0x50}}, 0x0) [ 657.089797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:06:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getpeername$llc(0xffffffffffffffff, &(0x7f0000000740)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000780)=0x10) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x6, &(0x7f0000000640)=[{&(0x7f00000002c0)="3a39c94b008f7a01768e096fc4da4938d658418e7fdeee19c3d86402f77b0ea3d962d0001ff4ba7aa549b7a3d343ed41e28ac18df3116bb9e12a42930618a758bad40e2e1eb2749b1c5f53b62f507f9fe2328775721bc6c6", 0x58, 0x3}, {&(0x7f0000000340)="6050c5168e962375901bd72252945438187fc2746734c1ec12465cf37c577bbe1587aece5145def3e20054736a28ecaae6b08463eaf7c87e372423d58dd9a6301bbf7e7d29523f7f44fa0f1e6a6046eb7df55d7b9ebcc61e497abef22a6f1c3cacff76d05fb729dbc30a01c6ceecf11ce9222d6e3b912a44779fd0499fd046544dc637969d49046ed5d475349f4ead30fff748ba520106b0815bc8365057b74cc7335978fcd193e83dd07bdbed0d8dfadc48c1f66b704b394197d143a37bc6dff82219e0c24648fd7c22bf80e00a3ba758bc6c020c9b659747eb2413c581d0c889cd3469823f8b08c49827b44a69e20cf782be1ce795792319b91e96b898", 0xfe, 0x7}, {&(0x7f0000000440)="c4a018945dbd699bbd2a49b1ab52ef6396664c", 0x13, 0x8}, {&(0x7f0000000480)="515cc0f794da820463218a006187e5bd62ebf271368793880b9197f3a9a26634adae1bb7061cf2074a53f63f8a013807c65798e9c12b5274fba4", 0x3a, 0xa750}, {&(0x7f00000004c0)="90104fc1eee6ecbc6b58ad3a31a9103bc66b51f3589e93edb98bd6e7f44d7ee6d582dddd45d7226b855125f094757799f409a96329174afb9d6f873dd61bebe9756c31f650f188242a5195b95a8a42f494c6f5474a426211293a0a4c72a951e91ef459f5b4d7f25557ac558779987196562662910f408124847089767c6d89b914c62fe6f4fb0fc78eafe45fc42d51b008ae8eae61faca1fe136913b47304c0a1d76107b9aa8c38d5a93e22bb0078776f9f2b2b9dc6cc1bf6017ccce22137b530f5750e0f2ce1c43863df17c33e6818588ecedbe444ccd9367a0", 0xda, 0x3}, {&(0x7f00000005c0)="39082327f0eba9d8f3e6d490e0a32c7837b8ce385c2c662ffb3667171dae77584fc705167beb949d0fe44eb504a2430f51fd61074ada6813e716c2c1e0786181a45f34f4ad12fd16a536bd9878b169dd9d00140168", 0x55, 0x80}], 0x11a6010, &(0x7f0000000700)={[{@noikeep='noikeep'}, {@wsync='wsync'}, {@nobarrier='nobarrier'}, {@pqnoenforce='pqnoenforce'}, {@uqnoenforce='uqnoenforce'}, {@gquota='gquota'}, {@wsync='wsync'}]}) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r7, 0x4143, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="735108b5d87a34a7ce63c09f202a0e5ba678544ac140f7515279be1e2eb68e552009a8e05ebbb032915f37e192e6a73bbafb869a15d87bc23bc5ff980dca2db3819abad68f011edcd108b7a04ad91625d720ddffaa06ff54d841d5e2b7d42efc53fc4534d8bd50a4478db9e32852d421e5c9d353c489a5f627b779654a97e1aff91dd57c4d5c75f3255e0fdf33aa0564a96053f10ade04bb901c"], 0x60}}, 0x0) 18:06:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f00000000c0)=0x9) [ 657.379827] FAULT_INJECTION: forcing a failure. [ 657.379827] name failslab, interval 1, probability 0, space 0, times 0 [ 657.471331] CPU: 0 PID: 4481 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 657.479172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.488561] Call Trace: [ 657.491170] dump_stack+0x188/0x20d [ 657.494816] should_fail.cold+0xa/0x1b [ 657.498818] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 657.503957] __should_failslab+0x115/0x180 [ 657.508208] should_failslab+0x5/0xf [ 657.511929] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 657.516619] ? lock_downgrade+0x740/0x740 [ 657.520802] ? __lock_is_held+0xad/0x140 [ 657.524877] alloc_fdtable+0x7e/0x280 [ 657.528693] dup_fd+0x738/0xb30 [ 657.532023] copy_process.part.0+0x1e8e/0x7a60 [ 657.536624] ? get_pid_task+0xf4/0x190 [ 657.540523] ? proc_fail_nth_write+0x95/0x1d0 [ 657.545028] ? proc_cwd_link+0x1d0/0x1d0 [ 657.549112] ? __cleanup_sighand+0x60/0x60 [ 657.553378] ? lock_downgrade+0x740/0x740 [ 657.557547] ? vfs_write+0x2e6/0x550 [ 657.561303] _do_fork+0x22f/0xf40 [ 657.564771] ? fork_idle+0x1e0/0x1e0 [ 657.568499] ? fput+0x2b/0x190 [ 657.571705] ? ksys_write+0x1c8/0x2a0 [ 657.575520] ? __ia32_sys_read+0xb0/0xb0 [ 657.579587] ? __ia32_sys_clock_settime+0x260/0x260 [ 657.584723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 657.589494] ? trace_hardirqs_off_caller+0x55/0x210 [ 657.594530] ? do_syscall_64+0x21/0x620 [ 657.598530] do_syscall_64+0xf9/0x620 [ 657.602357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.607566] RIP: 0033:0x45c849 [ 657.610781] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.629700] RSP: 002b:00007fa2bf209c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 657.637434] RAX: ffffffffffffffda RBX: 00007fa2bf20a6d4 RCX: 000000000045c849 [ 657.644721] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.652015] RBP: 000000000076c0e0 R08: ffffffffffffffff R09: 0000000000000000 [ 657.659303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 657.666588] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000008 18:06:25 executing program 5 (fault-call:14 fault-nth:9): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x600, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000010100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB], 0x7}}, 0x0) 18:06:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10, 0x80000) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000380)={'vlan0\x00', {0x2, 0x4e22, @empty}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000140)=0x1a7c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr="bc65a5ccfd61bd190278b377273e40c2", 0x16, r5}) 18:06:25 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0xa, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) lookup_dcookie(0xffffffff80000000, &(0x7f00000002c0)=""/228, 0xe4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) [ 658.130682] FAULT_INJECTION: forcing a failure. [ 658.130682] name failslab, interval 1, probability 0, space 0, times 0 [ 658.190260] validate_nla: 12 callbacks suppressed [ 658.190269] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 658.194004] CPU: 1 PID: 4498 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 658.210321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.219683] Call Trace: [ 658.222300] dump_stack+0x188/0x20d [ 658.226344] should_fail.cold+0xa/0x1b [ 658.230254] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 658.235564] __should_failslab+0x115/0x180 [ 658.239914] should_failslab+0x5/0xf [ 658.243630] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 658.250051] ? lock_downgrade+0x740/0x740 [ 658.254195] ? __lock_is_held+0xad/0x140 [ 658.258262] alloc_fdtable+0x7e/0x280 [ 658.262171] dup_fd+0x738/0xb30 [ 658.265543] copy_process.part.0+0x1e8e/0x7a60 [ 658.270134] ? get_pid_task+0xf4/0x190 [ 658.274019] ? proc_fail_nth_write+0x95/0x1d0 [ 658.278515] ? proc_cwd_link+0x1d0/0x1d0 [ 658.282579] ? __cleanup_sighand+0x60/0x60 [ 658.287071] ? lock_downgrade+0x740/0x740 [ 658.291216] ? vfs_write+0x2e6/0x550 [ 658.294947] _do_fork+0x22f/0xf40 [ 658.298513] ? fork_idle+0x1e0/0x1e0 [ 658.302223] ? fput+0x2b/0x190 [ 658.305412] ? ksys_write+0x1c8/0x2a0 [ 658.309208] ? __ia32_sys_read+0xb0/0xb0 [ 658.313876] ? __ia32_sys_clock_settime+0x260/0x260 [ 658.318898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 658.323655] ? trace_hardirqs_off_caller+0x55/0x210 [ 658.328856] ? do_syscall_64+0x21/0x620 [ 658.333030] do_syscall_64+0xf9/0x620 [ 658.336832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.342621] RIP: 0033:0x45c849 [ 658.345824] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.365545] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 658.373376] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 658.381004] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.388293] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 658.395575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 658.402841] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000009 18:06:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x900, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000000c0)=@fragment={0x2c, 0x0, 0xb, 0x1, 0x0, 0x0, 0x65}, 0x8) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0xff74, &(0x7f0000000080)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="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", 0x1}], 0x1}}], 0x2, 0x0) 18:06:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$netrom(r3, &(0x7f00000000c0)={{0x3, @null}, [@null, @netrom, @null, @rose, @default, @default, @bcast]}, &(0x7f0000000200)=0x48) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x80280, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000000)={@remote}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) [ 658.674010] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) 18:06:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xa00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:26 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0xc, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:26 executing program 5 (fault-call:14 fault-nth:10): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r7, 0x7004) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) 18:06:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c756705c4e9d68821f1f11438ace1a11a3a773a6bb052d475cc8e31fbbf41d595dc0ce5800069c058a5d5e467a83e51972bb59354028e7952a4489e7c67a5bd1dc5b5d2597cd670ec358184eafefb972bdd9ebd4f3f49b7e79aca0c9e4e4", @ANYRES16=r2, @ANYBLOB="dd0700000000000000ffffff7f003fb95a565200abbdc265d1db3d039f9499bb5a6bbb9441362d1b42bcf3e8d1ba25ba9d6cf027e2eac8488ae8cafdc37a18d1cd65f76808033d7249a744e9c28a051e61bff5baa0fd9ed3785e485bcfc413075ef3648ba5c38e619c141afb135b63ae634d40708a1b9bf454c7d3583560617b22ad75fbda7e598866b71fc63d0a5f7c4730ad14e8887e8c245de1d32932b09cab0a59ca3c8a970cf6ad4d4437b4d583430f3314d7af99d274dcee87a1444c2685290a1ed6ad0525e46f4ce03ce8373a32865520cb99da8e9a921dc5e6be291f8b2c43a45aaef974975ea0f965e5f84b8de1ee4dbaeb09381e23aef4e4ba0445358e0f3fabe1163d4ea6ac88d72fb844512120221aa0001d7377c795cb27b9694e344f38493b9061e6ceb9db90719aeb3fa40000000000000000"], 0x3}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xcc, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 658.962586] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 659.054545] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xb00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x1) 18:06:26 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0xe, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 659.202411] FAULT_INJECTION: forcing a failure. [ 659.202411] name failslab, interval 1, probability 0, space 0, times 0 [ 659.272114] CPU: 0 PID: 4802 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 659.280289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.289659] Call Trace: [ 659.292282] dump_stack+0x188/0x20d [ 659.295947] should_fail.cold+0xa/0x1b [ 659.300328] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.305470] __should_failslab+0x115/0x180 [ 659.309845] should_failslab+0x5/0xf [ 659.313591] kmem_cache_alloc+0x29f/0x710 [ 659.317872] ? dup_fd+0x5a4/0xb30 [ 659.321343] copy_fs_struct+0x43/0x2d0 [ 659.325258] copy_process.part.0+0x37a1/0x7a60 [ 659.329864] ? get_pid_task+0xf4/0x190 [ 659.333772] ? proc_fail_nth_write+0x95/0x1d0 [ 659.338292] ? proc_cwd_link+0x1d0/0x1d0 [ 659.342383] ? __cleanup_sighand+0x60/0x60 [ 659.346664] ? lock_downgrade+0x740/0x740 [ 659.350831] ? vfs_write+0x2e6/0x550 [ 659.354572] _do_fork+0x22f/0xf40 [ 659.358052] ? fork_idle+0x1e0/0x1e0 [ 659.361777] ? fput+0x2b/0x190 [ 659.364986] ? ksys_write+0x1c8/0x2a0 [ 659.368804] ? __ia32_sys_read+0xb0/0xb0 [ 659.372966] ? __ia32_sys_clock_settime+0x260/0x260 [ 659.377992] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 659.382763] ? trace_hardirqs_off_caller+0x55/0x210 [ 659.387793] ? do_syscall_64+0x21/0x620 [ 659.391784] do_syscall_64+0xf9/0x620 [ 659.395597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.400783] RIP: 0033:0x45c849 18:06:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004400)={'team0\x00', r6}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}}, 0x0) 18:06:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r4, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 659.403983] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.423591] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 659.432620] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 659.439912] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.447339] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 659.454628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 659.461915] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000000a 18:06:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xc00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 659.521402] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="7db568de4f9ab61b5279daf89283fda970566719d5d29b27853dd50d315b4575b7998281a1c63b4c464ea84d38cf4b53e6f4dea3e0c77ab4d2af609be7bc1a8755033b9101e987b1c94ed52dbca53fb0e96aea51091a4c388f64eba6468dcef623f71def2d83bcd4c78c4f0d7cec0fe9292ca3a183a270a9e4510e22d593ce360e0b465da43dfcd2deac943de59e038b6d26d728d3de4e97f5b556113800f854ab0163f69d5857d0b0489ff042c6483fb1af0220d8e00b97b36bcf52ae788fbfe4"], 0x60}}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x408400, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x280, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000002c0)={0x35, 0x9, 0x1, 'queue0\x00'}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) linkat(r6, &(0x7f0000000100)='./file0\x00', r8, &(0x7f0000000240)='./file0\x00', 0x1400) [ 659.600922] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001600000100f2eb0000000000000008000000"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept$packet(r8, &(0x7f0000002f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002f80)=0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x2, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000040)="0b450146c11f0f06b5bbb41f82802aa1f8c703fbe8dc0c022cade4444199a10bced7cb772baacacaba2aace66bbe11631165d140aa270bfd8ae494ff3c76e886fa1a0734b7dc5e1e6f52d6c363335182ab9b896b7add6f04c18adb07bb7ae19cdba1baa130e09342b457a7900afef04ef2500a1cea62e4d3306ff75a4e25f28e232bf8af8e403137d4944236780039bf6a806c847caf410228fe40f3c51b34079973d812", 0xa4}, {&(0x7f0000000100)="de081ba2024b3f6b151ad8adbf99a36b0b6f4645", 0x14}, {&(0x7f0000000140)="18b5c43721f11fe413c8976b5bf76688ceb85c915ddcdeee94a9c6f9bf0cf6290107c0ab0d2da06c34c569236659654782d74c2f64f1439f12d9630db1537cc8e31e4a90ac2318b1191563e2ccc526a7444c2530096a819bd9f9", 0x5a}, {&(0x7f00000001c0)="5fa7e006fdf22f5c1b64cf44912493b97280a1bd1f94dbb340d8944901991073de0120d34bc21b2df9", 0x29}, {&(0x7f0000000200)="127f1cfc9a2b4c710c5b450949e15ceb683a46daa52bb476fb23018563599eb5af605742a0b22006989c98ae379d611ed8700e673cd8099d0ecf5a8a654dcb94e910d03e878393622574772bda5c568066115cbea476a15525efc267f6907a7dbbedfba25d6a4ce81e6009be078b56b0d08cae8aba0f5a0d6094dbba5880388d2524d81e0cd306a9c80552144cdb07cee769aa6da99b289ab70d10b5f049bc378b6ab911c1718192484588b54d6cef38d121bb2699abcbc81eeb49143048bbf709af53257467469ee2b38d7e9cee94f98de1bf1ef1599d2996d6bac008da", 0xde}, {&(0x7f0000000300)="2648d86ccd195cb033f940a8eb8f476192d5457c743c32eddd05e44e16ae0e190db48426ca384d72a4fdca28b2ed7294977a42730403f17c525d8ccb69f063a024ee655c2556556fc226fd6d3f66a0e15c459c833a532cd5706810dae2672bd8031df5d3faea6cae74a19b358c58c91fcea5d07bfd6c1a5d3f7cabe3b7bb75f0b9e81f22d8c72401c1782de2d4007f3e46c8025dd74be8c4bf1baaefe71e986427343e94b8ffa9ffb09ef8a4bb650cbe941b326c32c594cdf4fd02a28d0d3fa37cabe1e6a9d5e804387a9431a08abf5f89aaadd6dda5892b", 0xd8}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="ceb3cc37d69522c177fd5f3880f06baccdef5c87680a3e0a6a98146eea4c5b143d2fe89d7e707514a43ee76b3ea24204ed847e7d8ae406349864f69d1de879b9d1b76ac22dc6556e45049cc594f42f697be5b8628d08f9e81712931009980212a27b1ef1c06d87438eb36347703e71ba264595f3b448d3a33c7eb3903f772ed7e4edf5650abb6e4db14944eb3b3619c44e9ed6a0e5dcca63f870dbe978886888f7c57b192b7ad8506bd1a20b04520c48a266e5bc667bf229e25e03d4323223587b5d8d06b0b798abd89ec48613c15b1922910c88099a6d194a236220e7a416f705df7508e52b4be47e2ac3396fc79e45b0fbeaf1c5f93f", 0xf7}, {&(0x7f0000001500)="e57ed3517b99f3ed8d7c30f5fac8e5db69a936f9744d157a4621f41a5defdd4ef7424bbe21abe090a901c6dfca28c70800bfdd393d36d6b64940e4b01b595ff6c486dcd856740a36fe464044b6aa27775dca7485b6abf4d4278bf65dd43c973bf4acaac19e24dff0d3b83e11e357d3c5d270f5fb61970c70c406ee65afc6678b564bf5116aed957aadef30d4425ad66276767576f495240eb76cc60a6e5125a076351a55d06693edd191621fc5208bd6c6e5b6ac650d006c24ecee891df33824bd0c67a9d72f3ca461c61b705c70279c4c11646bf1fd5b5516dcf24d45cc", 0xde}], 0x9, &(0x7f0000001840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x108, 0x0, 0x7, {[@cipso={0x86, 0xd, 0x7, [{0x4, 0x7, "296ce663cb"}]}, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0xf, [{@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7}, {@multicast2, 0x1f}, {@empty, 0x8}]}, @rr={0x7, 0x27, 0x93, [@broadcast, @rand_addr=0x6, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp_addr={0x44, 0x34, 0x46, 0x1, 0x9, [{@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x10001}, {@rand_addr=0x3, 0x80}, {@empty, 0x7}, {@empty, 0xbb}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8}]}, @timestamp_prespec={0x44, 0x4c, 0x5f, 0x3, 0x0, [{@multicast2, 0x1}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x40, 0x0}}, {@rand_addr=0x6, 0x9}, {@rand_addr=0x6, 0x40}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xfff}, {@empty, 0x200}, {@remote, 0x40}]}, @timestamp={0x44, 0x20, 0x79, 0x0, 0xf, [0x9, 0xd4, 0x7, 0x9, 0x8001, 0xe33e, 0x6]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xef}}], 0x138}}, {{&(0x7f00000016c0)={0x2, 0x4e20, @rand_addr=0x3ff}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001700)="c842075711ef4a6d10ccc86f9e3c1f048e707db2dba3058fdcca", 0x1a}, {&(0x7f0000001980)="784d254c4b093d3437fde6613fb6c6f87722c0c9ea5049eafa6551a2037d2767e5a3bd822b06b2c0978c3fff983e751c3292a73082efe4b33af1257dfa505aea25408826f2a1b47ad50df74554dbf7494dc1bac48afd76a90e64863f94df4a1fb7d73464100bbf0ae26fd9e2ae3d956f11e092a6050d4c1ad6004ade6aeed6240f64160c5cb058cbf1193ebfcbd07f32a9fb8faf62b2bdce209211b40e3b28e9c6632c3094d07ba8b4aadb112085bf74b737ac069dc7868dd6bdb8a3cb1f04586980fccbddbbd56eadedf2", 0xcb}, {&(0x7f0000001a80)="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", 0x1000}], 0x3, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x7ff}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x8, [0xdb, 0x2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xf2, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x8}]}, @cipso={0x86, 0x12, 0x2, [{0x5, 0xc, "68d9e17f07b9e263119b"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @rand_addr=0x7f}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x2092fc99, @loopback}}}], 0xf8}}, {{&(0x7f0000003100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003280)=[{&(0x7f0000003140)="ef3deb0fc34d6c7f841b8d830fbf5384ab494ae451773979d20b2aa6e3ac8850bb202718f84b7cf528b69bbfc766b631a242fa473c711ca67dacf85fad3b2601d25fd5b9049b2fbf3b5fb609cab2b1f95dd9166929d63eec10b895582bcf912f0828a90160894a5c7f35358796c5bf7d2dbda7a1ba1a3b9011b2dbdcd0f617765fe8af0c2c54aa", 0x87}, {&(0x7f0000003200)="fdaa278b08fd7bedc6c468854370253856add98881", 0x15}, {&(0x7f0000003240)="a175aaa0d3d01107de83a5d5979c18c56477e7f8871411d4ae9099715a50a2b33d4567502af6b16397c89b0542cc875ca3e0d37c805b6baf21", 0x39}], 0x3, &(0x7f0000003400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x9}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x2, [{@loopback}]}, @lsrr={0x83, 0xf, 0xfc, [@loopback, @initdev={0xac, 0x1e, 0xff, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}], 0xd0}}, {{&(0x7f0000003500)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000038c0)=[{&(0x7f0000003540)="4ed2d022b3abfdcf75468d3a5df0c7433d5f8b94f7be695a7217f0ae8ddbe61d40779fa331b8ea19eb47734a610103093594b31f38ea3eeef5bfd5d9f3675f84f5f833bb0fd1ca7cb5e7f826d9a9df4cc49c0681f672a0086d4dc1e89c0be9785edc30b9b0e30965b770261aa8ec4fa7e4b31e6a3339524e7d0db005de0703d14e4db78f70a6f8a215b8a7bbcafe89e7f9ea72f9e3e0102b428cbf9c6428f0b94c0e7b6c4f62f9b0a1b68e66a068ff690cba6c2da586c9e5ffca265879310120d99e647b09e336ca75b9cec5018d25d33fc5330edf5e335f420ef4b40a8a0a73145ae505abedaa952f63d1c7feb9119513ea31fb", 0xf4}, {&(0x7f0000003640)="480320ca175bf91aab3e0fa4127e968e83af1cc7406178877d25535d20e0064e8c97c001cc193bdbf9461901ee79396c01e1a5b7fbd4ce46cc9b3ab52d44d67793e8436e7fc221db", 0x48}, {&(0x7f00000036c0)="7db4feb73fc916b108240fdf193751ca12af4baf62f2e0608cb04da1523911c0b9c7182e07ed560a42cd6a271b1a9314fdef5b703df156641fd9c46b12accb3f077ee497ec7f619c5e503ca717e8678d00815b04a379abb659d95c6f728ed3a1cc65b5da48447f06a8e21cc2a1a7ee1facc79ef771fe7f3c5df7aed7c82b12c45c0a9f2f3d8ce54cb680451d712e7d76f77fb3ab1f9b9058ef8d32d8e63740258d5e6f20f10f8d94606bb8919830282ae8852e047e57a1c335170ba1fec70ff03d", 0xc1}, {&(0x7f00000037c0)="0d5409bf74e605573b7ed2666e613adf1f2a56bad931aa1d390b5b68c7dc2869abbe62bad4fb08ea6577fc913af83f991d888a56e44947f5951bd8bbbec515d6be137232ebfd1ef2204e489ff1c0d59668303f8e42a9706fd4680921edc65a487fd8396d9ae9a114e58f999d54b18582887a0446b8cfa851455b9133b82ea846892838c9af81dac87448407f5f40682285e23f377551b79c2c0ce19b490f5226815861a4dd33833bbb372ad923c3d856e3b59140ef45ed063b00831ed95daba75d296ea55606e3fe7faddf312e9043f27dba999651", 0xd5}], 0x4, &(0x7f0000003900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20000ad6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0xb}}}}], 0xd0}}], 0x4, 0x4000000) 18:06:27 executing program 5 (fault-call:14 fault-nth:11): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:27 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0xf, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 659.796133] Unknown ioctl -1064545483 18:06:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xe00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x3) r8 = fcntl$dupfd(r7, 0x0, r6) read$rfkill(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) 18:06:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x40000) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000200)={0xd7, "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"}) [ 659.887333] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 660.006455] FAULT_INJECTION: forcing a failure. [ 660.006455] name failslab, interval 1, probability 0, space 0, times 0 [ 660.023170] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 660.038145] CPU: 1 PID: 5146 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 660.045997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:06:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xf00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 660.055372] Call Trace: [ 660.058089] dump_stack+0x188/0x20d [ 660.061744] should_fail.cold+0xa/0x1b [ 660.065660] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.070910] __should_failslab+0x115/0x180 [ 660.075166] should_failslab+0x5/0xf [ 660.078921] kmem_cache_alloc_node_trace+0x272/0x750 [ 660.084043] ? alloc_fdtable+0x7e/0x280 [ 660.088179] ? rcu_read_lock_sched_held+0x10a/0x130 [ 660.093215] __kmalloc_node+0x38/0x70 [ 660.097034] kvmalloc_node+0x61/0xf0 [ 660.100772] alloc_fdtable+0xcd/0x280 [ 660.104800] dup_fd+0x738/0xb30 [ 660.108130] copy_process.part.0+0x1e8e/0x7a60 [ 660.112741] ? get_pid_task+0xf4/0x190 [ 660.116655] ? proc_fail_nth_write+0x95/0x1d0 [ 660.121171] ? proc_cwd_link+0x1d0/0x1d0 [ 660.125384] ? __cleanup_sighand+0x60/0x60 [ 660.129641] ? lock_downgrade+0x740/0x740 [ 660.133809] ? vfs_write+0x2e6/0x550 [ 660.137590] _do_fork+0x22f/0xf40 [ 660.141761] ? fork_idle+0x1e0/0x1e0 [ 660.145500] ? fput+0x2b/0x190 [ 660.148709] ? ksys_write+0x1c8/0x2a0 [ 660.152527] ? __ia32_sys_read+0xb0/0xb0 [ 660.156607] ? __ia32_sys_clock_settime+0x260/0x260 [ 660.161802] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.166579] ? trace_hardirqs_off_caller+0x55/0x210 [ 660.171627] ? do_syscall_64+0x21/0x620 [ 660.175630] do_syscall_64+0xf9/0x620 [ 660.179644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.184846] RIP: 0033:0x45c849 18:06:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x58) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 660.188128] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.207752] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 660.215656] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 660.223063] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.230437] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 660.237909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 660.245461] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000000b 18:06:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="0600000000000000240001007072696f72697479000000000000000000040000000000000000000000000000050003000e000000080004000000000008000600908c031003eb39f1d2d3076433a0b369f6b96e5ea0331d225f", @ANYRES32=r7, @ANYBLOB="a307228e6c6a3392b3538082ed9bd566f4fbf96f07a7a1511b7115afd0b7ff4e45bd775bc7d3437d408c23cb38555eaa754b12f07a8389395d0c32a31c070f89bab64dc183844eee32533fca19a87f055b7c843b7312a552bd2da3b29b57ba518458eb7d79e9929ffbdfc6c4542910055f5388a78d931edd8069a5d0305b6aa482a6a38564907358fe85c1caf414a0b5b7c1e6675964909d9afffef88e148088855e1c7ce119cd9f23344121c15344a6f256abbd89b1935d7b6d5b3f53212a021109d75f58a920"], 0x60}}, 0x0) 18:06:27 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x10, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x2ea, @time={0x1, 0x5}, 0x80, {0x0, 0x58}, 0x30, 0x1, 0x7}) [ 660.413072] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:06:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') chdir(&(0x7f0000000100)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479dd0000000000000000000000000000000000000000000000050003000e00000008000400040000000800060075bfcdab2aa5a87dd76b43450ccca1542b236e35d47b1f194293175c6292c0808385870c074cfdab3e81d5d7ba6746964622ca3e7b5ea303c1b988dade8a6230809f94f0f1d5d47b3d", @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x0) 18:06:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x1c00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 660.475317] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:27 executing program 5 (fault-call:14 fault-nth:12): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='transFfd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',nodevmap,obj_user=^-\'vboxnet1nodev,+,fsname=keyring,\x00']) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) 18:06:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r7, 0x4008af10, &(0x7f0000000000)={0x1, 0x81}) 18:06:27 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x2002, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x8, {0x7, 0x1f, 0x80000001, 0x1800000, 0xfffd, 0x7fff, 0x7, 0x101}}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000200)={0xffff, 0x2, 'client0\x00', 0x0, "b083f65686d20c7d", "80e8b0a07e5b93a6f9ca73fbbb345eda7dc1a53435f700a9554f4365e928893b", 0x6}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e22, @multicast2}}) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 18:06:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000642f216b7aaf56eed406a84c717d3b0d73dbfd15e963c17b65817802cb8c52aa1e18fd7c5057f55dfe2d746abba8e7e19e107cc4663f7ff8d5eef28a03a72be95344706f01d1", @ANYRES16=r8, @ANYBLOB="e5fe000000000000000002000000"], 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x18, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) [ 660.916534] FAULT_INJECTION: forcing a failure. [ 660.916534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 660.928386] CPU: 0 PID: 5450 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 660.936194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.945561] Call Trace: [ 660.948174] dump_stack+0x188/0x20d [ 660.951834] should_fail.cold+0xa/0x1b [ 660.955750] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.960878] ? rcu_read_unlock+0x12/0x60 [ 660.965017] __alloc_pages_nodemask+0x1c7/0x6a0 [ 660.969709] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 660.974739] ? rcu_read_unlock+0x12/0x60 [ 660.978818] ? lock_downgrade+0x740/0x740 [ 660.982990] ? check_preemption_disabled+0x41/0x280 [ 660.988023] cache_grow_begin+0x8e/0x8a0 [ 660.992117] kmem_cache_alloc_node_trace+0x67d/0x750 [ 660.997284] ? alloc_fdtable+0x7e/0x280 [ 661.001280] ? rcu_read_lock_sched_held+0x10a/0x130 [ 661.006321] __kmalloc_node+0x38/0x70 [ 661.010849] kvmalloc_node+0x61/0xf0 [ 661.014584] alloc_fdtable+0xcd/0x280 [ 661.018754] dup_fd+0x738/0xb30 [ 661.022072] copy_process.part.0+0x1e8e/0x7a60 [ 661.026676] ? get_pid_task+0xf4/0x190 [ 661.030580] ? proc_fail_nth_write+0x95/0x1d0 [ 661.035115] ? proc_cwd_link+0x1d0/0x1d0 [ 661.039202] ? __cleanup_sighand+0x60/0x60 [ 661.043460] ? lock_downgrade+0x740/0x740 [ 661.047661] ? vfs_write+0x2e6/0x550 [ 661.051415] _do_fork+0x22f/0xf40 [ 661.054884] ? fork_idle+0x1e0/0x1e0 [ 661.058615] ? fput+0x2b/0x190 [ 661.061849] ? ksys_write+0x1c8/0x2a0 [ 661.065665] ? __ia32_sys_read+0xb0/0xb0 [ 661.069742] ? __ia32_sys_clock_settime+0x260/0x260 [ 661.074779] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.079552] ? trace_hardirqs_off_caller+0x55/0x210 [ 661.084586] ? do_syscall_64+0x21/0x620 [ 661.088597] do_syscall_64+0xf9/0x620 [ 661.092413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.097786] RIP: 0033:0x45c849 18:06:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x5c}}, 0x0) 18:06:28 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x4c, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 661.100981] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.120157] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 661.128077] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 661.135360] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.142631] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 661.149923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 661.157192] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000000c 18:06:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd0, 0x464, 0x2, 0x70bd25, 0x25dfdbfd, "4e542f97b3707a5463b02ca0ee77fddb6d9a0a469416e49dbbe4617fa5b85f4cbebd8ab6fdb33581e6873f939d13ef106b4557c4a162ea03c44078215c5eea186deda624eec273883f00f3fba5ebd2420b4df1beeb0940d7235efdad5583d057f05a0fc8ce05361318954335cafd685ab922e352a2aff564bbb76c0976ecff8008f810f797424cb9c48f9cfd9369e5b654fb6a442b8b37542612d90d5f2fe2e766ffff2c4614f1c7e8b936f17705aaf8f409ea942a2fa9dcdd8d854107", ["", "", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 18:06:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x38e7, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r9, 0x70d21d66}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r10, @in={{0x2, 0x4e21, @multicast2}}, 0x81, 0x6}, &(0x7f0000000200)=0x90) 18:06:28 executing program 5 (fault-call:14 fault-nth:13): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x3f00, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:28 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000200)="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") r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x17, 0x7f, 0x0, 0x40, 0x7, @dev={[], 0x11}}, 0x10) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$inet(r4, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="c899366e9ed2d1a7b52b37e74cb32628a23aa23ec40c282429730c9fc86b37dff5d82a444d18ed3e1e54b2b1d516", 0x2e}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @rand_addr=0x9}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x40) 18:06:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {0x3, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x4]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x907c73ff988445d4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c005}, 0x800) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x2, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="42dded32d6d568ad5b203cc4aaba9b19cb5da2a2eeaef012308bf3814637893d671ba2e97547c2e8445e8d2988025504c71118590a36a135e2cb1540920c813e0368f3ee6761200fa1bcbe12894956bc6cb1cb8b56d0b5923b341530fa15d1448bd6e5057d7e75e8fcaf7cf8fbf38c062e5632ec797e7d96945316a71f9a62d803e0c4ab3d4fd0de444a5fbe8ee26e6c591139839cbd"], 0x60}}, 0x4) 18:06:28 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x60, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 661.747862] FAULT_INJECTION: forcing a failure. [ 661.747862] name failslab, interval 1, probability 0, space 0, times 0 [ 661.775231] CPU: 0 PID: 5680 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 661.783080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.792455] Call Trace: [ 661.795070] dump_stack+0x188/0x20d [ 661.798728] should_fail.cold+0xa/0x1b [ 661.802669] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.808244] __should_failslab+0x115/0x180 [ 661.812584] should_failslab+0x5/0xf [ 661.816313] kmem_cache_alloc+0x29f/0x710 [ 661.820484] ? do_raw_spin_unlock+0x171/0x260 [ 661.825009] ? _raw_spin_unlock+0x29/0x40 [ 661.829179] copy_process.part.0+0x1ffb/0x7a60 [ 661.834003] ? get_pid_task+0xf4/0x190 [ 661.837916] ? proc_fail_nth_write+0x95/0x1d0 [ 661.842434] ? proc_cwd_link+0x1d0/0x1d0 [ 661.846524] ? __cleanup_sighand+0x60/0x60 [ 661.850848] ? lock_downgrade+0x740/0x740 [ 661.855035] ? vfs_write+0x2e6/0x550 [ 661.858774] _do_fork+0x22f/0xf40 [ 661.862264] ? fork_idle+0x1e0/0x1e0 [ 661.865999] ? fput+0x2b/0x190 [ 661.869204] ? ksys_write+0x1c8/0x2a0 [ 661.873026] ? __ia32_sys_read+0xb0/0xb0 [ 661.877108] ? __ia32_sys_clock_settime+0x260/0x260 [ 661.882267] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.887048] ? trace_hardirqs_off_caller+0x55/0x210 [ 661.892083] ? do_syscall_64+0x21/0x620 [ 661.896073] do_syscall_64+0xf9/0x620 [ 661.899903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.905100] RIP: 0033:0x45c849 [ 661.908305] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.927215] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 661.934940] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 18:06:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000280)=0xfffffe00, 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ec9e8e559151653b0d6bc5d251fc65a29f182f8ef8252c8a9ebccb1a95173ee1b840c80514066b5e5131ba057aeb9b2cddd6864002cee9d7829717a442f107adf9e08a390a1040fb7f71076622de24dd8a9b8b2fcd97eb76f48e048e67fe46f671e939844a87ac49ee71a908484f59636f0a7f571c2a7fa09a6cc1964c8b19257d0ac2", 0x83}], 0x1, &(0x7f0000002640)=[@ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x7f, [@multicast2, @empty, @rand_addr=0x3, @empty, @loopback, @local, @broadcast, @multicast1, @multicast2]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "0bcead1d"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @local}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0xb, 0x24, [@rand_addr=0xfffff344, @dev={0xac, 0x14, 0x14, 0x3b}]}, @timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x2, [{@loopback, 0x36}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x932}, {@multicast2, 0x8}, {@remote, 0x2}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x108}}, {{&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b23aa58c53541e15f5e131f6f19075412ad827bd726e37c8db961d0d8f5a301afac1a0d03197c2adb503e4954e5a489c3d9a6444d77c6a5b5cc6dc07c0fcff8fb66b9957a41020d529b34e4757d61f6add84aae6d5c5cb26b4b35cb0e47021fa8eae8a0d3749c5c3013de014ea5558257bc60ebd72cda5cd8659d13fbfa8799297e3c1354fd97ea21950a3a23da882bc48c20d7a5b5c2c2cfd5b2abbc139498193e23833607b690270", 0xa9}, {&(0x7f0000000480)="191b87c76102ffca4c39e69f183e173d3442383647246cd999e8fd6b209f7dfcf3957e96235fa5a3cb45ceef303bc03a07a1d545cc88b37b6d23", 0x3a}, {&(0x7f00000004c0)="b2f90378573092e0"}, {&(0x7f0000000500)="975a68ad7ca277d6c2baef5d2d5f83bd7b92ea5467d5ed173f7fade7d99d43e00f2d10c2f9005a4a6291c614377d774444d37bbd9d23725df5738571e5e4a92815b105db31a2a172eadfacadd74a0629162879cffefbdf0c95b8212b195528647239275fb7e2f4174d6cdd8ac82eb565eb50b06752928ae2f1e63f0bd21045a1b27a3acc70fa1d6b4ef5669921fa37152495abc9aa10f45c6e8c3f64098c71c5c3b7d8", 0xa3}], 0x4, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="a4ac868f6c65aa13dd63c9222e4ffacaad068227ee9a187f414513383fdba6cb1356e25c0b5a924291d9adcf4f5ff2bb1011aac3cfbe778a2130a38344fbb07179637f1a6529102684ac5958e36e78d6e35af12cb7584376a7864b8067f6cf1d74a728489ffb9b4c1d495bfceeace978164889479adb4c8059499dc56fa70c0c270d", 0x82}, {&(0x7f0000000700)="5684a76c989f474605a20a5acf2c5283e6db6fba0489a67e0ba14354cc8c716c6006a63e4f3d82cbb280d721246400abfe619d3662d466bfe27cb8914f1c41e8d8e6a7c3ae0762f0eb28d323188cfe709f193c22013acd73e076387527f0d055906cc59691a333853f0f928ef00890", 0x6f}], 0x2, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0x0, [{0x1, 0xb, "b3b01c097c4eca613a"}, {0x7, 0x10, "77ac3c86438f7008c00802856ed8"}, {0x5, 0xf, "71e0dc3b2d4a193abb23719090"}, {0x7, 0xe, "6672fb1f0ddd786691bf570d"}]}, @end, @timestamp_prespec={0x44, 0xc, 0xad, 0x3, 0x9, [{@multicast2}]}, @noop, @cipso={0x86, 0x1c, 0x3, [{0x1, 0x7, "907f69c846"}, {0x5, 0xb, "cee1feef6dfd6b1273"}, {0x2, 0x2}, {0x7, 0x2}]}, @ssrr={0x89, 0xf, 0xa3, [@multicast2, @local, @multicast1]}, @generic={0x82, 0x3, 'H'}, @rr={0x7, 0xb, 0x5b, [@multicast1, @broadcast]}, @lsrr={0x83, 0x27, 0xa4, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @rand_addr=0x8, @empty, @loopback, @loopback, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x120}}, {{&(0x7f0000000900)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000940)="56370b5def036f93ad6d7a99354bf906564ffd4444e46cfd1ffe90d0bc3a691508592db61df3c4cd0f315a40ab03bc4eee007e5ce103de73517ad47187bb115d21e3203b8bed308ab9a679202cfd02564967a4fe4ab5344299844f3ce3af9a4842fcba2434cd40ef34c8ae39286e8b8be17cfac20db81b9b71b3a411a7272926fd565fe66fcbc2f21fc1b83222e0df5c8356e21f4639e63c21f012a173b2f91c84ecb55a31a4c67fd0e2d2d60a49", 0xae}, {&(0x7f0000000a00)="5520560a8f378ffd06b8ecce4c23573f16a2d449e72a848f400af0986b49ee01455c4bbd26163a42962ae8e4ab19b6ad19b72b02b77320daa7100e1f2c8a7c3f8acb7c3339964b3d4f904c3a652917de4af4cac1c6f3786eb89aafc734a0ba85785c705e9a01d030e4d04e00f42e75bfe79e19862dbd53a5e3ac9733ad2692e92b71bab48d92dd0a3132940d1ee3338663286f2c36934a38", 0x98}, {&(0x7f0000000ac0)="a50cfb20efafd428cb1204e5e227c16ff1cfe1192c2ef4a7763188c5f6df785bf094cca3c590c61b5f20eb8b0a69a0a0b0d4ab12cf70ec028316bba009491965ebee25779a6f363c219d15dc2cdae529c2b3658e28bc080d1aacabe25b2ecd8a080471502a2292163575c5b1c940e712129b606566d83bea", 0x78}, {&(0x7f0000000b40)="a9eefa75a03a4e7f6660422a623ca9c45a6313939a7002348fc076c8c57481bde51c418698e550bd8d078830f5c87161d146575975371aeefc42a568a35b7ec0f47edd9c7579c287cc128b4c3df9aa0916390354174cccbdcfcd47eee8ab4c5d3fb27b030bc0aa95201f893be7372260f8ca14bb921c0de2568e390c276a255b266acdc618b383b9da5bc4b482029efe0d96aa2c7566dfbb5258fa0dc32b3aa5b2535dc1f7bbead638682973398ce32ea8c486b0349659aad4fdf347e40e23eefbbc65a94ca36c2299124ecdcd0561890d1adebaa121fc4b475abaaac2295127ce82a6fa1127c50aaff5cdba52c34eef4567ab6ab139a24db34ce447c7e47665fa7a787a10819d2742e1619b49a3f228f25c930c1cc863757cbcc0289a2eff9be31c1b45b67b4f5eb7e5a3960efe5bbdded52ee3f94ade6c427abde361998ff031b3182e63bfcd8d865262fb7233930ebdfa37ca6bc29d1ac6e3b5609524242f985744f4ed8395bbbf142992ab0fc187a0d6dc64e7b6da604239d7b43e9eaa423ba0db22dabea68a22e05ab53f6000719875fa19007edd9b98254f8f7548f6176cc63059f4aa069a41cab46a6b5e2c0bd69623acc1ece96095200743f9664936d48b701ee3e1bceb93006fadfb72a001f92deefab66a87a0a9fd3bbdf90498acc2f5265660ae1d1d3af62fe375d42e360af64415ece009de36ddea7531834b14e525df065a450646134413ffa6e7d00170631b182ae52caff6b3ce631e5f5f92313b76f9f70beeda0febf3fc4a3743dbc7be0145086ae1de8774edb0b0baaa3d190da3b9ebfebb2f97640cd318d75f40ba729b2a40ff2032f45e8d4dd2ffb43dfcb86fd804b941037a090d189c3ee97e92abeadf64f0b7247c35dcee062dcca7a3e25c744938746868ca69cd7caf007c8992f95159f5aca3ccc749fe11be20f4ef76127092c305a9ad24718d8820510c51701b48a6c168d56788b89d15b7bc6bbd52992f6d6c8109801e5cee7a1cc64201e847033af1c4137acc0d971721cdc76bc6f307ad3a2462fb6eb1bdbf9802a6426d229cbc40696f763504f20eb07ae18a67b73bd1d6b642476050230115b2f4d86bd5149cb4efda44068bf80dc9d5cbbdd50c67bc9707c5c245809c6980e86cac0ff6181af3573535ca96b5269c5f125e6db9136dce7490d3552f3f74ffaaefa5c47854f38d4b6f7c7babd3b78e3c59bb32ecabacde26621455f9d6f1c427a79a90c48ca0672ebebf3a32a7469bd9cc9baef1a15ab44f6e091fccebed61ebab7cd1c556bf28a5b7e225adcb670ba0322fa2c15d10278333f52fc3bc31a5ccdeef26417d322fddcc8d628406b1ac50e963956409cb3b7c27ea911b64add73e5d419ab681e647ccc34357d29a8c255f01e2dc0b22c1e17be7f4d4824cf71892663c65e0f4858bd5bd874bfd2705b5af6f6d73c61646c3daaa392aa06f513abc5177ad137927ba374c624ea34a894b4b867f4989b9f659a083dbb3b4876aaecbcef8accfc3d14437b1c3fe027aa0022caa62d36557c73711912c64ad0b8a54d36908a283a5f476adaa6dbdca60c2c0148f1485cbd39af9d45fb38f7b52ba888facbdd64b1790d88e1d16e2b91835505759e31189bb978f423eaab2377ddf8977a18b9cf3fa0b3b92d6e3f6d07da6989f04b9208bb1557b583c1beef8c6a2c64c5aa4cbcd015c305a7792827c95bbe6e3c9965ffe4537743358d69a7a20459b2be2954e74c9f9835ff95dc78022927a7ee23f9e0f00b95bb0348eac244f498da1e894db2d64176e8448ae3dd2940b180d82dd4fd673b78b3582e1f8d8864857c201df88bc6dd7af984233f2c8b6270da679a411dc80e5a9c3b76bbe3c1e66508d4c6fc74cc4aabb6c1a50e84acba837753695ecb37dfdf6a6332075bbc213a2a86f18846f229730a787c73057bcbc04355dd1bfde547cabb8f50bbee1cb7575b4ecfbea9967878ad418653f87891b90534d82ca3d08af989e5162977e22981ebc0469d92aa4afeec4770940675d193e9bd50f44b061c980cc652c1236447c508745c931747e3fa1ead4b8c7c2b054df20078d917679e082926ecd8b596d5ae38d7e595aec9fad6532f2930942c1bc1f67c79187f0cf7d48f2691829b26d847d25fbb405f5ce295f1292593b788c5ae9bfd18b56383d8b9aa2797771f9043ad8f6fca81ecd08a39557c2e565ff8a3398402696439287a854d683d34f57758d666ae8135b93c2c8b16c060f3e58c944c6526f297ae90ea526a261efd33542e33b9eb29c75e03908d2b32d7f1d9dc177c31115e2de9bb6e572dbe1b2679fa8f77856ad0ae538060fb3f71b43af096a16c1fc343684a38fc1270dafcc19c6f237e65f4cf9518d0f4ce749614f65121e24c5c91ed7ce30f1dcc080f0dcb74cf1b1eda7a47893e9a4d7762b3a23f673f90490e09cca94040f7713009e6433197d38e48cdeddd9a907516f9fa95186a48fbeb23d718fe316832eefa4dca5ca86214b33c1f3638581fb0b101fd560e8a759062482de1b3fb64a49819b2e8152011a52a644639c5857956de51234fcf407b5ea1ea28d5ca764047cd6ed2e5c608645255f7bd6750b0d8b0b084d344a5372e9ef0c48aa87235c4d1d79e5fbb3348da256e5aee74a56de007d296f509ec267405bf1bd7b0172e897c43d55952658a4e5183ac4f09e9e4c72657eb40fd47b1ec7b69df1fabfe7661dafd36b63d980cd70bba30e6bfb83494d4a2e425e9817e56f29ac1df538adce8b06f31a69d70b2725c1cd34e1a347f1c82183484821337308f6e74a786356e8654f906b36f804c2e96eb87ddb8664fc8b994b2c65deecbc350d8c310ea81be2589fefc00240cfa83cad7bb6a64ab987c572f366ad1c0d27a05fe608d13714e64b7cd7764be7962d24aa8e694b1090bdf6eb345653f5430356fa73add1f513d138170054dfc056626299789cfbe848471169afc981379e2142648d260c5d65db8bd4fd72665efdc1f6661507fdaf7cf185ac2f0b3f362bc0e78b16b7393d83946a9b1fa3e7c298c6a21952ed669acf7a8b2d1cff3bfb26e2d87e59605b343026f4c73c01875f2bf0ab2e2086055552aa2ecf1cda7ba1324a11360e1337e5e491ee74ed8f3131cd59c9aac85eb96a18e6d75eb9209a8774cc9fe8d3e317c03efed63afd65fbafc1dc6a804d95555d9c5df71947acafe5026fd8aa6aecb4602af4beb3a7fbf87fa4def31c6dd82b60362a2e40e9510f6752eecd02769a8e757bab6386f3e4436468ffd98d078b806420b8bec1a71199425a8f31b58a2a33e0149f340aebd3ba870fc03c3a86518bab9f1a23a7b7aaa56564e52114d6e92cdffecc76000e8b6e4bbec06c7626808a91df61e69bf3d2d24e0556c71ae8f4223c66c73a07485e8d923846138dcf7a539295180250ad53a0dcca4db1c0bbdf4a0efed3f7611b4b5b9b816b0838f92fd56742bc31fd15704cdbd115dfb776ca0e28b2a0c7a8b5178daf2fd4a1f7e5f55e8ec4e40f18e33d2df4990eb5ba6744602b53b0ab14b44f47f22c5ae5d9adc482b60cb16454ef0d3976cd8892087247543cc3ba0cca84aa862fb2722b7cb9d5e737a9783fecf505930f641308a0396211d82fc230225b53291a8f77b09b36573dd66644cde6cf3b0577d871f6c1d780efd74d86084f2ddd0a9e0444fdea3365b197dca039803651b1a64445cec86c95f9a68df8ba1368baea750ea1939ccb7c34e666c43f6967bba87c735e20537ef7b89e782addbd113fb9687b290055833404b3f95db26f5e9c53d0958f41863ba16f6764ce3003a48c13f73e2ce6295cb7c793550f3da62b9c82fabdc4d0965e068d3b42cd902f6f7bce499dc87bf5bf747a8a1a374cf7b3f44eb9701660b7af1e33e1232e7f2fbccb00c6ba3b2707a8cede2fa6dfddc813ef4a6dd505d83e3a09f9b2dc0178a056766c656679b6b38f789da7e6f28929a4ff4cb87ac4a8398ff1bbccc997ec2c7b273660692ebdd0fff2cd2abf0620ea42f5db9de72e60837e4e177cd53c7eca4bcaebc75342f243562dde8b34449f4ffbddc20c0eddee68d7e7c5db8c9a53e17b2ed0558538613ba197f630d1bc38a46577223d64dba3093659f1b091c94a324eaa20117b4ceb27deff5cd85736ec84ceab8114f7adde8b80b71419532e679d4218236390d1c9c7d8c64c0f828875e8ad4af178dc5f41bc138996c660cb0f4b329ae740bb2a3af616e9986d9c2868840141cad4a064e264e9e2b0e151553f95554187870083a4303103b1c9fa267f2d835da7ca136cfce2e7f2dcdc039d41f9136f8bccd8de3dd16e10703b6f0efe8d11a2523e7a46312d7e9da14f47ae9a3f4132af7b8d1bbc8d2fed7f7fb0d8b0d06aa91bcf6e1ee825145f1e20db6b1ad43a8ae808f7cc080d480004242d39916dd88540b950e64a648aaa69a246410f24fa810d757f3959a83ebf1f6e53cb8749e60e3e35698dd89b9eb37026f202de93f88e92b1b51476da61743057f45eb0196d5421f882710dc3a7ced6a95f5f861a61d9498558f59711f0324ff1b98caf9deff3bf67a85e99365dd16dda073d9bdda298c0ff1970fc0d39486ffc8a9f347706da165a9edb7eb8eece88109779e67ac3bba945fda1ba6699ee95aa3e04c49d31a9111c16410ae0d1a16a15972b2924b99754e5f7fa965999ae8631ec40446c95956a4890a9749cd8fc4bb309ff3d6d08e0ecef06f63bf0a1f927bb8794a64e348fec1f92eed36bac63cfa3ae30086c9b6a6fd60b962691f3f38fc4ffb9342ec484f7be0dd00b431641b3e125a6dae7e445eaa732069ad9dd28515094d06bb423473a873a2873e999f98be80640f702711d6fa763275dd78e6bdd302c12ed2189d42b79e01598f52879f105947229fbe4591b753a74b463f085590beefeaf81f723e55762475d6ff8b50edb8c0d6d2accbf4944a00a9a3bce54023e963fe10055c5d524dbbc7933672bf800c5d5d1832126ec91a78a025db84aa7df4784fdb42544cfa1f3dc2c3b1eae07e8d8a5a207b6540da2eedf09e2a61eb0ec9d0d14d66eab0f314539b7a9e23074e6fcfc8b76067cd62573ca9f8b857069e8db71833fafd3b48c54e95a25d352da7910c729fb90bb16eda3361e056e5e2ccac92d5d8bc94235834207780d84d0d0926241b2479e4f50d09c4ba27a54877c22f02334ec89368364ed643418777e7799fe2f0face6d3c2c8a3f6b6a2d719783bc1b61061ac8cecdec64c4d7237ac8cb99c47e727ab71dc2346e823e1f52c9d1e3f25e0018124126b5c85d93f0e5927a04dfd22a90305996590bcef9c2e182462a6135654390af5b3d278a638ee3f7af44074d3da8ee7768a395296daa79783ec5e75ef3fd7431f6e03b44daa2b8ff3063ecd9f5e8e6fca28978bed1c6d6ea0c075874291fb76bcb601881667b413f8b82939ebb76f2eab28a14246f0f1512cff85317392511cd77500f1838d5a0e800161c1ec47fa5818b22e0e50f41369fc187dd5645aa5a1d72c2ead16f0a6d974c3f6f35217221e282d7dd96012bc0a01bcd2a7ad47dd0898e17a10e77a76a03a86212e913dcc75268a5a2955d6129f39ff2da47e433cd3f355b676626305a7bc276cc922accc1c63f874eddd4165c6718c72d076acaca32feaf3512c3a22a80ec2c5190cc4466bcc4572f65fb66760aabc70b8b146f13d8cd38d04a68995b9002aa29e16c771a9b259da2f5034a3cc70a7072d965caeba61569fd247bf54999d175f8771d398f2b959e3b8183d30849ae105ed4f978274c62c70f5fae6d27b4a", 0x1000}], 0x4, &(0x7f0000001b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x2, [{@local, 0x400}, {@multicast2, 0x9}, {@empty, 0x4}, {@local, 0x7fff}, {@loopback, 0xffffffff}, {@local, 0x514}, {@local, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xa8, [@broadcast]}]}}}], 0x70}}, {{&(0x7f0000001c00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001c40)="9c6deae08816f8a56d401081027a73b54f2828ec184ac657a0", 0x19}, {&(0x7f0000001c80)="c0968bd47cd1c132728655ca54ecef019fa6ffedfa61113558d4cd251814fcfc74cb3595cc80c19fcafee5f90596fbcacfbaaaa60fd634dff9a8ec7f65981ab40630ca43a67ea20ef5c2e0b3ffc3545e8778a5", 0x53}, {&(0x7f0000001d00)="e130850cefee5442cd8bdea73fc3b33debf1b7dc3d3f89f2f8ab5d15dfbdf727975824e8df2897529c1cd957e9609128fef6ddf1402437ec1946f88dd566d4b12336aa9204cbe5c928f2ce8dd97bf61d459ed6b068c3978bd9d8acb1344dad79cbcb092c9525bd048156f391977c77b7dc42dbc75d00b1d7926b68454d229f44d1070fef4bbbc1", 0x87}, {&(0x7f0000001dc0)="59f1b0ad2674946f30762f2cf070d09c292efd2ea7f67b6be1e9d7e4ed679829333089c3a963912504961f2bb145b0d680ef44a2c422aa35f56879a7e1760a172f1d7f60ffb76c13f12a7b7a6cf51c95deeedc1d104320fc25ec2c7736d20c22542ae3ff7d21756ede274c6bc3", 0x6d}, {&(0x7f0000001e40)="09bca72ca6ac255f35618b035f", 0xd}], 0x5, &(0x7f0000001f00)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@generic={0x88, 0xc, "dd659b00e5fd75d2f96b"}, @timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x1, [{@multicast1, 0x200}, {@multicast1, 0x5}, {@multicast1, 0x25}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}]}, @timestamp_prespec={0x44, 0x34, 0x10, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xffffffff}, {@loopback}, {@remote, 0xac}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x6}, {@broadcast}, {@local}]}, @end, @end, @timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x2, [{@local, 0x10001}]}, @timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x8001}, {@loopback, 0x2}]}]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001fc0)="42e85c11aa899a2e31a94aa08908788afa23a8121d929ab747540e9dc8df3328a60d8eb8a47eed7ac2f42ba4959023fd68df97e58b2ce0ef4ecd7e5e56e960e57a3ca627891cf57997fd59c8ab67c6ecbf75b0f89976fbe0009a2e7e9b761b14a83e80ea01150528893c9659baaa020e8b34d7c101338f1a41071d4445fa5ead7ca702a0cca014dcf51f62318831125e263b6ebef374c2cc8fdbdba8114d6173223623", 0xa3}, {&(0x7f0000002080)="b137595c529f6cc417bb61411118b0cee3fc294814db9d90b5c32b91a5b59bd3df4e24304bd0ceba0243a0e03597c9c964709b835a304f", 0x37}, {&(0x7f00000020c0)="354b0195c98d065377cf2524cd3e038b0f8f59ab57c267d3d8cc6139eaafc61832db8a5e9381347c5812014b3743797638b119d241d77a0afecdd2789eb8af6f06660592ea027f025070873e268c8996b9cb1225d8cf2f332a99741be8385546a79dd4005e320e57f966fd9cddb7e917518d2ed1a20489ea962cdb48a5c978090cbb9a9d2510adcdec22ef58629af33d8a161ca7376dd8a79396465200e751af33eb6a394d05935bfaf95e1aa9c86366fbcf64fa7d313c15c2f295342af42fe84320efebb3", 0xc5}, {&(0x7f00000021c0)="2a54ccabb44fc0c0fa644bb8ef1ca63ac7824cb9fbfcad3d9d606291a708ba8c92f4e8e798c32b2d40bf6e577535fb73d2ae79ba2feef44cf982976ad0a36094ee2db5eb9a9c00bcc49bf910afae4a47ccbf5289ab60a14ebf36ff035668d26af026958a1afcb7221355729259187e72f99b0640585d9fbbd51f131ea0259924b87de9fba9ea232f686f996ddb39f8f834e3", 0x92}, {&(0x7f0000002280)="fabfd6149dc5d4dbd416902c1e350142bd9829c017e59a73a29ab2ff54ec93efdf5a2c00ad9ed95a3c32bb94e0cd65501e54722db5ceb830bfc8f421fbbfb83895c2994b18cfc12624e79b9bbf3adbe324e4b98ecbd0f5652df4e2297857b4030aaddda2a1f6ed1773abd3131bbb409cf1e0ee5df4198962af1f782d58d26721d06469fe7b4e4ccdf4452f775edb0763fd0a3972752264c53723fc93b0392de1f771a7d443603bf78a12f19334df02eb424d1b8867408bdf926fef70c9d6c638fb1023f2e7ea864761e6", 0xca}], 0x5, &(0x7f0000002400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xa0}}], 0x6, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x96f3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000002780)={0x0, 0x6, 0x80000000, 0x1, 0xff, 0x0, 0x1000, 0xdb, {r10, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0xfff}}, 0x878, 0xac5, 0x3, 0x9, 0x5}}, &(0x7f0000002840)=0xb0) [ 661.942223] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.949500] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 661.956954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 661.964235] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000000d 18:06:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x6c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6c}}, 0x0) 18:06:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:29 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x68, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x0, {0x3, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x4]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x4851) 18:06:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) 18:06:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x4403, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:29 executing program 5 (fault-call:14 fault-nth:14): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000003c0)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/91, 0x5b}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000440)=""/154, 0x9a}], 0x4, &(0x7f0000000880)=""/4096, 0x1000}, 0x100) 18:06:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0xe7a035cf4856fee5}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000004e283a3d4ea12eac30d50e899ebdf9f5dd43355d10074474d46412153284578c1810d62d144fe8a797df2ba220bbd52c0012099b7f0411e8c336d6c4eb839395150a833a", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB], 0x60}}, 0x0) 18:06:29 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x6c, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x5865, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="4901d22c196be28f1926fa1d5a7310a5a6cd9b9792d18b0e98037d170d6adb1ac0d58ff596febe82498c20a636d77ced9d3561e3ba3131e658ac969b92035d350dad04c5ee80079882c45494010e9518882129aef95893b7ce10669e4b182fa375f52e6d11c7023b62ae75855dd7bd94705bd42039eab01dda448529e1f5ae65ef92291bdd9fb85afba555418249ca111e55dfa8a0c325696fc6ddb70689b49178"], 0x60}}, 0x0) 18:06:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x40) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f, 0x4}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x24008810) [ 662.759925] FAULT_INJECTION: forcing a failure. [ 662.759925] name failslab, interval 1, probability 0, space 0, times 0 [ 662.797285] CPU: 0 PID: 6027 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 662.805233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.814606] Call Trace: [ 662.817564] dump_stack+0x188/0x20d [ 662.821232] should_fail.cold+0xa/0x1b [ 662.825153] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 662.830287] __should_failslab+0x115/0x180 [ 662.834551] should_failslab+0x5/0xf [ 662.838284] kmem_cache_alloc+0x29f/0x710 [ 662.842504] ? do_raw_spin_unlock+0x171/0x260 [ 662.847041] ? _raw_spin_unlock+0x29/0x40 [ 662.851216] copy_process.part.0+0x1ffb/0x7a60 [ 662.855993] ? get_pid_task+0xf4/0x190 [ 662.859983] ? proc_fail_nth_write+0x95/0x1d0 [ 662.864495] ? proc_cwd_link+0x1d0/0x1d0 [ 662.868603] ? __cleanup_sighand+0x60/0x60 [ 662.872866] ? lock_downgrade+0x740/0x740 [ 662.877056] ? vfs_write+0x2e6/0x550 [ 662.880955] _do_fork+0x22f/0xf40 [ 662.884585] ? fork_idle+0x1e0/0x1e0 [ 662.888359] ? fput+0x2b/0x190 [ 662.891581] ? ksys_write+0x1c8/0x2a0 [ 662.895406] ? __ia32_sys_read+0xb0/0xb0 [ 662.899543] ? __ia32_sys_clock_settime+0x260/0x260 [ 662.904601] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.909536] ? trace_hardirqs_off_caller+0x55/0x210 [ 662.914601] ? do_syscall_64+0x21/0x620 [ 662.918598] do_syscall_64+0xf9/0x620 [ 662.922429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.927637] RIP: 0033:0x45c849 [ 662.930866] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.950219] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 18:06:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x6000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 662.957946] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 662.965234] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.972694] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 662.981553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 662.988868] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000000e 18:06:30 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x74, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x15c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x7ffffffffffffffc}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3805cfa6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x800}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2070}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xace}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23cf27c2}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39c8aa2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b66e019}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6493}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2db9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x151a4898}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dec6c85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33791ad9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf752}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb70b53}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bd03a1a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0389e2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14b748b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbbf}]}, {0x4}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) 18:06:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2340000c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000021}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001d9bef9c6d027478f614dc7007072696f726974790000000900000000000000000000000000000000216816fa68da91d700000020050003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB], 0x60}}, 0x0) 18:06:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x4, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}}, 0x40000004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010811b10000040000008112fdeabe5119018000002f583d00000000", @ANYRES32=r3, @ANYBLOB="10000000002400001400649af80001fbecb7ec000000000000000000bdd2b840c534dc74838281f43f4349357b43d8e175a73dff284aedb4a690a1ff1207c9a7be5574d075ae7c441af2c090c6bf1e07f8118ad3b60b5973f0b2a0998ec061193d92386f783df0823e05bbb11c3ed63bdda6c7844b72a9c2bab4ec4483429cb1b9aa4325ca39830001534538975f139f3205099d3de7"], 0x34}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@remote, r3}, 0x14) [ 663.229400] validate_nla: 12 callbacks suppressed [ 663.229410] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 663.314592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 663.354508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:06:30 executing program 5 (fault-call:14 fault-nth:15): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x6558, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:30 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x7a, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = gettid() ptrace$getenv(0x4201, r7, 0x4, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r11) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={r7, r9, r11}, 0xc) 18:06:30 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="92", 0x1}, {&(0x7f0000000200)="01232c69e1c249a3afd3ab24bc33360c2f1cd04a22ea30637d28d4e65e690a5de3aa9c3c05b7de10ba1a19754124428f5cf3be39deec1605f1800257a821c7f221b5eaa5ecc5bd89d1f46efc021a21144262cadcab5974bfc4fecf4de8cb5f830e9f851f2103cf5a6cb1ef7a997a4a67f34bb6a18a1529b07b0a71afdff664bcae01d6c64d6a3705909a6b704a8c66e67c43f2580fc4eb78898991bce64f009db23e8dad6f53dcc233d6f27b367c875843b11780dac2b9890444dac96faf835315a3f21ee1eb704b8352b9339b24b271c5ba", 0xd2}, {}, {&(0x7f0000000140)}, {&(0x7f0000000300)="ee17ecccfaebee8ed9bdc4a639f0750ab480562e0862a729b13b3051929f3e7e360692dcf5f32cda918651b2666c499f3dee8ecf62be7b4291e0d2a9ebc4dcf867640a336b9bbde5ff509a835f2fe5cf1c3a834df432597f889f07dbd3c5baa6a737df42a5b5c685051a3084def99f7f5a4ec0f16766dcb1e0ae2a8a045d36197843b4b65b668e5fee809edc1fcc5480e14bd289b19c8d0ec2d7505c0c058505b87cea7a92d4c3f6c654872ab80f25760dc85f9c", 0xb4}, {&(0x7f0000000440)="60c3cad3976b1b719d6b798f24596303e663bf74a3f8e66e162c67a6aabedcda91334453a90fcd26a9aabbfbb163cdc7349975adff8d35c05dfe3264afc79d4b1f35f7c2601789827b042150ca4212c4cca86f19d39d003602626b5c07bfbb7bb44df7c5bdb8c4c32b150ef446e0a9fb36ea12546ee4cb0fb6bc2789d1e2b0a5491967c12f582ef19412e7b149844f02fe842d928c532eeaa731ea650b87b1d4554413efcd8869cd22b691924f4f9210d52ecd17fb1b7a8629118245d8424913dc85007f3a6c6744e229569993f28b93", 0xd0}, {&(0x7f0000000540)="f8ce3ad8095ad6ac7ac1e57837d982d8b0015947a03adf4a56306d5b39ca1379b56116261ffa46dcbf79d68693fdd5b26b8d1c38127d1e2f8f51bed819754d88875c6960896da0869ba366bc2edf91bd343367f7b6bbfff7c729b95d62f9b23713ad16c0bca042240663a4ae8369beaf9e5e7a98a76f3cf497215ec874116da02fc8f1b2f4f3c59087364786041ddc6c5b915c2792f3e9b26bf9b9fd482923a0d388", 0xa2}, {&(0x7f0000000600)="3e6291954d8a92c17c11adccde7228a5d8266caadde686a3c32a04d70db2abe7252f369a220e3ef0a97098751df2e0e3d8bf1eb75ff6753f911309b929bdfd7382a30dbf9bb1f7bcc1115f1fa99b59f9bd30a45e3acc6f24a463d6b2e5a7b60682d1b826fc516ecd2426654ce39316d070bfe0e0e65ca35d36291d5b10313f16bd7562974b63c7dac1691b558927d1cdc732261f642f9d0b981705374987bcb86ccbdf20f7b89a8af92478138cba9f7a02b1543cf709", 0xb6}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f00000006c0)="fa57dc0783a78f095dad2a452cbe07b8950537f15b7221994dc6728559a6a8a8d2f2df1b8c7b67a21ca644a67d767bf61fc1451f9f9c52bb85e585025f32088036b240e413bab4fd", 0x48}, {&(0x7f0000001880)="c7cf5a56faeb00a2c9641beb7f9cf0bf83525a379ef7f1ef478445ec4ddb5bb97ebf2c9c7d857b274d7aaffb2b39dfb0058836abda7abf2e48ec380dfeb37353cb9717831404985f21f9880885856d8ec073ce14c2c451d09b730e550c282237e4aed7b3ab744708308d72c2f1d3229620991f4b7c8f6a5866f2114e20149a672fc16f217b3bda956373ae8f40252ba4fa6d7dab70becc7081ac89ee120a4c14749142ed54e64cf5952d2bc77856ea93039793f70ed107887c09b49e1160123b4fe957c4e28b47f74c37a6558243af3e56e318d427b78b74e8a47b68192c6e574105", 0xe2}], 0xb}}, {{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x8000) [ 663.554790] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x8100, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 663.600038] FAULT_INJECTION: forcing a failure. [ 663.600038] name failslab, interval 1, probability 0, space 0, times 0 [ 663.641017] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 663.677953] CPU: 0 PID: 6270 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 663.685798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.696390] Call Trace: [ 663.699004] dump_stack+0x188/0x20d [ 663.702765] should_fail.cold+0xa/0x1b [ 663.706650] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 663.711766] ? __lock_is_held+0xad/0x140 [ 663.715833] __should_failslab+0x115/0x180 [ 663.720066] should_failslab+0x5/0xf [ 663.723784] kmem_cache_alloc+0x29f/0x710 [ 663.727964] ? get_mm_exe_file+0x252/0x3b0 [ 663.732216] ? trace_event_raw_event_task_newtask+0x440/0x440 [ 663.738114] __khugepaged_enter+0x34/0x380 [ 663.742358] copy_process.part.0+0x70a8/0x7a60 [ 663.746947] ? get_pid_task+0xf4/0x190 [ 663.751012] ? proc_cwd_link+0x1d0/0x1d0 [ 663.755114] ? __cleanup_sighand+0x60/0x60 [ 663.759345] ? vfs_write+0x2e6/0x550 [ 663.763085] _do_fork+0x22f/0xf40 [ 663.766624] ? fork_idle+0x1e0/0x1e0 [ 663.770377] ? fput+0x2b/0x190 [ 663.773569] ? ksys_write+0x1c8/0x2a0 [ 663.777365] ? __ia32_sys_read+0xb0/0xb0 [ 663.781432] ? __ia32_sys_clock_settime+0x260/0x260 [ 663.786462] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 663.791222] ? trace_hardirqs_off_caller+0x55/0x210 [ 663.796254] ? do_syscall_64+0x21/0x620 [ 663.800238] do_syscall_64+0xf9/0x620 [ 663.804041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.809227] RIP: 0033:0x45c849 [ 663.812432] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.831327] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 18:06:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x40, 0x4, 0x4, 0x20000000, 0x7, {0x0, 0x7530}, {0x1, 0x1, 0x9, 0x1, 0x5, 0x7, "e8a243a2"}, 0x1, 0x2, @offset=0x8001, 0xffffffe0, 0x0, r1}) [ 663.839034] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 663.846297] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.853559] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 663.860840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 663.868106] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000000f 18:06:31 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) 18:06:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="fdffffffffffffff00"}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r8}}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x1, 0x1, "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", 0x0, 0x4, 0x83, 0xff, 0x8, 0x9, 0x3f}, r8}}, 0x128) [ 664.052646] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x9603, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt(r0, 0x63ff, 0x3, &(0x7f0000000000)=""/63, &(0x7f0000000100)=0x3f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) r6 = semget$private(0x0, 0x2, 0x200) semctl$IPC_RMID(r6, 0x0, 0x0) [ 664.152715] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:31 executing program 5 (fault-call:14 fault-nth:16): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e21, @multicast2}}) 18:06:31 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x0) 18:06:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xe738, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 664.392187] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) lseek(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 664.486746] FAULT_INJECTION: forcing a failure. [ 664.486746] name failslab, interval 1, probability 0, space 0, times 0 [ 664.492742] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:31 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x8913, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x183c00, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_LABELS_MASK={0x14, 0x17, [0x1, 0x3f, 0x1, 0xc03]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xffffc247, 0x5, 0x9, 0x70a, 0x0, 0x1]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x81}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x20}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc810}, 0x8008080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) [ 664.542596] CPU: 1 PID: 6623 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 664.550436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.559808] Call Trace: [ 664.562428] dump_stack+0x188/0x20d [ 664.566087] should_fail.cold+0xa/0x1b [ 664.570121] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.575258] __should_failslab+0x115/0x180 [ 664.579511] should_failslab+0x5/0xf [ 664.583251] kmem_cache_alloc+0x29f/0x710 [ 664.587425] ? __lockdep_init_map+0x100/0x5a0 [ 664.591940] copy_process.part.0+0x2afa/0x7a60 [ 664.596542] ? get_pid_task+0xf4/0x190 [ 664.600446] ? proc_cwd_link+0x1d0/0x1d0 [ 664.604543] ? __cleanup_sighand+0x60/0x60 [ 664.608803] ? lock_downgrade+0x740/0x740 [ 664.612969] ? vfs_write+0x2e6/0x550 [ 664.616889] _do_fork+0x22f/0xf40 [ 664.620388] ? fork_idle+0x1e0/0x1e0 [ 664.624115] ? fput+0x2b/0x190 [ 664.627495] ? ksys_write+0x1c8/0x2a0 [ 664.631307] ? __ia32_sys_read+0xb0/0xb0 [ 664.635385] ? __ia32_sys_clock_settime+0x260/0x260 [ 664.640417] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.645187] ? trace_hardirqs_off_caller+0x55/0x210 [ 664.650220] ? do_syscall_64+0x21/0x620 [ 664.654217] do_syscall_64+0xf9/0x620 [ 664.658039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.663243] RIP: 0033:0x45c849 [ 664.666572] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.685483] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 18:06:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xf000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 664.693315] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 664.700595] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.707874] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 664.715154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 664.722436] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000010 18:06:32 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x1c}}, 0x80) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc2}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xfff7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7f}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffeb}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x80000001}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7ff}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x66}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind(r1, &(0x7f0000000200)=@in6={0xa, 0x4e24, 0x7, @rand_addr="352122db7796997b260af09cd658f872", 0x5}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x80, 0x2}, [@IFLA_VFINFO_LIST={0x5f, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_RATE={0x10, 0x6, {0x7fffffff, 0x8000, 0x1ffe}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', r7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008080000", @ANYRES32=r8, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600b84343eefe63ea5c6cd4d10c10e73f9c121817be9cc0589896e5d7c830b60f80a45b953672597d89121205d9edd0c0043800213d46a96b6d3b2bc1ffe8bf4c133eb3fc0168a7a858f9dbde97bae40822de2a8afca0bcee69124369d1f0feffffffffffffffe227e3f78f1356a45be0271c8b050b7489610cd922", @ANYRES32=r11, @ANYBLOB], 0x7}}, 0x0) 18:06:32 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@local, r3}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={r8, 0x3, 0x1}, 0x8) 18:06:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xf0ff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 664.913985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6842 comm=syz-executor.3 [ 664.940831] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 664.964514] audit: type=1400 audit(1585764392.179:114): avc: denied { bind } for pid=6768 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 665.004233] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:32 executing program 5 (fault-call:14 fault-nth:17): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvme-fabrics\x00', 0x402000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000640)={0x0, 0x0, 0x7fff, 0x9}, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=""/177, &(0x7f0000000200)=0xb1) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) 18:06:32 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000080000000000000000000000000100", @ANYRES32=r2, @ANYBLOB="44000280f6fc0100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9dbc6b8d019b60a6e491c56f67e057d429619824a383c6d1c69d16ffae5ca3bba778af8420c4940a6246c5e74b59a5f574b22be2b69c6897dc0acb6716c24dcedc827f1423b815a5c8cb975c6e5b960f42a38f66f1594495c7d16cff1ad88963101e0a548bb85763ea38fd9c6df8e6e261cbf94633ada11e3cdda53405cfc4112015743c0b0202d480bb80b1aa3edd41f7e0125512b6c45d6170ebc7cc64dd5cb991371ea5a8d55753685124f81bd40dce3c73aa9fd1020e23eaefdeea986bfb7e25151e68b1da", @ANYRES16=r8, @ANYBLOB="0500000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xfffffffffffffe6e, &(0x7f00000002c0)={&(0x7f0000000440)={0x1c, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40) 18:06:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfa02, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 665.295704] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. 18:06:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@rose, @default, @null, @default, @bcast, @default, @default, @rose]}, &(0x7f0000000100)=0x48, 0x80800) write$binfmt_misc(r5, &(0x7f0000000580)={'syz1', "4faca418949434c0093f84f9e4b4a22075bc46539e40b800485850847c6e20abba67600bb7b730ff8d165744dbfa171e2e9cfa51137510b036b5935bc6d967fcd9d064faa9a74246b172cd61547bb33b6a52e0f44fca6cd72db76a717ec832443d799039202639216bc4092d95d74497df501661e85edb624ffa5101795d857e6e7eadb93add75efec35d4f649d94b8e0fd488ee3675c2d216951df83bfda8526c7037e64825347935af8726c890200e61c9ccc940ac65967d05518aafdf7f397fd62d6adefaed107d9a4dc92fad6c7cd166a80330d4c6625b6f94c69eacf4d528d9a505bf068bfb307f833d4fc29af6fef5f977c8"}, 0xf9) r6 = dup(r4) r7 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, [], [{0x10000, 0x3f, 0x3, 0x5, 0x62, 0x144d}, {0x7, 0x8, 0x0, 0x6, 0x10000, 0x92}], [[]]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0) r8 = accept4$netrom(r6, &(0x7f0000000400)={{}, [@bcast, @netrom, @netrom, @default, @default, @bcast, @netrom, @bcast]}, &(0x7f0000000000)=0x48, 0x80800) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000d8f7be700259acd521570eb5f60bf84ce19a0bd9b0932709b4c6883aad1a0a8180cd58cbf870a83a417cfef2355ce80100000000000000d7b1c77d7dcd7a6c6a7012312486f5f3aa56843644801675f71ecffabbf0381a63df218780c40cb286aa194ff67255a492133438b081221ce052bb7e77", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB], 0x60}}, 0x0) [ 665.337845] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 665.411431] FAULT_INJECTION: forcing a failure. [ 665.411431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.459978] CPU: 0 PID: 7037 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 665.468597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.478136] Call Trace: [ 665.480745] dump_stack+0x188/0x20d [ 665.484379] should_fail.cold+0xa/0x1b [ 665.488265] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.493371] __alloc_pages_nodemask+0x1c7/0x6a0 [ 665.498041] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 665.503051] ? lock_downgrade+0x740/0x740 [ 665.507234] ? find_held_lock+0x2d/0x110 [ 665.511313] alloc_pages_current+0xff/0x200 [ 665.515639] __get_free_pages+0x8/0x40 [ 665.519531] pgd_alloc+0x7e/0x3d0 [ 665.522995] ? pgd_page_get_mm+0x40/0x40 [ 665.527057] ? __lockdep_init_map+0x100/0x5a0 [ 665.531554] mm_init+0x566/0x980 [ 665.534920] copy_process.part.0+0x2b61/0x7a60 [ 665.539511] ? get_pid_task+0xf4/0x190 [ 665.543393] ? proc_cwd_link+0x1d0/0x1d0 [ 665.547481] ? __cleanup_sighand+0x60/0x60 [ 665.551713] ? lock_downgrade+0x740/0x740 [ 665.555860] ? vfs_write+0x2e6/0x550 [ 665.559597] _do_fork+0x22f/0xf40 [ 665.563080] ? fork_idle+0x1e0/0x1e0 [ 665.566815] ? fput+0x2b/0x190 [ 665.570044] ? ksys_write+0x1c8/0x2a0 [ 665.573853] ? __ia32_sys_read+0xb0/0xb0 [ 665.577918] ? __ia32_sys_clock_settime+0x260/0x260 [ 665.582940] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 665.587693] ? trace_hardirqs_off_caller+0x55/0x210 [ 665.592716] ? do_syscall_64+0x21/0x620 [ 665.596700] do_syscall_64+0xf9/0x620 [ 665.600502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.605686] RIP: 0033:0x45c849 [ 665.608875] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.627797] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 665.635618] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 665.642907] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.650174] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 18:06:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x9, &(0x7f0000000840)=[{0xfffffffffffffffd, 0x0, 0x545}, {&(0x7f0000000200)="2a830eb39aee9a20221ec83910b53853a96fb3a77b8284a8841ea8bb8597b66807cb531fdca19016af4bf70f641d7147044a90f8aa8142c49041791a12d078f3c2db1c4d930efb8d418e8610c58dfcb5140b394d0c3e6cf41df7aa19ec95", 0x5e, 0x1}, {&(0x7f0000000340)="b5bd2ba9e0b754b15e97253a290a5e40ce58ca686f987c606095d32896e59364f340ed381af4a424abe59b71c120ea0d165aabe69ffdb8993332a23fa839ae706d3a42e15d9985d59fcb94a23f988db3f1963150ad9382427cd1b918353390a10ed8aa8464ff7120fcc48e5c995fcf2fd13ded2e3649324f2990e614d88ad49ddb4cc5eef2c19bc6ab7b1eef62dc527a8314eb47e751dee583a70ba462556541eb9d4219f7296ec3894ddc52bfd104024792b2b4b7528943503a32375e11d41d38c8d847c4d6a904dde73be476ecfeda43019bcd677bf79c7b75b523fe62ae27", 0xe0, 0xffff}, {&(0x7f0000000440)="64d4b99b4219276373f637e8d0ccc1375b5d098fbf74b85e1f6044e8638146a300af49df669d185a46f64cd01ad8c07567c5bb116ea13e90e4b9b2c74bfacc5bb1964d861b6401e2a1f9271690e3915980dce44b0caefae19e49e25c62cfce2f502ade3c508b1ae1a4208a079112ba8426f25d325fa7ef7cbd6071fc122aff48ce5b68f8b46c0f783c43887f510fefba4a8ebd0a05dba1957a411d02fdac8ebebd5684c1cd60fc77815185f47ebccb452eb96db2fcd2516f7c8cb4959c4d57483447fe53bd288548", 0xc8, 0x6}, {&(0x7f0000000540)="2d4fd9792847b62fdec334b207716a3dac8bd355e1ed024f78ffafb9c58fffbfe9dffb973900bb5ea276aa2bf8cb0c1104ad8fc508c55a22fe03196b364e41dadd268e57c84fdd08c1849515ff22e182fa8a05cdbd373bf63c07a47eeca4e818fd0c077b9cfe433ea870f64144df7ff531bc6b0f4b091823815575fa2ce15dca454e737269d4af73fd70e287ad2656708e0e94e81d9919ed66d6bc408c754e650dfa675f36183040d80c4e01415c427052aa611b68919f76474725d00979738a", 0xc0, 0xfffffffffffffff8}, {&(0x7f0000000600)="5065745e7c2375bbd456bb4fdef513f2fc4161e11bba97dfc061fcfebd6f3dcd37b963af1e7a535c97dad0f80540b0c3e7a0cd394718dfca28014c7c31e45f375ef35fd2ff399da084bbac72d9f877876dcbf16bfc39c094cd92a0abe0b58bde", 0x60, 0x800}, {&(0x7f0000000280)="08cf5d748c7a3e738ebd917cd6b190b80f51f11a6d0646c0411c1194a511ca27b9794e29cc51259b73394c68896631bc2cc263df925473bf144e69", 0x3b, 0x7}, {&(0x7f0000000680)="7e689bd8863f433d5dbc3b7cfa6be7df6a72fa30609f152d7c4c5633262f19080fb583fb13e6f3a7cb587ae78ecceb1824a79251770dc71aa5a30ebbf265bd4347c6d3308a87ce581e1c191cb8d71765728909cf305b00faec1b0446ce3b2b687d0eb28dfb01498d8aef60b5cf3bb03a075c8deff4904524bd43ea89c630eb3f394f488a1e7257436b413035d88389370357ac2f2d814712c94b71182799846a44319ef4d873a17bdf230f2858ea1279b778b5990c02aee9f469a8c77f522417617840b2025fedc3e220372b9ad8f475815a46dde9bbff42532eca2efac4ff0da5af43f34f222d41e48e38653e1a0133a2", 0xf1, 0x1ff}, {&(0x7f0000000780)="d3c612bd8f82a451e1e1cd726ecd14f8545592a5fcd02a7e23f97bfcea6e3629c94c81a8faace830cc1d2f63b98063ca8d30104cbd70d05e938bbc987b09a7ee3afce218d1b9d65be3898d7fb24607498c26b9fe6d38e0450912d9fb7d109cfe9b0f4d754327b17ca22d5085d1fb26ce79ce8b1caf9ed251be258a6ce4d03bb145d143ded09858a0757b56cb4c86b032915096c1974b76518089622bc05985c784a18782e4a59f94f7237674a7171b43bffbad429076b8d04aff443ee7", 0xbd, 0x6}], 0x0, &(0x7f0000000940)='team0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e42bdb7ba1ff7160680000", @ANYRES16=r4, @ANYBLOB="010000000100000000e000007d4108000100", @ANYRES32=r2, @ANYRES16, @ANYRES32=r5, @ANYBLOB], 0x7}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000a00)=0x80) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000a40)='ppp1\x00', 0x5) 18:06:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfb03, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 665.657525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 665.664787] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000011 18:06:32 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7485c4a285a421c21ea394d9138f94a306", @ANYRES32=r2, @ANYBLOB="0000000000000000618f1680100001800c00070000000026e462c1d0aca3c086000000000001a504acb9"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="34000000100001f3209bc8292a7864c817e70800000000000000000000000059d1e318e00bf43ef352de29b3728245f3514bf009f17641efb431f95ebb8eea501312681eaeacd4ed3f1bbbb321027c1a436e94fc89e4b7be9a922171c07b1fbd6c61f3f181c306a278d4c9543a8ffc74322ac0b3f83ca82e0a3223cc46ca023e750113aa6baab089041bfcdbeff0d642f585bf5cc7c52a8931a1141560828a14d67f4724e350bd6b915ebf92c8a50236176ffeb24c43628e549fc50b70971b7c2fd1c31630a28af12dcb6adf3dd5ed7d45748cb4f8a59654b54e7fd837f28cd1e679acdec3f15131cc54aaa51fc4df7848c57ce72bd08bc06a78a05ca2bc5b6cbd490bb21193f2937b247aacf622964ccca7dbba72ff0d108460ea42959e", @ANYRES32=r5, @ANYBLOB="0000040000000000140016800000000000000000dd3789903d5a6f129fb09378dbaa3ca7828c4c966418d5"], 0x34}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)="f9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="e1ab8ca61ab0f2d5795b995e6987f5316a8e563431e63068bae29210b3d883fff22737a434f276a97a1a67c633cadff41996ec5a3e0d07f38b748aa8fae106662ce2bc2068499825b8c8909575db06623449dfd0a0106b3f0a9c754cb583f2dbc04e1f857f91e352ba48371dc734dcf8e1d8ab6bb2ecf8ab79274355be0d8370227bd8e67b0c", 0x86}, {&(0x7f0000000200)="2269c040be9cfd55d0b4", 0xa}, {&(0x7f0000000240)="d3307d3f0ac25487c5288e8bb4ae367af5a5b5b33280253f164905a3651c4fc543f3f39c58221a05c8b6ad69259da0774681e75ee512dd230a0a562298e9ab095a5dec07c3722444931f913d3df6263578d6c6620fe9", 0x56}, {&(0x7f00000002c0)="27dcdf0c67bb256ba2e6dbee6411d0518e5f2a6a8a91fee1e53009dbb5f65b", 0x1f}, {&(0x7f0000000300)="99de451fe142e531c3800d475cccd50160a6cb415600564ad03bce08a029efc0d31d2fbfde28c1149eaae06a292cdf9af338890b0bc317d35f31eba38c615ec6b1613cb31d49", 0x46}, {&(0x7f0000000440)="f139895261d783fbfa3ddedfd35877771882a99a581f2880c4c51769d1d3ac9df3fd743d771ff923c7f840384aa79766740109588fbcdeec4784cf7153201ea6eec86fb08ae385fa86bc771a0cb7d62a5c310fb0405910b6e96e860c14fdfbf36de823f1c1e41e413696888f63c2883a879dbed06fb1d19099a7e7d5e3e4db6a413b8f7cfe1413fdae037417c9de82beaed747e7572061cc2ee4acdee607e1e95a06bb25c4e98b7ee8e65fbece4df50b1bcbc15167045b81a498debeb83e1278aad93ec333eff30ed3a69604646eeddd8843faf5f8f0aaca59954d63d98a71ecfdb1a2c99b", 0xe5}, {&(0x7f0000000380)="16bade7a10bf455900a844a0873eff67159b0feb129d9cae48f5345f13430952587beca6f3c2ef3f435ac17e84cc66d92f2b230f488d3b", 0x37}, {&(0x7f0000000dc0)="5b2d9a4a466025f9b88e124ced136326c7533190b6e57e0505482bd51c220f6ee310bfbc9e9b0cb0ce67970be9af3c63a37512be2c64ca26cce35a17544c7712b5028b00a7303b69ff695fce453211351dffe9a3bdc9ade882803bddeacb9045aa4140912daa7615b4901aed07442a819b2c7954e5c8d03bd17a8bf9335a4747461e8d80035f0c10e6ac167a645ea1849cba13697f46d16eca8df09a38aca2b2c2ea4e2e36d18a07156e801e451024409f9cf78a87fd49ce8a118bf87faff0615175b04fad878e14892ee8c17fcbc639", 0xd0}, {&(0x7f0000000640)="d69decc2f177c7049ed2e0491df79b33be1279952ee76969f2a79af1d143a778643f5171ae59dce898785d2e8b2586704d8bb78d53852c0ca571822465935e76d88f6c851d5a1e6490e4d7e14f26ea98f4ce4ff333cb83ee6f8911c95fff344d0db2fb446e856dffd8bfce17fc3ef0dae9c6b6054d95b927a2a9069f3bd18e6cce", 0x81}], 0x9, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x68}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_tos_u8={{0x11}}], 0x38}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @rand_addr=0x53}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000cc0)="b9b564ebf3de43b2ed58c13955d476bc131dfa39af8302ae1c0f6ff6849451ec89fa33ba01e389584e8fec1b113a06f7448fa800d58d3c4337a71238a2d1a29f108ebfef6740f9db3aaf4dd6ecbb4cca20729630f9361384166a51c28f3326733ae5d58b5ee9bb282cf60347572bca990033fe2f85cde05cef2ff937187c062894fb25a603750debee8f6cbe42eb0672abea8aabfa17ae77ff1cd9a9c7d372e15c0307c854488fb563e2ace07bad15a247d4c4623e7e91d24443c091404e9da2fc440997fea29693d8e358f351233eaa4df1fb", 0xd3}, {&(0x7f0000001000)="4e9b7c9edc06f115584058c67d0e0ce45fc878daa4b2baad9ec3ed1708f0eb7570391c01800776b5569b17683708d8dae5f57c7a9e042232e3f6ea65a771587fa5055e6351c07029fda7b42023b6255efedf6457b9034d044656005ea5e9b33ac0e2fc8ce764cea73810d213b594ef8d0af2f0c704cc1b3bff6de9d12427192854f5241ce970f0eada2a7ab1f59e12f57c2d611c23837ea78df28c73cc54641156f90b79dd8ca5b135248a569d7d3fe54498f1476eae8a28224ea907acc22aaa391f746e55cc54f936d9dd82e78c2335ca3fd71e05ea0bc3c4dd06de01c520a0a0ce6639", 0xe4}, {&(0x7f0000000ec0)="c64afb45b3baed925a0e5f70bc7fda0305b1894dca9acd0ecdd06f2018cf657c415863539bc58a432374c42af5cb1b0134c5f50aca50c81da51f796ce43cad102b423e2c99488a63f7e6c58b00519efd02dcb3cb0aaab47c0ddd29e116d6ca5632f067964c4c5e3f2df529b05f7107aee892522fa4ea7e153fdb1d119295650b9f569d885f9fe110a743ec533a2a943993da84a3fd2093a8a4bf60031431463cae0fb9224ebc18065cdb414de6553f4466a6ee4775eba52215a4993cd013a818d09416edbf2dcd37ee69a588f895eec6aba97ab33257720b7c287c40038010", 0xdf}, {&(0x7f0000003840)="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", 0x1053}, {&(0x7f0000001fc0)="fc046df33a5c61f85581677eadd35aa3b81458e976d046b9e3541c1d1e630e3c21802106a416093edf707ffdb4", 0x2d}, {&(0x7f0000002000)="b100e351d5b9f0c128c768", 0xb}], 0x6, &(0x7f00000020c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}}, {{&(0x7f0000002100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000900)="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", 0x166}, {&(0x7f0000002240)="95280a07611fba3a89f8a7cfc154cc2de034aea14c78032925010000000000000032782d0f9695feddb1c0825a6ed8b011de5128ea098fec42c0b8af", 0x3c}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYBLOB="e00000010000000110756e908a5845bb0000"], 0x2b}}], 0x6, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDSKBLED(r7, 0x4b65, 0x2) [ 665.820183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42117 sclass=netlink_route_socket pig=7085 comm=syz-executor.2 18:06:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfc02, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 665.869080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:06:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) write$P9_RSTATu(r2, &(0x7f0000000340)={0x5f, 0x7d, 0x1, {{0x0, 0x45, 0x3, 0x9, {0x4, 0x4, 0x2}, 0x2000000, 0x101, 0x9, 0x1, 0x0, '', 0x9, 'priority\x00', 0x9, 'priority\x00'}, 0x5, 'team\x00', r4, r5, r6}}, 0x5f) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r10, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x60}}, 0x0) 18:06:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000300)={0x2, 0x9, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_deladdr={0x3c, 0x15, 0x100, 0x70bd26, 0x25dfdbfc, {0xa, 0x38, 0x50, 0xff}, [@IFA_FLAGS={0x8, 0x8, 0x89}, @IFA_FLAGS={0x8, 0x8, 0x84}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x0) [ 666.024835] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:06:33 executing program 5 (fault-call:14 fault-nth:18): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:33 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:33 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) 18:06:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfc03, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x1, 0x5, 0x4, 0x4, 0x2, 0x2, 0x3f, 0x5, 0xcd, 0x1, 0x5, 0x20, 0x10001}, {0xc5fc, 0x11a, 0xf0, 0xf8, 0x0, 0x2, 0x7, 0x1e, 0x6, 0x1f, 0xa8, 0xfc, 0x3ff}, {0x200, 0x90d2, 0xf6, 0x1, 0x7, 0xfd, 0x3, 0x21, 0x3f, 0x2, 0x80, 0x79, 0x6}], 0x3ce8}) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 666.334988] FAULT_INJECTION: forcing a failure. [ 666.334988] name failslab, interval 1, probability 0, space 0, times 0 [ 666.382231] CPU: 1 PID: 7312 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 666.390162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.399532] Call Trace: [ 666.402149] dump_stack+0x188/0x20d [ 666.405811] should_fail.cold+0xa/0x1b [ 666.409726] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 666.414844] ? __lock_is_held+0xad/0x140 [ 666.418932] __should_failslab+0x115/0x180 [ 666.423218] should_failslab+0x5/0xf [ 666.426950] kmem_cache_alloc+0x29f/0x710 18:06:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) [ 666.431122] ? get_mm_exe_file+0x252/0x3b0 [ 666.435462] ? trace_event_raw_event_task_newtask+0x440/0x440 [ 666.441371] __khugepaged_enter+0x34/0x380 [ 666.445629] copy_process.part.0+0x70a8/0x7a60 [ 666.450235] ? get_pid_task+0xf4/0x190 [ 666.454142] ? proc_cwd_link+0x1d0/0x1d0 [ 666.458251] ? __cleanup_sighand+0x60/0x60 [ 666.463198] ? vfs_write+0x2e6/0x550 [ 666.466942] _do_fork+0x22f/0xf40 [ 666.470472] ? fork_idle+0x1e0/0x1e0 [ 666.475068] ? fput+0x2b/0x190 [ 666.478384] ? ksys_write+0x1c8/0x2a0 [ 666.482204] ? __ia32_sys_read+0xb0/0xb0 [ 666.486290] ? __ia32_sys_clock_settime+0x260/0x260 [ 666.491425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 666.496199] ? trace_hardirqs_off_caller+0x55/0x210 [ 666.501242] ? do_syscall_64+0x21/0x620 [ 666.505240] do_syscall_64+0xf9/0x620 [ 666.509060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.514268] RIP: 0033:0x45c849 [ 666.517478] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.536570] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 666.544301] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 666.551628] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.558917] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 666.566340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 666.573628] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000012 18:06:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfe03, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:33 executing program 3: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0xce9b, @loopback, 0x76b5bc19}}}, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:33 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40002, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$inet(r5, &(0x7f0000000800), 0x0, 0x20000000) 18:06:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800), 0x0, 0x0) 18:06:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x0) 18:06:34 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:34 executing program 5 (fault-call:14 fault-nth:19): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="92", 0xfffffff7}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @rand_addr=0x7a2d}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x8001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000280)={0x9, "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"}) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000) 18:06:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x30000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDOUT(r7, 0x40345632, &(0x7f0000000000)={0x3, "685fc79fbd42769f5809c3b2278fe61bd7d85542edb135ca17fcf2a9e60b4e15", 0x2}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) 18:06:34 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0xc00) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'hsr0\x00'}}) 18:06:34 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000240)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x9dbd}, 0x16, 0x0) ioctl(r0, 0x4, &(0x7f00000002c0)="080db5055e0bcfe847a0713224368abe4991e3e7a24cb1f685d0ea14ba2e6469ce059f575a58e27d904b2db16ef258e082fa2f86f1116d713e7abfb99fd5bcca7318c42c78b509919f13110caa86eb24f9") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) modify_ldt$read_default(0x2, &(0x7f0000000400)=""/210, 0xd2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38901f000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="4400696f736974000000000000000000000000050014000e000000080004000000007dbfde81e22bf01b62455792020008000600", @ANYRES32=r5, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0x14}, 0x0) 18:06:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x34000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 667.445172] FAULT_INJECTION: forcing a failure. [ 667.445172] name failslab, interval 1, probability 0, space 0, times 0 18:06:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x29cb12738d9c5cec, 0x0) [ 667.505169] CPU: 1 PID: 7571 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 667.514138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.523502] Call Trace: [ 667.526113] dump_stack+0x188/0x20d [ 667.529762] should_fail.cold+0xa/0x1b [ 667.533673] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.538802] ? __lock_is_held+0xad/0x140 [ 667.542888] __should_failslab+0x115/0x180 [ 667.547298] should_failslab+0x5/0xf [ 667.551175] kmem_cache_alloc+0x44/0x710 [ 667.555258] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 667.560773] anon_vma_clone+0xde/0x470 [ 667.564703] anon_vma_fork+0x82/0x490 [ 667.568509] ? dup_userfaultfd+0x157/0x6b0 [ 667.572754] ? memcpy+0x35/0x50 [ 667.576067] copy_process.part.0+0x3509/0x7a60 [ 667.580688] ? __cleanup_sighand+0x60/0x60 [ 667.584942] ? vfs_write+0x2e6/0x550 [ 667.588679] _do_fork+0x22f/0xf40 [ 667.592150] ? fork_idle+0x1e0/0x1e0 [ 667.595884] ? fput+0x2b/0x190 [ 667.599095] ? ksys_write+0x1c8/0x2a0 [ 667.602916] ? __ia32_sys_read+0xb0/0xb0 [ 667.606997] ? __ia32_sys_clock_settime+0x260/0x260 [ 667.612024] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 667.616795] ? trace_hardirqs_off_caller+0x55/0x210 [ 667.621829] ? do_syscall_64+0x21/0x620 [ 667.625824] do_syscall_64+0xf9/0x620 [ 667.629642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.634838] RIP: 0033:0x45c849 18:06:34 executing program 2: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000000c0)=""/44) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/45) [ 667.638035] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.657227] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 667.664951] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 667.672232] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.679517] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 667.686802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 667.694079] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000013 18:06:34 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xa, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x40000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:35 executing program 5 (fault-call:14 fault-nth:20): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:35 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xc, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x80080, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000034c0)=ANY=[@ANYBLOB="02feb110", @ANYRES32, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000033c0)={r6, @in={{0x2, 0x4e20, @multicast2}}, 0xfff9, 0x101}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0)={r7, 0x4, 0x20}, &(0x7f0000001c80)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg$sock(r2, &(0x7f0000003280)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="6199c8862f4a916588d09bc50490cc12e0b4b3e12d86999aebf6d6c80efd924f5201a826488a2ccdcca851083b86f58771598e163a65ddac7dcc557d5fbc3fb41b7089640d09963b537054b8da198bc19072e02952c14e084faa2ac89e634686b460480ac0920fc4268d33521024fe894be35fbbd3db05f92cfc75ef88a7d0219144857209abba343bd9b9d9d9ed9af463cd27ef92470c2c8f1c4aa22dad1aea80ca176edfa5a37ce0036b7e95dc06e492348884b4867e72286435e01c7ff5829c8573840dfb58d62aac2f37acaee26f99a1972825cdc91b302cad049ccddacdc47fa1760d02fd4793dfb7e1551cab174d029f03b4e51195", 0xf8}, {&(0x7f0000000300)="79eafc4aaf1786cc8a75eee5221ddd649a2cf7263b3fabfa37638aad9873daa9d45badbd2dfc0f3b11fc2c1edff12ee67b22f3bc277156fa788eecd04204ca7c2e2d083408977129d37f1aecd9c5a3a051f19736eeb1ae9edfb0f159ea55ced1a95de4b316b220224c486952ffc06fa5eafb8dcbd8243fae6604feb2bb5098cbd7", 0x81}], 0x3, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0xb61}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x48}}, {{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x2, 0x1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)="6b1abd491d8584c42da72c6464cbd42e3bb7fedada5965e9b0de3a3fda01de8652ffb25a851ab6bbbcb50dd8189f17185b7613a47ecad4d4db153e74f66631b6371b88569a406412da7ac89833f74c6fb536cc28300d0ff3d5d5b9327cd66e160c419f2185066bb6c323f624eb5808c93f08b0b9602d6a4425e3e317e74a15f285aaf5edb48207390e392f5255cb278ff8adbe3533593f5754d11ad82f6438f08f2f59c3c8d890eac6487e25fac37dc567995839f85df00502c77a398ecfea32a137d188bcb2c2d0585ab2b36c9005146dc220cd05dca1b757e087ee585b2666753e7b386611df", 0xe7}, {&(0x7f0000000640)="058687413912f07d47eaef33c05743cd7322b23182d0a79fd26bc50f344f2ce06877152c6b5ce43e253bba861cec1561671225daa087297f31ee6492d1a67e4e9fa54119bc3c46d3005d553cecb2a0fcb277e6dff8d31d8d1e3d8c046e80b466a46f87415b64edbc5742bb13924b8c1a7a4dac5c42108835566b42e8b6c667707c2de57be7ac8d8a2a1ae8f9daf7192bf5725faa94ce6622190b1c328fcafd91205cf6a89107a765d2036af7f1ed5c6df29e64", 0xb3}, {&(0x7f0000000700)="3577566cab3ea4f0cd969b50f74b0912db25da28fffaa26bde25c55a93f502f571ed4c8e23083eeaf2e81d7b1c18518889bac0570af1be5ba164c69d802c4b75c05234134e5f918f7cc3c09ca14e9fdc92c4dc1b6515a9fb9b22dc653c9372ccd3a5ef9a964173015d6ed5c22741efd9aa1d0091fe5f3b589a822b060ebc09529c2c69645638a79d405082a2a7f2f76a3754b491c59e18a47c1a65d1b609d657ea12090c236229bd3dc139fc2d8422203c8db85edf0cfc370914e5afc7f429", 0xbf}], 0x3, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x494}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7166}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0xa8}}, {{&(0x7f0000000940)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=[@timestamping={{0x14, 0x1, 0x25, 0xfc56}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}, {{&(0x7f0000000a40)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="397d7ac728551b8d7856d7539d610f4ed5e2454a4f7b79fb22cd708f3de25e7353ab751e29a9293c5b1752465885a9bb47b07e4f06097fbb434f5410441f6e737e73c3c9e5605de6733c5be46580df4ecff99397d4f51f3e3187432c4ba7ad688d09ec37a9890f428b633034a45335b455607f159198e87bd147efb16fd6cbfd8a069575f1efbb", 0x87}, {&(0x7f0000001b80)="77776b83fb9aad2656866b63f86e3c37a783f9c1cccd129f1401cc1e04f6703436d597bec45605198829520fc443c6accf", 0x31}, {&(0x7f0000001bc0)="6b2d5f8ef58e5093a9576161359d3ee8f653566acf69496ce60d7f6b40c018ca78c8ab8042063095179718d7c25116dad280ae83f3256a6d912d68ef0b1b235c92007542f937fd3383b77b1b9643ad55544442688f014cfb58ea916dbb976b3be8b74a1101d8b61372a5ce6f05450c3575fac21173419df2ac459d90ec43134ac15ea838cae154aa30f438b42295d6c0e01ca660320c4823e1a1210a3bf84b09e8caa76260163a8dac9f", 0xaa}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="30c7111ddb6516af4bc568c5d3392f279691eb8bdf0411a27a1387c6fbe1b7eadf75902296421acdba7f389f0e5a428e6294fe71e48bf88e0308d2f4dbfbfd1ac7cfa2cb2588a19a4e7ae5e2566559a0ad8bb3df4a9392b608db6d1bdb63b2c2256399957c16d0e2222e2090ba1b2b76380b5fdba301860c6f6809b4dcc754ef0533a5a6ecc6c2c8ef17853b", 0x8c}], 0x6, &(0x7f0000001e00)=[@txtime={{0x18, 0x1, 0x3d, 0xfc1}}], 0x18}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001e40)="d8d10da3536946b8432ddc0e64dcc9e4c89addace316f8cf73523a39b2ace086de6825449be9e06fb7534a5ed97c0d326fc5fa11e75962424728fe346a3f29e61b466919a91fb36b2a", 0x49}, {&(0x7f0000001ec0)="4a3dadfe84c3c6481a9920275a6164b05af8f85ed85a5b58bdacecadaf92b388cf6dbeed11cacdff8372873b040f40eba6dcbb0b2bbfd8e3dd416adbe60d905ebd63dbd73f00265d5ee853ec7ca378b42ebb948474da21dd328e9208b88118cd3590152126a3ab8254d98e03ce12b1ddd9dd1516fab98f5503eb33f5db2b7a32d9235dcc4b397ec0b06a2e0b6e068bc9c2609707259e2610e532b5620e657e7aab9fb137d58921bc17d2baa8b9e5c6be604bbb11746a91613087083650052d084c8fbd020d823c3a02e25fd508d7d7336fc5116623b09131024de56219e03848b91deda09fa8e1edf0", 0xe9}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="f6e396dc0e6bdd5547ad52efb30932f54ed6bcd89c7b29f5ec7cd4e0772a0b1e773fa1b375ba78cb2f677f33b2aaaf3333982c096421d12dc0bec5de5f3b6a7a01ff929a27f1ec3786d844", 0x4b}, {&(0x7f0000003040)="5f7ebeae9f530f038f8d01494a0949c553e7cf36dd9a9edaab5ff5b80b6160a2752be0308a6ba4907f9242d9574ca3a4aba241094acb231f6ae859aa9d85d7ad136ef4947429b4ca62d1c8a85e8e6fa28d", 0x51}, {&(0x7f00000030c0)="ea12d6d755365435e91b75cdd8359cb66d776d1e64336f0cf630709a68b00a63dc2655396995879953ee69859915a7103c164fd012fc597678b28b2b77668eeef63926932bbc2cec10bc889a43bf554917fde127a73a7a775b3c5a655077c9f54646c724a1e6f363dc728f9e2a4ac89df4a1ca810187280b3b551687101d30d0e56dd822a303205f98c931ca1e5e608488da6a6cafd201f28a20742075c1a9555e8907115264ac48349488c76e1c0903f4011760aef2d8d59595b7460c3770dfacbe64abab26a766629dbf", 0xcb}], 0x6, &(0x7f0000003240)=[@timestamping={{0x14, 0x1, 0x25, 0x89}}], 0x18}}], 0x5, 0x4) 18:06:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3c8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x8, 0x77, 0x9, 0x5}, {0x6, 0x1, 0x5, 0xfcb}, {0x7, 0x4, 0x81, 0x7f}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0xecd, 0x8, 0x5, 0x800}, {0x5, 0x1, 0x40, 0x7f}, {0x6, 0x6, 0x73, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x5}, 0x4000810) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x3a}) creat(&(0x7f00000008c0)='./file0\x00', 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800e3ffffff000008000600", @ANYRES32=r11, @ANYBLOB], 0x60}}, 0x0) [ 668.129533] FAULT_INJECTION: forcing a failure. [ 668.129533] name failslab, interval 1, probability 0, space 0, times 0 [ 668.162412] CPU: 1 PID: 7906 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 668.170246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.179618] Call Trace: [ 668.182234] dump_stack+0x188/0x20d [ 668.185886] should_fail.cold+0xa/0x1b [ 668.189795] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 668.194916] ? find_held_lock+0x2d/0x110 [ 668.198995] __should_failslab+0x115/0x180 [ 668.203240] should_failslab+0x5/0xf [ 668.206961] kmem_cache_alloc+0x44/0x710 [ 668.211112] ? __lock_is_held+0xad/0x140 [ 668.215199] anon_vma_clone+0xde/0x470 [ 668.219107] anon_vma_fork+0x82/0x490 [ 668.222914] ? dup_userfaultfd+0x157/0x6b0 [ 668.227166] ? memcpy+0x35/0x50 [ 668.230465] copy_process.part.0+0x3509/0x7a60 [ 668.235082] ? __cleanup_sighand+0x60/0x60 [ 668.239313] ? vfs_write+0x2e6/0x550 [ 668.243028] _do_fork+0x22f/0xf40 [ 668.246496] ? fork_idle+0x1e0/0x1e0 [ 668.250221] ? fput+0x2b/0x190 [ 668.253405] ? ksys_write+0x1c8/0x2a0 [ 668.257200] ? __ia32_sys_read+0xb0/0xb0 [ 668.261266] ? __ia32_sys_clock_settime+0x260/0x260 [ 668.266276] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 668.271027] ? trace_hardirqs_off_caller+0x55/0x210 [ 668.276042] ? do_syscall_64+0x21/0x620 [ 668.280016] do_syscall_64+0xf9/0x620 [ 668.283814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.289002] RIP: 0033:0x45c849 [ 668.292189] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 668.311301] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 668.319013] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 668.326275] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.333538] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 668.340796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 668.348058] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000014 18:06:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)}}, {{&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x20040014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x40, 0x4, 0x7, 0x2, 0x1, 0x4, 0xec, 0x8, 0x81, 0x4, 0x6, 0x0, 0x5, 0x81}, 0xe) 18:06:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)=':', 0x1}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000100)="4a11ca0c60a66bb16f5b656b6448251ddd400cd0f1b867e52103f4d0a700d8625f6868e952d00dacbd252f7f9e342293c40fe121b3c4e27b01ee0021f36c5901d83fd71e529eb18de37c3e3137a5ff2ad743ca00337bc9229edccc38173b79d335f34df6e06b608b", 0x68}, {&(0x7f0000000200)="be681ab14253e74f4a93ad11a5dffb7a0ab5c3851620d2bb1d097b31b88f9c783b9bba08e953b7f26c8a2a0c19acf82bd5074bbb79b417b4e866cc616fa756c5655ef97a684998356b2e1fd68f805f2a55451f1bf1ed1e574f607c", 0x5b}, {&(0x7f0000000280)="a9f7fbfadc3e79d488aeefd3bdc8a62339a09441fa062c9722be652803fdc6cfc7c6619eaf8bd064f9c95ee9799338ed19402356651dced3e5f449b7a400f57f4097e9b8adc446acf8556565dd8f862000e805f62f18c6319c58", 0x5a}], 0x5}}], 0x2, 0x0) 18:06:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000000)=r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000000200)={'veth0_macvtap\x00', 0x2, 0xa1400000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="a53adb7f46c92b04d5d45e81cf0a7c8aa66d7132b42bc6d69422fe4c2485ef8f55afd4d91fa8bb01017f7d85a2b3b533b494fadd7687de2312b86ed248f35309839efd729889a169eb27fa9fc054016d9853190172ef3f38174d65de4ef1f16671423be28390b3cfa1286df075a63ce713a06fb76802", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r11, @ANYBLOB], 0x60}}, 0x0) 18:06:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x400300, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 668.505676] validate_nla: 10 callbacks suppressed [ 668.505685] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETFMTS(r7, 0x8004500b, &(0x7f0000000000)=0x401) 18:06:35 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xe, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x3, 0x3}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 668.799476] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:36 executing program 5 (fault-call:14 fault-nth:21): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) move_pages(0x0, 0x496, &(0x7f0000000040)=[&(0x7f0000002000/0x1000)=nil], &(0x7f00000000c0)=[0x1], &(0x7f00000000c0), 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) [ 668.940926] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:36 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xf, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="c16432f5a5a7a431c9479b01cff9919f71c5248309d818f80954347773939b97", 0x1}], 0x1}}], 0x400008d, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xec) getsockname$ax25(r6, &(0x7f0000000100)={{0x3, @null}, [@bcast, @netrom, @bcast, @null, @remote, @bcast, @rose, @null]}, &(0x7f0000000280)=0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @remote}}}, 0x84) [ 669.096979] FAULT_INJECTION: forcing a failure. [ 669.096979] name failslab, interval 1, probability 0, space 0, times 0 18:06:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) uname(&(0x7f00000002c0)=""/173) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) [ 669.144419] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 669.173286] CPU: 1 PID: 8143 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 669.181133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.190495] Call Trace: 18:06:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x1000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 669.193285] dump_stack+0x188/0x20d [ 669.196940] should_fail.cold+0xa/0x1b [ 669.200850] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 669.205973] ? __lock_is_held+0xad/0x140 [ 669.210060] __should_failslab+0x115/0x180 [ 669.214312] should_failslab+0x5/0xf [ 669.218036] kmem_cache_alloc+0x29f/0x710 [ 669.222196] ? anon_vma_clone+0x316/0x470 [ 669.226368] anon_vma_fork+0xed/0x490 [ 669.230177] ? dup_userfaultfd+0x157/0x6b0 [ 669.234422] ? memcpy+0x35/0x50 [ 669.237726] copy_process.part.0+0x3509/0x7a60 [ 669.242350] ? __cleanup_sighand+0x60/0x60 [ 669.246600] ? vfs_write+0x2e6/0x550 [ 669.250337] _do_fork+0x22f/0xf40 [ 669.253803] ? fork_idle+0x1e0/0x1e0 [ 669.257532] ? fput+0x2b/0x190 [ 669.260740] ? ksys_write+0x1c8/0x2a0 [ 669.264555] ? __ia32_sys_read+0xb0/0xb0 [ 669.268627] ? __ia32_sys_clock_settime+0x260/0x260 [ 669.273663] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.278429] ? trace_hardirqs_off_caller+0x55/0x210 [ 669.283462] ? do_syscall_64+0x21/0x620 [ 669.287456] do_syscall_64+0xf9/0x620 [ 669.291279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.296476] RIP: 0033:0x45c849 [ 669.299683] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.318605] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 669.326326] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 669.333697] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.340977] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 669.348264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 669.355548] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000015 18:06:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x0) 18:06:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x202000, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r5, 0xfffffffe}, 0x8) [ 669.476317] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:36 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x10, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x54000, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000100)=0x800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x36802, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='md5sum\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x0) 18:06:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x100, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x2, 0x0) [ 669.656951] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:37 executing program 5 (fault-call:14 fault-nth:22): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 669.736348] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$tun(r1, &(0x7f0000000440)={@void, @val={0x3, 0x0, 0x2, 0x9, 0x8, 0xffff}, @ipv4=@udp={{0x26, 0x4, 0x3, 0x7, 0x16c, 0x65, 0x0, 0x3f, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x1f, 0x7b, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @rand_addr=0x1ff, @rand_addr=0x202, @local]}, @timestamp_prespec={0x44, 0x3c, 0x9, 0x3, 0x0, [{@rand_addr=0x3, 0xffffffff}, {@multicast2, 0x8}, {@remote, 0x7}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1000}, {@local, 0x9}, {@multicast2, 0x46c}]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x1c, 0x75, 0x1, 0xf, [{@broadcast, 0x5}, {@rand_addr=0x6, 0x5e477dc2}, {@dev={0xac, 0x14, 0x14, 0x8}, 0x10001}]}, @lsrr={0x83, 0x7, 0x77, [@empty]}]}}, {0x4e21, 0x4e23, 0xd4, 0x0, @gue={{0x1, 0x0, 0x0, 0xfd, 0x100, @void}, "b85ad68ccdb3f10194be29e873cbb13a5bc0e55b971bb183e019c0669e5fb14671d9f0c7451753022fd0c30635b56793a4bc6dc8e3cbfd47fa0feb934a8e242ed9537d3128b0652f9a824f51c11d579f2dddddeba5b9b123628bd4a541a1c218e4ddc574a967a76ace6d4993e16da49d0c3c437f0bfbf931bd6cbbae6c221dfb58c21e52a80939b35c826ba931e4b575b6dd29dd062af04b01df61c339da898991000834dbb7c6980c1c53a9f31ffede2a06dedc86414235a26efb1b99c82c0857c0545273f0ab4c"}}}}, 0x176) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="92", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)=':', 0x1}], 0x1}}], 0x2, 0x0) 18:06:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x1, 0x0) r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x98428d57a99b5f44) io_setup(0xd, &(0x7f0000000100)=0x0) io_submit(r4, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x68b0957909bb127d}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8001}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r8, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x0) 18:06:37 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x48, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 669.866274] FAULT_INJECTION: forcing a failure. [ 669.866274] name failslab, interval 1, probability 0, space 0, times 0 [ 669.890950] CPU: 1 PID: 8446 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 669.898796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.908184] Call Trace: [ 669.910803] dump_stack+0x188/0x20d [ 669.914455] should_fail.cold+0xa/0x1b [ 669.918381] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 669.923513] ? __lock_is_held+0xad/0x140 [ 669.927601] __should_failslab+0x115/0x180 [ 669.931863] should_failslab+0x5/0xf [ 669.935597] kmem_cache_alloc+0x44/0x710 [ 669.939685] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 669.945162] anon_vma_clone+0xde/0x470 [ 669.949078] anon_vma_fork+0x82/0x490 [ 669.952880] ? dup_userfaultfd+0x157/0x6b0 [ 669.957138] ? memcpy+0x35/0x50 [ 669.960424] copy_process.part.0+0x3509/0x7a60 [ 669.965030] ? __cleanup_sighand+0x60/0x60 [ 669.969265] ? vfs_write+0x2e6/0x550 [ 669.972984] _do_fork+0x22f/0xf40 [ 669.976435] ? fork_idle+0x1e0/0x1e0 [ 669.980152] ? fput+0x2b/0x190 [ 669.983370] ? ksys_write+0x1c8/0x2a0 [ 669.987169] ? __ia32_sys_read+0xb0/0xb0 [ 669.991226] ? __ia32_sys_clock_settime+0x260/0x260 [ 669.996241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.000989] ? trace_hardirqs_off_caller+0x55/0x210 [ 670.006012] ? do_syscall_64+0x21/0x620 [ 670.009986] do_syscall_64+0xf9/0x620 [ 670.013788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.018975] RIP: 0033:0x45c849 [ 670.022201] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 670.041261] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 670.048992] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 670.056265] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.063530] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 670.070794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 670.078060] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000016 18:06:37 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x5, 0x2000) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000240)=r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="621a5b080000007a3bf1000089b7171e883788269b8e3a48b903941a3aca3fbd9648b3ef42e3596ae7b4eb504216774b3c4ef9bfafa9d03c9f62fc0f09c0cffa54f64f6e12f2b4ec7444364ac76b388f170d2eb95abc3c36de9c5da5575ad3f84b337531d09fad1c1dd01e841ac661e35e0255b0fcad41ba6b64cb4e33d8b79141a1acf818d05f12236be82159e2e034a3699645d1d97c0960a235a044da51e9bc64c567aaaeec7d3fe5d6adbcaf4987d04339", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800ff0300000000000054cc9a1dfe4b72364c22624450e66de3f64009f33af5b686dd7343a27138839727613136f3556c8d0224", @ANYRES32=r4, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)="16e33fec33a8b16a09bbcfb25fb2e98a2cac34c17887a6961e2660e6a2b76e81bd94c195e76a3040711aba0640e12c2d44cdf9c7f114a73046108fd29d712014058353cb9491f827908268165e284671240e04fbbff1f4c92d19d75933e0c3bed8f5b3429d337cc32577440b", 0x6c}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="34020354d92c504c292076c0b5dfa09cc43bee588b3b90ee37267ae100235c5dd8f4edafc6c301b0f6dbbb3f41638967f3f62c865433abac2d7b3d816bbf85103dba9f47e567b66a3262116063477148627e41ee4adf87b9fcddf171054d03a17a773562822ad90473e2f8e5ccd3ee3db7c0c7b1d4f5bbe90d426546ccdc2f95da6e048d851e06f25436ec9fab2c42e50c06f521f389c9d6778d", 0x9a}], 0x3, 0xea0) 18:06:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x3000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x80080, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x181400, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/216) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) 18:06:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000001, 0x50, r1, 0x634a1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) 18:06:37 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0xce9b, @loopback, 0x76b5bc19}}}, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 670.539500] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:37 executing program 5 (fault-call:14 fault-nth:23): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44}}]}, 0x60}}, 0x0) 18:06:37 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0xce9b, @loopback, 0x76b5bc19}}}, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x5000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 670.629736] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:37 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f7269747d000000000000000000000000000000000000000002000000000000000e00000008000400000000000800060005857c19c262579da978464615235cf0a8a37f3ed7de9590953fa39bd639dfbf8c0233b9a5b82f9c1257ff7f73310cbf784452e31ede40b1610e193569d1e79b82350855a27b2fbdaf384f1b09f3c41ca998a586ec46489bd50cd63a77319d80a4f414f2653d097351d21dd5", @ANYRES32=r5, @ANYBLOB], 0x60}}, 0x0) 18:06:38 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r9}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0xce9b, @loopback, 0x76b5bc19}}}, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 670.806807] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 670.820584] FAULT_INJECTION: forcing a failure. [ 670.820584] name failslab, interval 1, probability 0, space 0, times 0 [ 670.849473] CPU: 0 PID: 8828 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 670.857310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.866677] Call Trace: [ 670.869293] dump_stack+0x188/0x20d [ 670.872949] should_fail.cold+0xa/0x1b [ 670.876863] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 670.881994] ? __lock_is_held+0xad/0x140 [ 670.886109] __should_failslab+0x115/0x180 [ 670.890890] should_failslab+0x5/0xf [ 670.894622] kmem_cache_alloc+0x44/0x710 [ 670.898710] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 670.904193] anon_vma_clone+0xde/0x470 [ 670.908124] anon_vma_fork+0x82/0x490 [ 670.912118] ? dup_userfaultfd+0x157/0x6b0 [ 670.916371] ? memcpy+0x35/0x50 [ 670.920289] copy_process.part.0+0x3509/0x7a60 [ 670.924912] ? __cleanup_sighand+0x60/0x60 [ 670.929168] ? vfs_write+0x2e6/0x550 [ 670.933011] _do_fork+0x22f/0xf40 [ 670.936484] ? fork_idle+0x1e0/0x1e0 [ 670.940215] ? fput+0x2b/0x190 [ 670.943576] ? ksys_write+0x1c8/0x2a0 [ 670.947407] ? __ia32_sys_read+0xb0/0xb0 [ 670.951479] ? __ia32_sys_clock_settime+0x260/0x260 [ 670.956521] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.961291] ? trace_hardirqs_off_caller+0x55/0x210 [ 670.966328] ? do_syscall_64+0x21/0x620 [ 670.970451] do_syscall_64+0xf9/0x620 [ 670.974418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.979619] RIP: 0033:0x45c849 18:06:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x80000000, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4, 0x401}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={r8, 0x0, 0x7}) splice(r2, 0x0, r6, 0x0, 0x200000, 0x0) [ 670.982825] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 671.001744] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 671.009470] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 671.016756] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 671.024040] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 671.031409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 671.038696] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000017 18:06:38 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r8}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x6000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 671.085972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:06:38 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x60, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:38 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:38 executing program 5 (fault-call:14 fault-nth:24): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:38 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:38 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x68, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000002ac0)={0x0, @remote}, &(0x7f0000002b00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', r6}) write$9p(0xffffffffffffffff, &(0x7f0000000280)="39a24a05d1c6a7e45cf9b6a687fb32fdb279178bd797f1446204a94782d9a288c7c31edafe40610a1d5487a2f8262471f253d392457d99c2ebc5058f79be75ab9252b476caa0e8657dfada0edb760b2444b41e3f7a9e0f2c479befb94de86cd054c4011e3dfc308584cab1c08a1f0f0d8305bc924771a82b1b2c4112a599e329d76cd51f62d3c77a04f6ea0ba3ac8315da4a4dd2bc917feaba8ecc1c7a95582bcae6b97b35ce5915f4de272a9755095db750f7fb9bfc275f6f1152ed6c3c40624ba0107eba86426e0afc5fff413760414d1242754e1f9d7a98ded4ba12c62e59c12605e56793d286bd22a96786", 0xed) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r9, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60}}, {0x8, 0x6, r10}}}]}}]}, 0x60}}, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r11, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:06:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='7', 0xfffffffffffffdd8, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000000)={0x7, 0x11, 0x8, 0xd85a, "2951df91dac10681e9eddbd9a0a3a75153878dbd990495b1e574e89051bd7cb9"}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) [ 671.829366] FAULT_INJECTION: forcing a failure. [ 671.829366] name failslab, interval 1, probability 0, space 0, times 0 18:06:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x9000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 671.932948] CPU: 1 PID: 9042 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 671.940876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.950243] Call Trace: [ 671.952854] dump_stack+0x188/0x20d [ 671.956518] should_fail.cold+0xa/0x1b [ 671.960429] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 671.965633] ? __lock_is_held+0xad/0x140 [ 671.969717] __should_failslab+0x115/0x180 [ 671.973969] should_failslab+0x5/0xf [ 671.977698] kmem_cache_alloc+0x29f/0x710 [ 671.981859] ? alloc_pages_current+0x107/0x200 [ 671.986453] __pmd_alloc+0xbb/0x440 [ 671.990094] copy_page_range+0x1752/0x1e70 [ 671.994350] ? find_held_lock+0x2d/0x110 [ 671.998430] ? find_held_lock+0x2d/0x110 [ 672.002511] ? vma_compute_subtree_gap+0x152/0x230 [ 672.007454] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 672.012311] ? __vma_link_rb+0x251/0x360 [ 672.016404] copy_process.part.0+0x56f9/0x7a60 [ 672.021036] ? __cleanup_sighand+0x60/0x60 [ 672.025284] ? vfs_write+0x2e6/0x550 [ 672.029017] _do_fork+0x22f/0xf40 [ 672.032487] ? fork_idle+0x1e0/0x1e0 [ 672.036213] ? fput+0x2b/0x190 [ 672.039415] ? ksys_write+0x1c8/0x2a0 [ 672.043267] ? __ia32_sys_read+0xb0/0xb0 [ 672.047430] ? __ia32_sys_clock_settime+0x260/0x260 [ 672.052463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 672.057233] ? trace_hardirqs_off_caller+0x55/0x210 [ 672.062270] ? do_syscall_64+0x21/0x620 [ 672.066266] do_syscall_64+0xf9/0x620 [ 672.070085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.075287] RIP: 0033:0x45c849 [ 672.078489] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.097402] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 672.105168] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 672.112461] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.119749] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 18:06:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x44810, &(0x7f00006f7000)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 672.127116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 672.134398] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000018 18:06:39 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6c, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xa000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:39 executing program 5 (fault-call:14 fault-nth:25): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:39 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xb000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 672.808954] FAULT_INJECTION: forcing a failure. [ 672.808954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 672.845254] CPU: 0 PID: 9392 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 672.853095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.862468] Call Trace: [ 672.865082] dump_stack+0x188/0x20d [ 672.868747] should_fail.cold+0xa/0x1b [ 672.872660] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 672.877795] __alloc_pages_nodemask+0x1c7/0x6a0 [ 672.882484] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 672.887576] alloc_pages_current+0xff/0x200 [ 672.891925] get_zeroed_page+0x10/0x40 [ 672.895833] __pud_alloc+0x36/0x250 [ 672.899474] pud_alloc+0xd7/0x150 [ 672.902950] copy_page_range+0x364/0x1e70 [ 672.907117] ? find_held_lock+0x2d/0x110 [ 672.911193] ? find_held_lock+0x2d/0x110 [ 672.915278] ? vma_compute_subtree_gap+0x152/0x230 [ 672.920221] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 672.925077] ? __vma_link_rb+0x251/0x360 [ 672.929157] copy_process.part.0+0x56f9/0x7a60 [ 672.933778] ? __cleanup_sighand+0x60/0x60 [ 672.938027] ? vfs_write+0x2e6/0x550 [ 672.941765] _do_fork+0x22f/0xf40 [ 672.945238] ? fork_idle+0x1e0/0x1e0 [ 672.948962] ? fput+0x2b/0x190 [ 672.952215] ? ksys_write+0x1c8/0x2a0 [ 672.956034] ? __ia32_sys_read+0xb0/0xb0 [ 672.960107] ? __ia32_sys_clock_settime+0x260/0x260 [ 672.965143] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 672.969914] ? trace_hardirqs_off_caller+0x55/0x210 [ 672.975091] ? do_syscall_64+0x21/0x620 [ 672.979088] do_syscall_64+0xf9/0x620 [ 672.982918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.988127] RIP: 0033:0x45c849 18:06:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ftruncate(r3, 0x3) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x6, 0x84, 0x9f1, {0x7223, 0x1}, 0x1, 0x40}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000080)={0xc029}) splice(r0, 0x0, r5, 0x0, 0x200000, 0x0) 18:06:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xc000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 672.991337] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.010440] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 673.018169] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 673.025459] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.032747] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 673.040066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 673.047351] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000019 18:06:40 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:40 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) socket$inet(0x2, 0x4000000805, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:40 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1f500, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xe000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:40 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 673.572567] validate_nla: 12 callbacks suppressed [ 673.572575] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:40 executing program 5 (fault-call:14 fault-nth:26): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:40 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xf000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:40 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x9c) accept$netrom(r2, &(0x7f0000000600)={{}, [@null, @remote, @netrom, @remote, @null, @default, @null, @netrom]}, &(0x7f0000000280)=0x48) r3 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x9c) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000002c0)={0x4, &(0x7f0000000400)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000300)={r4, 0x8}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000300)={r4, 0x5, &(0x7f0000000000)=[0x4, 0x40, 0x6, 0x3, 0x5], &(0x7f0000000100)=[0x1], 0x4, 0x1, 0x8, &(0x7f0000000200)=[0x8], &(0x7f00000002c0)=[0x3, 0x80000001, 0x4, 0x6]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0f0000eb06010006007465610600000e69"], 0xf) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000074ddaaa690e32228045f660000000100000008100100687c75fd526689de87b9d486b0444f83b662da752cf626b8292e9c1c28a46abca381845cc34acebd5600", @ANYRES32=r6, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r9, @ANYBLOB="3435f6c5e02be275a219774698de1c91e4d7a07d44ebf54be7c24fa8636554b1d1f80ff3e0ffe1f4edbdd79c684dbc7dd0d3603c451d91456068c954ab5785672e424964500b9083145d41ee0cd621b7397019f162921ecb6ae5bab3488b"], 0x60}}, 0x0) [ 673.785161] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x2, 0x7e647a15, 0x2, 0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x20, 0x5]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xdc}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x68}}, 0x24008054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}]}, 0x60}}, 0x0) 18:06:41 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="12000098e5229d4644454352e0217d10d9606850a688d5d300d5cc4fce000027d1ad1100775d2ede108c0f28d931852de037c1131973fd14401c9fe85da3a70e490640e4701977a303a633b627d718eeb7c80400000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7, 0x502a, 0x81, 0x5, 0x0, 0x7}, &(0x7f0000000080)=0x14) r8 = accept4$alg(r3, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r8, 0x0, 0x200000, 0x0) 18:06:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x10000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 673.862496] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 673.883702] FAULT_INJECTION: forcing a failure. [ 673.883702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:06:41 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 673.944512] CPU: 1 PID: 9875 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 673.952350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.961800] Call Trace: [ 673.964401] dump_stack+0x188/0x20d [ 673.968085] should_fail.cold+0xa/0x1b [ 673.972004] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 673.977139] __alloc_pages_nodemask+0x1c7/0x6a0 [ 673.981835] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 673.986888] alloc_pages_current+0xff/0x200 [ 673.991238] get_zeroed_page+0x10/0x40 [ 673.995142] __pud_alloc+0x36/0x250 [ 673.998802] pud_alloc+0xd7/0x150 [ 674.002283] copy_page_range+0x364/0x1e70 [ 674.006454] ? find_held_lock+0x2d/0x110 [ 674.010534] ? find_held_lock+0x2d/0x110 [ 674.014620] ? vma_compute_subtree_gap+0x152/0x230 [ 674.019566] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 674.024455] ? __vma_link_rb+0x251/0x360 [ 674.028538] copy_process.part.0+0x56f9/0x7a60 [ 674.033165] ? __cleanup_sighand+0x60/0x60 [ 674.037586] ? vfs_write+0x2e6/0x550 [ 674.041341] _do_fork+0x22f/0xf40 18:06:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @rand_addr="11b21a3e4439f9465f7a6e04076f75c4", 0x7ff}, {0xa, 0x4e21, 0x1, @local, 0x1000}, 0xffff, [0x1, 0x4, 0xffffffff, 0x4, 0x3, 0xaf, 0xffffffff, 0x6]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timerfd_gettime(r9, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000ff01000000", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f7269747900000000000000000000000000000000000000000000000003c4d2b59147489934035d82f5930000ee0e0000", @ANYRES32=r5, @ANYBLOB], 0x60}}, 0x0) [ 674.044850] ? fork_idle+0x1e0/0x1e0 [ 674.048591] ? fput+0x2b/0x190 [ 674.051954] ? ksys_write+0x1c8/0x2a0 [ 674.055773] ? __ia32_sys_read+0xb0/0xb0 [ 674.059848] ? __ia32_sys_clock_settime+0x260/0x260 [ 674.064933] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 674.069709] ? trace_hardirqs_off_caller+0x55/0x210 [ 674.074843] ? do_syscall_64+0x21/0x620 [ 674.078842] do_syscall_64+0xf9/0x620 [ 674.082663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.087859] RIP: 0033:0x45c849 18:06:41 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 674.091060] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.109989] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 674.117802] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 674.125079] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.132363] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 674.139649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 674.146933] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000001a [ 674.169603] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. 18:06:41 executing program 5 (fault-call:14 fault-nth:27): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:41 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x500, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:41 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000002c0)="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") ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000aa6e000000000000000800010027d956e6ba6a7ee8e749093f291328ec9bd6ef60679615916a8327633e662ab7209070a5853881ae187833b54fcee9ede6d6352c679b42c5c6780558e6e30f43421e548aed9f8763f55de619d40da70ecf87bd97881e3cba5e362b644c857ecb88b8f931", @ANYRES32=r3, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB], 0x60}}, 0x0) 18:06:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x1c000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000000)=0x7, 0x4) 18:06:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0xfffffffffffffed7, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @activeport={{0x0, 0x1, 'activeport\x00'}, {}, {0x0, 0x4, r2}}}]}}]}, 0x60}}, 0x0) 18:06:41 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 674.710826] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 674.724860] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 674.737119] FAULT_INJECTION: forcing a failure. [ 674.737119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:06:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x20020000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 674.758333] CPU: 1 PID: 10020 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 674.766256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.775627] Call Trace: [ 674.778274] dump_stack+0x188/0x20d [ 674.781927] should_fail.cold+0xa/0x1b [ 674.785840] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 674.790980] __alloc_pages_nodemask+0x1c7/0x6a0 [ 674.795664] ? __pud_alloc+0x1ce/0x250 [ 674.799572] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 674.804622] alloc_pages_current+0xff/0x200 18:06:42 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 674.808961] __pmd_alloc+0x37/0x440 [ 674.812605] copy_page_range+0x1752/0x1e70 [ 674.816861] ? find_held_lock+0x2d/0x110 [ 674.820971] ? find_held_lock+0x2d/0x110 [ 674.825046] ? vma_compute_subtree_gap+0x152/0x230 [ 674.829990] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 674.834866] ? __vma_link_rb+0x251/0x360 [ 674.839081] copy_process.part.0+0x56f9/0x7a60 [ 674.843705] ? __cleanup_sighand+0x60/0x60 [ 674.847958] ? vfs_write+0x2e6/0x550 [ 674.851751] _do_fork+0x22f/0xf40 [ 674.855214] ? fork_idle+0x1e0/0x1e0 [ 674.859002] ? fput+0x2b/0x190 [ 674.862210] ? ksys_write+0x1c8/0x2a0 [ 674.866075] ? __ia32_sys_read+0xb0/0xb0 [ 674.870271] ? __ia32_sys_clock_settime+0x260/0x260 [ 674.875301] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 674.880103] ? trace_hardirqs_off_caller+0x55/0x210 [ 674.885143] ? do_syscall_64+0x21/0x620 [ 674.889134] do_syscall_64+0xf9/0x620 [ 674.892956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.898161] RIP: 0033:0x45c849 [ 674.901362] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.920435] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 674.928159] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 674.935453] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.942842] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 674.950132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 674.957451] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000001b 18:06:42 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 675.038583] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x37f251d4, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:42 executing program 5 (fault-call:14 fault-nth:28): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:42 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:42 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/88) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x470, 0x30, 0x1, 0x0, 0x0, {}, [{0x45c, 0x1, [@m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}, @TCA_POLICE_RATE={0x404}]]}, {0x4}}}]}]}, 0x470}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:06:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x3f000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 675.499377] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:42 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 675.648609] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 675.675843] FAULT_INJECTION: forcing a failure. [ 675.675843] name failslab, interval 1, probability 0, space 0, times 0 18:06:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x40000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 675.695919] CPU: 1 PID: 10390 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 675.703834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.713204] Call Trace: [ 675.715813] dump_stack+0x188/0x20d [ 675.719471] should_fail.cold+0xa/0x1b [ 675.723391] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 675.728512] ? find_held_lock+0x2d/0x110 [ 675.732584] __should_failslab+0x115/0x180 [ 675.736830] should_failslab+0x5/0xf [ 675.740556] kmem_cache_alloc+0x44/0x710 [ 675.744635] ? __lock_is_held+0xad/0x140 [ 675.748723] anon_vma_clone+0xde/0x470 [ 675.752632] anon_vma_fork+0x82/0x490 [ 675.756445] ? dup_userfaultfd+0x157/0x6b0 [ 675.760690] ? memcpy+0x35/0x50 [ 675.763997] copy_process.part.0+0x3509/0x7a60 [ 675.768620] ? __cleanup_sighand+0x60/0x60 [ 675.772867] ? vfs_write+0x2e6/0x550 [ 675.776608] _do_fork+0x22f/0xf40 [ 675.780076] ? fork_idle+0x1e0/0x1e0 [ 675.783798] ? fput+0x2b/0x190 [ 675.787006] ? ksys_write+0x1c8/0x2a0 [ 675.790818] ? __ia32_sys_read+0xb0/0xb0 18:06:43 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x700, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:43 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r0, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 675.794890] ? __ia32_sys_clock_settime+0x260/0x260 [ 675.799924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.804735] ? trace_hardirqs_off_caller+0x55/0x210 [ 675.809766] ? do_syscall_64+0x21/0x620 [ 675.813874] do_syscall_64+0xf9/0x620 [ 675.817699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.822899] RIP: 0033:0x45c849 [ 675.826099] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 675.845008] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 675.852731] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 675.860017] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.867300] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 675.874593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 675.881872] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000001c 18:06:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x44030000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:43 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r0, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 675.974637] netlink: 1040 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.017040] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:43 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="080db5ff0b8b07df500e21bc73ffffffffffffff") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r0, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 676.143400] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:43 executing program 5 (fault-call:14 fault-nth:29): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) r3 = gettid() ptrace$getenv(0x4201, r3, 0x4, 0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/ipc\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) mmap(&(0x7f0000132000/0x4000)=nil, 0x4000, 0x3, 0x8031, r4, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000180), 0x2) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r7, 0x0, 0x200000, 0x0) 18:06:43 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x60000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:43 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xa00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) [ 676.537785] FAULT_INJECTION: forcing a failure. [ 676.537785] name failslab, interval 1, probability 0, space 0, times 0 [ 676.567862] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 676.570592] CPU: 0 PID: 10717 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 676.583279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.592644] Call Trace: [ 676.595248] dump_stack+0x188/0x20d [ 676.598899] should_fail.cold+0xa/0x1b [ 676.602808] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 676.607925] ? __lock_is_held+0xad/0x140 [ 676.612007] __should_failslab+0x115/0x180 [ 676.616238] should_failslab+0x5/0xf [ 676.619942] kmem_cache_alloc+0x29f/0x710 [ 676.624087] ptlock_alloc+0x1d/0x70 [ 676.627711] pte_alloc_one+0x68/0x190 [ 676.631507] __pte_alloc+0x25/0x350 [ 676.635134] copy_page_range+0x159a/0x1e70 [ 676.639373] ? find_held_lock+0x2d/0x110 [ 676.643523] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 676.648366] ? __vma_link_rb+0x251/0x360 [ 676.652427] copy_process.part.0+0x56f9/0x7a60 [ 676.657030] ? __cleanup_sighand+0x60/0x60 [ 676.661264] ? vfs_write+0x2e6/0x550 [ 676.664978] _do_fork+0x22f/0xf40 [ 676.668428] ? fork_idle+0x1e0/0x1e0 [ 676.672138] ? fput+0x2b/0x190 [ 676.675321] ? ksys_write+0x1c8/0x2a0 [ 676.679119] ? __ia32_sys_read+0xb0/0xb0 [ 676.683175] ? __ia32_sys_clock_settime+0x260/0x260 [ 676.688194] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.692941] ? trace_hardirqs_off_caller+0x55/0x210 [ 676.697971] ? do_syscall_64+0x21/0x620 [ 676.702121] do_syscall_64+0xf9/0x620 [ 676.705940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.711730] RIP: 0033:0x45c849 [ 676.714925] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.733818] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 676.741533] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 676.748798] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 676.756060] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 676.763328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 676.770590] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000001d 18:06:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x65580000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x80000800, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:44 executing program 5 (fault-call:14 fault-nth:30): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:44 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xc00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x81000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000b2b000/0x1000)=nil, 0x1000, 0x200000e, 0x20010, r3, 0x39e91000) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r5, 0x0, 0x200000, 0x0) 18:06:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 677.593925] FAULT_INJECTION: forcing a failure. [ 677.593925] name failslab, interval 1, probability 0, space 0, times 0 [ 677.670723] CPU: 1 PID: 11054 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 677.678650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.688102] Call Trace: [ 677.690712] dump_stack+0x188/0x20d [ 677.694363] should_fail.cold+0xa/0x1b [ 677.698278] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 677.703394] ? __lock_is_held+0xad/0x140 [ 677.707502] __should_failslab+0x115/0x180 [ 677.711760] should_failslab+0x5/0xf [ 677.715486] kmem_cache_alloc+0x29f/0x710 18:06:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 677.719680] vm_area_dup+0x1c/0x170 [ 677.723329] copy_process.part.0+0x342b/0x7a60 [ 677.727963] ? __cleanup_sighand+0x60/0x60 [ 677.732212] ? vfs_write+0x2e6/0x550 [ 677.735951] _do_fork+0x22f/0xf40 [ 677.739421] ? fork_idle+0x1e0/0x1e0 [ 677.743159] ? fput+0x2b/0x190 [ 677.746369] ? ksys_write+0x1c8/0x2a0 [ 677.750190] ? __ia32_sys_read+0xb0/0xb0 [ 677.754264] ? __ia32_sys_clock_settime+0x260/0x260 [ 677.759295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.764063] ? trace_hardirqs_off_caller+0x55/0x210 18:06:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 677.769096] ? do_syscall_64+0x21/0x620 [ 677.773085] do_syscall_64+0xf9/0x620 [ 677.776907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.782104] RIP: 0033:0x45c849 [ 677.785306] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.804225] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 677.811953] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 18:06:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000700)={0x0, 0xfb, 0x1015, 0x0, 0x8, "719c42d1063e567914175b94ab2d0158", "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"}, 0x1015, 0x1) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0x200000, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) sendfile(r6, r7, &(0x7f0000000080)=0x1, 0x7) [ 677.819235] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.826518] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 677.833810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 677.841097] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000001e 18:06:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x96030000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:45 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xe00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:45 executing program 5 (fault-call:14 fault-nth:31): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:45 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xf00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 678.603981] FAULT_INJECTION: forcing a failure. [ 678.603981] name failslab, interval 1, probability 0, space 0, times 0 [ 678.629483] validate_nla: 6 callbacks suppressed [ 678.629491] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 678.646040] CPU: 1 PID: 11410 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 678.653956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.663323] Call Trace: [ 678.665935] dump_stack+0x188/0x20d [ 678.669584] should_fail.cold+0xa/0x1b [ 678.673497] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 678.678635] ? __lock_is_held+0xad/0x140 [ 678.682723] __should_failslab+0x115/0x180 [ 678.687065] should_failslab+0x5/0xf [ 678.690794] kmem_cache_alloc+0x29f/0x710 [ 678.694966] ? anon_vma_clone+0x316/0x470 [ 678.699131] anon_vma_fork+0xed/0x490 [ 678.703023] ? dup_userfaultfd+0x157/0x6b0 [ 678.707252] ? memcpy+0x35/0x50 [ 678.710529] copy_process.part.0+0x3509/0x7a60 [ 678.715239] ? __cleanup_sighand+0x60/0x60 [ 678.719474] ? vfs_write+0x2e6/0x550 [ 678.723316] _do_fork+0x22f/0xf40 [ 678.726771] ? fork_idle+0x1e0/0x1e0 [ 678.730475] ? fput+0x2b/0x190 [ 678.733679] ? ksys_write+0x1c8/0x2a0 [ 678.737483] ? __ia32_sys_read+0xb0/0xb0 [ 678.741539] ? __ia32_sys_clock_settime+0x260/0x260 [ 678.746570] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 678.751319] ? trace_hardirqs_off_caller+0x55/0x210 [ 678.756329] ? do_syscall_64+0x21/0x620 [ 678.760301] do_syscall_64+0xf9/0x620 [ 678.764101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.769280] RIP: 0033:0x45c849 [ 678.772467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.791367] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 18:06:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xd451f237, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 678.799247] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 678.806507] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 678.813768] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 678.821028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 678.828288] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000001f 18:06:46 executing program 5 (fault-call:14 fault-nth:32): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xe7380000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:46 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x2000, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x98c4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) r9 = accept4$alg(r2, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r10, 0x0, r9, 0x0, 0x200000, 0x0) 18:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) [ 679.470600] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) [ 679.538530] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:46 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x3f00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 679.579082] FAULT_INJECTION: forcing a failure. [ 679.579082] name failslab, interval 1, probability 0, space 0, times 0 [ 679.651291] CPU: 0 PID: 11737 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 679.659222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.668583] Call Trace: [ 679.671180] dump_stack+0x188/0x20d [ 679.674812] should_fail.cold+0xa/0x1b [ 679.678702] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 679.683832] ? find_held_lock+0x2d/0x110 [ 679.687929] __should_failslab+0x115/0x180 [ 679.692174] should_failslab+0x5/0xf [ 679.695885] kmem_cache_alloc+0x44/0x710 [ 679.699950] ? __lock_is_held+0xad/0x140 [ 679.704016] anon_vma_clone+0xde/0x470 [ 679.707916] anon_vma_fork+0x82/0x490 [ 679.711714] ? dup_userfaultfd+0x157/0x6b0 [ 679.715956] ? memcpy+0x35/0x50 [ 679.719233] copy_process.part.0+0x3509/0x7a60 [ 679.723985] ? __cleanup_sighand+0x60/0x60 [ 679.728235] ? vfs_write+0x2e6/0x550 [ 679.731960] _do_fork+0x22f/0xf40 [ 679.735412] ? fork_idle+0x1e0/0x1e0 [ 679.739141] ? fput+0x2b/0x190 [ 679.742332] ? ksys_write+0x1c8/0x2a0 [ 679.746135] ? __ia32_sys_read+0xb0/0xb0 [ 679.750205] ? __ia32_sys_clock_settime+0x260/0x260 [ 679.755220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 679.759981] ? trace_hardirqs_off_caller+0x55/0x210 [ 679.765013] ? do_syscall_64+0x21/0x620 [ 679.769077] do_syscall_64+0xf9/0x620 [ 679.772885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.778073] RIP: 0033:0x45c849 [ 679.781266] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) [ 679.800172] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 679.807879] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 679.815150] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.822427] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 679.829714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 679.837085] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000020 18:06:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfa020000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 680.052839] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 680.199744] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:47 executing program 5 (fault-call:14 fault-nth:33): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000b332a02db89108f265d16f8ab9296959c575bca33d60fd0f883d8e1c113abd4b3a0c302e74b6a3f8127016721b9756a1f965812c0a49001a0d26e31516fd80f1cd3b6d1a36a5", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r7, 0x80000000}, &(0x7f0000000140)=0x8) r8 = accept4$alg(r3, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r8, 0x0, 0x200000, 0x0) 18:06:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfb030000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:47 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4000, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 680.417794] FAULT_INJECTION: forcing a failure. [ 680.417794] name failslab, interval 1, probability 0, space 0, times 0 [ 680.470624] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 680.488600] CPU: 0 PID: 11973 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 680.496523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.505902] Call Trace: [ 680.508523] dump_stack+0x188/0x20d [ 680.512185] should_fail.cold+0xa/0x1b [ 680.516113] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 680.521245] ? __lock_is_held+0xad/0x140 [ 680.525338] __should_failslab+0x115/0x180 [ 680.529593] should_failslab+0x5/0xf [ 680.533326] kmem_cache_alloc+0x44/0x710 [ 680.537409] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 680.542897] anon_vma_clone+0xde/0x470 [ 680.546814] anon_vma_fork+0x82/0x490 [ 680.550629] ? dup_userfaultfd+0x157/0x6b0 [ 680.554876] ? memcpy+0x35/0x50 [ 680.558180] copy_process.part.0+0x3509/0x7a60 [ 680.562810] ? __cleanup_sighand+0x60/0x60 [ 680.567065] ? vfs_write+0x2e6/0x550 [ 680.570812] _do_fork+0x22f/0xf40 [ 680.574285] ? fork_idle+0x1e0/0x1e0 [ 680.578014] ? fput+0x2b/0x190 [ 680.581353] ? ksys_write+0x1c8/0x2a0 [ 680.585168] ? __ia32_sys_read+0xb0/0xb0 [ 680.589384] ? __ia32_sys_clock_settime+0x260/0x260 [ 680.594428] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 680.599309] ? trace_hardirqs_off_caller+0x55/0x210 [ 680.604343] ? do_syscall_64+0x21/0x620 [ 680.608341] do_syscall_64+0xf9/0x620 [ 680.612158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.617357] RIP: 0033:0x45c849 [ 680.620560] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 680.639611] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 680.647346] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 680.654646] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 680.661962] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 18:06:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfc020000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 680.669246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 680.676627] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000021 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfc030000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 680.771835] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:48 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4800, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 681.011483] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 681.101238] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:48 executing program 5 (fault-call:14 fault-nth:34): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfe030000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=r0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) accept4(r2, 0x0, 0x0, 0x0) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") splice(r0, 0x0, r7, 0x0, 0x200000, 0x0) 18:06:48 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4c00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 681.353914] FAULT_INJECTION: forcing a failure. [ 681.353914] name failslab, interval 1, probability 0, space 0, times 0 [ 681.408060] CPU: 1 PID: 12421 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 681.415989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.425511] Call Trace: [ 681.428240] dump_stack+0x188/0x20d [ 681.431911] should_fail.cold+0xa/0x1b [ 681.435935] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 681.441063] ? __lock_is_held+0xad/0x140 [ 681.445165] __should_failslab+0x115/0x180 [ 681.449419] should_failslab+0x5/0xf [ 681.453163] kmem_cache_alloc+0x29f/0x710 [ 681.457333] ? anon_vma_clone+0x316/0x470 [ 681.461511] anon_vma_fork+0xed/0x490 [ 681.465325] ? dup_userfaultfd+0x157/0x6b0 [ 681.469572] ? memcpy+0x35/0x50 [ 681.472865] copy_process.part.0+0x3509/0x7a60 [ 681.477489] ? __cleanup_sighand+0x60/0x60 [ 681.481748] ? vfs_write+0x2e6/0x550 [ 681.485494] _do_fork+0x22f/0xf40 [ 681.488966] ? fork_idle+0x1e0/0x1e0 [ 681.492689] ? fput+0x2b/0x190 [ 681.496046] ? ksys_write+0x1c8/0x2a0 [ 681.499870] ? __ia32_sys_read+0xb0/0xb0 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 681.503954] ? __ia32_sys_clock_settime+0x260/0x260 [ 681.508996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 681.513768] ? trace_hardirqs_off_caller+0x55/0x210 [ 681.518807] ? do_syscall_64+0x21/0x620 [ 681.522805] do_syscall_64+0xf9/0x620 [ 681.526631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.531833] RIP: 0033:0x45c849 [ 681.535039] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfff00000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 681.553958] RSP: 002b:00007fa2bf22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 681.561685] RAX: ffffffffffffffda RBX: 00007fa2bf22b6d4 RCX: 000000000045c849 [ 681.569164] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.576451] RBP: 000000000076c040 R08: ffffffffffffffff R09: 0000000000000000 [ 681.584258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 681.591574] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000022 18:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 681.792894] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:49 executing program 5 (fault-call:14 fault-nth:35): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9c0000, 0x1ff, 0x9, r1, 0x0, &(0x7f0000000080)={0x9b0940, 0x1, [], @p_u16=&(0x7f0000000000)=0xfff8}}) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000180)=0x3, 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r5, 0x0, 0x200000, 0x0) 18:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:49 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x5865, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 682.277812] FAULT_INJECTION: forcing a failure. [ 682.277812] name failslab, interval 1, probability 0, space 0, times 0 [ 682.326336] CPU: 1 PID: 12661 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 682.334270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.343725] Call Trace: [ 682.346334] dump_stack+0x188/0x20d [ 682.350005] should_fail.cold+0xa/0x1b [ 682.353921] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 682.359056] ? __lock_is_held+0xad/0x140 [ 682.363150] __should_failslab+0x115/0x180 [ 682.367408] should_failslab+0x5/0xf [ 682.371230] kmem_cache_alloc+0x44/0x710 [ 682.375331] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 682.380804] anon_vma_clone+0xde/0x470 [ 682.384714] anon_vma_fork+0x82/0x490 [ 682.388528] ? dup_userfaultfd+0x157/0x6b0 [ 682.392945] ? memcpy+0x35/0x50 [ 682.396256] copy_process.part.0+0x3509/0x7a60 [ 682.400896] ? __cleanup_sighand+0x60/0x60 [ 682.408073] ? vfs_write+0x2e6/0x550 [ 682.411819] _do_fork+0x22f/0xf40 [ 682.415297] ? fork_idle+0x1e0/0x1e0 [ 682.419025] ? fput+0x2b/0x190 [ 682.422243] ? ksys_write+0x1c8/0x2a0 [ 682.426098] ? __ia32_sys_read+0xb0/0xb0 [ 682.430178] ? __ia32_sys_clock_settime+0x260/0x260 [ 682.435224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 682.440018] ? trace_hardirqs_off_caller+0x55/0x210 [ 682.445054] ? do_syscall_64+0x21/0x620 [ 682.449050] do_syscall_64+0xf9/0x620 [ 682.452936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.458141] RIP: 0033:0x45c849 18:06:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 682.461349] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.480443] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 682.488261] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 682.495546] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.502838] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 682.510122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 682.517427] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000023 18:06:49 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6000, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000680)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000), 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x8040) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f00000002c0)={0x80000001, 0x4, 0x4, 0x4, 0x9, {0x77359400}, {0x1, 0x2, 0x8, 0xa8, 0x9, 0x0, "13576784"}, 0x5, 0x0, @planes=&(0x7f0000000100)={0x800, 0x3, @fd=r10, 0x7fffffff}, 0x80}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x0, 0x2, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x1) 18:06:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:50 executing program 5 (fault-call:14 fault-nth:36): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:50 executing program 3: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xe00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:50 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6558, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r6, 0x0, 0x200000, 0x0) 18:06:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 683.432991] device gretap0 entered promiscuous mode [ 683.482236] device gretap0 left promiscuous mode [ 683.489340] FAULT_INJECTION: forcing a failure. [ 683.489340] name failslab, interval 1, probability 0, space 0, times 0 18:06:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e88930", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 683.552537] CPU: 0 PID: 13095 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 683.561773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.571169] Call Trace: [ 683.573788] dump_stack+0x188/0x20d [ 683.577450] should_fail.cold+0xa/0x1b [ 683.582074] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 683.587199] ? __lock_is_held+0xad/0x140 [ 683.591292] __should_failslab+0x115/0x180 [ 683.595547] should_failslab+0x5/0xf [ 683.599275] kmem_cache_alloc+0x29f/0x710 [ 683.603435] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 683.608302] ? vma_compute_subtree_gap+0x152/0x230 [ 683.613249] vm_area_dup+0x1c/0x170 [ 683.616900] copy_process.part.0+0x342b/0x7a60 [ 683.621526] ? __cleanup_sighand+0x60/0x60 [ 683.625780] ? vfs_write+0x2e6/0x550 [ 683.629780] _do_fork+0x22f/0xf40 [ 683.633250] ? fork_idle+0x1e0/0x1e0 [ 683.636986] ? fput+0x2b/0x190 [ 683.640333] ? ksys_write+0x1c8/0x2a0 [ 683.644150] ? __ia32_sys_read+0xb0/0xb0 [ 683.648246] ? __ia32_sys_clock_settime+0x260/0x260 [ 683.653896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 683.658772] ? trace_hardirqs_off_caller+0x55/0x210 [ 683.663845] ? do_syscall_64+0x21/0x620 [ 683.667844] do_syscall_64+0xf9/0x620 [ 683.671665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.676961] RIP: 0033:0x45c849 [ 683.680170] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.700170] RSP: 002b:00007fa2bf22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 683.707933] RAX: ffffffffffffffda RBX: 00007fa2bf22b6d4 RCX: 000000000045c849 [ 683.715629] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.723019] RBP: 000000000076c040 R08: ffffffffffffffff R09: 0000000000000000 [ 683.730403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 683.737691] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000024 18:06:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e88930", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 683.754082] validate_nla: 7 callbacks suppressed [ 683.754091] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:51 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6800, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e88930", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 683.988892] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 684.041003] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:51 executing program 5 (fault-call:14 fault-nth:37): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) uname(&(0x7f0000000000)=""/18) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:06:51 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6c00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 684.302772] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 684.379199] FAULT_INJECTION: forcing a failure. [ 684.379199] name failslab, interval 1, probability 0, space 0, times 0 [ 684.407420] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 684.475124] CPU: 1 PID: 13251 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 684.483059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.492427] Call Trace: [ 684.495044] dump_stack+0x188/0x20d [ 684.498821] should_fail.cold+0xa/0x1b [ 684.502739] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 684.507865] ? __lock_is_held+0xad/0x140 [ 684.512065] __should_failslab+0x115/0x180 [ 684.516320] should_failslab+0x5/0xf [ 684.520043] kmem_cache_alloc+0x44/0x710 [ 684.524117] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 684.529624] anon_vma_clone+0xde/0x470 [ 684.533539] anon_vma_fork+0x82/0x490 [ 684.537490] ? dup_userfaultfd+0x157/0x6b0 [ 684.541749] ? memcpy+0x35/0x50 [ 684.545045] copy_process.part.0+0x3509/0x7a60 [ 684.549673] ? __cleanup_sighand+0x60/0x60 [ 684.553931] ? vfs_write+0x2e6/0x550 [ 684.557692] _do_fork+0x22f/0xf40 [ 684.561165] ? fork_idle+0x1e0/0x1e0 [ 684.564894] ? fput+0x2b/0x190 [ 684.568103] ? ksys_write+0x1c8/0x2a0 [ 684.571921] ? __ia32_sys_read+0xb0/0xb0 [ 684.576006] ? __ia32_sys_clock_settime+0x260/0x260 [ 684.581041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 684.585814] ? trace_hardirqs_off_caller+0x55/0x210 [ 684.590849] ? do_syscall_64+0x21/0x620 [ 684.594839] do_syscall_64+0xf9/0x620 [ 684.598654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.603858] RIP: 0033:0x45c849 [ 684.607072] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e0000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 684.625991] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 684.633721] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 684.641009] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.648392] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 684.655768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 684.663045] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000025 18:06:52 executing program 5 (fault-call:14 fault-nth:38): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x3, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:52 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x7400, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e0000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r11 = gettid() ptrace$getenv(0x4201, r11, 0x4, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, r7, r9, 0x48, 0x5}, 0x3, 0x9, 0x0, 0x100000000, r10, r11, 0x1000}) ioctl(r5, 0x201, &(0x7f00000001c0)="080db5055e0bcfe847fc71") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:06:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e0000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 685.168994] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 685.233964] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 685.242674] FAULT_INJECTION: forcing a failure. [ 685.242674] name failslab, interval 1, probability 0, space 0, times 0 [ 685.283627] CPU: 1 PID: 13554 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 685.291904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.301271] Call Trace: [ 685.303884] dump_stack+0x188/0x20d [ 685.307543] should_fail.cold+0xa/0x1b [ 685.311454] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 685.316574] ? __lock_is_held+0xad/0x140 [ 685.320683] __should_failslab+0x115/0x180 [ 685.324955] should_failslab+0x5/0xf [ 685.328712] kmem_cache_alloc+0x29f/0x710 [ 685.332886] ? anon_vma_clone+0x316/0x470 [ 685.337062] anon_vma_fork+0xed/0x490 [ 685.340883] ? dup_userfaultfd+0x157/0x6b0 [ 685.345131] ? memcpy+0x35/0x50 [ 685.348431] copy_process.part.0+0x3509/0x7a60 [ 685.353058] ? __cleanup_sighand+0x60/0x60 [ 685.357311] ? vfs_write+0x2e6/0x550 [ 685.361056] _do_fork+0x22f/0xf40 [ 685.364611] ? fork_idle+0x1e0/0x1e0 [ 685.368329] ? fput+0x2b/0x190 [ 685.371517] ? ksys_write+0x1c8/0x2a0 [ 685.375315] ? __ia32_sys_read+0xb0/0xb0 [ 685.379375] ? __ia32_sys_clock_settime+0x260/0x260 [ 685.384394] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 685.389149] ? trace_hardirqs_off_caller+0x55/0x210 [ 685.394165] ? do_syscall_64+0x21/0x620 [ 685.398162] do_syscall_64+0xf9/0x620 [ 685.401964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.407149] RIP: 0033:0x45c849 [ 685.410340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x4, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 685.429249] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 685.436956] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 685.444223] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.451533] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 685.458813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 685.466086] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000026 18:06:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:53 executing program 5 (fault-call:14 fault-nth:39): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:53 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x7a00, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x5, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000300)={0x2, r1}) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000000)=""/51, &(0x7f0000000080)=0x33) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000303000008000300", @ANYRES32=r7, @ANYBLOB="e934b9b8000000e8252eee7878b3be77106200"/29], 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="101c2dbd7000fbdbdf25090000cdf43f73a3de20fc445eae8c5e5989b7500b2eff10d95b8e09589109bd000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) splice(r0, 0x0, r8, 0x0, 0x200000, 0x0) 18:06:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e0000000800040000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 686.018618] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x6, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 686.080839] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 686.114246] FAULT_INJECTION: forcing a failure. [ 686.114246] name failslab, interval 1, probability 0, space 0, times 0 [ 686.166427] CPU: 0 PID: 13844 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 686.174387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.183759] Call Trace: [ 686.186371] dump_stack+0x188/0x20d [ 686.190479] should_fail.cold+0xa/0x1b [ 686.194390] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 686.199624] ? __lock_is_held+0xad/0x140 [ 686.203717] __should_failslab+0x115/0x180 [ 686.208091] should_failslab+0x5/0xf [ 686.211819] kmem_cache_alloc+0x44/0x710 [ 686.215903] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 686.221541] anon_vma_clone+0xde/0x470 [ 686.225466] anon_vma_fork+0x82/0x490 [ 686.229301] ? dup_userfaultfd+0x157/0x6b0 [ 686.233555] ? memcpy+0x35/0x50 [ 686.236861] copy_process.part.0+0x3509/0x7a60 [ 686.241486] ? __cleanup_sighand+0x60/0x60 [ 686.245744] ? vfs_write+0x2e6/0x550 [ 686.249487] _do_fork+0x22f/0xf40 [ 686.252963] ? fork_idle+0x1e0/0x1e0 [ 686.256699] ? fput+0x2b/0x190 [ 686.259916] ? ksys_write+0x1c8/0x2a0 [ 686.263733] ? __ia32_sys_read+0xb0/0xb0 [ 686.267813] ? __ia32_sys_clock_settime+0x260/0x260 [ 686.272845] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 686.277617] ? trace_hardirqs_off_caller+0x55/0x210 [ 686.282650] ? do_syscall_64+0x21/0x620 [ 686.286646] do_syscall_64+0xf9/0x620 [ 686.290472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 686.295676] RIP: 0033:0x45c849 18:06:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x8, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e0000000800040000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:53 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 686.298885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 686.317822] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 686.325726] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 686.333010] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.340299] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 686.347610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 686.354902] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000027 [ 686.398205] IPVS: length: 51 != 8 [ 686.538381] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:54 executing program 5 (fault-call:14 fault-nth:40): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e0000000800040000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x9, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:54 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xf000, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:54 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x420600, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) vmsplice(r2, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x12201, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x8, 0x4, 0x4, 0x4000000, 0xffffffff, {}, {0x4, 0x0, 0x1, 0x1, 0x9, 0x8, "a8a4437e"}, 0x4, 0x2, @planes=&(0x7f0000000240)={0x0, 0x6, @fd=r5}, 0x2}) r6 = accept4$alg(r4, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r1, 0x0, r6, 0x0, 0x200000, 0x0) 18:06:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0xa, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:54 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xfeff, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 687.030633] FAULT_INJECTION: forcing a failure. [ 687.030633] name failslab, interval 1, probability 0, space 0, times 0 [ 687.116387] CPU: 0 PID: 14193 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 687.124331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.134137] Call Trace: [ 687.136756] dump_stack+0x188/0x20d [ 687.140408] should_fail.cold+0xa/0x1b [ 687.144321] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 687.149447] ? find_held_lock+0x2d/0x110 [ 687.153528] __should_failslab+0x115/0x180 [ 687.157779] should_failslab+0x5/0xf [ 687.161497] kmem_cache_alloc+0x44/0x710 [ 687.165569] ? __lock_is_held+0xad/0x140 [ 687.169646] anon_vma_clone+0xde/0x470 [ 687.173555] anon_vma_fork+0x82/0x490 [ 687.177370] ? dup_userfaultfd+0x157/0x6b0 [ 687.181621] ? memcpy+0x35/0x50 [ 687.184922] copy_process.part.0+0x3509/0x7a60 [ 687.189553] ? __cleanup_sighand+0x60/0x60 [ 687.193806] ? vfs_write+0x2e6/0x550 [ 687.197574] _do_fork+0x22f/0xf40 [ 687.201053] ? fork_idle+0x1e0/0x1e0 [ 687.204793] ? fput+0x2b/0x190 [ 687.208003] ? ksys_write+0x1c8/0x2a0 [ 687.211835] ? __ia32_sys_read+0xb0/0xb0 [ 687.215911] ? __ia32_sys_clock_settime+0x260/0x260 [ 687.220956] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 687.225744] ? trace_hardirqs_off_caller+0x55/0x210 [ 687.230775] ? do_syscall_64+0x21/0x620 [ 687.234767] do_syscall_64+0xf9/0x620 [ 687.238584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 687.243784] RIP: 0033:0x45c849 [ 687.246995] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 687.265934] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 687.273663] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 687.280955] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.288255] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 687.295542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 687.303091] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000028 18:06:54 executing program 5 (fault-call:14 fault-nth:41): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0xc, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:54 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xff0f, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4008804, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) vmsplice(r1, &(0x7f0000000640), 0x0, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:06:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0xe, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 687.904714] FAULT_INJECTION: forcing a failure. [ 687.904714] name failslab, interval 1, probability 0, space 0, times 0 [ 687.957603] CPU: 1 PID: 14538 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 687.965625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.974997] Call Trace: [ 687.977618] dump_stack+0x188/0x20d [ 687.981269] should_fail.cold+0xa/0x1b [ 687.985183] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 687.990385] ? __lock_is_held+0xad/0x140 [ 687.994469] __should_failslab+0x115/0x180 [ 687.998773] should_failslab+0x5/0xf [ 688.002499] kmem_cache_alloc+0x29f/0x710 [ 688.006752] ? anon_vma_clone+0x316/0x470 [ 688.010930] anon_vma_fork+0xed/0x490 [ 688.014751] ? dup_userfaultfd+0x157/0x6b0 [ 688.019006] ? memcpy+0x35/0x50 [ 688.022309] copy_process.part.0+0x3509/0x7a60 [ 688.026942] ? __cleanup_sighand+0x60/0x60 [ 688.031198] ? vfs_write+0x2e6/0x550 [ 688.035120] _do_fork+0x22f/0xf40 [ 688.038597] ? fork_idle+0x1e0/0x1e0 [ 688.042459] ? fput+0x2b/0x190 [ 688.045670] ? ksys_write+0x1c8/0x2a0 [ 688.049483] ? __ia32_sys_read+0xb0/0xb0 [ 688.053566] ? __ia32_sys_clock_settime+0x260/0x260 [ 688.058607] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 688.063405] ? trace_hardirqs_off_caller+0x55/0x210 [ 688.068448] ? do_syscall_64+0x21/0x620 [ 688.072446] do_syscall_64+0xf9/0x620 [ 688.076264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 688.081463] RIP: 0033:0x45c849 [ 688.084666] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0xf, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 688.103586] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 688.111427] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 688.118719] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.126008] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 688.133295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 688.140583] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000029 18:06:55 executing program 5 (fault-call:14 fault-nth:42): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:55 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xfffe, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x10, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 688.782150] FAULT_INJECTION: forcing a failure. [ 688.782150] name failslab, interval 1, probability 0, space 0, times 0 [ 688.806943] CPU: 0 PID: 14874 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 688.814870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.824234] Call Trace: [ 688.826843] dump_stack+0x188/0x20d [ 688.830499] should_fail.cold+0xa/0x1b [ 688.834408] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 688.839529] ? __lock_is_held+0xad/0x140 [ 688.843621] __should_failslab+0x115/0x180 [ 688.847866] should_failslab+0x5/0xf [ 688.851585] kmem_cache_alloc+0x29f/0x710 [ 688.855761] ? anon_vma_clone+0x316/0x470 [ 688.860063] anon_vma_fork+0x1dd/0x490 [ 688.863976] ? memcpy+0x35/0x50 [ 688.867285] copy_process.part.0+0x3509/0x7a60 [ 688.871921] ? __cleanup_sighand+0x60/0x60 [ 688.876181] ? vfs_write+0x2e6/0x550 18:06:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:56 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x1c, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:56 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 688.879925] _do_fork+0x22f/0xf40 [ 688.883399] ? fork_idle+0x1e0/0x1e0 [ 688.887128] ? fput+0x2b/0x190 [ 688.890338] ? ksys_write+0x1c8/0x2a0 [ 688.894152] ? __ia32_sys_read+0xb0/0xb0 [ 688.898236] ? __ia32_sys_clock_settime+0x260/0x260 [ 688.903272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 688.908039] ? trace_hardirqs_off_caller+0x55/0x210 [ 688.913070] ? do_syscall_64+0x21/0x620 [ 688.917065] do_syscall_64+0xf9/0x620 [ 688.920884] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 688.926084] RIP: 0033:0x45c849 [ 688.929282] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 688.948294] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 688.955997] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 688.963304] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.970575] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 18:06:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='sm3-generic\x00', 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='cifs.idmap\x00', 0x0, &(0x7f0000000200), 0x0, r4) keyctl$reject(0x13, r3, 0x9, 0xffffffffffff55f1, r4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x1a, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r8, 0x0, 0x200000, 0x0) [ 688.977852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 688.985199] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000002a 18:06:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:56 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 689.198659] validate_nla: 9 callbacks suppressed [ 689.198669] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 689.270667] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:56 executing program 5 (fault-call:14 fault-nth:43): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:56 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:56 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6350a, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 689.504950] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:56 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 689.643875] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:56 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63525, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 689.743391] FAULT_INJECTION: forcing a failure. [ 689.743391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 689.756379] CPU: 1 PID: 15121 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 689.764290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.773654] Call Trace: [ 689.776269] dump_stack+0x188/0x20d [ 689.779928] should_fail.cold+0xa/0x1b [ 689.783848] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 689.788997] __alloc_pages_nodemask+0x1c7/0x6a0 [ 689.793698] ? kasan_kmalloc+0xbf/0xe0 [ 689.797609] ? kmem_cache_alloc+0x127/0x710 [ 689.801960] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 689.807015] ? mark_held_locks+0xf0/0xf0 [ 689.811106] alloc_pages_current+0xff/0x200 [ 689.815459] pte_alloc_one+0x16/0x190 [ 689.819282] __pte_alloc+0x25/0x350 [ 689.822930] copy_page_range+0x159a/0x1e70 [ 689.827213] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 689.832079] ? vma_compute_subtree_gap+0x152/0x230 [ 689.837045] copy_process.part.0+0x56f9/0x7a60 [ 689.841769] ? __cleanup_sighand+0x60/0x60 [ 689.846039] ? vfs_write+0x2e6/0x550 [ 689.849780] _do_fork+0x22f/0xf40 [ 689.853260] ? fork_idle+0x1e0/0x1e0 [ 689.857004] ? fput+0x2b/0x190 [ 689.860218] ? ksys_write+0x1c8/0x2a0 [ 689.864045] ? __ia32_sys_read+0xb0/0xb0 [ 689.868133] ? __ia32_sys_clock_settime+0x260/0x260 [ 689.873277] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 689.878061] ? trace_hardirqs_off_caller+0x55/0x210 [ 689.883107] ? do_syscall_64+0x21/0x620 [ 689.887110] do_syscall_64+0xf9/0x620 [ 689.890937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 689.896316] RIP: 0033:0x45c849 [ 689.899524] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 689.918437] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 689.926160] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 689.933457] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 18:06:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:57 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 689.940731] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 689.948011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 689.955289] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000002b 18:06:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 690.099792] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 690.171468] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:57 executing program 5 (fault-call:14 fault-nth:44): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:57 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:57 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:57 executing program 3: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 690.567219] FAULT_INJECTION: forcing a failure. [ 690.567219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 690.579072] CPU: 1 PID: 15177 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 690.586971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.596342] Call Trace: [ 690.598955] dump_stack+0x188/0x20d [ 690.602608] should_fail.cold+0xa/0x1b [ 690.606568] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 690.611693] ? rcu_read_unlock+0x12/0x60 [ 690.615784] __alloc_pages_nodemask+0x1c7/0x6a0 [ 690.620476] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 690.625530] ? rcu_read_unlock+0x12/0x60 [ 690.629622] cache_grow_begin+0x8e/0x8a0 [ 690.633703] kmem_cache_alloc+0x648/0x710 [ 690.637875] anon_vma_fork+0x1dd/0x490 [ 690.641862] ? memcpy+0x35/0x50 [ 690.645165] copy_process.part.0+0x3509/0x7a60 [ 690.649792] ? __cleanup_sighand+0x60/0x60 [ 690.654043] ? vfs_write+0x2e6/0x550 [ 690.657785] _do_fork+0x22f/0xf40 [ 690.661267] ? fork_idle+0x1e0/0x1e0 [ 690.664999] ? fput+0x2b/0x190 [ 690.668211] ? ksys_write+0x1c8/0x2a0 [ 690.672161] ? __ia32_sys_read+0xb0/0xb0 [ 690.676248] ? __ia32_sys_clock_settime+0x260/0x260 [ 690.681289] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 690.686201] ? trace_hardirqs_off_caller+0x55/0x210 [ 690.691349] ? do_syscall_64+0x21/0x620 [ 690.695358] do_syscall_64+0xf9/0x620 [ 690.699325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 690.704529] RIP: 0033:0x45c849 [ 690.707734] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 690.726885] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 690.729990] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 690.734624] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 690.734633] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.734641] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 690.734649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 690.734657] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000002c 18:06:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x2, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:58 executing program 3: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:58 executing program 3: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 691.020342] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:58 executing program 5 (fault-call:14 fault-nth:45): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x3, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:58 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:06:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_to_batadv\x00', 0x3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xc0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x40}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xa, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x1, 0x3, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x3, 0x0, 0xd, 0x1, 0x7, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @exit, @jmp={0x5, 0x1, 0x1, 0x0, 0xb, 0x18, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0x0, 0x80000000, 0x5}, 0x10, r4, r5}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) r6 = accept4$alg(r3, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x98, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8bf2c5c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x80) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r6, 0x0, 0x200000, 0x0) 18:06:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 691.446036] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 691.490295] FAULT_INJECTION: forcing a failure. [ 691.490295] name failslab, interval 1, probability 0, space 0, times 0 [ 691.515209] CPU: 1 PID: 15396 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 691.523133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.532496] Call Trace: [ 691.535095] dump_stack+0x188/0x20d [ 691.538739] should_fail.cold+0xa/0x1b [ 691.542631] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 691.547757] ? find_held_lock+0x2d/0x110 [ 691.551946] __should_failslab+0x115/0x180 [ 691.556351] should_failslab+0x5/0xf [ 691.560061] kmem_cache_alloc+0x44/0x710 [ 691.564124] ? __lock_is_held+0xad/0x140 [ 691.568189] anon_vma_clone+0xde/0x470 [ 691.572171] anon_vma_fork+0x82/0x490 [ 691.575980] ? dup_userfaultfd+0x157/0x6b0 [ 691.580845] ? memcpy+0x35/0x50 [ 691.584135] copy_process.part.0+0x3509/0x7a60 [ 691.588741] ? __cleanup_sighand+0x60/0x60 [ 691.593076] ? vfs_write+0x2e6/0x550 [ 691.596841] _do_fork+0x22f/0xf40 [ 691.601517] ? fork_idle+0x1e0/0x1e0 [ 691.605239] ? fput+0x2b/0x190 [ 691.608445] ? ksys_write+0x1c8/0x2a0 [ 691.612345] ? __ia32_sys_read+0xb0/0xb0 [ 691.616519] ? __ia32_sys_clock_settime+0x260/0x260 [ 691.621540] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 691.626293] ? trace_hardirqs_off_caller+0x55/0x210 [ 691.631315] ? do_syscall_64+0x21/0x620 [ 691.635391] do_syscall_64+0xf9/0x620 [ 691.639200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 691.644395] RIP: 0033:0x45c849 [ 691.647591] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 691.666494] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 691.674307] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 691.681662] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 691.688944] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 691.696216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 691.703504] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000002d 18:06:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x4, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 692.002581] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:06:59 executing program 5 (fault-call:14 fault-nth:46): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:06:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000080001", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x5, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:06:59 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 692.361960] FAULT_INJECTION: forcing a failure. [ 692.361960] name failslab, interval 1, probability 0, space 0, times 0 [ 692.407877] CPU: 0 PID: 15659 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 692.415802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.425164] Call Trace: [ 692.427780] dump_stack+0x188/0x20d [ 692.431455] should_fail.cold+0xa/0x1b [ 692.435362] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 692.440479] ? __lock_is_held+0xad/0x140 [ 692.444729] __should_failslab+0x115/0x180 [ 692.448996] should_failslab+0x5/0xf [ 692.452733] kmem_cache_alloc+0x29f/0x710 [ 692.456894] ? copy_page_range+0x1218/0x1e70 [ 692.461321] ptlock_alloc+0x1d/0x70 [ 692.464962] pte_alloc_one+0x68/0x190 [ 692.468770] __pte_alloc+0x25/0x350 [ 692.472407] copy_page_range+0x159a/0x1e70 [ 692.476672] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 692.481524] ? vma_compute_subtree_gap+0x152/0x230 [ 692.486469] copy_process.part.0+0x56f9/0x7a60 [ 692.491085] ? __cleanup_sighand+0x60/0x60 [ 692.495335] ? vfs_write+0x2e6/0x550 [ 692.499077] _do_fork+0x22f/0xf40 [ 692.502552] ? fork_idle+0x1e0/0x1e0 [ 692.506275] ? fput+0x2b/0x190 [ 692.509483] ? ksys_write+0x1c8/0x2a0 [ 692.513298] ? __ia32_sys_read+0xb0/0xb0 [ 692.517368] ? __ia32_sys_clock_settime+0x260/0x260 [ 692.522482] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 692.527253] ? trace_hardirqs_off_caller+0x55/0x210 [ 692.532287] ? do_syscall_64+0x21/0x620 [ 692.536974] do_syscall_64+0xf9/0x620 [ 692.540794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 692.545995] RIP: 0033:0x45c849 [ 692.549229] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 692.568253] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 692.575981] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 692.583258] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.590540] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 692.597799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 18:06:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:06:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:06:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000080001", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x6, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 692.607000] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000002e 18:06:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf2501000000080001", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:06:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000400)=""/53, 0x35}], 0x6, 0x5) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:07:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:00 executing program 5 (fault-call:14 fault-nth:47): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x8, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:00 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:00 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:07:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 693.280869] FAULT_INJECTION: forcing a failure. [ 693.280869] name failslab, interval 1, probability 0, space 0, times 0 18:07:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 693.333133] CPU: 1 PID: 15988 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 693.341146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.350673] Call Trace: [ 693.353327] dump_stack+0x188/0x20d [ 693.357007] should_fail.cold+0xa/0x1b [ 693.360931] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 693.366178] ? __lock_is_held+0xad/0x140 [ 693.370268] __should_failslab+0x115/0x180 [ 693.374523] should_failslab+0x5/0xf [ 693.378257] kmem_cache_alloc+0x29f/0x710 [ 693.382421] ? copy_page_range+0x1218/0x1e70 [ 693.386856] ptlock_alloc+0x1d/0x70 [ 693.390496] pte_alloc_one+0x68/0x190 [ 693.394316] __pte_alloc+0x25/0x350 [ 693.397967] copy_page_range+0x159a/0x1e70 [ 693.402248] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 693.408853] ? vma_compute_subtree_gap+0x152/0x230 [ 693.413816] copy_process.part.0+0x56f9/0x7a60 [ 693.418441] ? __cleanup_sighand+0x60/0x60 [ 693.422871] ? vfs_write+0x2e6/0x550 [ 693.427766] _do_fork+0x22f/0xf40 18:07:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x9, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 693.431240] ? fork_idle+0x1e0/0x1e0 [ 693.435088] ? fput+0x2b/0x190 [ 693.438293] ? ksys_write+0x1c8/0x2a0 [ 693.442110] ? __ia32_sys_read+0xb0/0xb0 [ 693.446199] ? __ia32_sys_clock_settime+0x260/0x260 [ 693.451234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 693.456010] ? trace_hardirqs_off_caller+0x55/0x210 [ 693.461051] ? do_syscall_64+0x21/0x620 [ 693.465154] do_syscall_64+0xf9/0x620 [ 693.468984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 693.474188] RIP: 0033:0x45c849 [ 693.477424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 693.496344] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 693.504075] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 693.511365] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.518657] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 693.526057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 18:07:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 693.533345] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000000002f 18:07:01 executing program 5 (fault-call:14 fault-nth:48): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:01 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xa, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r2, &(0x7f0000000640), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RUNLINKAT(r7, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:07:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xb, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:01 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 694.209834] FAULT_INJECTION: forcing a failure. [ 694.209834] name failslab, interval 1, probability 0, space 0, times 0 [ 694.275593] CPU: 0 PID: 16253 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 694.283546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.292912] Call Trace: [ 694.295522] dump_stack+0x188/0x20d [ 694.299179] should_fail.cold+0xa/0x1b [ 694.303101] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 694.308229] ? find_held_lock+0x2d/0x110 [ 694.312320] __should_failslab+0x115/0x180 [ 694.316576] should_failslab+0x5/0xf [ 694.320299] kmem_cache_alloc+0x44/0x710 [ 694.324370] ? __lock_is_held+0xad/0x140 [ 694.328459] anon_vma_clone+0xde/0x470 [ 694.332374] anon_vma_fork+0x82/0x490 [ 694.336190] ? dup_userfaultfd+0x157/0x6b0 [ 694.340439] ? memcpy+0x35/0x50 [ 694.343737] copy_process.part.0+0x3509/0x7a60 [ 694.348370] ? __cleanup_sighand+0x60/0x60 [ 694.352642] ? vfs_write+0x2e6/0x550 [ 694.356388] _do_fork+0x22f/0xf40 [ 694.359870] ? fork_idle+0x1e0/0x1e0 [ 694.363741] ? fput+0x2b/0x190 [ 694.366958] ? ksys_write+0x1c8/0x2a0 [ 694.370776] ? __ia32_sys_read+0xb0/0xb0 [ 694.374855] ? __ia32_sys_clock_settime+0x260/0x260 [ 694.379895] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 694.384668] ? trace_hardirqs_off_caller+0x55/0x210 [ 694.389703] ? do_syscall_64+0x21/0x620 [ 694.394650] do_syscall_64+0xf9/0x620 [ 694.398469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.403673] RIP: 0033:0x45c849 [ 694.406888] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 694.425827] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 694.433556] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 694.440965] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.448254] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 694.455544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 694.462830] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000030 [ 694.550106] validate_nla: 6 callbacks suppressed [ 694.550114] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 694.605764] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) prctl$PR_SET_FPEMU(0xa, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'team0\x00', 0x4}, 0x18) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VT_RELDISP(r8, 0x5605) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") splice(r0, 0x0, r6, 0x0, 0x200000, 0x0) 18:07:02 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:02 executing program 5 (fault-call:14 fault-nth:49): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xc, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x6}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 695.015238] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 695.028117] FAULT_INJECTION: forcing a failure. [ 695.028117] name failslab, interval 1, probability 0, space 0, times 0 18:07:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xe, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 695.071247] CPU: 1 PID: 16488 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 695.079295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.088656] Call Trace: [ 695.091251] dump_stack+0x188/0x20d [ 695.094884] should_fail.cold+0xa/0x1b [ 695.098776] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 695.103886] ? __lock_is_held+0xad/0x140 [ 695.107962] __should_failslab+0x115/0x180 [ 695.112228] should_failslab+0x5/0xf [ 695.115942] kmem_cache_alloc+0x44/0x710 [ 695.120010] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 695.125467] anon_vma_clone+0xde/0x470 [ 695.129357] anon_vma_fork+0x82/0x490 [ 695.133150] ? dup_userfaultfd+0x157/0x6b0 [ 695.137378] ? memcpy+0x35/0x50 [ 695.140657] copy_process.part.0+0x3509/0x7a60 [ 695.145258] ? __cleanup_sighand+0x60/0x60 [ 695.149489] ? vfs_write+0x2e6/0x550 [ 695.153396] _do_fork+0x22f/0xf40 [ 695.156853] ? fork_idle+0x1e0/0x1e0 [ 695.160650] ? fput+0x2b/0x190 [ 695.163836] ? ksys_write+0x1c8/0x2a0 [ 695.167638] ? __ia32_sys_read+0xb0/0xb0 [ 695.171709] ? __ia32_sys_clock_settime+0x260/0x260 [ 695.176739] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 695.181488] ? trace_hardirqs_off_caller+0x55/0x210 [ 695.186521] ? do_syscall_64+0x21/0x620 [ 695.190511] do_syscall_64+0xf9/0x620 [ 695.194331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.199514] RIP: 0033:0x45c849 [ 695.202709] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.221622] RSP: 002b:00007fa2bf22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 695.229336] RAX: ffffffffffffffda RBX: 00007fa2bf22b6d4 RCX: 000000000045c849 [ 695.236598] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.243865] RBP: 000000000076c040 R08: ffffffffffffffff R09: 0000000000000000 [ 695.251130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 695.258393] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000031 18:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 695.446175] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:02 executing program 5 (fault-call:14 fault-nth:50): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:02 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xf, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000000)={0x7, 'xfrm0\x00', {0x5}, 0x80}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:07:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 695.789541] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x10, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 695.856566] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 695.878053] FAULT_INJECTION: forcing a failure. [ 695.878053] name failslab, interval 1, probability 0, space 0, times 0 [ 695.936618] CPU: 0 PID: 16733 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 695.944543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.953910] Call Trace: [ 695.956537] dump_stack+0x188/0x20d [ 695.960193] should_fail.cold+0xa/0x1b [ 695.964106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 695.969232] ? __lock_is_held+0xad/0x140 [ 695.973322] __should_failslab+0x115/0x180 [ 695.977577] should_failslab+0x5/0xf [ 695.981301] kmem_cache_alloc+0x44/0x710 [ 695.985382] ? anon_vma_interval_tree_insert+0x229/0x3d0 [ 695.990858] anon_vma_clone+0xde/0x470 [ 695.994788] anon_vma_fork+0x82/0x490 [ 695.998601] ? dup_userfaultfd+0x157/0x6b0 [ 696.002840] ? memcpy+0x35/0x50 [ 696.006132] copy_process.part.0+0x3509/0x7a60 [ 696.010758] ? __cleanup_sighand+0x60/0x60 [ 696.015018] ? vfs_write+0x2e6/0x550 [ 696.018766] _do_fork+0x22f/0xf40 [ 696.022241] ? fork_idle+0x1e0/0x1e0 [ 696.026407] ? fput+0x2b/0x190 [ 696.029623] ? ksys_write+0x1c8/0x2a0 [ 696.033579] ? __ia32_sys_read+0xb0/0xb0 [ 696.037662] ? __ia32_sys_clock_settime+0x260/0x260 [ 696.042701] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 696.047578] ? trace_hardirqs_off_caller+0x55/0x210 [ 696.052622] ? do_syscall_64+0x21/0x620 [ 696.056629] do_syscall_64+0xf9/0x620 [ 696.061500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.066702] RIP: 0033:0x45c849 18:07:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 696.069908] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.088821] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 696.096545] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 696.104188] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.111474] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 696.118763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 696.126069] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000032 18:07:03 executing program 5 (fault-call:14 fault-nth:51): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:03 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x25}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x1c, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) splice(r4, 0x0, r2, 0x0, 0x1f, 0x0) 18:07:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 696.777011] FAULT_INJECTION: forcing a failure. [ 696.777011] name failslab, interval 1, probability 0, space 0, times 0 [ 696.804282] CPU: 1 PID: 16939 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 696.812214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.821586] Call Trace: [ 696.824197] dump_stack+0x188/0x20d [ 696.827860] should_fail.cold+0xa/0x1b [ 696.831780] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 696.836904] ? __lock_is_held+0xad/0x140 [ 696.841005] __should_failslab+0x115/0x180 [ 696.845256] should_failslab+0x5/0xf [ 696.849008] kmem_cache_alloc+0x29f/0x710 [ 696.853175] ? anon_vma_clone+0x316/0x470 [ 696.857342] anon_vma_fork+0xed/0x490 [ 696.861152] ? dup_userfaultfd+0x157/0x6b0 [ 696.865396] ? memcpy+0x35/0x50 [ 696.868690] copy_process.part.0+0x3509/0x7a60 [ 696.873316] ? __cleanup_sighand+0x60/0x60 [ 696.877562] ? vfs_write+0x2e6/0x550 [ 696.881272] _do_fork+0x22f/0xf40 [ 696.884861] ? fork_idle+0x1e0/0x1e0 [ 696.888599] ? fput+0x2b/0x190 [ 696.891956] ? ksys_write+0x1c8/0x2a0 [ 696.895867] ? __ia32_sys_read+0xb0/0xb0 [ 696.899965] ? __ia32_sys_clock_settime+0x260/0x260 [ 696.904977] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 696.909754] ? trace_hardirqs_off_caller+0x55/0x210 [ 696.914766] ? do_syscall_64+0x21/0x620 [ 696.918745] do_syscall_64+0xf9/0x620 [ 696.922559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.927755] RIP: 0033:0x45c849 [ 696.931056] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.950219] RSP: 002b:00007fa2bf22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 696.957939] RAX: ffffffffffffffda RBX: 00007fa2bf22b6d4 RCX: 000000000045c849 [ 696.965208] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 18:07:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x60, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 696.972478] RBP: 000000000076c040 R08: ffffffffffffffff R09: 0000000000000000 [ 696.979748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 696.987008] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000033 [ 697.011843] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}}, 0x0) [ 697.076879] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) ioctl(r2, 0x6, &(0x7f0000000140)="3646a843eb349d8113120dc3ac5e4f6cdff115c4b98cf81fe8d4407c3ecd361e181a67a4fa840ff4adefd5f716d5489e4503344d94fe4eb196f2f60bc3cb115df16d8d734c50059619ed11bf61b5299edd85a7d1c5adcc4c0311cc5d9bfe70a95bb843420932") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = accept4$alg(r6, 0x0, 0x0, 0x400) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r7, 0x0, 0x200000, 0x0) 18:07:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}}, 0x0) 18:07:04 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x33}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:04 executing program 5 (fault-call:14 fault-nth:52): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x7}}, 0x0) [ 697.629278] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 697.665568] FAULT_INJECTION: forcing a failure. [ 697.665568] name failslab, interval 1, probability 0, space 0, times 0 [ 697.684001] CPU: 1 PID: 17111 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 697.691918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.701281] Call Trace: [ 697.703885] dump_stack+0x188/0x20d [ 697.707518] should_fail.cold+0xa/0x1b [ 697.711403] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 697.716587] ? __lock_is_held+0xad/0x140 [ 697.720649] __should_failslab+0x115/0x180 [ 697.724878] should_failslab+0x5/0xf [ 697.728583] kmem_cache_alloc+0x29f/0x710 [ 697.732736] ? mark_held_locks+0xf0/0xf0 [ 697.736807] ptlock_alloc+0x1d/0x70 [ 697.740439] pte_alloc_one+0x68/0x190 [ 697.744263] __pte_alloc+0x25/0x350 [ 697.747896] copy_page_range+0x159a/0x1e70 [ 697.752159] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 697.757523] ? __vma_link_rb+0x251/0x360 [ 697.761760] copy_process.part.0+0x56f9/0x7a60 [ 697.766371] ? __cleanup_sighand+0x60/0x60 [ 697.770604] ? vfs_write+0x2e6/0x550 [ 697.774324] _do_fork+0x22f/0xf40 [ 697.777787] ? fork_idle+0x1e0/0x1e0 [ 697.781513] ? fput+0x2b/0x190 [ 697.784711] ? ksys_write+0x1c8/0x2a0 [ 697.788631] ? __ia32_sys_read+0xb0/0xb0 [ 697.792702] ? __ia32_sys_clock_settime+0x260/0x260 [ 697.800254] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 697.805006] ? trace_hardirqs_off_caller+0x55/0x210 [ 697.810033] ? do_syscall_64+0x21/0x620 [ 697.814003] do_syscall_64+0xf9/0x620 [ 697.817818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.822999] RIP: 0033:0x45c849 [ 697.826189] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 697.845116] RSP: 002b:00007fa2bf26cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 697.852821] RAX: ffffffffffffffda RBX: 00007fa2bf26d6d4 RCX: 000000000045c849 [ 697.860082] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.867345] RBP: 000000000076bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 697.874607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 18:07:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0xf, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 697.881876] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000034 [ 697.904489] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x2, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:05 executing program 5 (fault-call:14 fault-nth:53): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:05 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:05 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x52}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x3, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) [ 698.372775] FAULT_INJECTION: forcing a failure. [ 698.372775] name failslab, interval 1, probability 0, space 0, times 0 [ 698.443051] CPU: 0 PID: 17349 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 698.450983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.460468] Call Trace: [ 698.463077] dump_stack+0x188/0x20d [ 698.466732] should_fail.cold+0xa/0x1b [ 698.470643] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 698.475783] __should_failslab+0x115/0x180 [ 698.480034] should_failslab+0x5/0xf [ 698.483795] kmem_cache_alloc_node+0x260/0x730 [ 698.488747] ? netlink_broadcast+0x40/0x40 [ 698.493695] __alloc_skb+0xba/0x5b0 [ 698.497355] ? skb_trim+0x180/0x180 [ 698.500996] ? netlink_autobind.isra.0+0x217/0x300 [ 698.505951] netlink_sendmsg+0x8d6/0xcd0 [ 698.510069] ? netlink_unicast+0x6a0/0x6a0 [ 698.514321] ? move_addr_to_kernel.part.0+0x110/0x110 [ 698.519538] ? netlink_unicast+0x6a0/0x6a0 [ 698.520866] FAULT_INJECTION: forcing a failure. [ 698.520866] name failslab, interval 1, probability 0, space 0, times 0 [ 698.523799] sock_sendmsg+0xcf/0x120 [ 698.538697] ___sys_sendmsg+0x803/0x920 [ 698.542706] ? copy_msghdr_from_user+0x410/0x410 [ 698.547470] ? __fget+0x319/0x510 [ 698.550941] ? lock_downgrade+0x740/0x740 [ 698.555192] ? check_preemption_disabled+0x41/0x280 [ 698.560221] ? __fget+0x340/0x510 [ 698.563684] ? iterate_fd+0x350/0x350 [ 698.567497] ? vfs_write+0x2e6/0x550 [ 698.571213] ? __fget_light+0x1d1/0x230 [ 698.575200] __sys_sendmsg+0xec/0x1b0 [ 698.579008] ? __ia32_sys_shutdown+0x70/0x70 [ 698.583443] ? vfs_write+0x15b/0x550 [ 698.587172] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 698.591937] ? trace_hardirqs_off_caller+0x55/0x210 [ 698.596974] ? do_syscall_64+0x21/0x620 [ 698.600965] do_syscall_64+0xf9/0x620 [ 698.604865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 698.610051] RIP: 0033:0x45c849 [ 698.613244] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 698.632161] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.639881] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 698.647155] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 698.654434] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 698.661701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 698.668964] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000000 [ 698.676259] CPU: 1 PID: 17462 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 698.684177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:07:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 698.693631] Call Trace: [ 698.696233] dump_stack+0x188/0x20d [ 698.699884] should_fail.cold+0xa/0x1b [ 698.703792] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 698.708922] ? find_held_lock+0x2d/0x110 [ 698.713011] __should_failslab+0x115/0x180 [ 698.717273] should_failslab+0x5/0xf [ 698.721005] kmem_cache_alloc+0x44/0x710 [ 698.725113] ? __lock_is_held+0xad/0x140 [ 698.729198] anon_vma_clone+0xde/0x470 [ 698.733114] anon_vma_fork+0x82/0x490 [ 698.736924] ? dup_userfaultfd+0x157/0x6b0 [ 698.741165] ? memcpy+0x35/0x50 [ 698.744458] copy_process.part.0+0x3509/0x7a60 [ 698.749078] ? __cleanup_sighand+0x60/0x60 [ 698.753328] ? vfs_write+0x2e6/0x550 [ 698.757063] _do_fork+0x22f/0xf40 [ 698.760532] ? fork_idle+0x1e0/0x1e0 [ 698.764254] ? fput+0x2b/0x190 [ 698.767492] ? ksys_write+0x1c8/0x2a0 [ 698.771308] ? __ia32_sys_read+0xb0/0xb0 [ 698.775371] ? __ia32_sys_clock_settime+0x260/0x260 [ 698.780378] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 698.785214] ? trace_hardirqs_off_caller+0x55/0x210 [ 698.790223] ? do_syscall_64+0x21/0x620 [ 698.794216] do_syscall_64+0xf9/0x620 [ 698.798059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 698.803246] RIP: 0033:0x45c849 [ 698.806448] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 698.825360] RSP: 002b:00007fa2bf22ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 698.833221] RAX: ffffffffffffffda RBX: 00007fa2bf22b6d4 RCX: 000000000045c849 18:07:06 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 698.840500] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.847762] RBP: 000000000076c040 R08: ffffffffffffffff R09: 0000000000000000 [ 698.855047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 698.862455] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000035 18:07:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x5, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 698.931352] FAULT_INJECTION: forcing a failure. [ 698.931352] name failslab, interval 1, probability 0, space 0, times 0 18:07:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 698.977417] CPU: 1 PID: 17574 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 698.985350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.994944] Call Trace: [ 698.997567] dump_stack+0x188/0x20d [ 699.001217] should_fail.cold+0xa/0x1b [ 699.005125] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 699.010263] __should_failslab+0x115/0x180 [ 699.014536] should_failslab+0x5/0xf [ 699.018267] kmem_cache_alloc_node_trace+0x272/0x750 [ 699.023412] __kmalloc_node_track_caller+0x38/0x70 [ 699.028383] __kmalloc_reserve.isra.0+0x39/0xe0 [ 699.033084] __alloc_skb+0xef/0x5b0 [ 699.036735] ? skb_trim+0x180/0x180 [ 699.040393] ? netlink_autobind.isra.0+0x217/0x300 [ 699.045345] netlink_sendmsg+0x8d6/0xcd0 [ 699.049434] ? netlink_unicast+0x6a0/0x6a0 [ 699.053830] ? move_addr_to_kernel.part.0+0x110/0x110 [ 699.059050] ? netlink_unicast+0x6a0/0x6a0 [ 699.063329] sock_sendmsg+0xcf/0x120 [ 699.067063] ___sys_sendmsg+0x803/0x920 [ 699.071076] ? copy_msghdr_from_user+0x410/0x410 18:07:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 699.075845] ? __fget+0x319/0x510 [ 699.079427] ? lock_downgrade+0x740/0x740 [ 699.083600] ? check_preemption_disabled+0x41/0x280 [ 699.088764] ? __fget+0x340/0x510 [ 699.092238] ? iterate_fd+0x350/0x350 [ 699.096054] ? vfs_write+0x2e6/0x550 [ 699.099788] ? __fget_light+0x1d1/0x230 [ 699.103790] __sys_sendmsg+0xec/0x1b0 [ 699.107604] ? __ia32_sys_shutdown+0x70/0x70 [ 699.112027] ? vfs_write+0x15b/0x550 [ 699.115769] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 699.120538] ? trace_hardirqs_off_caller+0x55/0x210 [ 699.125569] ? do_syscall_64+0x21/0x620 [ 699.129566] do_syscall_64+0xf9/0x620 [ 699.133388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.138590] RIP: 0033:0x45c849 [ 699.141791] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.160704] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.168443] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 699.175729] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 699.183013] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 699.190299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 699.197583] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000001 18:07:06 executing program 5 (fault-call:14 fault-nth:54): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:06 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x63}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:06 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x0) [ 699.383085] FAULT_INJECTION: forcing a failure. [ 699.383085] name failslab, interval 1, probability 0, space 0, times 0 [ 699.434911] FAULT_INJECTION: forcing a failure. [ 699.434911] name failslab, interval 1, probability 0, space 0, times 0 [ 699.439069] CPU: 0 PID: 17676 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 699.454045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.463409] Call Trace: [ 699.465997] dump_stack+0x188/0x20d [ 699.469622] should_fail.cold+0xa/0x1b [ 699.473549] ? __netlink_lookup+0x36e/0x700 [ 699.477866] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 699.482992] __should_failslab+0x115/0x180 [ 699.487237] should_failslab+0x5/0xf [ 699.490947] kmem_cache_alloc+0x44/0x710 [ 699.495009] ? lock_acquire+0x170/0x400 [ 699.499022] ? netlink_deliver_tap+0x146/0xb90 [ 699.503611] skb_clone+0x14f/0x3d0 [ 699.507152] netlink_deliver_tap+0x959/0xb90 [ 699.511579] netlink_unicast+0x547/0x6a0 [ 699.515653] ? netlink_attachskb+0x710/0x710 [ 699.520088] netlink_sendmsg+0x80b/0xcd0 [ 699.524171] ? netlink_unicast+0x6a0/0x6a0 [ 699.528528] ? move_addr_to_kernel.part.0+0x110/0x110 [ 699.533779] ? netlink_unicast+0x6a0/0x6a0 [ 699.538021] sock_sendmsg+0xcf/0x120 [ 699.541736] ___sys_sendmsg+0x803/0x920 [ 699.545826] ? copy_msghdr_from_user+0x410/0x410 [ 699.550579] ? __fget+0x319/0x510 [ 699.554033] ? lock_downgrade+0x740/0x740 [ 699.558177] ? check_preemption_disabled+0x41/0x280 [ 699.563193] ? __fget+0x340/0x510 [ 699.566646] ? iterate_fd+0x350/0x350 [ 699.570598] ? vfs_write+0x2e6/0x550 [ 699.574318] ? __fget_light+0x1d1/0x230 [ 699.578460] __sys_sendmsg+0xec/0x1b0 [ 699.582283] ? __ia32_sys_shutdown+0x70/0x70 [ 699.586690] ? vfs_write+0x15b/0x550 [ 699.590416] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 699.595195] ? trace_hardirqs_off_caller+0x55/0x210 [ 699.600218] ? do_syscall_64+0x21/0x620 [ 699.604195] do_syscall_64+0xf9/0x620 [ 699.608008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.613199] RIP: 0033:0x45c849 [ 699.616397] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.635295] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.642999] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 699.650262] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 699.657526] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 699.664790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 699.672051] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000002 [ 699.693646] CPU: 1 PID: 17702 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 699.701579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.710948] Call Trace: [ 699.713680] dump_stack+0x188/0x20d [ 699.717331] should_fail.cold+0xa/0x1b [ 699.721235] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 699.726341] ? __lock_is_held+0xad/0x140 [ 699.730410] __should_failslab+0x115/0x180 [ 699.734643] should_failslab+0x5/0xf [ 699.738351] kmem_cache_alloc+0x29f/0x710 [ 699.742495] ? anon_vma_clone+0x316/0x470 [ 699.746645] anon_vma_fork+0x1dd/0x490 [ 699.750526] ? memcpy+0x35/0x50 [ 699.753893] copy_process.part.0+0x3509/0x7a60 [ 699.758513] ? __cleanup_sighand+0x60/0x60 [ 699.762756] ? vfs_write+0x2e6/0x550 [ 699.766476] _do_fork+0x22f/0xf40 [ 699.769947] ? fork_idle+0x1e0/0x1e0 [ 699.773673] ? fput+0x2b/0x190 [ 699.776883] ? ksys_write+0x1c8/0x2a0 [ 699.780696] ? __ia32_sys_read+0xb0/0xb0 [ 699.784778] ? __ia32_sys_clock_settime+0x260/0x260 [ 699.789806] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 699.794558] ? trace_hardirqs_off_caller+0x55/0x210 [ 699.799571] ? do_syscall_64+0x21/0x620 [ 699.803542] do_syscall_64+0xf9/0x620 [ 699.807338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.812518] RIP: 0033:0x45c849 [ 699.815703] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.834598] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 699.842304] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 699.849577] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.856853] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 699.864118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 699.871638] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000036 18:07:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x6, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:07 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x0) [ 699.969917] validate_nla: 3 callbacks suppressed [ 699.969925] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:07:07 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x3, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 700.020225] FAULT_INJECTION: forcing a failure. [ 700.020225] name failslab, interval 1, probability 0, space 0, times 0 [ 700.031640] CPU: 1 PID: 17712 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 700.039547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.049070] Call Trace: [ 700.051826] dump_stack+0x188/0x20d [ 700.055568] should_fail.cold+0xa/0x1b [ 700.059474] ? is_bpf_text_address+0xd0/0x160 [ 700.063987] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 700.069101] ? kernel_text_address+0x6e/0xe0 [ 700.073526] ? __kernel_text_address+0x9/0x30 [ 700.078035] ? unwind_get_return_address+0x5a/0xa0 [ 700.082977] __should_failslab+0x115/0x180 [ 700.087218] should_failslab+0x5/0xf [ 700.090947] kmem_cache_alloc+0x44/0x710 [ 700.095024] ? lock_acquire+0x170/0x400 [ 700.099017] ? busy_poll_stop+0x3c0/0x3c0 [ 700.103307] skb_clone+0x14f/0x3d0 [ 700.106863] dev_queue_xmit_nit+0x2ff/0xa00 [ 700.111200] ? validate_xmit_xfrm+0x1fc/0xdb0 [ 700.116233] dev_hard_start_xmit+0xa6/0x950 [ 700.120577] ? validate_xmit_skb+0x72c/0xd30 [ 700.125003] __dev_queue_xmit+0x270f/0x3040 [ 700.129325] ? mark_held_locks+0xf0/0xf0 [ 700.133386] ? netdev_pick_tx+0x2f0/0x2f0 [ 700.137527] ? __copy_skb_header+0x2c0/0x510 [ 700.141928] ? sock_spd_release+0x270/0x270 [ 700.146250] ? rcu_read_lock_sched_held+0x10a/0x130 [ 700.151288] ? __skb_clone+0x5fa/0x7f0 [ 700.155180] ? netlink_deliver_tap+0x146/0xb90 [ 700.159763] ? netlink_deliver_tap+0x8ed/0xb90 [ 700.164349] netlink_deliver_tap+0x8ed/0xb90 [ 700.168764] netlink_unicast+0x547/0x6a0 [ 700.172825] ? netlink_attachskb+0x710/0x710 [ 700.177244] netlink_sendmsg+0x80b/0xcd0 [ 700.181307] ? netlink_unicast+0x6a0/0x6a0 [ 700.185532] ? move_addr_to_kernel.part.0+0x110/0x110 [ 700.190723] ? netlink_unicast+0x6a0/0x6a0 [ 700.194961] sock_sendmsg+0xcf/0x120 [ 700.198669] ___sys_sendmsg+0x803/0x920 [ 700.202642] ? copy_msghdr_from_user+0x410/0x410 [ 700.207392] ? __fget+0x319/0x510 [ 700.210845] ? lock_downgrade+0x740/0x740 [ 700.214994] ? check_preemption_disabled+0x41/0x280 [ 700.220012] ? __fget+0x340/0x510 [ 700.223470] ? iterate_fd+0x350/0x350 [ 700.227265] ? vfs_write+0x2e6/0x550 [ 700.230992] ? __fget_light+0x1d1/0x230 [ 700.234965] __sys_sendmsg+0xec/0x1b0 [ 700.238773] ? __ia32_sys_shutdown+0x70/0x70 [ 700.243174] ? vfs_write+0x15b/0x550 [ 700.246891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 700.251647] ? trace_hardirqs_off_caller+0x55/0x210 [ 700.256659] ? do_syscall_64+0x21/0x620 [ 700.260629] do_syscall_64+0xf9/0x620 [ 700.264429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.269614] RIP: 0033:0x45c849 [ 700.272802] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 700.291718] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.299423] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 700.306696] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 700.313959] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 700.321221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 700.328482] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000003 18:07:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000037000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0x9b132000) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000240)="080db5055e0bcfe847a071318e4331aa326348582b2245f84de3f65318a93ecd73038d069a8d728492c5c9f0bbd0d6fd354d84e06c5b73d5cb609984") splice(r0, 0x0, r4, 0x0, 0x200010, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) r9 = gettid() ptrace$getenv(0x4201, r9, 0x4, 0x0) r10 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, r5, r6, 0xffffffffffffffff, r8, 0x1a, 0x3}, 0xfff, 0x3c, 0x9, 0x21, r9, r10, 0x7ff}) 18:07:07 executing program 5 (fault-call:14 fault-nth:55): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 700.391305] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 18:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x0) [ 700.503070] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 700.531716] FAULT_INJECTION: forcing a failure. [ 700.531716] name failslab, interval 1, probability 0, space 0, times 0 [ 700.563805] CPU: 0 PID: 17829 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 700.571737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.581211] Call Trace: [ 700.583825] dump_stack+0x188/0x20d [ 700.587481] should_fail.cold+0xa/0x1b [ 700.591386] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 700.596510] ? __lock_is_held+0xad/0x140 [ 700.600709] __should_failslab+0x115/0x180 [ 700.604972] should_failslab+0x5/0xf [ 700.608703] kmem_cache_alloc+0x29f/0x710 [ 700.612879] ? mark_held_locks+0xf0/0xf0 [ 700.616981] ptlock_alloc+0x1d/0x70 [ 700.620623] pte_alloc_one+0x68/0x190 [ 700.624439] __pte_alloc+0x25/0x350 [ 700.628090] copy_page_range+0x159a/0x1e70 [ 700.632370] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 700.637258] ? __vma_link_rb+0x251/0x360 [ 700.641349] copy_process.part.0+0x56f9/0x7a60 [ 700.645978] ? __cleanup_sighand+0x60/0x60 [ 700.650244] ? vfs_write+0x2e6/0x550 [ 700.653987] _do_fork+0x22f/0xf40 [ 700.657462] ? fork_idle+0x1e0/0x1e0 [ 700.661189] ? fput+0x2b/0x190 18:07:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x8, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x100, 0x4) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x81000) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000080)=0xf4cc) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000180)=[0x3, 0x81, 0x10001, 0x8c, 0x6, 0x7], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6, 0xfffffff9, 0xe0e0e0e0}) splice(r0, 0x0, r4, 0x0, 0x1ffffe, 0x0) 18:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:07:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 700.664397] ? ksys_write+0x1c8/0x2a0 [ 700.668216] ? __ia32_sys_read+0xb0/0xb0 [ 700.672294] ? __ia32_sys_clock_settime+0x260/0x260 [ 700.677357] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 700.682221] ? trace_hardirqs_off_caller+0x55/0x210 [ 700.687260] ? do_syscall_64+0x21/0x620 [ 700.691252] do_syscall_64+0xf9/0x620 [ 700.695070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.700268] RIP: 0033:0x45c849 [ 700.703472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 700.722389] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 700.730117] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 700.737399] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.744682] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 700.751965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 18:07:08 executing program 2 (fault-call:3 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 700.759247] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000037 18:07:08 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 700.828765] FAULT_INJECTION: forcing a failure. [ 700.828765] name failslab, interval 1, probability 0, space 0, times 0 [ 700.849244] CPU: 0 PID: 17850 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 700.857321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.866698] Call Trace: [ 700.869305] dump_stack+0x188/0x20d [ 700.872959] should_fail.cold+0xa/0x1b 18:07:08 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) [ 700.876877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 700.882017] ? __lock_is_held+0xad/0x140 [ 700.886109] __should_failslab+0x115/0x180 [ 700.890369] should_failslab+0x5/0xf [ 700.894102] kmem_cache_alloc_node+0x260/0x730 [ 700.898705] ? find_held_lock+0x2d/0x110 [ 700.902791] __alloc_skb+0xba/0x5b0 [ 700.906435] ? skb_trim+0x180/0x180 [ 700.910073] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 700.914671] netlink_ack+0x234/0xa60 [ 700.918389] ? netlink_sendmsg+0xcd0/0xcd0 [ 700.922626] netlink_rcv_skb+0x33e/0x410 [ 700.926705] ? genl_family_rcv_msg+0xc10/0xc10 [ 700.931295] ? netlink_ack+0xa60/0xa60 [ 700.935196] genl_rcv+0x24/0x40 [ 700.938501] netlink_unicast+0x4d7/0x6a0 [ 700.942578] ? netlink_attachskb+0x710/0x710 [ 700.946992] netlink_sendmsg+0x80b/0xcd0 [ 700.951069] ? netlink_unicast+0x6a0/0x6a0 [ 700.955299] ? move_addr_to_kernel.part.0+0x110/0x110 [ 700.960492] ? netlink_unicast+0x6a0/0x6a0 [ 700.964775] sock_sendmsg+0xcf/0x120 [ 700.968494] ___sys_sendmsg+0x803/0x920 [ 700.972600] ? copy_msghdr_from_user+0x410/0x410 [ 700.977364] ? __fget+0x319/0x510 [ 700.980819] ? lock_downgrade+0x740/0x740 [ 700.984966] ? check_preemption_disabled+0x41/0x280 [ 700.989989] ? __fget+0x340/0x510 [ 700.993600] ? iterate_fd+0x350/0x350 [ 700.997516] ? vfs_write+0x2e6/0x550 [ 701.001249] ? __fget_light+0x1d1/0x230 [ 701.005226] __sys_sendmsg+0xec/0x1b0 [ 701.009027] ? __ia32_sys_shutdown+0x70/0x70 [ 701.013453] ? vfs_write+0x15b/0x550 [ 701.017173] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 701.021928] ? trace_hardirqs_off_caller+0x55/0x210 [ 701.026937] ? do_syscall_64+0x21/0x620 [ 701.030922] do_syscall_64+0xf9/0x620 [ 701.034733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 701.039918] RIP: 0033:0x45c849 [ 701.043113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 701.062034] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.069737] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 701.077000] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 701.084261] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 701.091537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 701.098796] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000004 18:07:08 executing program 5 (fault-call:14 fault-nth:56): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:07:08 executing program 2 (fault-call:3 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x9, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:08 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x52, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 18:07:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 701.559144] FAULT_INJECTION: forcing a failure. [ 701.559144] name failslab, interval 1, probability 0, space 0, times 0 [ 701.561263] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 701.585235] CPU: 1 PID: 17997 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 701.593155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.602525] Call Trace: [ 701.605140] dump_stack+0x188/0x20d [ 701.608802] should_fail.cold+0xa/0x1b [ 701.612799] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 701.617919] ? __lock_is_held+0xad/0x140 [ 701.622009] __should_failslab+0x115/0x180 [ 701.625295] FAULT_INJECTION: forcing a failure. [ 701.625295] name failslab, interval 1, probability 0, space 0, times 0 [ 701.626261] should_failslab+0x5/0xf [ 701.626287] kmem_cache_alloc+0x29f/0x710 [ 701.645423] ? copy_page_range+0x1218/0x1e70 [ 701.649835] ptlock_alloc+0x1d/0x70 [ 701.653460] pte_alloc_one+0x68/0x190 [ 701.657252] __pte_alloc+0x25/0x350 [ 701.660884] copy_page_range+0x159a/0x1e70 [ 701.665130] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 701.669972] ? __vma_link_rb+0x251/0x360 [ 701.674034] copy_process.part.0+0x56f9/0x7a60 [ 701.678643] ? __cleanup_sighand+0x60/0x60 [ 701.682878] ? vfs_write+0x2e6/0x550 [ 701.686602] _do_fork+0x22f/0xf40 [ 701.690055] ? fork_idle+0x1e0/0x1e0 [ 701.693761] ? fput+0x2b/0x190 [ 701.696954] ? ksys_write+0x1c8/0x2a0 [ 701.700752] ? __ia32_sys_read+0xb0/0xb0 [ 701.704820] ? __ia32_sys_clock_settime+0x260/0x260 [ 701.709964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 701.714718] ? trace_hardirqs_off_caller+0x55/0x210 [ 701.719855] ? do_syscall_64+0x21/0x620 [ 701.723832] do_syscall_64+0xf9/0x620 [ 701.727654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 701.732844] RIP: 0033:0x45c849 [ 701.736050] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 701.754954] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 701.762663] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 701.769936] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.777219] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 701.784747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 701.792014] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000038 [ 701.799985] CPU: 1 PID: 17976 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 701.807880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.817246] Call Trace: [ 701.819837] dump_stack+0x188/0x20d [ 701.823463] should_fail.cold+0xa/0x1b [ 701.827369] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 701.832476] ? __lock_is_held+0xad/0x140 [ 701.836554] __should_failslab+0x115/0x180 [ 701.840804] should_failslab+0x5/0xf [ 701.844540] kmem_cache_alloc_node_trace+0x272/0x750 [ 701.853151] __kmalloc_node_track_caller+0x38/0x70 [ 701.858106] __kmalloc_reserve.isra.0+0x39/0xe0 [ 701.862779] __alloc_skb+0xef/0x5b0 [ 701.866422] ? skb_trim+0x180/0x180 [ 701.870052] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 701.874640] netlink_ack+0x234/0xa60 [ 701.878602] ? netlink_sendmsg+0xcd0/0xcd0 [ 701.882854] netlink_rcv_skb+0x33e/0x410 [ 701.886919] ? genl_family_rcv_msg+0xc10/0xc10 [ 701.891530] ? netlink_ack+0xa60/0xa60 [ 701.895426] genl_rcv+0x24/0x40 [ 701.898727] netlink_unicast+0x4d7/0x6a0 [ 701.902789] ? netlink_attachskb+0x710/0x710 [ 701.907201] netlink_sendmsg+0x80b/0xcd0 [ 701.911349] ? netlink_unicast+0x6a0/0x6a0 [ 701.915579] ? move_addr_to_kernel.part.0+0x110/0x110 [ 701.920982] ? netlink_unicast+0x6a0/0x6a0 [ 701.925255] sock_sendmsg+0xcf/0x120 [ 701.928974] ___sys_sendmsg+0x803/0x920 [ 701.932965] ? copy_msghdr_from_user+0x410/0x410 [ 701.937725] ? __fget+0x319/0x510 [ 701.941187] ? lock_downgrade+0x740/0x740 [ 701.945334] ? check_preemption_disabled+0x41/0x280 [ 701.950355] ? __fget+0x340/0x510 [ 701.953809] ? iterate_fd+0x350/0x350 [ 701.957622] ? vfs_write+0x2e6/0x550 [ 701.961335] ? __fget_light+0x1d1/0x230 [ 701.965322] __sys_sendmsg+0xec/0x1b0 [ 701.969122] ? __ia32_sys_shutdown+0x70/0x70 [ 701.973531] ? vfs_write+0x15b/0x550 [ 701.977264] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 701.982020] ? trace_hardirqs_off_caller+0x55/0x210 [ 701.987034] ? do_syscall_64+0x21/0x620 [ 701.991003] do_syscall_64+0xf9/0x620 [ 701.994802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 701.999990] RIP: 0033:0x45c849 [ 702.003183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 702.022092] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.029804] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 702.037861] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 702.045136] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.052425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 18:07:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xa, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 702.059696] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000005 18:07:09 executing program 2 (fault-call:3 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 702.242649] FAULT_INJECTION: forcing a failure. [ 702.242649] name failslab, interval 1, probability 0, space 0, times 0 [ 702.261669] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 702.298526] CPU: 1 PID: 18185 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 702.306473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.315842] Call Trace: [ 702.318459] dump_stack+0x188/0x20d [ 702.322118] should_fail.cold+0xa/0x1b [ 702.326124] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 702.331253] ? find_held_lock+0x2d/0x110 [ 702.335354] ? sk_filter_trim_cap+0x366/0x8b0 [ 702.339876] __should_failslab+0x115/0x180 [ 702.344139] should_failslab+0x5/0xf [ 702.347867] kmem_cache_alloc+0x44/0x710 [ 702.351943] ? lock_acquire+0x170/0x400 [ 702.355931] ? netlink_deliver_tap+0x146/0xb90 [ 702.360524] skb_clone+0x14f/0x3d0 [ 702.364087] netlink_deliver_tap+0x959/0xb90 [ 702.368539] __netlink_sendskb+0x61/0xc0 [ 702.372627] netlink_unicast+0x5b5/0x6a0 [ 702.376716] ? netlink_attachskb+0x710/0x710 [ 702.381146] ? skb_put+0x169/0x1c0 [ 702.384739] ? memset+0x20/0x40 [ 702.388035] ? __nlmsg_put+0x14b/0x1b0 [ 702.391943] netlink_ack+0x5e2/0xa60 [ 702.395684] ? netlink_sendmsg+0xcd0/0xcd0 [ 702.399950] netlink_rcv_skb+0x33e/0x410 [ 702.404029] ? genl_family_rcv_msg+0xc10/0xc10 [ 702.408633] ? netlink_ack+0xa60/0xa60 [ 702.412556] genl_rcv+0x24/0x40 [ 702.415860] netlink_unicast+0x4d7/0x6a0 [ 702.419940] ? netlink_attachskb+0x710/0x710 [ 702.424375] netlink_sendmsg+0x80b/0xcd0 [ 702.428458] ? netlink_unicast+0x6a0/0x6a0 [ 702.432714] ? move_addr_to_kernel.part.0+0x110/0x110 [ 702.437924] ? netlink_unicast+0x6a0/0x6a0 [ 702.442175] sock_sendmsg+0xcf/0x120 [ 702.445903] ___sys_sendmsg+0x803/0x920 [ 702.449901] ? copy_msghdr_from_user+0x410/0x410 [ 702.454670] ? __fget+0x319/0x510 [ 702.458149] ? lock_downgrade+0x740/0x740 [ 702.462311] ? check_preemption_disabled+0x41/0x280 [ 702.467345] ? __fget+0x340/0x510 [ 702.470820] ? iterate_fd+0x350/0x350 [ 702.474637] ? vfs_write+0x2e6/0x550 [ 702.478371] ? __fget_light+0x1d1/0x230 [ 702.482361] __sys_sendmsg+0xec/0x1b0 [ 702.486182] ? __ia32_sys_shutdown+0x70/0x70 [ 702.490600] ? vfs_write+0x15b/0x550 [ 702.494339] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 702.499106] ? trace_hardirqs_off_caller+0x55/0x210 [ 702.504136] ? do_syscall_64+0x21/0x620 [ 702.508125] do_syscall_64+0xf9/0x620 [ 702.511940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 702.517141] RIP: 0033:0x45c849 [ 702.520615] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 702.539528] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.547454] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 702.554738] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 702.562024] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 702.569298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 702.576573] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000006 18:07:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 18:07:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x0, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:09 executing program 5 (fault-call:14 fault-nth:57): r0 = getpgrp(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x75d19e8a6240f6aa, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f0000000400)={'trans=unix,', {[{@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@access_client='access=client'}, {@fscache='fscache'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@access_any='access=any'}, {@fscache='fscache'}], [{@audit='audit'}, {@uid_gt={'uid>', r3}}]}}) ptrace$peekuser(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:07:09 executing program 2 (fault-call:3 fault-nth:7): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 18:07:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xc, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:09 executing program 1: modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000ac0)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x2, 0x0, 0x0, @tick, {}, {}, @quote}], 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000840)={0x1, [[0xf0000000, 0x6, 0x7549, 0x5, 0x2, 0x8, 0x1, 0x10001], [0x1, 0x101, 0x5, 0x40, 0x9, 0xffff, 0xa69e, 0x3f], [0x4, 0x9, 0x1f, 0x80000000, 0x5, 0x7, 0x8, 0x8]], [], [{0x2, 0xfffffffe, 0x1, 0x1}, {0x0, 0x8001, 0x0, 0x1, 0x1}, {0x3, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0xff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xfffffff9}, {0x9, 0xfffff800, 0x0, 0x1}, {0x6, 0x40, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x2, 0x2b, 0x1, 0x1}, {0xfffffffa, 0x7, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x1, 0x1}], [], 0x100}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0xc, @pix={0x0, 0x800009, 0x30324c4a, 0x3, 0xfffff747, 0x4200, 0x0, 0x7fff, 0x1, 0x4, 0x0, 0x2}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x80fb}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x14, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 702.779392] FAULT_INJECTION: forcing a failure. [ 702.779392] name failslab, interval 1, probability 0, space 0, times 0 [ 702.791115] CPU: 1 PID: 18311 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 702.799019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.808475] Call Trace: [ 702.811094] dump_stack+0x188/0x20d [ 702.814750] should_fail.cold+0xa/0x1b [ 702.818660] ? is_bpf_text_address+0xd0/0x160 [ 702.823185] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 702.828304] ? kernel_text_address+0x6e/0xe0 [ 702.832730] ? __kernel_text_address+0x9/0x30 [ 702.837256] ? unwind_get_return_address+0x5a/0xa0 [ 702.842213] __should_failslab+0x115/0x180 [ 702.846467] should_failslab+0x5/0xf [ 702.850199] kmem_cache_alloc+0x44/0x710 [ 702.854286] ? lock_acquire+0x170/0x400 [ 702.858275] ? busy_poll_stop+0x3c0/0x3c0 [ 702.862434] skb_clone+0x14f/0x3d0 [ 702.865991] dev_queue_xmit_nit+0x2ff/0xa00 [ 702.870336] ? validate_xmit_xfrm+0x1fc/0xdb0 [ 702.874858] dev_hard_start_xmit+0xa6/0x950 18:07:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x0, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) 18:07:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xe, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) 18:07:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r3, 0x0, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x58}}, 0x0) [ 702.879196] ? validate_xmit_skb+0x72c/0xd30 [ 702.883634] __dev_queue_xmit+0x270f/0x3040 [ 702.887978] ? mark_held_locks+0xf0/0xf0 [ 702.892057] ? do_syscall_64+0xf9/0x620 [ 702.896049] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 702.901447] ? netdev_pick_tx+0x2f0/0x2f0 [ 702.905653] ? __copy_skb_header+0x2c0/0x510 [ 702.910081] ? sock_spd_release+0x270/0x270 [ 702.910264] FAULT_INJECTION: forcing a failure. [ 702.910264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:07:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "9f1ba96af3429f100dfc5d04ca343e7568a5c221"}, 0x15, 0x0) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000200)="100d984ba9414ca1dc75", 0xa}, {&(0x7f00000006c0)="4ff88f835b24d6138bcc6714be11900849aa1a71a58d4bcacbb5b017da02e359024c7c5fb4ac69c8d62ab7ea1ec655028c41f9ce6f31", 0x36}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) [ 702.914425] ? rcu_read_lock_sched_held+0x10a/0x130 [ 702.931377] ? __skb_clone+0x5fa/0x7f0 [ 702.935322] ? netlink_deliver_tap+0x146/0xb90 [ 702.939990] ? netlink_deliver_tap+0x8ed/0xb90 [ 702.944596] netlink_deliver_tap+0x8ed/0xb90 [ 702.949043] __netlink_sendskb+0x61/0xc0 [ 702.953126] netlink_unicast+0x5b5/0x6a0 [ 702.957221] ? netlink_attachskb+0x710/0x710 [ 702.961739] ? skb_put+0x169/0x1c0 [ 702.965299] ? memset+0x20/0x40 [ 702.968594] ? __nlmsg_put+0x14b/0x1b0 [ 702.972490] netlink_ack+0x5e2/0xa60 [ 702.976227] ? netlink_sendmsg+0xcd0/0xcd0 [ 702.980490] netlink_rcv_skb+0x33e/0x410 [ 702.984569] ? genl_family_rcv_msg+0xc10/0xc10 [ 702.989171] ? netlink_ack+0xa60/0xa60 [ 702.993083] genl_rcv+0x24/0x40 [ 702.996501] netlink_unicast+0x4d7/0x6a0 [ 703.000597] ? netlink_attachskb+0x710/0x710 [ 703.005031] netlink_sendmsg+0x80b/0xcd0 [ 703.009121] ? netlink_unicast+0x6a0/0x6a0 [ 703.013377] ? move_addr_to_kernel.part.0+0x110/0x110 [ 703.018590] ? netlink_unicast+0x6a0/0x6a0 [ 703.022840] sock_sendmsg+0xcf/0x120 [ 703.026571] ___sys_sendmsg+0x803/0x920 [ 703.030570] ? copy_msghdr_from_user+0x410/0x410 [ 703.035335] ? __fget+0x319/0x510 [ 703.036484] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 703.038807] ? lock_downgrade+0x740/0x740 [ 703.038833] ? check_preemption_disabled+0x41/0x280 [ 703.038853] ? __fget+0x340/0x510 [ 703.038877] ? iterate_fd+0x350/0x350 [ 703.062643] ? vfs_write+0x2e6/0x550 [ 703.066380] ? __fget_light+0x1d1/0x230 [ 703.070387] __sys_sendmsg+0xec/0x1b0 [ 703.074201] ? __ia32_sys_shutdown+0x70/0x70 [ 703.078634] ? vfs_write+0x15b/0x550 [ 703.082351] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 703.087099] ? trace_hardirqs_off_caller+0x55/0x210 [ 703.092118] ? do_syscall_64+0x21/0x620 [ 703.096092] do_syscall_64+0xf9/0x620 [ 703.099901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.105084] RIP: 0033:0x45c849 [ 703.108273] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:07:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}}, 0x0) [ 703.127177] RSP: 002b:00007f19de39ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.134895] RAX: ffffffffffffffda RBX: 00007f19de39f6d4 RCX: 000000000045c849 [ 703.142193] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 703.149642] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 703.156917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 703.164181] R13: 00000000000009c1 R14: 00000000004cc769 R15: 0000000000000007 18:07:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="e9241f89bee299db"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfff}]}}]}, 0x4c}}, 0x0) [ 703.175869] CPU: 1 PID: 18319 Comm: syz-executor.5 Not tainted 4.19.113-syzkaller #0 [ 703.183784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.193175] Call Trace: [ 703.195788] dump_stack+0x188/0x20d [ 703.199437] should_fail.cold+0xa/0x1b [ 703.203351] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 703.208533] __alloc_pages_nodemask+0x1c7/0x6a0 [ 703.213222] ? kasan_kmalloc+0xbf/0xe0 [ 703.217128] ? kmem_cache_alloc+0x127/0x710 [ 703.221468] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 703.226510] ? mark_held_locks+0xf0/0xf0 [ 703.230589] alloc_pages_current+0xff/0x200 [ 703.234932] pte_alloc_one+0x16/0x190 [ 703.238746] __pte_alloc+0x25/0x350 [ 703.242389] copy_page_range+0x159a/0x1e70 [ 703.246661] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 703.251520] ? __vma_link_rb+0x251/0x360 [ 703.255603] copy_process.part.0+0x56f9/0x7a60 [ 703.260235] ? __cleanup_sighand+0x60/0x60 [ 703.264501] ? vfs_write+0x2e6/0x550 [ 703.268343] _do_fork+0x22f/0xf40 [ 703.271913] ? fork_idle+0x1e0/0x1e0 [ 703.275650] ? fput+0x2b/0x190 18:07:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}}, 0x0) [ 703.278856] ? ksys_write+0x1c8/0x2a0 [ 703.282680] ? __ia32_sys_read+0xb0/0xb0 [ 703.286763] ? __ia32_sys_clock_settime+0x260/0x260 [ 703.291799] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 703.296573] ? trace_hardirqs_off_caller+0x55/0x210 [ 703.301610] ? do_syscall_64+0x21/0x620 [ 703.305609] do_syscall_64+0xf9/0x620 [ 703.309428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.314629] RIP: 0033:0x45c849 [ 703.317837] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 703.336752] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 703.344482] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 703.351769] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.359054] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 703.366340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 703.373623] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000039 18:07:10 executing program 2 (fault-call:3 fault-nth:8): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028000240001007072696f726974790000000000000000000000e889309faba900000000efffffffffffffff00050003000e000000080004000000", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc014}, 0x0) [ 703.572892] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 733.677367] NOHZ: local_softirq_pending 08 [ 754.796472] NOHZ: local_softirq_pending 08 [ 755.435752] NOHZ: local_softirq_pending 08 [ 775.276325] NOHZ: local_softirq_pending 08 [ 776.565704] NOHZ: local_softirq_pending 08 [ 864.235315] INFO: task syz-executor.5:18319 blocked for more than 140 seconds. [ 864.242791] Not tainted 4.19.113-syzkaller #0 [ 864.247868] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.256647] syz-executor.5 D27936 18319 8353 0x80000004 [ 864.262290] Call Trace: [ 864.265132] ? __schedule+0x866/0x1d80 [ 864.269065] ? firmware_map_remove+0x19a/0x19a [ 864.273749] ? autoremove_wake_function+0x140/0x140 [ 864.278832] schedule+0x8d/0x1b0 [ 864.282212] perf_event_free_task+0x4a1/0x630 [ 864.286752] ? lock_downgrade+0x740/0x740 [ 864.291024] ? perf_event_exit_task+0xb80/0xb80 [ 864.295755] ? check_preemption_disabled+0x41/0x280 [ 864.300786] ? wake_bit_function+0x160/0x160 [ 864.305240] ? yama_ptracer_del+0x1c0/0x2f0 [ 864.309574] copy_process.part.0+0x360a/0x7a60 [ 864.314267] ? __cleanup_sighand+0x60/0x60 [ 864.318592] ? vfs_write+0x2e6/0x550 [ 864.322314] _do_fork+0x22f/0xf40 [ 864.325832] ? fork_idle+0x1e0/0x1e0 [ 864.329553] ? fput+0x2b/0x190 [ 864.332733] ? ksys_write+0x1c8/0x2a0 [ 864.336600] ? __ia32_sys_read+0xb0/0xb0 [ 864.341276] ? __ia32_sys_clock_settime+0x260/0x260 [ 864.346334] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 864.351203] ? trace_hardirqs_off_caller+0x55/0x210 [ 864.356270] ? do_syscall_64+0x21/0x620 [ 864.360254] do_syscall_64+0xf9/0x620 [ 864.364051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.369301] RIP: 0033:0x45c849 [ 864.372497] Code: 24 48 89 44 24 08 48 c7 44 24 10 58 1f 00 00 e8 dd a0 fa ff 48 8b 44 24 18 48 89 44 24 40 48 8b 6c 24 20 48 83 c4 28 c3 e8 f4 ff ff eb 82 cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 69 [ 864.392927] RSP: 002b:00007fa2bf24bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 864.400751] RAX: ffffffffffffffda RBX: 00007fa2bf24c6d4 RCX: 000000000045c849 [ 864.408243] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.415592] RBP: 000000000076bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 864.423019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 864.430564] R13: 0000000000000074 R14: 00000000004c3103 R15: 0000000000000039 [ 864.437919] [ 864.437919] Showing all locks held in the system: [ 864.444353] 1 lock held by khungtaskd/1079: [ 864.448723] #0: 000000000dd74eb5 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 864.457465] 1 lock held by rsyslogd/8170: [ 864.461633] #0: 00000000ae687e06 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 864.469581] 2 locks held by getty/8292: [ 864.473564] #0: 000000005db870b8 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.482188] #1: 00000000834e0d26 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.491210] 2 locks held by getty/8293: [ 864.495225] #0: 0000000019975bf2 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.503741] #1: 0000000050f201e7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.512655] 2 locks held by getty/8294: [ 864.517430] #0: 000000000bb22e65 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.526007] #1: 00000000806cb2c7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.534896] 2 locks held by getty/8295: [ 864.538923] #0: 000000002199fdb8 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.547474] #1: 0000000015b8a956 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.557268] 2 locks held by getty/8296: [ 864.561278] #0: 000000005a542c22 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.569830] #1: 00000000b8adca80 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.578849] 2 locks held by getty/8297: [ 864.582843] #0: 0000000023b8c575 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.591399] #1: 00000000d3137718 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.600294] 2 locks held by getty/8298: [ 864.604381] #0: 00000000d4f773da (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 864.613011] #1: 0000000034e7e6a3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 864.621940] [ 864.623557] ============================================= [ 864.623557] [ 864.630755] NMI backtrace for cpu 1 [ 864.634412] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 4.19.113-syzkaller #0 [ 864.641846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.651202] Call Trace: [ 864.653801] dump_stack+0x188/0x20d [ 864.657448] nmi_cpu_backtrace.cold+0x63/0xa2 [ 864.661945] ? lapic_can_unplug_cpu.cold+0x44/0x44 [ 864.666881] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 864.672159] watchdog+0x962/0xe40 [ 864.675650] ? reset_hung_task_detector+0x30/0x30 [ 864.680508] kthread+0x34a/0x420 [ 864.683870] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 864.689410] ret_from_fork+0x24/0x30 [ 864.693243] Sending NMI from CPU 1 to CPUs 0: [ 864.698135] NMI backtrace for cpu 0 [ 864.698141] CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.113-syzkaller #0 [ 864.698147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.698150] Workqueue: bat_events batadv_nc_worker [ 864.698156] RIP: 0010:write_comp_data+0x1e/0x70 [ 864.698166] Code: 48 89 11 c3 0f 1f 84 00 00 00 00 00 65 4c 8b 04 25 40 ee 01 00 65 8b 05 d0 4a 9a 7e a9 00 01 1f 00 75 51 41 8b 80 d0 12 00 00 <83> f8 03 75 45 49 8b 80 d8 12 00 00 45 8b 80 d4 12 00 00 4c 8b 08 [ 864.698170] RSP: 0018:ffff8880a9497c98 EFLAGS: 00000246 [ 864.698177] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff83564c03 [ 864.698181] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 864.698186] RBP: ffffffff87aafcc0 R08: ffff8880a9486600 R09: 0000000000000002 [ 864.698190] R10: ffff8880a9486ed0 R11: 000000009fc6bb09 R12: 0000000000000000 [ 864.698195] R13: ffffffff87aafc80 R14: dffffc0000000000 R15: ffff88805034b060 [ 864.698200] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 864.698204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.698209] CR2: ffffffffff600400 CR3: 00000000a7fc5000 CR4: 00000000001406f0 [ 864.698213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 864.698218] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 864.698220] Call Trace: [ 864.698224] check_preemption_disabled+0x33/0x280 [ 864.698228] rcu_dynticks_curr_cpu_in_eqs+0x12/0xa0 [ 864.698231] rcu_is_watching+0xc/0x20 [ 864.698234] batadv_nc_worker+0x4c8/0x760 [ 864.698237] process_one_work+0x91f/0x1640 [ 864.698241] ? pwq_dec_nr_in_flight+0x310/0x310 [ 864.698244] worker_thread+0x96/0xe20 [ 864.698247] ? process_one_work+0x1640/0x1640 [ 864.698250] kthread+0x34a/0x420 [ 864.698254] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 864.698257] ret_from_fork+0x24/0x30 [ 864.699441] Kernel panic - not syncing: hung_task: blocked tasks [ 864.883053] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 4.19.113-syzkaller #0 [ 864.890504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.899860] Call Trace: [ 864.902593] dump_stack+0x188/0x20d [ 864.906591] panic+0x26a/0x50e [ 864.909797] ? __warn_printk+0xf3/0xf3 [ 864.913678] ? lapic_can_unplug_cpu.cold+0x44/0x44 [ 864.918658] ? ___preempt_schedule+0x16/0x18 [ 864.923066] ? watchdog+0x962/0xe40 [ 864.926706] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 864.932161] watchdog+0x973/0xe40 [ 864.935624] ? reset_hung_task_detector+0x30/0x30 [ 864.940568] kthread+0x34a/0x420 [ 864.944147] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 864.949694] ret_from_fork+0x24/0x30 [ 864.955332] Kernel Offset: disabled [ 864.958984] Rebooting in 86400 seconds..