No ports can be present during mode change [ 702.042855][ T9579] ? __check_object_size+0x253/0x310 23:43:50 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc00e0000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 702.054761][ T9579] simple_copy_to_iter+0x4c/0x60 [ 702.059809][ T9579] __skb_datagram_iter+0x23c/0x520 [ 702.065182][ T9579] ? skb_copy_datagram_iter+0xf0/0xf0 [ 702.070611][ T9579] skb_copy_datagram_iter+0x36/0xf0 [ 702.075118][ T9585] team0: No ports can be present during mode change [ 702.075808][ T9579] unix_stream_read_actor+0x40/0x60 [ 702.087552][ T9579] unix_stream_read_generic+0x79f/0x1430 [ 702.093207][ T9579] ? selinux_socket_recvmsg+0x11a/0x150 [ 702.098925][ T9579] ? should_fail+0xd6/0x250 23:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7a}, 0x0) [ 702.103534][ T9579] unix_stream_recvmsg+0xbc/0xe0 [ 702.108481][ T9579] ? __unix_stream_recvmsg+0xa0/0xa0 [ 702.114554][ T9579] ? unix_stream_sendmsg+0xf10/0xf10 [ 702.119844][ T9579] ____sys_recvmsg+0x16c/0x320 [ 702.124706][ T9579] do_recvmmsg+0x3f5/0xae0 [ 702.129130][ T9579] __x64_sys_recvmmsg+0xde/0x160 [ 702.131501][ T9589] team0: No ports can be present during mode change [ 702.134065][ T9579] do_syscall_64+0x44/0xd0 [ 702.145037][ T9579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 702.150974][ T9579] RIP: 0033:0x7f3c6b9daae9 [ 702.153934][ T9591] team0: No ports can be present during mode change [ 702.155406][ T9579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 702.181573][ T9579] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 702.190016][ T9579] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 702.197986][ T9579] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 23:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x300}, 0x0) [ 702.205963][ T9579] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 702.213933][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 702.221902][ T9579] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 702.229875][ T9579] [ 702.248183][ T9596] team0: No ports can be present during mode change [ 702.263364][ T9597] team0: No ports can be present during mode change [ 702.277684][ T9562] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 702.285803][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:51 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x2000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:51 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 53) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x500}, 0x0) 23:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:51 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x40000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc08e0000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x600}, 0x0) [ 702.653139][ T9605] team0: No ports can be present during mode change [ 702.670577][ T9613] team0: No ports can be present during mode change 23:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x700}, 0x0) [ 702.695879][ T9617] team0: No ports can be present during mode change [ 702.703141][ T9619] team0: No ports can be present during mode change [ 702.725951][ T9622] FAULT_INJECTION: forcing a failure. [ 702.725951][ T9622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 702.739218][ T9622] CPU: 1 PID: 9622 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 702.747547][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.757621][ T9622] Call Trace: [ 702.760895][ T9622] [ 702.763816][ T9622] dump_stack_lvl+0xd6/0x122 [ 702.768434][ T9622] dump_stack+0x11/0x1b [ 702.772670][ T9622] should_fail+0x23c/0x250 [ 702.777127][ T9622] __alloc_pages+0x102/0x330 [ 702.781721][ T9622] alloc_pages_vma+0x5ee/0x770 [ 702.786506][ T9622] ? lru_cache_add+0x37/0x50 [ 702.791146][ T9622] wp_page_copy+0x12a/0x10e0 [ 702.795760][ T9622] do_wp_page+0x4fb/0xa80 [ 702.800088][ T9622] ? __rcu_read_unlock+0x5c/0x290 [ 702.805112][ T9622] handle_mm_fault+0x975/0x1590 [ 702.809978][ T9622] do_user_addr_fault+0x609/0xbe0 [ 702.815353][ T9622] exc_page_fault+0x91/0x290 [ 702.819943][ T9622] asm_exc_page_fault+0x1e/0x30 [ 702.824809][ T9622] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 702.831420][ T9622] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 702.851025][ T9622] RSP: 0018:ffffc9001118f878 EFLAGS: 00050206 [ 702.857133][ T9622] RAX: ffff888139afca78 RBX: ffff88813d848000 RCX: 0000000000005880 [ 702.865150][ T9622] RDX: 0000000000008000 RSI: ffff88813d84a780 RDI: 0000000020029000 [ 702.873123][ T9622] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 702.881095][ T9622] R10: 000188813d84ffff R11: ffff888139afc000 R12: 0000000000008000 23:43:51 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x200000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 702.889087][ T9622] R13: 0000000000000000 R14: ffffc9001118fe08 R15: 0000000020026880 [ 702.897058][ T9622] _copy_to_iter+0x1a5/0xbe0 [ 702.901677][ T9622] ? check_stack_object+0x61/0x70 [ 702.906706][ T9622] ? __virt_addr_valid+0x15a/0x1a0 [ 702.911831][ T9622] ? __check_object_size+0x253/0x310 [ 702.917135][ T9622] simple_copy_to_iter+0x4c/0x60 [ 702.922079][ T9622] __skb_datagram_iter+0x23c/0x520 [ 702.927259][ T9622] ? skb_copy_datagram_iter+0xf0/0xf0 [ 702.932631][ T9622] skb_copy_datagram_iter+0x36/0xf0 [ 702.937890][ T9622] unix_stream_read_actor+0x40/0x60 23:43:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 702.943140][ T9622] unix_stream_read_generic+0x79f/0x1430 [ 702.948855][ T9622] ? selinux_socket_recvmsg+0x11a/0x150 [ 702.954420][ T9622] ? should_fail+0xd6/0x250 [ 702.959000][ T9622] unix_stream_recvmsg+0xbc/0xe0 [ 702.963964][ T9622] ? __unix_stream_recvmsg+0xa0/0xa0 [ 702.969270][ T9622] ? unix_stream_sendmsg+0xf10/0xf10 [ 702.974637][ T9622] ____sys_recvmsg+0x16c/0x320 [ 702.979409][ T9622] do_recvmmsg+0x3f5/0xae0 [ 702.984121][ T9622] __x64_sys_recvmmsg+0xde/0x160 [ 702.989224][ T9622] do_syscall_64+0x44/0xd0 [ 702.993660][ T9622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 702.999612][ T9622] RIP: 0033:0x7f3c6b9daae9 [ 703.004064][ T9622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 703.023791][ T9622] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 703.032209][ T9622] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 703.040619][ T9622] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 703.048600][ T9622] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 703.056577][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.064559][ T9622] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 703.072585][ T9622] [ 703.084176][ T9625] team0: No ports can be present during mode change 23:43:51 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x5, 0x4, 0x2, 0x3f, 0x14, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 703.090964][ T9629] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 703.099081][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 703.114512][ T9636] team0: No ports can be present during mode change [ 703.257618][ T9639] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 703.265766][ T9639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:51 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x4000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:51 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 54) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x900}, 0x0) 23:43:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:51 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x5, 0x4, 0x2, 0x3f, 0x14, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xa00}, 0x0) [ 703.531046][ T9651] team0: No ports can be present during mode change [ 703.539160][ T9657] team0: No ports can be present during mode change [ 703.564976][ T9661] team0: No ports can be present during mode change [ 703.572518][ T9662] team0: No ports can be present during mode change [ 703.591571][ T9665] FAULT_INJECTION: forcing a failure. [ 703.591571][ T9665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 703.604823][ T9665] CPU: 1 PID: 9665 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 703.613149][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.623285][ T9665] Call Trace: [ 703.626562][ T9665] [ 703.629487][ T9665] dump_stack_lvl+0xd6/0x122 [ 703.634211][ T9665] dump_stack+0x11/0x1b [ 703.638416][ T9665] should_fail+0x23c/0x250 [ 703.642984][ T9665] __alloc_pages+0x102/0x330 [ 703.647620][ T9665] alloc_pages_vma+0x5ee/0x770 [ 703.652414][ T9665] ? lru_cache_add+0x37/0x50 [ 703.657006][ T9665] wp_page_copy+0x12a/0x10e0 [ 703.661604][ T9665] do_wp_page+0x4fb/0xa80 [ 703.665932][ T9665] ? __rcu_read_unlock+0x5c/0x290 [ 703.670976][ T9665] handle_mm_fault+0x975/0x1590 [ 703.675875][ T9665] do_user_addr_fault+0x609/0xbe0 [ 703.681014][ T9665] exc_page_fault+0x91/0x290 [ 703.685634][ T9665] asm_exc_page_fault+0x1e/0x30 [ 703.690500][ T9665] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 703.697091][ T9665] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 703.716802][ T9665] RSP: 0018:ffffc90011357878 EFLAGS: 00050206 [ 703.722953][ T9665] RAX: ffff888108a19a78 RBX: ffff888140078000 RCX: 0000000000004880 [ 703.730929][ T9665] RDX: 0000000000008000 RSI: ffff88814007b780 RDI: 000000002002a000 23:43:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x3000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xb00}, 0x0) [ 703.738911][ T9665] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 703.746883][ T9665] R10: 000188814007ffff R11: ffff888108a19000 R12: 0000000000008000 [ 703.754897][ T9665] R13: 0000000000000000 R14: ffffc90011357e08 R15: 0000000020026880 [ 703.762874][ T9665] _copy_to_iter+0x1a5/0xbe0 [ 703.767472][ T9665] ? check_stack_object+0x61/0x70 [ 703.772550][ T9665] ? __virt_addr_valid+0x15a/0x1a0 [ 703.777677][ T9665] ? __check_object_size+0x253/0x310 [ 703.783014][ T9665] simple_copy_to_iter+0x4c/0x60 23:43:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 703.787962][ T9665] __skb_datagram_iter+0x23c/0x520 [ 703.793114][ T9665] ? skb_copy_datagram_iter+0xf0/0xf0 [ 703.798491][ T9665] skb_copy_datagram_iter+0x36/0xf0 [ 703.803693][ T9665] unix_stream_read_actor+0x40/0x60 [ 703.809099][ T9665] unix_stream_read_generic+0x79f/0x1430 [ 703.814743][ T9665] ? selinux_socket_recvmsg+0x11a/0x150 [ 703.820297][ T9665] ? should_fail+0xd6/0x250 [ 703.824806][ T9665] unix_stream_recvmsg+0xbc/0xe0 [ 703.829850][ T9665] ? __unix_stream_recvmsg+0xa0/0xa0 [ 703.835171][ T9665] ? unix_stream_sendmsg+0xf10/0xf10 [ 703.840507][ T9665] ____sys_recvmsg+0x16c/0x320 [ 703.845279][ T9665] do_recvmmsg+0x3f5/0xae0 [ 703.849707][ T9665] __x64_sys_recvmmsg+0xde/0x160 [ 703.854721][ T9665] do_syscall_64+0x44/0xd0 [ 703.859342][ T9665] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 703.865246][ T9665] RIP: 0033:0x7f3c6b9daae9 [ 703.869654][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 703.889577][ T9665] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 703.898013][ T9665] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 703.905991][ T9665] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 703.914010][ T9665] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 703.921982][ T9665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.929958][ T9665] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 703.938009][ T9665] 23:43:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x5, 0x4, 0x2, 0x3f, 0x14, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 703.946335][ T9669] team0: No ports can be present during mode change [ 703.960548][ T9678] team0: No ports can be present during mode change [ 704.111264][ T9682] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 704.119374][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:52 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x8ec0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:52 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 55) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xc00}, 0x0) 23:43:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x3}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x0, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xd00}, 0x0) [ 704.384855][ T9693] team0: No ports can be present during mode change [ 704.399454][ T9702] team0: No ports can be present during mode change [ 704.425271][ T9705] team0: No ports can be present during mode change [ 704.432774][ T9706] team0: No ports can be present during mode change [ 704.448029][ T9708] FAULT_INJECTION: forcing a failure. [ 704.448029][ T9708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 704.461287][ T9708] CPU: 0 PID: 9708 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 704.469691][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.479876][ T9708] Call Trace: [ 704.483154][ T9708] [ 704.486097][ T9708] dump_stack_lvl+0xd6/0x122 [ 704.490698][ T9708] dump_stack+0x11/0x1b [ 704.494857][ T9708] should_fail+0x23c/0x250 [ 704.499284][ T9708] __alloc_pages+0x102/0x330 [ 704.503886][ T9708] alloc_pages_vma+0x5ee/0x770 [ 704.508774][ T9708] ? lru_cache_add+0x37/0x50 [ 704.513430][ T9708] wp_page_copy+0x12a/0x10e0 [ 704.518071][ T9708] do_wp_page+0x4fb/0xa80 [ 704.522547][ T9708] ? __rcu_read_unlock+0x5c/0x290 [ 704.527662][ T9708] handle_mm_fault+0x975/0x1590 [ 704.532675][ T9708] do_user_addr_fault+0x609/0xbe0 [ 704.537736][ T9708] exc_page_fault+0x91/0x290 [ 704.542339][ T9708] asm_exc_page_fault+0x1e/0x30 [ 704.547200][ T9708] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 704.553864][ T9708] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 704.573518][ T9708] RSP: 0018:ffffc900114ff878 EFLAGS: 00050206 [ 704.579584][ T9708] RAX: ffff888107ddca78 RBX: ffff88813fb88000 RCX: 0000000000003880 [ 704.587624][ T9708] RDX: 0000000000008000 RSI: ffff88813fb8c780 RDI: 000000002002b000 [ 704.595599][ T9708] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 704.603581][ T9708] R10: 000188813fb8ffff R11: ffff888107ddc000 R12: 0000000000008000 [ 704.611570][ T9708] R13: 0000000000000000 R14: ffffc900114ffe08 R15: 0000000020026880 [ 704.619571][ T9708] _copy_to_iter+0x1a5/0xbe0 23:43:53 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xe00}, 0x0) 23:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xf00}, 0x0) [ 704.624244][ T9708] ? check_stack_object+0x61/0x70 [ 704.629353][ T9708] ? __virt_addr_valid+0x15a/0x1a0 [ 704.634548][ T9708] ? __check_object_size+0x253/0x310 [ 704.639945][ T9708] simple_copy_to_iter+0x4c/0x60 [ 704.641342][ T9713] team0: No ports can be present during mode change [ 704.644917][ T9708] __skb_datagram_iter+0x23c/0x520 [ 704.644957][ T9708] ? skb_copy_datagram_iter+0xf0/0xf0 [ 704.653520][ T9714] team0: No ports can be present during mode change [ 704.656670][ T9708] skb_copy_datagram_iter+0x36/0xf0 [ 704.656703][ T9708] unix_stream_read_actor+0x40/0x60 [ 704.679337][ T9708] unix_stream_read_generic+0x79f/0x1430 [ 704.683638][ T9716] team0: No ports can be present during mode change [ 704.685028][ T9708] ? selinux_socket_recvmsg+0x11a/0x150 [ 704.685055][ T9708] ? should_fail+0xd6/0x250 [ 704.701711][ T9708] unix_stream_recvmsg+0xbc/0xe0 [ 704.706664][ T9708] ? __unix_stream_recvmsg+0xa0/0xa0 [ 704.712054][ T9708] ? unix_stream_sendmsg+0xf10/0xf10 [ 704.717402][ T9708] ____sys_recvmsg+0x16c/0x320 [ 704.722177][ T9708] do_recvmmsg+0x3f5/0xae0 [ 704.726601][ T9708] __x64_sys_recvmmsg+0xde/0x160 [ 704.731562][ T9708] do_syscall_64+0x44/0xd0 [ 704.736160][ T9708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.742088][ T9708] RIP: 0033:0x7f3c6b9daae9 [ 704.746503][ T9708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.766185][ T9708] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 23:43:53 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1100}, 0x0) [ 704.774601][ T9708] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 704.782746][ T9708] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 704.790724][ T9708] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 704.798703][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.806673][ T9708] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 704.814643][ T9708] [ 704.850160][ T9726] team0: No ports can be present during mode change [ 704.857802][ T9727] team0: No ports can be present during mode change [ 704.873583][ T9721] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 704.881705][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:53 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc00e, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:53 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 56) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:53 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x10000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1200}, 0x0) 23:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x0, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:53 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x7}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1a75}, 0x0) [ 705.257602][ T9743] team0: No ports can be present during mode change [ 705.264880][ T9746] team0: No ports can be present during mode change [ 705.291251][ T9748] team0: No ports can be present during mode change [ 705.299407][ T9749] team0: No ports can be present during mode change [ 705.300243][ T9750] FAULT_INJECTION: forcing a failure. [ 705.300243][ T9750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 705.319476][ T9750] CPU: 0 PID: 9750 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 705.328022][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.338070][ T9750] Call Trace: [ 705.341434][ T9750] [ 705.344363][ T9750] dump_stack_lvl+0xd6/0x122 [ 705.348970][ T9750] dump_stack+0x11/0x1b [ 705.353199][ T9750] should_fail+0x23c/0x250 23:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x2000}, 0x0) [ 705.357620][ T9750] __alloc_pages+0x102/0x330 [ 705.362258][ T9750] alloc_pages_vma+0x5ee/0x770 [ 705.367046][ T9750] ? lru_cache_add+0x37/0x50 [ 705.371663][ T9750] wp_page_copy+0x12a/0x10e0 [ 705.376299][ T9750] do_wp_page+0x4fb/0xa80 [ 705.380665][ T9750] ? __rcu_read_unlock+0x5c/0x290 [ 705.385693][ T9750] handle_mm_fault+0x975/0x1590 [ 705.390594][ T9750] do_user_addr_fault+0x609/0xbe0 [ 705.395625][ T9750] exc_page_fault+0x91/0x290 [ 705.400220][ T9750] asm_exc_page_fault+0x1e/0x30 [ 705.405080][ T9750] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 705.411778][ T9750] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 705.431577][ T9750] RSP: 0018:ffffc900116d3878 EFLAGS: 00050206 [ 705.437643][ T9750] RAX: ffff88813dabfa78 RBX: ffff88813f830000 RCX: 0000000000002880 [ 705.445612][ T9750] RDX: 0000000000008000 RSI: ffff88813f835780 RDI: 000000002002c000 [ 705.453630][ T9750] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 705.461658][ T9750] R10: 000188813f837fff R11: ffff88813dabf000 R12: 0000000000008000 [ 705.469628][ T9750] R13: 0000000000000000 R14: ffffc900116d3e08 R15: 0000000020026880 [ 705.477891][ T9750] _copy_to_iter+0x1a5/0xbe0 [ 705.482660][ T9750] ? check_stack_object+0x61/0x70 [ 705.487725][ T9750] ? __virt_addr_valid+0x15a/0x1a0 [ 705.492941][ T9750] ? __check_object_size+0x253/0x310 [ 705.498236][ T9750] simple_copy_to_iter+0x4c/0x60 [ 705.503184][ T9750] __skb_datagram_iter+0x23c/0x520 23:43:53 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:53 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x40000000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 705.508348][ T9750] ? skb_copy_datagram_iter+0xf0/0xf0 [ 705.513849][ T9750] skb_copy_datagram_iter+0x36/0xf0 [ 705.519054][ T9750] unix_stream_read_actor+0x40/0x60 [ 705.524329][ T9750] unix_stream_read_generic+0x79f/0x1430 [ 705.529974][ T9750] ? selinux_socket_recvmsg+0x11a/0x150 [ 705.535608][ T9750] ? should_fail+0xd6/0x250 [ 705.540179][ T9750] unix_stream_recvmsg+0xbc/0xe0 [ 705.545133][ T9750] ? __unix_stream_recvmsg+0xa0/0xa0 [ 705.550460][ T9750] ? unix_stream_sendmsg+0xf10/0xf10 [ 705.555755][ T9750] ____sys_recvmsg+0x16c/0x320 [ 705.560521][ T9750] do_recvmmsg+0x3f5/0xae0 [ 705.565006][ T9750] __x64_sys_recvmmsg+0xde/0x160 [ 705.569942][ T9750] do_syscall_64+0x44/0xd0 [ 705.574370][ T9750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 705.580287][ T9750] RIP: 0033:0x7f3c6b9daae9 [ 705.584750][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 705.604496][ T9750] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 705.612910][ T9750] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 705.620913][ T9750] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 705.628911][ T9750] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 705.636910][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.644974][ T9750] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 705.652952][ T9750] 23:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x2500}, 0x0) [ 705.664787][ T9757] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 705.672941][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 705.682984][ T9761] team0: No ports can be present during mode change 23:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x0, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 705.715042][ T9767] team0: No ports can be present during mode change [ 705.723634][ T9768] team0: No ports can be present during mode change [ 705.867623][ T9770] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 705.875754][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:54 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc08e, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:54 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 57) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4800}, 0x0) 23:43:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x10}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:54 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc00e0000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x2}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4c00}, 0x0) [ 706.106108][ T9783] team0: No ports can be present during mode change [ 706.114376][ T9789] team0: No ports can be present during mode change [ 706.142234][ T9792] team0: No ports can be present during mode change [ 706.150794][ T9794] team0: No ports can be present during mode change [ 706.162651][ T9796] FAULT_INJECTION: forcing a failure. [ 706.162651][ T9796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 706.175974][ T9796] CPU: 1 PID: 9796 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 706.184298][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.194352][ T9796] Call Trace: [ 706.197627][ T9796] [ 706.200553][ T9796] dump_stack_lvl+0xd6/0x122 [ 706.205259][ T9796] dump_stack+0x11/0x1b [ 706.209566][ T9796] should_fail+0x23c/0x250 [ 706.213992][ T9796] __alloc_pages+0x102/0x330 [ 706.218591][ T9796] alloc_pages_vma+0x5ee/0x770 [ 706.223425][ T9796] ? lru_cache_add+0x37/0x50 [ 706.228015][ T9796] wp_page_copy+0x12a/0x10e0 [ 706.232612][ T9796] do_wp_page+0x4fb/0xa80 [ 706.236943][ T9796] ? __rcu_read_unlock+0x5c/0x290 [ 706.242062][ T9796] handle_mm_fault+0x975/0x1590 [ 706.246984][ T9796] ? __this_cpu_preempt_check+0x18/0x20 [ 706.252534][ T9796] do_user_addr_fault+0x609/0xbe0 [ 706.257612][ T9796] exc_page_fault+0x91/0x290 [ 706.262209][ T9796] asm_exc_page_fault+0x1e/0x30 [ 706.267065][ T9796] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 706.273754][ T9796] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 706.293458][ T9796] RSP: 0018:ffffc9001188b878 EFLAGS: 00050206 [ 706.299526][ T9796] RAX: ffff888100826a78 RBX: ffff888107750000 RCX: 0000000000001880 [ 706.307513][ T9796] RDX: 0000000000008000 RSI: ffff888107756780 RDI: 000000002002d000 [ 706.315527][ T9796] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 706.323496][ T9796] R10: 0001888107757fff R11: ffff888100826000 R12: 0000000000008000 [ 706.331473][ T9796] R13: 0000000000000000 R14: ffffc9001188be08 R15: 0000000020026880 [ 706.339513][ T9796] _copy_to_iter+0x1a5/0xbe0 [ 706.344108][ T9796] ? check_stack_object+0x61/0x70 [ 706.349143][ T9796] ? __virt_addr_valid+0x15a/0x1a0 23:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6000}, 0x0) 23:43:54 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc08e0000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 706.354287][ T9796] ? __check_object_size+0x253/0x310 [ 706.359655][ T9796] simple_copy_to_iter+0x4c/0x60 [ 706.364638][ T9796] __skb_datagram_iter+0x23c/0x520 [ 706.369834][ T9796] ? skb_copy_datagram_iter+0xf0/0xf0 [ 706.375219][ T9796] skb_copy_datagram_iter+0x36/0xf0 [ 706.380484][ T9796] unix_stream_read_actor+0x40/0x60 [ 706.385766][ T9796] unix_stream_read_generic+0x79f/0x1430 [ 706.391406][ T9796] ? selinux_socket_recvmsg+0x11a/0x150 [ 706.397190][ T9796] ? should_fail+0xd6/0x250 [ 706.401683][ T9796] unix_stream_recvmsg+0xbc/0xe0 23:43:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x300}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 706.406659][ T9796] ? __unix_stream_recvmsg+0xa0/0xa0 [ 706.412012][ T9796] ? unix_stream_sendmsg+0xf10/0xf10 [ 706.417286][ T9796] ____sys_recvmsg+0x16c/0x320 [ 706.422156][ T9796] do_recvmmsg+0x3f5/0xae0 [ 706.426591][ T9796] __x64_sys_recvmmsg+0xde/0x160 [ 706.431590][ T9796] do_syscall_64+0x44/0xd0 [ 706.436121][ T9796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 706.442097][ T9796] RIP: 0033:0x7f3c6b9daae9 [ 706.446531][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.466395][ T9796] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 706.474976][ T9796] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 706.483028][ T9796] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 706.491125][ T9796] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.499094][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6800}, 0x0) [ 706.507118][ T9796] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 706.515095][ T9796] [ 706.518326][ T9797] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 706.526447][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 706.538873][ T9803] team0: No ports can be present during mode change 23:43:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xffffff7f}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 706.578799][ T9809] team0: No ports can be present during mode change [ 706.596631][ T9812] team0: No ports can be present during mode change 23:43:55 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x40000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:55 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 58) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x2}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6c00}, 0x0) 23:43:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x700}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7400}, 0x0) [ 706.965651][ T9822] team0: No ports can be present during mode change [ 706.974770][ T9828] team0: No ports can be present during mode change [ 707.004242][ T9834] team0: No ports can be present during mode change 23:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x751a}, 0x0) [ 707.011632][ T9835] team0: No ports can be present during mode change [ 707.033181][ T9838] FAULT_INJECTION: forcing a failure. [ 707.033181][ T9838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.046463][ T9838] CPU: 0 PID: 9838 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 707.054792][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.064861][ T9838] Call Trace: [ 707.068165][ T9838] [ 707.071087][ T9838] dump_stack_lvl+0xd6/0x122 [ 707.075709][ T9838] dump_stack+0x11/0x1b [ 707.079910][ T9838] should_fail+0x23c/0x250 [ 707.084375][ T9838] __alloc_pages+0x102/0x330 [ 707.089040][ T9838] alloc_pages_vma+0x5ee/0x770 [ 707.093976][ T9838] ? lru_cache_add+0x37/0x50 [ 707.098566][ T9838] wp_page_copy+0x12a/0x10e0 [ 707.103162][ T9838] do_wp_page+0x4fb/0xa80 [ 707.107555][ T9838] ? __rcu_read_unlock+0x5c/0x290 [ 707.112623][ T9838] handle_mm_fault+0x975/0x1590 [ 707.117571][ T9838] do_user_addr_fault+0x609/0xbe0 [ 707.122645][ T9838] exc_page_fault+0x91/0x290 [ 707.127235][ T9838] asm_exc_page_fault+0x1e/0x30 [ 707.132088][ T9838] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 707.138675][ T9838] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 707.158403][ T9838] RSP: 0018:ffffc90011a2f878 EFLAGS: 00050206 23:43:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 707.164470][ T9838] RAX: ffff888107ddca78 RBX: ffff88813dba8000 RCX: 0000000000000880 [ 707.172478][ T9838] RDX: 0000000000008000 RSI: ffff88813dbaf780 RDI: 000000002002e000 [ 707.180494][ T9838] RBP: 00000000000249c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 707.188489][ T9838] R10: 000188813dbaffff R11: ffff888107ddc000 R12: 0000000000008000 [ 707.196491][ T9838] R13: 0000000000000000 R14: ffffc90011a2fe08 R15: 0000000020026880 [ 707.204472][ T9838] _copy_to_iter+0x1a5/0xbe0 [ 707.209154][ T9838] ? check_stack_object+0x61/0x70 23:43:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xec0}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 707.214190][ T9838] ? __virt_addr_valid+0x15a/0x1a0 [ 707.219327][ T9838] ? __check_object_size+0x253/0x310 [ 707.224615][ T9838] simple_copy_to_iter+0x4c/0x60 [ 707.229662][ T9838] __skb_datagram_iter+0x23c/0x520 [ 707.234810][ T9838] ? skb_copy_datagram_iter+0xf0/0xf0 [ 707.240338][ T9838] skb_copy_datagram_iter+0x36/0xf0 [ 707.245568][ T9838] unix_stream_read_actor+0x40/0x60 [ 707.250816][ T9838] unix_stream_read_generic+0x79f/0x1430 [ 707.256519][ T9838] ? selinux_socket_recvmsg+0x11a/0x150 [ 707.262078][ T9838] ? should_fail+0xd6/0x250 [ 707.266605][ T9838] unix_stream_recvmsg+0xbc/0xe0 [ 707.271651][ T9838] ? __unix_stream_recvmsg+0xa0/0xa0 [ 707.277011][ T9838] ? unix_stream_sendmsg+0xf10/0xf10 [ 707.282322][ T9838] ____sys_recvmsg+0x16c/0x320 [ 707.287090][ T9838] do_recvmmsg+0x3f5/0xae0 [ 707.291717][ T9838] __x64_sys_recvmmsg+0xde/0x160 [ 707.296661][ T9838] do_syscall_64+0x44/0xd0 [ 707.301124][ T9838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 707.307090][ T9838] RIP: 0033:0x7f3c6b9daae9 [ 707.311570][ T9838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.331201][ T9838] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 707.339668][ T9838] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 707.347650][ T9838] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 707.355623][ T9838] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.363591][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 707.371573][ T9838] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 707.379774][ T9838] [ 707.392925][ T9839] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 707.401042][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x3}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7a00}, 0x0) [ 707.412106][ T9845] team0: No ports can be present during mode change [ 707.452998][ T9853] team0: No ports can be present during mode change [ 707.463428][ T9856] team0: No ports can be present during mode change 23:43:56 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x200000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:56 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 59) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x2}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x34000}, 0x0) 23:43:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x2000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:56 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x400300}, 0x0) [ 707.839410][ T9865] team0: No ports can be present during mode change [ 707.846826][ T9872] team0: No ports can be present during mode change [ 707.873885][ T9876] team0: No ports can be present during mode change [ 707.881073][ T9878] team0: No ports can be present during mode change 23:43:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1000000}, 0x0) [ 707.890125][ T9879] FAULT_INJECTION: forcing a failure. [ 707.890125][ T9879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.903300][ T9879] CPU: 0 PID: 9879 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 707.911626][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.921678][ T9879] Call Trace: [ 707.924968][ T9879] [ 707.927921][ T9879] dump_stack_lvl+0xd6/0x122 [ 707.932515][ T9879] dump_stack+0x11/0x1b [ 707.936709][ T9879] should_fail+0x23c/0x250 [ 707.941137][ T9879] should_fail_usercopy+0x16/0x20 [ 707.946235][ T9879] _copy_to_iter+0x131/0xbe0 [ 707.950918][ T9879] ? check_stack_object+0x61/0x70 [ 707.955942][ T9879] ? __virt_addr_valid+0x15a/0x1a0 [ 707.961056][ T9879] ? __check_object_size+0x253/0x310 [ 707.966341][ T9879] simple_copy_to_iter+0x4c/0x60 [ 707.971376][ T9879] ? skb_copy_datagram_iter+0xf0/0xf0 [ 707.976840][ T9879] __skb_datagram_iter+0xac/0x520 [ 707.981960][ T9879] ? kfree+0xf8/0x1f0 [ 707.985944][ T9879] ? __kfree_skb+0xfe/0x150 [ 707.990507][ T9879] skb_copy_datagram_iter+0x36/0xf0 [ 707.995774][ T9879] unix_stream_read_actor+0x40/0x60 [ 708.001032][ T9879] unix_stream_read_generic+0x79f/0x1430 [ 708.006744][ T9879] ? selinux_socket_recvmsg+0x11a/0x150 [ 708.012291][ T9879] ? should_fail+0xd6/0x250 [ 708.016849][ T9879] unix_stream_recvmsg+0xbc/0xe0 [ 708.021954][ T9879] ? __unix_stream_recvmsg+0xa0/0xa0 [ 708.027243][ T9879] ? unix_stream_sendmsg+0xf10/0xf10 [ 708.032533][ T9879] ____sys_recvmsg+0x16c/0x320 [ 708.037305][ T9879] do_recvmmsg+0x3f5/0xae0 [ 708.041940][ T9879] __x64_sys_recvmmsg+0xde/0x160 [ 708.046981][ T9879] do_syscall_64+0x44/0xd0 [ 708.051502][ T9879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 708.057466][ T9879] RIP: 0033:0x7f3c6b9daae9 [ 708.061880][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.081516][ T9879] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 23:43:56 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x7}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x4000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 708.089941][ T9879] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 708.097910][ T9879] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 708.105945][ T9879] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.113911][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.121942][ T9879] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 708.129970][ T9879] 23:43:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x2000000}, 0x0) 23:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x4, "bfe1"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 708.141517][ T9887] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 708.149631][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 708.162940][ T9894] team0: No ports can be present during mode change [ 708.170418][ T9896] team0: No ports can be present during mode change [ 708.317421][ T9900] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 708.325586][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:56 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:57 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 60) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x3000000}, 0x0) 23:43:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x4, "bfe1"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x8ec0}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4000000}, 0x0) [ 708.695762][ T9915] team0: No ports can be present during mode change [ 708.703913][ T9921] team0: No ports can be present during mode change [ 708.730747][ T9924] team0: No ports can be present during mode change [ 708.737901][ T9926] team0: No ports can be present during mode change 23:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x5000000}, 0x0) [ 708.744224][ T9927] FAULT_INJECTION: forcing a failure. [ 708.744224][ T9927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.758166][ T9927] CPU: 1 PID: 9927 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 708.766494][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.776548][ T9927] Call Trace: [ 708.779823][ T9927] [ 708.782748][ T9927] dump_stack_lvl+0xd6/0x122 [ 708.787498][ T9927] dump_stack+0x11/0x1b [ 708.791734][ T9927] should_fail+0x23c/0x250 [ 708.796220][ T9927] __alloc_pages+0x102/0x330 [ 708.800894][ T9927] alloc_pages_vma+0x5ee/0x770 [ 708.805740][ T9927] ? lru_cache_add+0x37/0x50 [ 708.810330][ T9927] wp_page_copy+0x12a/0x10e0 [ 708.814927][ T9927] do_wp_page+0x4fb/0xa80 [ 708.819402][ T9927] ? __rcu_read_unlock+0x5c/0x290 [ 708.824431][ T9927] handle_mm_fault+0x975/0x1590 [ 708.829358][ T9927] do_user_addr_fault+0x609/0xbe0 [ 708.834459][ T9927] exc_page_fault+0x91/0x290 [ 708.839052][ T9927] asm_exc_page_fault+0x1e/0x30 [ 708.844065][ T9927] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 708.850765][ T9927] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 708.870464][ T9927] RSP: 0018:ffffc90011da7878 EFLAGS: 00050202 [ 708.876985][ T9927] RAX: ffff88813a3dda78 RBX: ffff88813eb8f000 RCX: 0000000000000740 [ 708.884958][ T9927] RDX: 0000000000000ec0 RSI: ffff88813eb8f780 RDI: 000000002002f000 [ 708.892935][ T9927] RBP: 000000000002c9c0 R08: 0000000000000000 R09: 0001ffffffffffff [ 708.900921][ T9927] R10: 000188813eb8febf R11: ffff88813a3dd000 R12: 0000000000000ec0 [ 708.908969][ T9927] R13: 0000000000000000 R14: ffffc90011da7e08 R15: 000000002002e880 [ 708.917212][ T9927] _copy_to_iter+0x1a5/0xbe0 [ 708.921839][ T9927] ? check_stack_object+0x61/0x70 [ 708.926916][ T9927] ? __virt_addr_valid+0x15a/0x1a0 [ 708.932140][ T9927] ? __check_object_size+0x253/0x310 [ 708.937433][ T9927] simple_copy_to_iter+0x4c/0x60 23:43:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc00e}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x10}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 708.942382][ T9927] ? skb_copy_datagram_iter+0xf0/0xf0 [ 708.947795][ T9927] __skb_datagram_iter+0xac/0x520 [ 708.952877][ T9927] ? kfree+0xf8/0x1f0 [ 708.956889][ T9927] ? __kfree_skb+0xfe/0x150 [ 708.961392][ T9927] skb_copy_datagram_iter+0x36/0xf0 [ 708.966687][ T9927] unix_stream_read_actor+0x40/0x60 [ 708.971956][ T9927] unix_stream_read_generic+0x79f/0x1430 [ 708.977630][ T9927] ? selinux_socket_recvmsg+0x11a/0x150 [ 708.983344][ T9927] ? should_fail+0xd6/0x250 [ 708.987856][ T9927] unix_stream_recvmsg+0xbc/0xe0 23:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6000000}, 0x0) [ 708.992802][ T9927] ? __unix_stream_recvmsg+0xa0/0xa0 [ 708.996706][ T9938] team0: No ports can be present during mode change [ 708.998147][ T9927] ? unix_stream_sendmsg+0xf10/0xf10 [ 708.998179][ T9927] ____sys_recvmsg+0x16c/0x320 [ 709.014825][ T9927] do_recvmmsg+0x3f5/0xae0 [ 709.019253][ T9927] __x64_sys_recvmmsg+0xde/0x160 [ 709.024196][ T9927] do_syscall_64+0x44/0xd0 [ 709.028675][ T9927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.030427][ T9941] team0: No ports can be present during mode change [ 709.034719][ T9927] RIP: 0033:0x7f3c6b9daae9 [ 709.034737][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.034757][ T9927] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 709.034776][ T9927] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 709.034790][ T9927] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 709.089699][ T9927] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 23:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7000000}, 0x0) [ 709.094441][ T9944] team0: No ports can be present during mode change [ 709.097673][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.097690][ T9927] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 709.097707][ T9927] [ 709.149829][ T9949] team0: No ports can be present during mode change [ 709.157577][ T9950] team0: No ports can be present during mode change [ 709.167557][ T9917] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 709.175665][ T9917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:57 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:57 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 61) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x8000000}, 0x0) 23:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x4, "bfe1"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc08e}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x300}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x9000000}, 0x0) [ 709.554703][ T9962] team0: No ports can be present during mode change [ 709.562211][ T9967] team0: No ports can be present during mode change [ 709.589488][ T9970] team0: No ports can be present during mode change [ 709.596751][ T9971] team0: No ports can be present during mode change [ 709.599225][ T9972] FAULT_INJECTION: forcing a failure. [ 709.599225][ T9972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.616433][ T9972] CPU: 1 PID: 9972 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 709.624869][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.625019][ T9975] team0: No ports can be present during mode change [ 709.634947][ T9972] Call Trace: [ 709.644654][ T9976] team0: No ports can be present during mode change [ 709.644884][ T9972] [ 709.644893][ T9972] dump_stack_lvl+0xd6/0x122 [ 709.659046][ T9972] dump_stack+0x11/0x1b [ 709.663223][ T9972] should_fail+0x23c/0x250 [ 709.667702][ T9972] should_fail_usercopy+0x16/0x20 [ 709.672723][ T9972] _copy_to_iter+0x131/0xbe0 [ 709.677534][ T9972] ? check_stack_object+0x61/0x70 [ 709.682649][ T9972] ? __virt_addr_valid+0x15a/0x1a0 [ 709.687749][ T9972] ? __check_object_size+0x253/0x310 [ 709.693042][ T9972] simple_copy_to_iter+0x4c/0x60 [ 709.698004][ T9972] __skb_datagram_iter+0x23c/0x520 [ 709.703174][ T9972] ? skb_copy_datagram_iter+0xf0/0xf0 [ 709.708534][ T9972] skb_copy_datagram_iter+0x36/0xf0 [ 709.713723][ T9972] unix_stream_read_actor+0x40/0x60 [ 709.718940][ T9972] unix_stream_read_generic+0x79f/0x1430 [ 709.724616][ T9972] ? selinux_socket_recvmsg+0x11a/0x150 [ 709.730160][ T9972] ? should_fail+0xd6/0x250 [ 709.734689][ T9972] unix_stream_recvmsg+0xbc/0xe0 [ 709.739680][ T9972] ? __unix_stream_recvmsg+0xa0/0xa0 [ 709.745104][ T9972] ? unix_stream_sendmsg+0xf10/0xf10 [ 709.750464][ T9972] ____sys_recvmsg+0x16c/0x320 [ 709.755298][ T9972] do_recvmmsg+0x3f5/0xae0 [ 709.759856][ T9972] __x64_sys_recvmmsg+0xde/0x160 [ 709.764798][ T9972] do_syscall_64+0x44/0xd0 [ 709.769301][ T9972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 709.775262][ T9972] RIP: 0033:0x7f3c6b9daae9 [ 709.779663][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xa000000}, 0x0) 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xb000000}, 0x0) [ 709.799377][ T9972] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 709.808380][ T9972] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 709.816341][ T9972] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 709.824297][ T9972] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.832251][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.840203][ T9972] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 709.848285][ T9972] 23:43:58 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x700}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xc000000}, 0x0) 23:43:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 709.955393][ T9981] team0: No ports can be present during mode change [ 709.962698][ T9982] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 709.970909][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 709.980391][ T9984] team0: No ports can be present during mode change [ 710.020681][ T9990] team0: No ports can be present during mode change [ 710.034438][ T9993] team0: No ports can be present during mode change [ 710.118605][ T9988] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 710.126706][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:58 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:58 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 62) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x40000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xd000000}, 0x0) 23:43:58 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xec0}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xe000000}, 0x0) [ 710.412100][T10009] team0: No ports can be present during mode change [ 710.419593][T10012] team0: No ports can be present during mode change [ 710.447633][T10015] team0: No ports can be present during mode change [ 710.453211][T10016] FAULT_INJECTION: forcing a failure. 23:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xf000000}, 0x0) [ 710.453211][T10016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 710.455124][T10017] team0: No ports can be present during mode change [ 710.467514][T10016] CPU: 0 PID: 10016 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 710.482575][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.492633][T10016] Call Trace: [ 710.495908][T10016] [ 710.498827][T10016] dump_stack_lvl+0xd6/0x122 [ 710.503505][T10016] dump_stack+0x11/0x1b [ 710.507674][T10016] should_fail+0x23c/0x250 [ 710.512146][T10016] __alloc_pages+0x102/0x330 [ 710.516767][T10016] alloc_pages_vma+0x5ee/0x770 [ 710.521642][T10016] ? lru_cache_add+0x37/0x50 [ 710.526228][T10016] wp_page_copy+0x12a/0x10e0 [ 710.530859][T10016] do_wp_page+0x4fb/0xa80 [ 710.535239][T10016] ? __rcu_read_unlock+0x5c/0x290 [ 710.540264][T10016] handle_mm_fault+0x975/0x1590 [ 710.545726][T10016] do_user_addr_fault+0x609/0xbe0 [ 710.550760][T10016] exc_page_fault+0x91/0x290 [ 710.555418][T10016] asm_exc_page_fault+0x1e/0x30 [ 710.560353][T10016] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 710.566949][T10016] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 710.586556][T10016] RSP: 0018:ffffc90000b13878 EFLAGS: 00050206 [ 710.592631][T10016] RAX: ffff888139d8ba78 RBX: ffff88813fc48000 RCX: 0000000000007740 [ 710.600600][T10016] RDX: 0000000000008000 RSI: ffff88813fc488c0 RDI: 0000000020030000 [ 710.608564][T10016] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 710.616613][T10016] R10: 000188813fc4ffff R11: ffff888139d8b000 R12: 0000000000008000 [ 710.624592][T10016] R13: 0000000000000000 R14: ffffc90000b13e08 R15: 000000002002f740 [ 710.632567][T10016] _copy_to_iter+0x1a5/0xbe0 [ 710.637163][T10016] ? check_stack_object+0x61/0x70 [ 710.642232][T10016] ? __virt_addr_valid+0x15a/0x1a0 [ 710.647349][T10016] ? __check_object_size+0x253/0x310 [ 710.652700][T10016] simple_copy_to_iter+0x4c/0x60 [ 710.657643][T10016] __skb_datagram_iter+0x23c/0x520 23:43:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x2000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 710.662816][T10016] ? skb_copy_datagram_iter+0xf0/0xf0 [ 710.668204][T10016] skb_copy_datagram_iter+0x36/0xf0 [ 710.675447][T10016] unix_stream_read_actor+0x40/0x60 [ 710.680735][T10016] unix_stream_read_generic+0x79f/0x1430 [ 710.686373][T10016] ? selinux_socket_recvmsg+0x11a/0x150 [ 710.691990][T10016] ? should_fail+0xd6/0x250 [ 710.696497][T10016] unix_stream_recvmsg+0xbc/0xe0 [ 710.697875][T10024] team0: No ports can be present during mode change [ 710.701436][T10016] ? __unix_stream_recvmsg+0xa0/0xa0 23:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x10000000}, 0x0) [ 710.713323][T10016] ? unix_stream_sendmsg+0xf10/0xf10 [ 710.718621][T10016] ____sys_recvmsg+0x16c/0x320 [ 710.723471][T10016] do_recvmmsg+0x3f5/0xae0 [ 710.727894][T10016] __x64_sys_recvmmsg+0xde/0x160 [ 710.732837][T10016] do_syscall_64+0x44/0xd0 [ 710.737265][T10016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 710.743199][T10016] RIP: 0033:0x7f3c6b9daae9 23:43:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x200000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 710.747666][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 710.767281][T10016] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 710.775744][T10016] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 710.783865][T10016] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 710.788482][T10031] team0: No ports can be present during mode change [ 710.791936][T10016] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 23:43:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 710.791953][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.791966][T10016] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 710.791983][T10016] [ 710.800517][T10032] team0: No ports can be present during mode change [ 710.832550][T10033] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 710.840697][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.007762][T10038] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 711.015856][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:43:59 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:43:59 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 63) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x11000000}, 0x0) 23:43:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x4000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:43:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x1000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x12000000}, 0x0) [ 711.263168][T10055] team0: No ports can be present during mode change [ 711.270950][T10057] team0: No ports can be present during mode change [ 711.296110][T10060] team0: No ports can be present during mode change [ 711.303567][T10061] team0: No ports can be present during mode change 23:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x20000000}, 0x0) [ 711.323870][T10064] FAULT_INJECTION: forcing a failure. [ 711.323870][T10064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.331441][T10065] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 711.337113][T10064] CPU: 0 PID: 10064 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 711.348159][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.356700][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.376161][T10064] Call Trace: [ 711.379437][T10064] [ 711.382378][T10064] dump_stack_lvl+0xd6/0x122 [ 711.386995][T10064] dump_stack+0x11/0x1b [ 711.391368][T10064] should_fail+0x23c/0x250 [ 711.395796][T10064] __alloc_pages+0x102/0x330 [ 711.400498][T10064] alloc_pages_vma+0x5ee/0x770 [ 711.405335][T10064] ? lru_cache_add+0x37/0x50 [ 711.409927][T10064] wp_page_copy+0x12a/0x10e0 [ 711.414529][T10064] do_wp_page+0x4fb/0xa80 [ 711.418858][T10064] ? __rcu_read_unlock+0x5c/0x290 [ 711.423908][T10064] handle_mm_fault+0x975/0x1590 [ 711.428833][T10064] do_user_addr_fault+0x609/0xbe0 [ 711.433945][T10064] exc_page_fault+0x91/0x290 [ 711.438546][T10064] asm_exc_page_fault+0x1e/0x30 [ 711.443490][T10064] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 711.450115][T10064] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 711.469883][T10064] RSP: 0018:ffffc90000d37878 EFLAGS: 00050206 [ 711.475955][T10064] RAX: ffff888139d8ba78 RBX: ffff88813fb88000 RCX: 0000000000006740 [ 711.483926][T10064] RDX: 0000000000008000 RSI: ffff88813fb898c0 RDI: 0000000020031000 [ 711.491960][T10064] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 711.499930][T10064] R10: 000188813fb8ffff R11: ffff888139d8b000 R12: 0000000000008000 [ 711.507980][T10064] R13: 0000000000000000 R14: ffffc90000d37e08 R15: 000000002002f740 [ 711.515960][T10064] _copy_to_iter+0x1a5/0xbe0 23:44:00 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x8ec0}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 711.520626][T10064] ? check_stack_object+0x61/0x70 [ 711.525657][T10064] ? __virt_addr_valid+0x15a/0x1a0 [ 711.530780][T10064] ? __check_object_size+0x253/0x310 [ 711.536141][T10064] simple_copy_to_iter+0x4c/0x60 [ 711.541177][T10064] __skb_datagram_iter+0x23c/0x520 [ 711.546311][T10064] ? skb_copy_datagram_iter+0xf0/0xf0 [ 711.551718][T10064] skb_copy_datagram_iter+0x36/0xf0 [ 711.557020][T10064] unix_stream_read_actor+0x40/0x60 [ 711.562286][T10064] unix_stream_read_generic+0x79f/0x1430 [ 711.567937][T10064] ? selinux_socket_recvmsg+0x11a/0x150 23:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x25000000}, 0x0) [ 711.568789][T10068] team0: No ports can be present during mode change [ 711.573586][T10064] ? should_fail+0xd6/0x250 [ 711.583222][T10070] team0: No ports can be present during mode change [ 711.584656][T10064] unix_stream_recvmsg+0xbc/0xe0 [ 711.584690][T10064] ? __unix_stream_recvmsg+0xa0/0xa0 [ 711.601506][T10064] ? unix_stream_sendmsg+0xf10/0xf10 [ 711.606885][T10064] ____sys_recvmsg+0x16c/0x320 [ 711.611659][T10064] do_recvmmsg+0x3f5/0xae0 [ 711.616083][T10064] __x64_sys_recvmmsg+0xde/0x160 23:44:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x2000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 711.621307][T10064] do_syscall_64+0x44/0xd0 [ 711.625764][T10064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.631663][T10064] RIP: 0033:0x7f3c6b9daae9 [ 711.636115][T10064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.655814][T10064] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 711.664261][T10064] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 711.672232][T10064] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 711.680285][T10064] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.688259][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.696305][T10064] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 711.704327][T10064] [ 711.711865][T10078] team0: No ports can be present during mode change 23:44:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 711.728223][T10080] team0: No ports can be present during mode change [ 711.848140][T10082] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 711.856395][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:00 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:00 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x48000000}, 0x0) 23:44:00 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc00e}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x3000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4c000000}, 0x0) [ 712.123036][T10098] team0: No ports can be present during mode change [ 712.131605][T10104] team0: No ports can be present during mode change [ 712.156726][T10106] team0: No ports can be present during mode change [ 712.164262][T10107] team0: No ports can be present during mode change [ 712.172036][T10099] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 712.172663][T10108] FAULT_INJECTION: forcing a failure. [ 712.172663][T10108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 712.180154][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 712.193402][T10108] CPU: 1 PID: 10108 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 712.211386][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.221483][T10108] Call Trace: [ 712.224753][T10108] [ 712.227674][T10108] dump_stack_lvl+0xd6/0x122 [ 712.232336][T10108] dump_stack+0x11/0x1b [ 712.236560][T10108] should_fail+0x23c/0x250 [ 712.241012][T10108] __alloc_pages+0x102/0x330 [ 712.245634][T10108] alloc_pages_vma+0x5ee/0x770 [ 712.250399][T10108] ? lru_cache_add+0x37/0x50 [ 712.254990][T10108] wp_page_copy+0x12a/0x10e0 [ 712.259583][T10108] do_wp_page+0x4fb/0xa80 [ 712.263912][T10108] ? __rcu_read_unlock+0x5c/0x290 [ 712.268939][T10108] handle_mm_fault+0x975/0x1590 23:44:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 712.273794][T10108] do_user_addr_fault+0x609/0xbe0 [ 712.278984][T10108] exc_page_fault+0x91/0x290 [ 712.283569][T10108] asm_exc_page_fault+0x1e/0x30 [ 712.288430][T10108] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 712.295054][T10108] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 712.314736][T10108] RSP: 0018:ffffc90000fb7878 EFLAGS: 00050206 [ 712.320873][T10108] RAX: ffff888139d8ba78 RBX: ffff88813e998000 RCX: 0000000000005740 [ 712.328951][T10108] RDX: 0000000000008000 RSI: ffff88813e99a8c0 RDI: 0000000020032000 [ 712.336920][T10108] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 712.344966][T10108] R10: 000188813e99ffff R11: ffff888139d8b000 R12: 0000000000008000 [ 712.353013][T10108] R13: 0000000000000000 R14: ffffc90000fb7e08 R15: 000000002002f740 [ 712.361046][T10108] _copy_to_iter+0x1a5/0xbe0 [ 712.365684][T10108] ? check_stack_object+0x61/0x70 23:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x60000000}, 0x0) [ 712.370888][T10108] ? __virt_addr_valid+0x15a/0x1a0 [ 712.376005][T10108] ? __check_object_size+0x253/0x310 [ 712.381367][T10108] simple_copy_to_iter+0x4c/0x60 [ 712.386329][T10108] __skb_datagram_iter+0x23c/0x520 [ 712.391449][T10108] ? skb_copy_datagram_iter+0xf0/0xf0 [ 712.396853][T10108] skb_copy_datagram_iter+0x36/0xf0 [ 712.402131][T10108] unix_stream_read_actor+0x40/0x60 [ 712.407339][T10108] unix_stream_read_generic+0x79f/0x1430 [ 712.412983][T10108] ? selinux_socket_recvmsg+0x11a/0x150 [ 712.418539][T10108] ? should_fail+0xd6/0x250 23:44:00 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc08e}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 712.423146][T10108] unix_stream_recvmsg+0xbc/0xe0 [ 712.428082][T10108] ? __unix_stream_recvmsg+0xa0/0xa0 [ 712.433450][T10108] ? unix_stream_sendmsg+0xf10/0xf10 [ 712.438815][T10108] ____sys_recvmsg+0x16c/0x320 [ 712.443597][T10108] do_recvmmsg+0x3f5/0xae0 [ 712.448040][T10108] __x64_sys_recvmmsg+0xde/0x160 [ 712.452981][T10108] do_syscall_64+0x44/0xd0 [ 712.457404][T10108] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.463356][T10108] RIP: 0033:0x7f3c6b9daae9 23:44:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x4000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 712.467764][T10108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.487374][T10108] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 712.495820][T10108] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 712.503806][T10108] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 712.504644][T10118] team0: No ports can be present during mode change 23:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x68000000}, 0x0) [ 712.511776][T10108] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.511793][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 712.511806][T10108] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 712.511822][T10108] [ 712.549368][T10125] team0: No ports can be present during mode change [ 712.615223][T10129] team0: No ports can be present during mode change [ 712.624051][T10130] team0: No ports can be present during mode change [ 712.645803][T10115] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 712.654140][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:01 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:01 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 65) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6c000000}, 0x0) 23:44:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x40000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x7000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x74000000}, 0x0) [ 712.973448][T10143] team0: No ports can be present during mode change [ 712.982707][T10147] team0: No ports can be present during mode change [ 713.009239][T10150] team0: No ports can be present during mode change [ 713.016389][T10152] team0: No ports can be present during mode change [ 713.028209][T10141] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 713.036326][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.037634][T10154] FAULT_INJECTION: forcing a failure. [ 713.037634][T10154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 713.058831][T10154] CPU: 1 PID: 10154 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 713.067273][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x751a0000}, 0x0) 23:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 713.077391][T10154] Call Trace: [ 713.080675][T10154] [ 713.083608][T10154] dump_stack_lvl+0xd6/0x122 [ 713.088222][T10154] dump_stack+0x11/0x1b [ 713.092383][T10154] should_fail+0x23c/0x250 [ 713.096841][T10154] __alloc_pages+0x102/0x330 [ 713.101433][T10154] alloc_pages_vma+0x5ee/0x770 [ 713.106223][T10154] ? lru_cache_add+0x37/0x50 [ 713.110820][T10154] wp_page_copy+0x12a/0x10e0 [ 713.115417][T10154] ? delay_tsc+0x96/0xe0 [ 713.119733][T10154] do_wp_page+0x4fb/0xa80 [ 713.124142][T10154] handle_mm_fault+0x975/0x1590 [ 713.129013][T10154] do_user_addr_fault+0x609/0xbe0 [ 713.134111][T10154] exc_page_fault+0x91/0x290 [ 713.138728][T10154] asm_exc_page_fault+0x1e/0x30 [ 713.143704][T10154] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 713.150460][T10154] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 713.170137][T10154] RSP: 0018:ffffc90000fef878 EFLAGS: 00050206 [ 713.176265][T10154] RAX: ffff888107648a78 RBX: ffff88813dcb0000 RCX: 0000000000004740 [ 713.184341][T10154] RDX: 0000000000008000 RSI: ffff88813dcb38c0 RDI: 0000000020033000 [ 713.192314][T10154] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 713.200374][T10154] R10: 000188813dcb7fff R11: ffff888107648000 R12: 0000000000008000 [ 713.208345][T10154] R13: 0000000000000000 R14: ffffc90000fefe08 R15: 000000002002f740 [ 713.216368][T10154] _copy_to_iter+0x1a5/0xbe0 [ 713.220967][T10154] ? check_stack_object+0x61/0x70 23:44:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x200000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 713.226002][T10154] ? __virt_addr_valid+0x15a/0x1a0 [ 713.231142][T10154] ? __check_object_size+0x253/0x310 [ 713.236458][T10154] simple_copy_to_iter+0x4c/0x60 [ 713.241403][T10154] __skb_datagram_iter+0x23c/0x520 [ 713.246526][T10154] ? skb_copy_datagram_iter+0xf0/0xf0 [ 713.252010][T10154] skb_copy_datagram_iter+0x36/0xf0 [ 713.257285][T10154] unix_stream_read_actor+0x40/0x60 [ 713.262282][T10160] team0: No ports can be present during mode change [ 713.262493][T10154] unix_stream_read_generic+0x79f/0x1430 23:44:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x8000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 713.274677][T10154] ? selinux_socket_recvmsg+0x11a/0x150 [ 713.280224][T10154] ? should_fail+0xd6/0x250 [ 713.284741][T10154] unix_stream_recvmsg+0xbc/0xe0 [ 713.289794][T10154] ? __unix_stream_recvmsg+0xa0/0xa0 [ 713.295083][T10154] ? unix_stream_sendmsg+0xf10/0xf10 [ 713.300378][T10154] ____sys_recvmsg+0x16c/0x320 [ 713.303029][T10163] team0: No ports can be present during mode change [ 713.305147][T10154] do_recvmmsg+0x3f5/0xae0 [ 713.305187][T10154] __x64_sys_recvmmsg+0xde/0x160 [ 713.305210][T10154] do_syscall_64+0x44/0xd0 23:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7a000000}, 0x0) [ 713.305235][T10154] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 713.331612][T10154] RIP: 0033:0x7f3c6b9daae9 [ 713.336042][T10154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 713.355822][T10154] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 713.364674][T10154] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 713.372839][T10154] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 713.380813][T10154] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.388802][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.396802][T10154] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 713.404810][T10154] [ 713.413622][T10172] team0: No ports can be present during mode change [ 713.421218][T10173] team0: No ports can be present during mode change [ 713.429613][T10166] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 713.437701][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:02 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:02 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 66) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:02 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x1000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x10000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x9effffff}, 0x0) 23:44:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xefffffff}, 0x0) [ 713.837137][T10185] team0: No ports can be present during mode change [ 713.846712][T10192] team0: No ports can be present during mode change [ 713.872719][T10195] team0: No ports can be present during mode change [ 713.881523][T10197] team0: No ports can be present during mode change [ 713.905495][T10200] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 713.905593][T10199] FAULT_INJECTION: forcing a failure. [ 713.905593][T10199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 713.913705][T10200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.926951][T10199] CPU: 0 PID: 10199 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 713.944550][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.954682][T10199] Call Trace: [ 713.957967][T10199] [ 713.960889][T10199] dump_stack_lvl+0xd6/0x122 [ 713.965496][T10199] dump_stack+0x11/0x1b [ 713.969741][T10199] should_fail+0x23c/0x250 [ 713.974207][T10199] __alloc_pages+0x102/0x330 [ 713.978813][T10199] alloc_pages_vma+0x5ee/0x770 [ 713.983598][T10199] ? lru_cache_add+0x37/0x50 [ 713.988351][T10199] wp_page_copy+0x12a/0x10e0 [ 713.992966][T10199] do_wp_page+0x4fb/0xa80 [ 713.997381][T10199] ? __rcu_read_unlock+0x5c/0x290 [ 714.002455][T10199] handle_mm_fault+0x975/0x1590 [ 714.007308][T10199] do_user_addr_fault+0x609/0xbe0 [ 714.012337][T10199] exc_page_fault+0x91/0x290 [ 714.016927][T10199] asm_exc_page_fault+0x1e/0x30 [ 714.021788][T10199] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 23:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xf0ffffff}, 0x0) 23:44:02 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x2000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 714.028377][T10199] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 714.048159][T10199] RSP: 0018:ffffc9000151f878 EFLAGS: 00050206 [ 714.054219][T10199] RAX: ffff88813dabfa78 RBX: ffff88813db30000 RCX: 0000000000003740 [ 714.062195][T10199] RDX: 0000000000008000 RSI: ffff88813db348c0 RDI: 0000000020034000 [ 714.070187][T10199] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 714.078172][T10199] R10: 000188813db37fff R11: ffff88813dabf000 R12: 0000000000008000 [ 714.086206][T10199] R13: 0000000000000000 R14: ffffc9000151fe08 R15: 000000002002f740 [ 714.094177][T10199] _copy_to_iter+0x1a5/0xbe0 [ 714.098774][T10199] ? check_stack_object+0x61/0x70 [ 714.103801][T10199] ? __virt_addr_valid+0x15a/0x1a0 [ 714.108919][T10199] ? __check_object_size+0x253/0x310 [ 714.114203][T10199] simple_copy_to_iter+0x4c/0x60 [ 714.119362][T10199] __skb_datagram_iter+0x23c/0x520 [ 714.124551][T10199] ? skb_copy_datagram_iter+0xf0/0xf0 [ 714.129959][T10199] skb_copy_datagram_iter+0x36/0xf0 [ 714.135194][T10199] unix_stream_read_actor+0x40/0x60 [ 714.140401][T10199] unix_stream_read_generic+0x79f/0x1430 [ 714.146076][T10199] ? selinux_socket_recvmsg+0x11a/0x150 [ 714.151821][T10199] ? should_fail+0xd6/0x250 [ 714.156340][T10199] unix_stream_recvmsg+0xbc/0xe0 [ 714.161361][T10199] ? __unix_stream_recvmsg+0xa0/0xa0 [ 714.166653][T10199] ? unix_stream_sendmsg+0xf10/0xf10 [ 714.171942][T10199] ____sys_recvmsg+0x16c/0x320 [ 714.176708][T10199] do_recvmmsg+0x3f5/0xae0 [ 714.181163][T10199] __x64_sys_recvmmsg+0xde/0x160 [ 714.186114][T10199] do_syscall_64+0x44/0xd0 [ 714.190532][T10199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.196763][T10199] RIP: 0033:0x7f3c6b9daae9 [ 714.201171][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.220780][T10199] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 714.229211][T10199] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 714.237187][T10199] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 714.245160][T10199] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.253140][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.261166][T10199] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 714.269203][T10199] 23:44:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x40000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:02 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x3000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 714.283684][T10216] team0: No ports can be present during mode change 23:44:02 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x40000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:03 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 67) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xffffff7f}, 0x0) 23:44:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x4000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc00e0000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xffffff9e}, 0x0) [ 714.708195][T10234] team0: No ports can be present during mode change [ 714.716601][T10238] team0: No ports can be present during mode change [ 714.743030][T10241] team0: No ports can be present during mode change [ 714.750681][T10242] team0: No ports can be present during mode change [ 714.759671][T10230] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 714.767751][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 714.778808][T10245] FAULT_INJECTION: forcing a failure. [ 714.778808][T10245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 714.792058][T10245] CPU: 1 PID: 10245 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 714.800474][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.810585][T10245] Call Trace: [ 714.813861][T10245] [ 714.816786][T10245] dump_stack_lvl+0xd6/0x122 [ 714.821502][T10245] dump_stack+0x11/0x1b [ 714.825672][T10245] should_fail+0x23c/0x250 [ 714.830090][T10245] __alloc_pages+0x102/0x330 [ 714.834739][T10245] alloc_pages_vma+0x5ee/0x770 [ 714.839513][T10245] ? lru_cache_add+0x37/0x50 [ 714.844116][T10245] wp_page_copy+0x12a/0x10e0 [ 714.848784][T10245] do_wp_page+0x4fb/0xa80 [ 714.853113][T10245] ? __rcu_read_unlock+0x5c/0x290 [ 714.858215][T10245] handle_mm_fault+0x975/0x1590 [ 714.863130][T10245] do_user_addr_fault+0x609/0xbe0 [ 714.868294][T10245] exc_page_fault+0x91/0x290 [ 714.872889][T10245] asm_exc_page_fault+0x1e/0x30 [ 714.877769][T10245] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 714.884373][T10245] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 714.904100][T10245] RSP: 0018:ffffc9000e1ef878 EFLAGS: 00050206 23:44:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xffffffef}, 0x0) [ 714.910262][T10245] RAX: ffff8881067c3a78 RBX: ffff8881392c0000 RCX: 0000000000002740 [ 714.918234][T10245] RDX: 0000000000008000 RSI: ffff8881392c58c0 RDI: 0000000020035000 [ 714.926268][T10245] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 714.934245][T10245] R10: 00018881392c7fff R11: ffff8881067c3000 R12: 0000000000008000 [ 714.942218][T10245] R13: 0000000000000000 R14: ffffc9000e1efe08 R15: 000000002002f740 [ 714.950201][T10245] _copy_to_iter+0x1a5/0xbe0 [ 714.954797][T10245] ? check_stack_object+0x61/0x70 23:44:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x7000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 714.959874][T10245] ? __virt_addr_valid+0x15a/0x1a0 [ 714.964988][T10245] ? __check_object_size+0x253/0x310 [ 714.970272][T10245] simple_copy_to_iter+0x4c/0x60 [ 714.975286][T10245] __skb_datagram_iter+0x23c/0x520 [ 714.980397][T10245] ? skb_copy_datagram_iter+0xf0/0xf0 [ 714.985871][T10245] skb_copy_datagram_iter+0x36/0xf0 [ 714.991072][T10245] unix_stream_read_actor+0x40/0x60 [ 714.996274][T10245] unix_stream_read_generic+0x79f/0x1430 [ 715.001912][T10245] ? selinux_socket_recvmsg+0x11a/0x150 23:44:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc08e0000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 715.007540][T10245] ? should_fail+0xd6/0x250 [ 715.012044][T10245] unix_stream_recvmsg+0xbc/0xe0 [ 715.016994][T10245] ? __unix_stream_recvmsg+0xa0/0xa0 [ 715.022338][T10245] ? unix_stream_sendmsg+0xf10/0xf10 [ 715.027626][T10245] ____sys_recvmsg+0x16c/0x320 [ 715.032454][T10245] do_recvmmsg+0x3f5/0xae0 [ 715.036960][T10245] __x64_sys_recvmmsg+0xde/0x160 [ 715.041905][T10245] do_syscall_64+0x44/0xd0 [ 715.046325][T10245] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 715.052239][T10245] RIP: 0033:0x7f3c6b9daae9 [ 715.056675][T10245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.076294][T10245] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 715.084702][T10245] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 715.092674][T10245] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 715.100728][T10245] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 23:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xfffffff0}, 0x0) [ 715.108742][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 715.116708][T10245] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 715.124771][T10245] [ 715.135446][T10257] team0: No ports can be present during mode change [ 715.142548][T10261] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 715.150638][T10261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 715.189679][T10264] team0: No ports can be present during mode change [ 715.214378][T10265] team0: No ports can be present during mode change 23:44:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x8000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:04 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 68) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x40030000000000}, 0x0) 23:44:04 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc00e0000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xffffff7f}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x10000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x100000000000000}, 0x0) [ 715.580480][T10280] team0: No ports can be present during mode change [ 715.589115][T10283] team0: No ports can be present during mode change [ 715.614253][T10287] team0: No ports can be present during mode change [ 715.622080][T10288] team0: No ports can be present during mode change [ 715.638200][T10272] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 715.639678][T10289] FAULT_INJECTION: forcing a failure. [ 715.639678][T10289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 715.646292][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 715.659515][T10289] CPU: 0 PID: 10289 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 715.677339][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.678779][T10293] team0: No ports can be present during mode change [ 715.687400][T10289] Call Trace: [ 715.687409][T10289] [ 715.687416][T10289] dump_stack_lvl+0xd6/0x122 [ 715.697333][T10294] team0: No ports can be present during mode change [ 715.697518][T10289] dump_stack+0x11/0x1b [ 715.715728][T10289] should_fail+0x23c/0x250 [ 715.720156][T10289] __alloc_pages+0x102/0x330 [ 715.724891][T10289] alloc_pages_vma+0x5ee/0x770 [ 715.729665][T10289] do_anonymous_page+0x169/0x8d0 [ 715.734670][T10289] ? __rcu_read_unlock+0x5c/0x290 [ 715.739732][T10289] handle_mm_fault+0x814/0x1590 [ 715.744613][T10289] do_user_addr_fault+0x609/0xbe0 [ 715.749771][T10289] exc_page_fault+0x91/0x290 [ 715.753140][T10298] team0: No ports can be present during mode change [ 715.754445][T10289] asm_exc_page_fault+0x1e/0x30 [ 715.765886][T10289] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 715.768273][T10300] team0: No ports can be present during mode change [ 715.772478][T10289] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 715.772499][T10289] RSP: 0018:ffffc9000e36b878 EFLAGS: 00050206 [ 715.804695][T10289] RAX: ffff88813bd93a78 RBX: ffff888106698000 RCX: 0000000000001740 [ 715.812700][T10289] RDX: 0000000000008000 RSI: ffff88810669e8c0 RDI: 0000000020036000 [ 715.820696][T10289] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 715.828715][T10289] R10: 000188810669ffff R11: ffff88813bd93000 R12: 0000000000008000 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x200000000000000}, 0x0) 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x300000000000000}, 0x0) 23:44:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) [ 715.836683][T10289] R13: 0000000000000000 R14: ffffc9000e36be08 R15: 000000002002f740 [ 715.844706][T10289] _copy_to_iter+0x1a5/0xbe0 [ 715.849298][T10289] ? check_stack_object+0x61/0x70 [ 715.854320][T10289] ? __virt_addr_valid+0x15a/0x1a0 [ 715.859485][T10289] ? __check_object_size+0x253/0x310 [ 715.864778][T10289] simple_copy_to_iter+0x4c/0x60 [ 715.869728][T10289] __skb_datagram_iter+0x23c/0x520 [ 715.874876][T10289] ? skb_copy_datagram_iter+0xf0/0xf0 [ 715.880255][T10289] skb_copy_datagram_iter+0x36/0xf0 [ 715.885503][T10289] unix_stream_read_actor+0x40/0x60 [ 715.890708][T10289] unix_stream_read_generic+0x79f/0x1430 [ 715.896357][T10289] ? selinux_socket_recvmsg+0x11a/0x150 [ 715.901916][T10289] ? should_fail+0xd6/0x250 [ 715.906420][T10289] unix_stream_recvmsg+0xbc/0xe0 [ 715.911363][T10289] ? __unix_stream_recvmsg+0xa0/0xa0 [ 715.916686][T10289] ? unix_stream_sendmsg+0xf10/0xf10 [ 715.922290][T10289] ____sys_recvmsg+0x16c/0x320 [ 715.927125][T10289] do_recvmmsg+0x3f5/0xae0 [ 715.931595][T10289] __x64_sys_recvmmsg+0xde/0x160 23:44:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 715.936541][T10289] do_syscall_64+0x44/0xd0 [ 715.940985][T10289] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 715.946889][T10289] RIP: 0033:0x7f3c6b9daae9 [ 715.951394][T10289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 715.970998][T10289] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 715.979409][T10289] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 715.987402][T10289] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 715.995370][T10289] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.003352][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.011368][T10289] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 716.019427][T10289] [ 716.026012][T10303] team0: No ports can be present during mode change [ 716.035684][T10314] team0: No ports can be present during mode change 23:44:04 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 69) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0x40000000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x500000000000000}, 0x0) 23:44:04 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc08e0000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:04 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x600000000000000}, 0x0) [ 716.429635][T10319] team0: No ports can be present during mode change [ 716.438000][T10323] team0: No ports can be present during mode change [ 716.482621][T10333] team0: No ports can be present during mode change [ 716.488936][T10334] FAULT_INJECTION: forcing a failure. [ 716.488936][T10334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 716.498429][T10336] team0: No ports can be present during mode change [ 716.502457][T10334] CPU: 0 PID: 10334 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 716.517526][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.525339][T10337] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 716.527600][T10334] Call Trace: [ 716.527609][T10334] [ 716.527616][T10334] dump_stack_lvl+0xd6/0x122 [ 716.527646][T10334] dump_stack+0x11/0x1b [ 716.535710][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 716.538974][T10334] should_fail+0x23c/0x250 [ 716.539001][T10334] __alloc_pages+0x102/0x330 [ 716.569160][T10334] alloc_pages_vma+0x5ee/0x770 [ 716.573997][T10334] ? lru_cache_add+0x37/0x50 23:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x700000000000000}, 0x0) [ 716.578600][T10334] do_anonymous_page+0x169/0x8d0 [ 716.583549][T10334] ? __rcu_read_unlock+0x5c/0x290 [ 716.588571][T10334] handle_mm_fault+0x814/0x1590 [ 716.593425][T10334] do_user_addr_fault+0x609/0xbe0 [ 716.598451][T10334] exc_page_fault+0x91/0x290 [ 716.603069][T10334] asm_exc_page_fault+0x1e/0x30 [ 716.607952][T10334] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 23:44:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc00e0000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 716.614638][T10334] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 716.634293][T10334] RSP: 0018:ffffc9000e557878 EFLAGS: 00050206 [ 716.640369][T10334] RAX: ffff888107431a78 RBX: ffff88813ca20000 RCX: 0000000000000740 [ 716.648336][T10334] RDX: 0000000000008000 RSI: ffff88813ca278c0 RDI: 0000000020037000 [ 716.651167][T10340] team0: No ports can be present during mode change [ 716.656303][T10334] RBP: 000000000002d880 R08: 0000000000000000 R09: 0001ffffffffffff [ 716.665312][T10342] team0: No ports can be present during mode change 23:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x800000000000000}, 0x0) [ 716.670888][T10334] R10: 000188813ca27fff R11: ffff888107431000 R12: 0000000000008000 [ 716.670906][T10334] R13: 0000000000000000 R14: ffffc9000e557e08 R15: 000000002002f740 [ 716.670923][T10334] _copy_to_iter+0x1a5/0xbe0 [ 716.697966][T10334] ? check_stack_object+0x61/0x70 [ 716.700337][T10344] team0: No ports can be present during mode change [ 716.703007][T10334] ? __virt_addr_valid+0x15a/0x1a0 [ 716.703045][T10334] ? __check_object_size+0x253/0x310 [ 716.720023][T10334] simple_copy_to_iter+0x4c/0x60 [ 716.724966][T10334] __skb_datagram_iter+0x23c/0x520 [ 716.730083][T10334] ? skb_copy_datagram_iter+0xf0/0xf0 [ 716.735534][T10334] skb_copy_datagram_iter+0x36/0xf0 [ 716.740819][T10334] unix_stream_read_actor+0x40/0x60 [ 716.746069][T10334] unix_stream_read_generic+0x79f/0x1430 [ 716.751710][T10334] ? selinux_socket_recvmsg+0x11a/0x150 [ 716.757339][T10334] ? should_fail+0xd6/0x250 [ 716.761846][T10334] unix_stream_recvmsg+0xbc/0xe0 [ 716.766813][T10334] ? __unix_stream_recvmsg+0xa0/0xa0 [ 716.772102][T10334] ? unix_stream_sendmsg+0xf10/0xf10 [ 716.777395][T10334] ____sys_recvmsg+0x16c/0x320 23:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x900000000000000}, 0x0) [ 716.782167][T10347] team0: No ports can be present during mode change [ 716.782165][T10334] do_recvmmsg+0x3f5/0xae0 [ 716.782220][T10334] __x64_sys_recvmmsg+0xde/0x160 [ 716.798070][T10334] do_syscall_64+0x44/0xd0 [ 716.802492][T10334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.808537][T10334] RIP: 0033:0x7f3c6b9daae9 [ 716.812944][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:44:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xc08e0000}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 716.832551][T10334] RSP: 002b:00007f3c69730188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 716.840964][T10334] RAX: ffffffffffffffda RBX: 00007f3c6baee020 RCX: 00007f3c6b9daae9 [ 716.848945][T10334] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000004 [ 716.850828][T10349] team0: No ports can be present during mode change [ 716.856920][T10334] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.856937][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.856950][T10334] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 716.856967][T10334] [ 716.869107][T10351] team0: No ports can be present during mode change 23:44:05 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) (fail_nth: 70) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xa00000000000000}, 0x0) 23:44:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:05 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}, 0xffffff7f}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:05 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffff7f, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xb00000000000000}, 0x0) [ 717.291529][T10363] team0: No ports can be present during mode change [ 717.308576][T10366] team0: No ports can be present during mode change [ 717.340349][T10373] FAULT_INJECTION: forcing a failure. [ 717.340349][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.345960][T10375] team0: No ports can be present during mode change [ 717.353519][T10373] CPU: 1 PID: 10373 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 717.353545][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.353557][T10373] Call Trace: [ 717.353571][T10373] [ 717.364361][T10376] team0: No ports can be present during mode change [ 717.368529][T10373] dump_stack_lvl+0xd6/0x122 [ 717.368564][T10373] dump_stack+0x11/0x1b [ 717.400421][T10373] should_fail+0x23c/0x250 [ 717.404935][T10373] should_fail_usercopy+0x16/0x20 [ 717.409975][T10373] _copy_to_user+0x1c/0x90 [ 717.414444][T10373] simple_read_from_buffer+0xab/0x120 [ 717.419834][T10373] proc_fail_nth_read+0x10d/0x150 [ 717.424874][T10373] ? proc_fault_inject_write+0x230/0x230 [ 717.430557][T10373] vfs_read+0x1e6/0x750 [ 717.434741][T10373] ? __fget_light+0x219/0x260 [ 717.439490][T10373] ksys_read+0xd9/0x190 [ 717.443705][T10373] __x64_sys_read+0x3e/0x50 [ 717.448368][T10373] do_syscall_64+0x44/0xd0 [ 717.452799][T10373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.458702][T10373] RIP: 0033:0x7f3c6b98d69c [ 717.463118][T10373] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 23:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xc00000000000000}, 0x0) 23:44:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 717.483172][T10373] RSP: 002b:00007f3c69730170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.491588][T10373] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3c6b98d69c [ 717.499557][T10373] RDX: 000000000000000f RSI: 00007f3c697301e0 RDI: 0000000000000006 [ 717.507558][T10373] RBP: 00007f3c697301d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.515546][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.523522][T10373] R13: 00007fffaf8c361f R14: 00007f3c69730300 R15: 0000000000022000 [ 717.525276][T10383] team0: No ports can be present during mode change [ 717.531500][T10373] 23:44:06 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xd00000000000000}, 0x0) [ 717.541375][T10384] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 717.549573][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 717.559125][T10387] team0: No ports can be present during mode change 23:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 717.616213][T10392] team0: No ports can be present during mode change [ 717.632246][T10396] team0: No ports can be present during mode change 23:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xe00000000000000}, 0x0) 23:44:06 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000640)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:06 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:06 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 717.701475][T10401] team0: No ports can be present during mode change [ 717.708895][T10394] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 717.717005][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 717.730855][T10404] team0: No ports can be present during mode change [ 717.827937][T10407] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 717.836074][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:06 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x4000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xf00000000000000}, 0x0) 23:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000640)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:06 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:06 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1000000000000000}, 0x0) [ 718.183183][T10420] team0: No ports can be present during mode change [ 718.194440][T10424] team0: No ports can be present during mode change 23:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1100000000000000}, 0x0) [ 718.228988][T10432] team0: No ports can be present during mode change [ 718.236286][T10434] team0: No ports can be present during mode change [ 718.264108][T10439] team0: No ports can be present during mode change 23:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x1200000000000000}, 0x0) [ 718.272943][T10440] team0: No ports can be present during mode change [ 718.280714][T10422] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 718.288822][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 718.343733][T10443] team0: No ports can be present during mode change [ 718.375750][T10444] team0: No ports can be present during mode change 23:44:07 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x4, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000640)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) [ 718.604919][T10448] team0: No ports can be present during mode change [ 718.613114][T10454] team0: No ports can be present during mode change [ 718.668752][T10451] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 718.676931][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:07 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x20000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x8, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x2500000000000000}, 0x0) 23:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4800000000000000}, 0x0) [ 719.056146][T10462] team0: No ports can be present during mode change [ 719.067280][T10469] team0: No ports can be present during mode change 23:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x4c00000000000000}, 0x0) [ 719.098536][T10474] team0: No ports can be present during mode change [ 719.105769][T10476] team0: No ports can be present during mode change [ 719.118183][T10466] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 719.126258][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 719.152566][T10481] team0: No ports can be present during mode change [ 719.181080][T10483] team0: No ports can be present during mode change [ 719.287612][T10485] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 719.295778][T10485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:07 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6000000000000000}, 0x0) 23:44:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x8, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 719.518326][T10491] team0: No ports can be present during mode change [ 719.528218][T10499] team0: No ports can be present during mode change [ 719.567862][T10493] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 719.575944][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:08 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x10, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6800000000000000}, 0x0) 23:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:08 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x10, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x6c00000000000000}, 0x0) [ 719.929276][T10505] team0: No ports can be present during mode change [ 719.951558][T10515] team0: No ports can be present during mode change 23:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7400000000000000}, 0x0) [ 719.978325][T10518] team0: No ports can be present during mode change [ 719.985479][T10520] team0: No ports can be present during mode change [ 719.997881][T10508] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 720.006066][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 720.032785][T10525] team0: No ports can be present during mode change [ 720.065293][T10527] team0: No ports can be present during mode change [ 720.177778][T10529] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 720.185872][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:08 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x751a000000000000}, 0x0) 23:44:08 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x300, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x300, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 720.427032][T10534] team0: No ports can be present during mode change [ 720.434355][T10537] team0: No ports can be present during mode change 23:44:09 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x7a00000000000000}, 0x0) 23:44:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x700, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x700, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x8000000000000000}, 0x0) [ 720.815049][T10549] team0: No ports can be present during mode change [ 720.825146][T10559] team0: No ports can be present during mode change [ 720.851571][T10561] team0: No ports can be present during mode change 23:44:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x9effffff00000000}, 0x0) 23:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 720.858907][T10562] team0: No ports can be present during mode change [ 720.910713][T10570] team0: No ports can be present during mode change [ 720.936431][T10572] team0: No ports can be present during mode change 23:44:09 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xefffffff00000000}, 0x0) 23:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xec0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 721.353757][T10577] team0: No ports can be present during mode change [ 721.363518][T10585] team0: No ports can be present during mode change 23:44:10 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:10 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xec0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xf0ffffff00000000}, 0x0) 23:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x2000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xffffff7f00000000}, 0x0) [ 721.674740][T10594] team0: No ports can be present during mode change [ 721.683718][T10600] team0: No ports can be present during mode change [ 721.712815][T10603] team0: No ports can be present during mode change 23:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0xffffffff00000000}, 0x0) [ 721.720314][T10605] team0: No ports can be present during mode change 23:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 721.778000][T10609] team0: No ports can be present during mode change [ 721.804641][T10614] team0: No ports can be present during mode change 23:44:10 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1, 0x0, 0xffffffff00000000}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x2}, 0x0) 23:44:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x4000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 723.369881][ T1835] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.443152][ T1835] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.510081][ T1835] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.029275][ T1835] device hsr_slave_0 left promiscuous mode [ 724.035562][ T1835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.043068][ T1835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.051883][ T1835] device bridge_slave_1 left promiscuous mode [ 724.058050][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.066142][ T1835] device bridge_slave_0 left promiscuous mode [ 724.072365][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.168354][ T1835] device veth1_macvtap left promiscuous mode [ 724.174441][ T1835] device veth0_macvtap left promiscuous mode [ 724.180611][ T1835] device veth1_vlan left promiscuous mode [ 724.186340][ T1835] device veth0_vlan left promiscuous mode [ 724.534150][ T1835] team0 (unregistering): Port device team_slave_1 removed [ 724.545464][ T1835] team0 (unregistering): Port device team_slave_0 removed [ 724.560252][ T1835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.587959][ T1835] bond0 (unregistering): Released all slaves [ 724.727021][T10815] chnl_net:caif_netlink_parms(): no params data found [ 724.762204][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.769358][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.776829][T10815] device bridge_slave_0 entered promiscuous mode [ 724.785517][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.792608][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.800230][T10815] device bridge_slave_1 entered promiscuous mode [ 724.819777][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.830164][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.850431][T10815] team0: Port device team_slave_0 added [ 724.856700][T10815] team0: Port device team_slave_1 added [ 724.872990][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.880121][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.906022][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.919050][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.925994][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.952328][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.975981][T10815] device hsr_slave_0 entered promiscuous mode [ 724.985361][T10815] device hsr_slave_1 entered promiscuous mode [ 724.991945][T10815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.999543][T10815] Cannot create hsr debugfs directory [ 725.038746][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.045790][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.053204][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.060244][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.094208][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.105488][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.115225][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.123283][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.136982][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.148764][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.157156][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.164184][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.171988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.180330][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.187435][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.206406][T10815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 725.216997][T10815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.230523][T19721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.239519][T19721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 725.248146][T19721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.256384][T19721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.264853][T15628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 725.272392][T15628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 725.285726][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.296281][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 725.303859][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 725.361886][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.446566][T10815] device veth0_vlan entered promiscuous mode [ 725.453302][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.461890][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.469563][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.489071][T10815] device veth1_vlan entered promiscuous mode [ 725.511703][T10815] device veth0_macvtap entered promiscuous mode [ 725.518600][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 725.526518][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 725.534676][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.543027][ T1912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 725.563739][T10815] device veth1_macvtap entered promiscuous mode [ 725.575199][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 725.585710][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.595525][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 725.605954][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.615820][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 725.626320][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.636231][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 725.646660][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.656550][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 725.666986][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.677919][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.687344][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 725.697911][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.707738][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 725.718161][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.727986][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 725.738410][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.748237][T10815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 725.758703][T10815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.769351][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.776979][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.785971][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:44:15 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:15 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x2000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x3}, 0x0) 23:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x8ec0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:15 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4}, 0x0) 23:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x5}, 0x0) [ 726.767965][T11188] validate_nla: 6 callbacks suppressed [ 726.767981][T11188] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 726.781563][T11188] __nla_validate_parse: 6 callbacks suppressed [ 726.781579][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6}, 0x0) 23:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7}, 0x0) 23:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x8}, 0x0) [ 726.957848][T11224] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 726.966117][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:16 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x9}, 0x0) 23:44:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc00e, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:16 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x4000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xa}, 0x0) 23:44:16 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xb}, 0x0) 23:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 727.658320][T11360] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 727.666508][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xc}, 0x0) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xd}, 0x0) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xe}, 0x0) [ 727.834359][T11403] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 727.842620][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:16 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc08e, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:16 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x8ec0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xf}, 0x0) 23:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x10}, 0x0) 23:44:17 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0xffffffff00000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x11}, 0x0) [ 728.529801][T11530] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 728.538123][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x12}, 0x0) 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x25}, 0x0) 23:44:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x40000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 728.697764][T11559] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 728.705885][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:17 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x48}, 0x0) 23:44:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc00e, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x200000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4c}, 0x0) [ 729.416609][T11709] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 729.424762][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x60}, 0x0) 23:44:17 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x68}, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6c}, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x74}, 0x0) [ 729.613135][T11726] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 729.621299][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:18 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:18 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x1000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc08e, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7a}, 0x0) 23:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x300}, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x500}, 0x0) [ 730.278152][T11844] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 730.286239][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:18 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000002c00)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)=""/112, 0x70}], 0x4}, 0x4}, {{&(0x7f0000000400)=@pppol2tpin6, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000001940)=""/52, 0x34}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x4, &(0x7f0000000600)=""/27, 0x1b}, 0x80000001}, {{&(0x7f0000000640)=@can, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/138, 0x8a}, 0x3}, {{&(0x7f0000000ac0)=@hci, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000002e00)=""/75, 0x4b}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/231, 0xe7}], 0x4, &(0x7f0000000e80)=""/82, 0x52}}, {{&(0x7f0000000f00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/156, 0x9c}, {&(0x7f0000001040)=""/161, 0xa1}, {&(0x7f0000001100)=""/148, 0x94}, {&(0x7f00000011c0)=""/61, 0x3d}, {&(0x7f0000001200)=""/185, 0xb9}, {&(0x7f0000001380)=""/220, 0xdc}], 0x6, &(0x7f0000001480)=""/45, 0x2d}, 0x66ebf665}, {{&(0x7f00000014c0)=@nfc, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/134, 0x86}], 0x1, &(0x7f0000001640)=""/20, 0x14}, 0x3}, {{&(0x7f0000001680)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/178, 0xb2}, {&(0x7f00000017c0)=""/172, 0xac}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/12, 0xc}], 0x5}, 0x6}, {{&(0x7f0000001a40)=@x25, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/251, 0xfb}], 0x1, &(0x7f0000003e80)=""/4096, 0x1000}, 0x9}], 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x600}, 0x0) 23:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x700}, 0x0) 23:44:18 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x2000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 730.527865][T11883] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 730.536020][T11883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:19 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x8000000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x40000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x900}, 0x0) 23:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x3000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xa00}, 0x0) 23:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xb00}, 0x0) 23:44:19 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000280)="e0bdea90ec07fbf9c62d1422e4b473ac76f39d49537bb231fba9d85757261103fc8689f1592cac53e7bab63afd40d233f809ebd9e7eda44cbd9a473e1249afd2f66fc7267d5b938e5bfd76366fd142795789276b000868e7aa78bc5ced7ea2abf3905b3d1e1da8828fe051f6922055a3363b76cb824f0aa843c599d746820cfc358e894ea083d7087357e683862d39da8f01bfe25ca264724249d1a46110a8db9ce227aa9cdf12125e2a83bd6355c990cada463cf71556a70ba4e65b6693e4d4e572807a91accd914683f3d90aea350fca67e2549c61a139ff8492e587e1f6e9557b30cbac7f68fc3ae8e65af288fe05d70fc1546de3c5a9", 0xf8}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xc00}, 0x0) 23:44:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x4000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xd00}, 0x0) 23:44:20 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc00e000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xe00}, 0x0) 23:44:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x200000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:20 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x7000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xf00}, 0x0) 23:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1100}, 0x0) [ 732.058011][T12187] validate_nla: 2 callbacks suppressed [ 732.058025][T12187] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 732.071605][T12187] __nla_validate_parse: 2 callbacks suppressed [ 732.071689][T12187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:20 executing program 5: socketpair(0x1d, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1200}, 0x0) 23:44:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:20 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x8000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x1000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 732.336981][T12242] can: request_module (can-proto-4) failed. [ 732.366941][T12242] can: request_module (can-proto-4) failed. [ 732.388904][T12236] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 732.397016][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 733.458358][ T33] device hsr_slave_0 left promiscuous mode [ 733.464470][ T33] device hsr_slave_1 left promiscuous mode [ 733.470671][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.478069][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.485529][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.492915][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.500997][ T33] device bridge_slave_1 left promiscuous mode [ 733.507136][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.515618][ T33] device bridge_slave_0 left promiscuous mode [ 733.521821][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.531311][ T33] device veth1_macvtap left promiscuous mode [ 733.537435][ T33] device veth0_macvtap left promiscuous mode [ 733.543416][ T33] device veth1_vlan left promiscuous mode [ 733.549335][ T33] device veth0_vlan left promiscuous mode [ 733.625251][ T33] team0 (unregistering): Port device team_slave_1 removed [ 733.634471][ T33] team0 (unregistering): Port device team_slave_0 removed [ 733.643682][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.655089][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.680169][ T33] bond0 (unregistering): Released all slaves [ 734.451723][T12286] chnl_net:caif_netlink_parms(): no params data found [ 734.480968][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.488116][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.495595][T12286] device bridge_slave_0 entered promiscuous mode [ 734.503843][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.510917][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.518578][T12286] device bridge_slave_1 entered promiscuous mode [ 734.533952][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.544193][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.561447][T12286] team0: Port device team_slave_0 added [ 734.567682][T12286] team0: Port device team_slave_1 added [ 734.581900][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.588870][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.614783][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.626743][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.633714][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.659596][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.680025][T12286] device hsr_slave_0 entered promiscuous mode [ 734.686551][T12286] device hsr_slave_1 entered promiscuous mode [ 734.692919][T12286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.700467][T12286] Cannot create hsr debugfs directory [ 734.726833][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.733872][T12286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.741176][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.748193][T12286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.775948][T12286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.785964][T19721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 734.794537][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.802368][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.813326][T12286] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.822662][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 734.831061][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.838202][ T1915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.849623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 734.857912][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.864914][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.880689][T12286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.891021][T12286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.903468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 734.912087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 734.920814][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 734.928978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 734.938289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 734.945941][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 734.960574][T12286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.967763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 734.975234][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 735.009377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 735.017963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 735.053555][T12286] device veth0_vlan entered promiscuous mode [ 735.059958][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 735.068000][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 735.077848][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 735.085657][ T1915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 735.095530][T12286] device veth1_vlan entered promiscuous mode [ 735.107016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 735.114943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 735.122997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 735.131402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 735.140710][T12286] device veth0_macvtap entered promiscuous mode [ 735.148598][T12286] device veth1_macvtap entered promiscuous mode [ 735.159570][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 735.170118][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.179932][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 735.190444][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.200391][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 735.210799][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.220694][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 735.231130][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.240959][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 735.251367][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.261902][T12286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.270471][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 735.280979][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.291475][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 735.301943][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.311819][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 735.322250][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.332055][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 735.342550][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.353149][T12286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.360747][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.368623][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 735.376578][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.385107][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 735.393655][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 735.402058][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:44:24 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xc08e000000000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1a75}, 0x0) 23:44:24 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001180)={'syztnl0\x00', &(0x7f0000001100)={'sit0\x00', 0x0, 0x2f, 0x6, 0x4, 0x3, 0x42, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, 0x80, 0x8000, 0x20000000, 0x7}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001600)={'veth0_to_batadv\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001640)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000001740)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)=@RTM_NEWMDB={0x138, 0x54, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x2b}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x1, 0x0, {@ip4=@rand_addr=0x64010101, 0x299658e5ac6202b6}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0xb13b, {@ip4=@dev={0xac, 0x14, 0x14, 0x3f}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc5b3}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x22040801}, 0x4c081) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f00000000c0)=0x9) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000100)={{0x1000006, 0x9}, 0x47}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f\a\x00e0\x00']) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20002) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) write$evdev(r7, &(0x7f000004d000)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x79) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0)=[r1, r1, r7], 0x3) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x10000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:24 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x2000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x2000}, 0x0) 23:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x2500}, 0x0) 23:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4800}, 0x0) 23:44:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 736.359693][T12331] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 736.367900][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4c00}, 0x0) 23:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6000}, 0x0) [ 736.489057][T12354] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 736.497282][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:25 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6800}, 0x0) 23:44:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x40000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x3000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:25 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x7, 0x8, 0x8e, 0x6, 0x1000]}, &(0x7f0000000100)=0x78) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4095, 0xfff}], 0x1}}], 0x40000f5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', r4, 0x29, 0x0, 0x1, 0x4, 0x0, @mcast1, @local, 0x700, 0x10, 0x7, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000380)={'ip_vti0\x00', r6, 0x700, 0x8, 0x3ff, 0xffffffff, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x68, 0x0, 0x81, 0x29, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x24, 0x97, 0x0, 0x5, [0x1, 0x4, 0x1, 0x1000, 0x1ff, 0x0, 0x10000, 0x4]}, @lsrr={0x83, 0x1f, 0xaf, [@remote, @loopback, @empty, @multicast1, @empty, @rand_addr=0x64010100, @loopback]}, @ssrr={0x89, 0x27, 0x14, [@multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @loopback]}, @ssrr={0x89, 0x3, 0xab}]}}}}}) 23:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6c00}, 0x0) 23:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7400}, 0x0) 23:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x751a}, 0x0) 23:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7a00}, 0x0) [ 737.260389][T12398] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 737.268538][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x34000}, 0x0) [ 737.407868][T12404] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 737.416191][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:26 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x400300}, 0x0) 23:44:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc00e0000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x4000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1000000}, 0x0) 23:44:26 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20002) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) write$evdev(r2, &(0x7f000004d000)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x79) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000280)={{0x800, 0x4d06}, 0x100, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 738.098235][T12420] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 738.106460][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x2000000}, 0x0) 23:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x3000000}, 0x0) 23:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4000000}, 0x0) 23:44:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc08e0000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 738.261538][T12438] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 738.269665][T12438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:27 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x5000000}, 0x0) 23:44:27 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x7000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xffffff7f, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6000000}, 0x0) [ 738.958672][T12465] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 738.966870][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7000000}, 0x0) 23:44:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0xec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x8000000}, 0x0) 23:44:27 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x8000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x9000000}, 0x0) [ 739.187893][T12482] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 739.196005][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:28 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xa000000}, 0x0) 23:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:28 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x10000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xb000000}, 0x0) 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xc000000}, 0x0) [ 739.896395][T12502] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 739.904628][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xd000000}, 0x0) 23:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x8ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xe000000}, 0x0) 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xf000000}, 0x0) 23:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x10000000}, 0x0) [ 740.119244][T12533] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 740.127376][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x3}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x11000000}, 0x0) 23:44:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x40000000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x12000000}, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x20000000}, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x25000000}, 0x0) 23:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 740.744377][T12588] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 740.752524][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:29 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x9d80}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x48000000}, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4c000000}, 0x0) [ 740.860142][T12607] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 740.868273][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc00e0000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x60000000}, 0x0) 23:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:29 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="10", 0x1}], 0x1}}], 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000065ec0)={{0x0, 0x1ff, 0x1, 0xc7cd, 0x1aa, 0x800, 0x5, 0x1, 0x0, 0x200, 0xf2e, 0x3, 0x8001, 0x1, 0x7}, 0x10, [0x0, 0x0]}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000066140)={{0x0, 0x7f160f38, 0x0, 0x100, 0x2, 0x3, 0x3ff, 0x7, 0x9, 0x6, 0x8000, 0x6, 0x7, 0x2, 0x7fff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000067140)={0xc01, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r7}, {0x0, r11}, {r12}], 0x7, "1b34c687a455c5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004c840)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x20, "b29d174cb9ee02"}) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x68000000}, 0x0) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6c000000}, 0x0) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x74000000}, 0x0) [ 741.602660][ C1] sd 0:0:1:0: tag#6129 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 741.612540][ C1] sd 0:0:1:0: tag#6129 CDB: opcode=0xe5 (vendor) [ 741.618899][ C1] sd 0:0:1:0: tag#6129 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 741.627960][ C1] sd 0:0:1:0: tag#6129 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 741.636998][ C1] sd 0:0:1:0: tag#6129 CDB[20]: ba [ 741.642492][ T24] audit: type=1400 audit(1636587870.085:348): avc: denied { write } for pid=12661 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 23:44:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x11d80}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x751a0000}, 0x0) 23:44:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7a000000}, 0x0) 23:44:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xc08e0000, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x9effffff}, 0x0) 23:44:30 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x7}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xefffffff}, 0x0) 23:44:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0xffffff7f, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:30 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20002) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) write$evdev(r2, &(0x7f000004d000)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x79) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x40004}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = accept4(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80, 0x80000) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'sit0\x00', r3, 0x2f, 0x7f, 0x6, 0x1, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x7c2, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', r6, 0x29, 0x40, 0x1f, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8000, 0x20, 0x1000, 0x8}}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x453, 0x218, 0x70bd26, 0x25dfdbfd, "81ba61a654811ae44682214cb6ee5b56216cb16ee6ec8967767af0455208092c5653bb6c9c90b378a0ea8cce7c32d1c872dc", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000500)={0x3c, @empty, 0x4e23, 0x1, 'sed\x00', 0x859ac2789f29f28a, 0x10000, 0x50}, 0x2c) 23:44:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 742.467970][T12717] validate_nla: 3 callbacks suppressed [ 742.467983][T12717] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 742.481537][T12717] __nla_validate_parse: 3 callbacks suppressed [ 742.481565][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:31 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x12c40}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xffffff7f}, 0x0) 23:44:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xffffff9e}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xffffffef}, 0x0) 23:44:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0xec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 742.669174][T12747] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 742.677293][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:31 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xfffffff0}, 0x0) 23:44:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, 0x0, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x40030000000000}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x100000000000000}, 0x0) 23:44:31 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$tipc(r2, &(0x7f0000000840)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000280)="9046ae0b856c30994ec9e4bd1c274a931615f4ae3033935612302a77d44b5751143f0c8a114c0a25f734712940aacaa1bea919329610f7cc732eb9b0e216aab5085fabc47b498abe20f7af1fcdfecc89f4b09497a7c4aa57f0add16526db779c03495cdc4697e34fd2c290a4bbe0c44766036abc74257b10a2f4517dcf24a5bfa6c9535301aa5a6b3ee0f2910e75b28c16da2d84ab28682096a54cf46343f7f5bc06e50d680910b3ad56b407426328e754fc94fb0990665640c3a82868e4cbdf54b865993512d49a349a4e46cee843e96c984ec0f9619ee5d49883d87ac7bbb028e0de0d9dc4e4bf1b", 0xe9}, {&(0x7f0000000100)="aafc51b8157ffd8accde0967d3661e8a1e0bc3", 0x13}, {&(0x7f0000000180)="6c1478b7b0af33188f89a414b999ff07870a9a769291541d1f7dceebcb36052bd3f5401630f0a035edbfc5f7c53c6f0d9d8ed4f5c78a469f2fa44da3c1bdc904e8157f629dfd40f9f1ec75abe0253171b1c3d0b2", 0x54}, {&(0x7f0000000380)="fa328fba6630465bae1ccda692661321496e8f5f7f04a6e39482e7b4b13eee11002fb667830b7cafe9fd20ea6b747117ee80d020e71e6daa908f98ce94223674240b8014281d53b95cfec4ea45a69c7def920c43b03ba34ee2a61aa5b8ae972cda660528842cca7b878b47e686945350142d54f4571aeea087b4eab97942e7fc5231aed5fd36bf1c257246ec88c6eb3c6e9b545cdcc02666c854443d", 0x9c}, {&(0x7f0000000440)="db2b93773a914bfc0b66f31a816f2c032c31746afef0aab066c207e12997c99a248ed557b27d1dcfbc8c24e7ad26be80ae05f941a8e2f4c7179deff61fe5e4fcaea194a4aa8b63a1ddf5c153ee5d8715c91f5fe5f51715338c7768c510424ac79564862f269e95716be07d3630004cceb781b74fb705fa465b4f5d4d003ae879444bc143dbb6d119e6ef1e9334bed63523832a70603124ca25c91c9431e138e79fd09f62e6ca9c27cc56550ae15953432e2343d87fe1b211044df4a689949d974a4f54b9e8bb4d3fedabbfecb28808815abc7e21e6eccb93cde644ff6c6296", 0xdf}, {&(0x7f0000000540)="91fc789916c1b8f3dab69413e481c8efe44023878a4d9a49aa1d6f55a95c918962fe9753d27d2c4cd5bd4e4d26a4368f32d6da6379a0f8a062fcabe8c66cc6d459dc4ecacffe69cb5b3cf3fe32fd3472d5a43ff6668a680b4d1e494b0b921931dd730963931da8f5ab8cbb03a4ffb67bb53ea0fb437921da7f8e32f8c45a7be8aa7ef1b9a9e087f88be17dc1f27edf25ee2b43df379478f3ea17adc292a0ebd6fe", 0xa1}, {&(0x7f0000000600)="3b00712e459e64312b89ae310b863ba0f24026837ef289fb481cd55228781421eeedce0edf9bf7cedf78e091bd150ec7f0ce987e1a25bc6147f03e61b3fe3faf270dc0211b9a38efa7bee0b8dfb438ec6130d36f93739ef1771a828a73e6a4f1687b7ccb062f6be0d3ae26c871b2e39707c151478ca94ab74a59a5d470f86841db43a9", 0x83}, {&(0x7f00000006c0)="6316f1264b2495a6afd3f7215fd2677b75fde5527f9c955a5a072df52884e74882403c1680f3284d3468b970861eb614b536e62f4f6521aaa276b682afda5139a60f374801b4863950c98afae5fd3ae8feb2e37f2a49f3efd0ecf84fe014f501fe5efbf08cf052a96f9b6a10a28fdab579465b170cb57da1a861aff4209ddb983d6b4340a5e517a6682f4a539d60256583482ed9", 0x94}], 0x8, 0x0, 0x0, 0x4000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) [ 743.328065][T12806] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 743.336200][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:31 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x1ac40}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, 0x0, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x200000000000000}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x300000000000000}, 0x0) 23:44:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x400000000000000}, 0x0) 23:44:32 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x8ec0}], 0x1}}], 0x2, 0x2100, 0x0) [ 743.548100][T12832] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 743.556268][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:32 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x10}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x500000000000000}, 0x0) 23:44:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, 0x0, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x600000000000000}, 0x0) 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x700000000000000}, 0x0) 23:44:32 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x46048180}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x3ed, 0x400, 0x70bd27, 0x25dfdbfd, "9a9dadfad318c8bb8d4499603811a3c8737fc62b587d7fbed418a6516e029efa787de8adefd91a", ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x4002) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000440)={0x0, 0x584521e53f783848, &(0x7f00000002c0)={0x0}}, 0x4c010) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/160, 0xa0}, 0x80}], 0x1, 0x0, &(0x7f0000000400)={0x0, 0x3938700}) [ 744.198754][T12849] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 744.206834][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x1bb00}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x800000000000000}, 0x0) 23:44:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x900000000000000}, 0x0) 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 744.408116][T12873] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 744.416210][T12873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xb00000000000000}, 0x0) 23:44:33 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x300}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x9d80}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xc00000000000000}, 0x0) 23:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xd00000000000000}, 0x0) [ 745.058171][T12937] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 745.066396][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:33 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x8) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1, 0x0, 0xfffffffffffffdbc}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x23b00}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xe00000000000000}, 0x0) 23:44:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xf00000000000000}, 0x0) 23:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1000000000000000}, 0x0) 23:44:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1100000000000000}, 0x0) [ 745.267934][T12951] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 745.276013][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 745.832702][T12930] ================================================================== [ 745.840892][T12930] BUG: KCSAN: data-race in fasync_remove_entry / kill_fasync [ 745.848533][T12930] [ 745.850915][T12930] write to 0xffff8881394be398 of 8 bytes by task 12938 on cpu 0: [ 745.858600][T12930] fasync_remove_entry+0xd5/0x140 [ 745.863623][T12930] fasync_helper+0x92/0xc0 [ 745.868016][T12930] sock_fasync+0x5c/0xc0 [ 745.872237][T12930] __fput+0x4dd/0x520 [ 745.876194][T12930] ____fput+0x11/0x20 [ 745.880151][T12930] task_work_run+0x8e/0x110 [ 745.884628][T12930] exit_to_user_mode_prepare+0x160/0x190 [ 745.890254][T12930] syscall_exit_to_user_mode+0x20/0x40 [ 745.895710][T12930] do_syscall_64+0x50/0xd0 [ 745.900116][T12930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 745.905991][T12930] [ 745.908290][T12930] read to 0xffff8881394be398 of 8 bytes by task 12930 on cpu 1: [ 745.915904][T12930] kill_fasync+0x20/0x160 [ 745.920224][T12930] sock_wake_async+0xea/0x100 [ 745.924887][T12930] unix_release_sock+0x36c/0x680 [ 745.929811][T12930] unix_release+0x4e/0x70 [ 745.934120][T12930] sock_close+0x6c/0x150 [ 745.938350][T12930] __fput+0x295/0x520 [ 745.942336][T12930] ____fput+0x11/0x20 [ 745.946311][T12930] task_work_run+0x8e/0x110 [ 745.950792][T12930] exit_to_user_mode_prepare+0x160/0x190 [ 745.956423][T12930] syscall_exit_to_user_mode+0x20/0x40 [ 745.961869][T12930] do_syscall_64+0x50/0xd0 [ 745.966283][T12930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 745.972163][T12930] [ 745.974463][T12930] value changed: 0xffff888108a96930 -> 0x0000000000000000 23:44:34 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x700}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x1200000000000000}, 0x0) 23:44:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x11d80}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x249c0}], 0x1}}], 0x2, 0x2100, 0x0) [ 745.981541][T12930] [ 745.983840][T12930] Reported by Kernel Concurrency Sanitizer on: [ 745.989997][T12930] CPU: 1 PID: 12930 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 745.998384][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.008425][T12930] ================================================================== 23:44:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x2000000000000000}, 0x0) 23:44:34 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20002) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) write$evdev(r2, &(0x7f000004d000)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x79) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x2500000000000000}, 0x0) 23:44:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4800000000000000}, 0x0) 23:44:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x4c00000000000000}, 0x0) [ 746.119027][T12972] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 746.127137][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 746.227865][T13001] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 746.235942][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:35 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xec0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6800000000000000}, 0x0) 23:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x2c9c0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x12c40}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 23:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7400000000000000}, 0x0) 23:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:35 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000c1a94ceb4b152bc2e74ff4543922d60a1d3e08c76e81ecd5cb8d8b25207777efbc99c5c65a6107ab01b29f1c12f873fe630cff9d3cd0d8a94f1331e08ededba46ea9278606f4b826fd4a3e20249c96cb178b4249195f4e3bab5e6069019ad995369549dc878d7cbbf482bf9fdc593d434cfaac49670d9d9ffe5adba7dea59ed7128747f6aa0600dcb45652e9e885c2ff267b893253a45f640119a6510cb93af3de6e689116c8630d38779835ac5579fd37d278cdd69a9630f183e7f0adb47ff704da5a361061e61eff3327aae717f21e7807", @ANYRES16=r3, @ANYBLOB="01000010aa2f189f40c3b38b8d0417ae069594000000000000000a00000004000480"], 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x198, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf50}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xedd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x210c}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "41fad41f6e61d4d1b8b606485dbb325a62028f22cf4cf5ca601682986fa3346936"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r4) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000680)={0x16, 0x98, 0xfa00, {&(0x7f0000000640)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x7ff, {"63cadf7ee185c15db9694b96f02b153a"}, 0xffffffffffff4a41, 0x401, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000740)={0x11, 0x10, 0xfa00, {&(0x7f0000000600), r7}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x751a000000000000}, 0x0) 23:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 23:44:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x8000000000000000}, 0x0) 23:44:36 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x2000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 23:44:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:36 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x2d880}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x1ac40}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 23:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 23:44:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:36 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000004c0)=""/194, 0xc2}], 0x8) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 747.858060][T13056] validate_nla: 2 callbacks suppressed [ 747.858070][T13056] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 747.871616][T13056] __nla_validate_parse: 2 callbacks suppressed [ 747.871629][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 23:44:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) [ 747.982057][T13091] team0: No ports can be present during mode change [ 747.989837][T13093] team0: No ports can be present during mode change [ 747.996725][T13077] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 748.004857][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x4000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x0) 23:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x35880}], 0x1}}], 0x2, 0x2100, 0x0) [ 748.658181][T13095] team0: No ports can be present during mode change [ 748.665556][T13100] team0: No ports can be present during mode change [ 748.728055][T13097] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 748.736227][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x1bb00}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x3}, 0x0) 23:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:37 executing program 5: socketpair(0x1, 0x2, 0xffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 748.796600][T13110] team0: No ports can be present during mode change [ 748.803857][T13114] team0: No ports can be present during mode change 23:44:37 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 748.842623][T13122] team0: No ports can be present during mode change [ 748.851258][T13123] team0: No ports can be present during mode change [ 748.873689][T13127] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 748.881804][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 748.891870][T13129] team0: No ports can be present during mode change [ 748.901256][T13131] team0: No ports can be present during mode change [ 748.967956][T13134] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 748.976038][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x8ec0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6}, 0x0) 23:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x36740}], 0x1}}], 0x2, 0x2100, 0x0) [ 749.511052][T13140] team0: No ports can be present during mode change [ 749.522634][T13144] team0: No ports can be present during mode change [ 749.591664][T13150] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 749.599786][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x23b00}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x7}, 0x0) 23:44:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 749.704677][T13154] team0: No ports can be present during mode change [ 749.715440][T13160] team0: No ports can be present during mode change [ 749.741267][T13163] team0: No ports can be present during mode change 23:44:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9}, 0x0) 23:44:38 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20002) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) write$evdev(r3, &(0x7f000004d000)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x79) splice(r2, &(0x7f0000000100)=0x400, r3, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x8001}}, './file0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r12, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) [ 749.749103][T13165] team0: No ports can be present during mode change [ 749.759435][T13157] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 749.767628][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 749.790530][T13170] team0: No ports can be present during mode change 23:44:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 749.800398][T13172] team0: No ports can be present during mode change [ 749.828624][T13178] team0: No ports can be present during mode change [ 749.836056][T13179] team0: No ports can be present during mode change [ 749.867684][T13174] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 749.875774][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc00e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xb}, 0x0) 23:44:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x3e740}], 0x1}}], 0x2, 0x2100, 0x0) [ 750.377959][T13182] team0: No ports can be present during mode change [ 750.385322][T13186] team0: No ports can be present during mode change [ 750.447913][T13187] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 750.456005][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:44:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x249c0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc}, 0x0) 23:44:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xd}, 0x0) [ 750.617517][T13198] team0: No ports can be present during mode change [ 750.625051][T13203] team0: No ports can be present during mode change [ 750.650862][T13206] team0: No ports can be present during mode change [ 750.658406][T13208] team0: No ports can be present during mode change 23:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xe}, 0x0) 23:44:39 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880), 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 750.668971][T13197] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 750.677064][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 750.699939][T13211] team0: No ports can be present during mode change [ 750.708511][T13212] team0: No ports can be present during mode change [ 750.741961][T13220] team0: No ports can be present during mode change [ 750.750010][T13221] team0: No ports can be present during mode change 23:44:39 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0xc08e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23:44:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:39 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x3f600}], 0x1}}], 0x2, 0x2100, 0x0) [ 751.235276][T13226] team0: No ports can be present during mode change [ 751.250004][T13229] team0: No ports can be present during mode change 23:44:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x2c9c0}], 0x1}}], 0x2, 0x2100, 0x0) 23:44:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) 23:44:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x12}, 0x0) 23:44:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x25}, 0x0) [ 751.524424][T13238] team0: No ports can be present during mode change [ 751.531911][T13244] team0: No ports can be present during mode change [ 751.559574][T13248] team0: No ports can be present during mode change [ 751.566819][T13249] team0: No ports can be present during mode change 23:44:40 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x6a53, 0x1, 0x7, 0x5, 0x4}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 23:44:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x448}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210900000000000000000100000008000100", @ANYRES32=r13, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000500000000fefffdff0023000000090003000500000019000400686173685f746f5f706f62745f6d617070696e670000000071c088527110eaf830f89f5935"], 0x6c}}, 0x0) 23:44:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48}, 0x0) [ 751.596624][T13252] team0: No ports can be present during mode change [ 751.604652][T13254] team0: No ports can be present during mode change [ 751.642674][T13261] team0: No ports can be present during mode change [ 751.650152][T13263] team0: No ports can be present during mode change 23:44:40 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x20001290}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x40000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) 23:44:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001980)={0x60, r1, 0x921, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 23:44:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x102) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40083, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x849, 0x0, @loopback, @private1, 0x7800, 0x8000, 0xfffffffe, 0x1}}) recvmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/65, 0x41}], 0x4}, 0x43) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x7, 0x4, 0x2, 0x3f, 0x1c, 0x68, 0x0, 0x3f, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0x5, "bfe1e0"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x17) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000c00)={0x448, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0xffffffffffffffbb, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3682}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}},