fffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x2000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x16ec, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1131.323315] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:38 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x100000}}, 0x14) [ 1131.473417] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:38 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:38 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000000b) 14:20:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x200000000000000, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:38 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x74000000}}, 0x14) [ 1131.950300] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sendto(r1, &(0x7f0000000340)="a2f9b56912174999788d5c349a975b544c0301a81cf31328d88429d1db3c987e77a67ffe98e0e54400b769c115dd8103db6ad3064f2e64e914673579db1671a5eb17949d189d2ee86d94705c0aa51c0b6774cc6c2c1363cfdad83fc78e105d986efe7c1d18c069ece83b43a3a0c47f647bf2b9c130465daa95e88dbc459522faa938ffb8eff8b59cfc48f7ea57f3498b14e7b49a3055d6273874474c7c288f2f82fba99cbdfc926048957970c3026c16cb73c85900818baa66b2d1bf2781db86deae5e44f66517cbd7e605fd3cf11f04fa0c053b4702ef834224cd2de9112c7630e14f9b69889683fa136ba6fb728cd1daeca812290973c81f91575ee267926b406bba9f658794320568fb9320528d3cd84c0faad8cfa6558bf386cab27dc63771b76de2b4da4e511c2d54f9f06c1429599434709bfd582e81673f85802a9409eba7afec37d75f1054510775027965ea5cc27da0c4a6225476734adfb53763a0f90dee28281c513a18f5f92866d199756e3c4ce651dc6052531f6bccf3a0157698be3696f9019af2063feb6a2fab82a816567f2f447106c17d410445aebd255d287b6384ee90419ba8331af54c83e45345938ca2619dc01afb544aef36d4056d3e23571a406c9cce51ba80107954cca3b62d9a5d0c945723bd78d65cf6dbd3b3e6b695b96f98954985325bc237bc5a502d24fdeb0c4ef68879ab4e7e8f4d081741942362bb69b6f6d94827bcffe5924969e5c15db3e4dce097016332286e2fc7f52d2194e80ca316f6993314230be55fa0d86c2bacba54ac4fb39c6251c7c1b0a1641d621206d6900d6c7df745c9d25aab758f695156a15349db339bf4d15b08e4112b90b70d409be2d3a7e477118cb0a4fbb50b1c3b442abe42c6d464fe50111ced3be5c63620610abce080a974a3f1e06cc486c45debae593bb8c680a1516ebfaaf497cd72597356ed9d0eeacbc98dd2f4e88f97515f1b73e8fba805a91b5252c1b0a463cb8aa9553ff7eab3b6388160f7e487619d1731b6df77c6a59b4e75dbb6e58956c231546cb5632e503f67e89a9b51c50f45bfcdbdcc7ed8eac7ecdc4bd7c1bbe79fae3e1ef21b1180fc64d48a09ee24e346141da9ab074e3eda6b71f8c829b8c2cbb0b3c69dff9f2447732ad3fa696896d78fe63ac3c61d2650821640ef74d6b3433d4ec0ba5997d4dd989b9d4977476c85cef52165cb605fd83513c56614f4f1e589a7bb446e53ed820d3455f3bc04605d62cb8f689d5a623d48fd6711de69e66b8d6157133bb7417927a9a6505dd6e21f64a2c9494261ab3d7e8e989059fc5d236e400061b0bb40e68cad303d4ab83ef0c7d0e7a0cd53464d6cc29ac11d10ace98c78116c10617a9f1f8a8f9ea70280c41eddc8c00beb8bc92cd140968dde89fc901d71a249a771284465cc5be629fb5c84af9570fa11eb759d8f64fd203f5650e16701d8c1cb5ccf1a3170d77a2259a8b9aa9268e252e5866aa2f7e1242e917f1566d829bb81a30a7e229e9326364d19ee6e2c9dfaf57bf8fa5ae169b4d8012b2014189585fed980a0b03b3eda8125a9cbb6fa0f39e9e5ddf4da30c0ab32b1237ca83e4821ca45f2229ef986c4c8d9cdc620a91f7797c21d4a02627688a41004735865c27cc166489ce8d6d43c8a243a17dd14f3758d7e0229c90ec4b270dcb8af720e4741872a7e982a0428faaa53fe77b71b33fca58c9bef70be5bcd02c57e8ba9a38f854464d2fe10be50cc394cf1144bbad7417460cbb13b77ca836e38a1252899a941b55f2eba0d3e041c523b75abe9592969ca48c396030fc0f2b49b55d0da9c337fe5ddb4036f844c8db791b56c544ffc81c77477216cf3217cddeee3510fea8a5395081e07ca99db6986cba8b1cb4550f0611df2805ad9841d7df97e6d5a238fcc4a34e2e095f6322fc31ec0f9dee1976e70c5c65cec87fdfac220d3e7e9a91521b9e549b17fe31ee48f78c5402553459760a5b1631a67233e869389808dbea8be9bde35471efdcbdf1e7ba0eaae1c2be0a212e95eddd84babefcd6289d8986e8b4a6b169ec612850b1ef6aaaed0d7daa7a15f60915d91181ceb90dca533fc8a87e9279ad044647a5f2e5f274a1a1141eae781add065219cbab3a4da526b5ef68f82ee8774578bd5a0668d9c43ee72dc0aedf3debd539d97017a76aab5ac4b09e5a9b1d570c6415a7831a46325b77b6a87c63249779e30a15d39a11d2e7dc15f5efb669402b00b9a23fca20cc01ad0f675de5f34f0476027b9f3825bc6226e8ff7628961574db5c0ad19d97d2d03cb1da1b7c0d1724493167285140027fab7a262ca3fe0f7cdc40220536ada7e7a528b6707404feca861084c760f8e2c194f0fc73b6a23d402ae8e598ba081f7ac2ab89d3993d98f2987b2a4e04a9cb50244a22aba22b2999a1bb3ccd098991983e7d15770275ff0ce87beb7bc427253ec19f9a4ec9381ff8be355e1f5b856fd4e5273224906719d32baec1f7032d380afdd8e03512f1e96a7395e26deeebcb7675fd3840d851751821b3d457c1f3c0e5235b463356c8b08c17b98415478ed62d1e047af7244a0452e220f5c3eb0300cc94700aeeb98315a35eefddbaa2ab568e85503d4bec617cf797b8f085c9ec8355ac412abd50d1a412e4c7d79f5682e451f4cd75a40252065660da874496eaa58ca374b027e6cc341f69120ce043a805477f7386ad742614ceaef40e00e36bcea6805a6216f2547198584ca8e181ec05a71693f70e42deb7ead86cb0b530a0edc1a3cf603d11c746f855bb676c3a0437b9699b212f0807f9f21971675eda48082c299088b3dbad9dfd4ed6c4e30828398a632b0594a9df79c66ae22dc747f39e4bbf7110e007e4e8f9bfe990b9a101d819cdbbd31153a8efb6ef2e54ef44177944fd6eb1def2423de6408275c3b27ce0de62cdd55c395fde999da9883d2301e215e5c6731d60d15e4aaa9813dbc66fa4a1e0a31e8309968967cd1a8b07f847d21c6dfe485c2463b6f5a4f1bf596f9e2b6a736cfff9fb3cb6edfc54df7ef9f1dda902931800b1595e6a6c186d918ac9462d335be1135c7e3627197ee5a6f2168fe16d65534d16b44125785123d821bf7d6ba5e7b8581a4158f7aad3dbe1174e5e2c80161a1f9468438336d34e4e5d13811a738ddaec3a38eb9029bce3b8bc3c83e3239fc7c52d0784d6423b769e0c822fbd54e0110cb8ca68140dc3ae25dbeae9ce8b5faebc46d71f94af408ae7cf677e60f74944ba2d90e77174ea3795537c61fc53e057754c8d3291722bfb5e68d5afb7c202d5b454e14f26623c0e49fae7abb26dfd1c9e8459489cdefbb8e3c292d6d74d27eb13848aa479f97c8f17090e6aa28ac0e82184f2f0fd0daf8879e3c3be4809a63f10ada97be8b98949815d20835ec5b9a056b2bbc8cea7707a170dd01eebbd8d8a4c5ac5bc309b61dc58948b95da9d3e3aaa9662218506f729884258a515319ab13fbe93abd8de78e6fdc4a50519bcc0a51929be643dcf72732273fba042e9f5ba1c619abeb46dbe17d538f290349f23b5b1a87e5844a2369d2760b183f356ba3d3beb31c633ca403c6a09cb28b017c6f713513a62c050b6a52011d1820062726de18b0eb1f8016005bb88ad2922206776667164894d3cdc4671a98b35cb97851f6f7d367f4c02d97ad5967101d9585ab6b161e2de9dfd271f066224621eed7391b67e0e2fb37efcb2f0d750de86485e17e3087d7464638a263028d118385e5dd23bda64a9e02b528ecc816d08bbb6cb852162eb9fbc6b3f5d0bfe3e0ee62c9b15d9a6914566782fbd9d18fff604a220aafb1da91066d8af4da2b8493d768dbbc144312fd9eeaf920f21c02465131379f6d5a3658950ca9dc2468bf01f7886accaa055d09c60929ef17d2441a4b2e601f67b75c0052accdb5fa2ae7f1fc3807037123fde9571c387dd9f4df092f168b9f753e03c574e84fe286e198736dea7c01f0154ba220d943c97cc7e600e12167c920249de81f8db4fbe52cf19c79caffb43b0af6cf4b2fa2084f2ae2d6e596b5f4a3c67021cb18789778767c63e56b969577f7bca06ec519b5ceaf15be2ed7e8c2fe89d9da2cf03f9e4826845b1c5df9d083583efeee94eab2f79ac8add7c28b5d31eb90d062c0c26a0f7923124dabe8c7fea12a201f1e8697947e3a9f06ce34939aa32ff2e24522103703fefc7333c8d342f75c22309d357c646a122ebb84775ed4637321ce78e280be2e58e7c7ec9429aa48f1f5e42da141f2f770f4ee53226f38d6c1eaf33d10cb5ff4d333d5240604e41413200908ca923e42e3459bd01cb2add845163ac68fd002fe7f305d49c19e9a5e79c1535b76bebfd031e90e3af5ce948cfc8f7f180175f0bb81eb2e807c09903ad0882ffb6e324e7456f5e56c065bcfc3ef7a196e99757f5b43210c503a89b357e3d35d701c3f371529076462db07cb8a9ee8a679306cb7ecc835c556fdc6dbae75f85a43f09b57d2f8167e22d45f389aa1d2d2bc5951cc8f4d25674f1481550553859090586fc4778940a7d25754dd1dcf1400f29077feb6c45c8ddd0750fa7a852b2ad211521ead11e761f8144704c9cfa268683f997ff27c96b4a1619a1b7bae112483a1cf49d5ffe4a233a5e73fd901edbb97227101d6d75f56b805800aa2eb17517638e99deef4347ef82eb5b6bea51a8d94fda4bec2d6baae768d31f5bfd6e40033e681ed0444d16295e92ef8d1b60ecefc389b277ed2297278069fd3f296c298a908184835d6cc198f9fe4c1ec3a2235fcb0695c3666532ded70787ecdad469752ec736a5e65733797f0afc8b71d58bbad53a220cf8896f1e163cc1c162dbfc2e943ac339deca9562c1f1deb799695850e3ed5c8486f72e17ed710692e6aec0274c5a97cae6633bb1d44b848c5271f9d0927d1e640da6fac3d68cf4c9abd3dda1aa85f271375f23475a005d9d454b21b6a705978a2092d445ac898a042c8bd37521a3734489f545940fe9386ac4b11d2e6eeb1486ce74d8f8bfba3896afa200c422eb7ef3c75de2d8a4b9f233a94cd5d748770ed9ceb676747cc71ad13e0d5b7c311610fd0f0913f25d5619569e1a45ce3b4a5b046eb0bbdf7be9376eac69b3b6f3e2b939772c07d94e83e7694dd8affa874680d1b69acf01f9483f8d50c442bff8fefab3f7b01244a9f1e51c4e3e80d2622ee71e98fc2bcf9368a0d417871b3326c127351b997d0e6aff85818a5acd8c45f3368b5881b29d336b058bc01c690f4408c4a1e3d55dfe8d9a6d458a9845b9cea4404bfd07284f5a6f8102b98858fba485fe60f473fd187443359ea8363b70a875f4bef483a48313c7cb44fccaff50c05c72c71b9875019b9013341159a7a90a4e7c7816d06a46dc15499d931dba12a56b328d2ad8e20e7dfd8c0587efa139cba2d6eb49803bc35da461aa865bf9f6fc7a51dfe834d5f7c8ed03a7cb6493ef75c90548b67a532a0c0f0dc437b0628feb2fd7ab02a8d3f62defe6c78d782325ee13f016af6c9788215f2e061ac2e00389212570150e7a51fd54a429eef9ad829a44db181fa2a77b17b95de27a8e41bf4a810f3b6baf157a5272f5bc44f466decce9390457b2c10d78683eaeedb3d55e0dca7693f82a2aac9b7f79c92de37c3415d9dc3b0716b424f605873829f40d6470f54a26a33080a74a56eb02d835432e35c682f6fa539203553614987a9454dfab7bafc38999f67684f28f54ae452be34e1ce109ce49a05282a222f9e2e180f3f3920962db52923e9250a1ac0f8cfe5c9fc3cf302425acb88b62b737e965915bb", 0x1000, 0x4000000, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000180)={{0x4, 0x6, 0x800, 0x6, '\x00', 0x5}, 0x2, 0x508, 0x3, r2, 0x0, 0x5, 'syz1\x00', 0x0, 0x0, [], [0xfe08, 0xfffffffffffff801, 0x1f, 0x1bd3]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'tunl0\x00', 0x8}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0x1000}) 14:20:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xfcffffff, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:39 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x40000000}}, 0x14) 14:20:39 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000041) 14:20:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x3f00, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1132.151165] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfec0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:39 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000018) 14:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xffffffff00000000) sendto$inet(r0, &(0x7f0000000100)="c0e53134469c27554dec16affb6a62feba183a0567696699e3c56115d07b77492453c421382c752f0aa388a97fae4268b82f7290825e2373a65dea8ab31ea21339504d1210febfcb05c8d0995856dec277e816399e19225f8bb5ac17612a0305f8c1f815fd17c778dae5ca49e9c3d2ec72c13f4db0cca9d70a36523009dd3fb195b6e26eb11c576aac66f936813d312cef0140feb2b0289e37879ef5cfbae9067620d02dac7aef338209ac2e20708554c2729d18a7e4f7117547fec12bec4ef1c383decfff7bd82289b5f9833ee066a0391ecae23535b34688892e29e24b3b41", 0xe0, 0x0, 0x0, 0x0) 14:20:39 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf0}}, 0x14) 14:20:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xf00, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xb00000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xf00000000000000, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x8000000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1132.845702] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x10001) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x40c0, &(0x7f0000000080)={0x2, 0x804e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) pread64(r1, &(0x7f00000001c0)=""/236, 0xec, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x1}) 14:20:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x400300, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:39 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x7}}, 0x14) 14:20:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xf0ffffff00000000, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:40 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000025) 14:20:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xb00, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1133.077688] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1f, 0x400) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) memfd_create(&(0x7f00000000c0)='\x00', 0x2) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) 14:20:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xf0ffff, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf00000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:40 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x600000000000000}}, 0x14) 14:20:40 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000003d) 14:20:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xffffffffa0018000, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1133.660672] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:40 executing program 1: syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x3f, 0x20400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x9648ddbf03768548, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x30000, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet_tcp_buf(r3, 0x6, 0x16, &(0x7f0000000340)=""/109, &(0x7f00000003c0)=0x6d) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={@mcast2, 0x13, r4}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) shutdown(r2, 0x1) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:40 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x2000000}}, 0x14) 14:20:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x5219000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0xffffffff00000000, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:40 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000024) 14:20:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x3f000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1133.875367] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x10000, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000240)={0x7, 0x2, 0x57, 0x9}, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x3, {0x2, 0x4e20, @local}, {0x2, 0x4e22}, {0x2, 0x4e24}, 0x10, 0x20, 0x3, 0x0, 0x8, &(0x7f0000000140)='lo\x00', 0x0, 0xfff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x67, @broadcast, 0x4e20, 0x1, 'wlc\x00', 0x800000, 0x805e85, 0x29}, {@loopback, 0x4e25, 0x3, 0x7d2, 0x1, 0x6}}, 0x3f5) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @mcast1, 0x100000001}}, [0x1, 0x0, 0xffffffffffff9626, 0xc00000000000000, 0x8, 0x9, 0x7fff, 0x5, 0x2, 0x2, 0x7f, 0x4, 0x21, 0x4, 0xffff]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r2, 0xa6b0000, 0x3a, "676107f96f0b9bcec8887cd68b24b83bb75d891a2ed60f63a46bdf13301254acd017694c65e93dd9db615f11ce6526e8ad79c38df47015819553"}, 0x42) 14:20:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfffff000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:41 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x60000000}}, 0x14) 14:20:41 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000008) 14:20:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x3, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0xffffffb3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0xffff, @mcast1, 0x3f}}, 0x6c7e8a06, 0x6}, 0x90) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xa0018000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1134.541972] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x2, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfe80, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:41 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x8040000}}, 0x14) 14:20:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfc, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1134.751094] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:42 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000010) 14:20:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xfcffffff00000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x40030000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf01}}, 0x14) 14:20:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xffffff7f00000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1135.396544] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'yam0\x00', {0x2, 0x4e24, @multicast1}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xffffffffa0018000}}, 0x14) 14:20:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfec0000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:42 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000000f) 14:20:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xa0018000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x1c020000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1135.613758] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x400300, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x14}}, 0x14) 14:20:42 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000014) [ 1135.817360] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf00, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x5219, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:43 executing program 1: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x15}, @remote, 0x1, 0x8, [@local, @local, @rand_addr=0x3a77, @dev={0xac, 0x14, 0x14, 0x13}, @empty, @remote, @multicast1, @local]}, 0x30) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) recvfrom(0xffffffffffffff9c, &(0x7f0000000100)=""/101, 0x65, 0x120, 0x0, 0x0) 14:20:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x7400000000000000}}, 0x14) 14:20:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = semget$private(0x0, 0x0, 0xc4) semctl$IPC_RMID(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:43 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000012) [ 1136.227181] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xff00, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x34000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf0ffffff}}, 0x14) 14:20:43 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000015) 14:20:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x34000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x3f00000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x2000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1136.449683] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x4000000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) read$FUSE(r1, &(0x7f0000000140), 0x1000) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000001140)) 14:20:44 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000004) 14:20:44 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e23, 0x7fa7, @dev={0xfe, 0x80, [], 0x18}, 0x401}, @in6={0xa, 0x4e24, 0xfffffffffffff798, @ipv4={[], [], @rand_addr=0x100}, 0xcd6c}, @in6={0xa, 0x4e20, 0x6, @loopback, 0x54}]}, &(0x7f00000001c0)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4800}}, 0x14) 14:20:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfec00000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xffffff7f, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:44 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000002c) 14:20:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xec160000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1137.127345] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf00, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4000000}}, 0x14) 14:20:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf0ffffff, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) socketpair$inet6(0xa, 0x80000, 0x2, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x101, @empty, 0xffffffff}}, 0x8, 0x3e00000, 0x80000001, 0x4, 0x10}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r2, 0x7}, &(0x7f0000000500)=0x8) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) r3 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x7, 0x7, 0x0, r3}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x4000, 0x0) getdents64(r4, &(0x7f0000000280)=""/133, 0x85) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000340)) prctl$setmm(0x23, 0x7, &(0x7f0000ffb000/0x3000)=nil) write$tun(r4, &(0x7f0000000180)={@val={0x0, 0x10}, @void, @eth={@empty, @empty, [{[{0x9100, 0x4, 0xffff}], {0x8100, 0x99f, 0x5, 0x1}}], {@llc={0x4, {@snap={0x1, 0xaa, 'Cd', "a5040c", 0x8884, "a9b89c9200ac4c5595c49decb0baaa7cef7f162220d6bf3947f04989954d401a754e77942261b7ccb918594a54a74f0966b154c9ea95c0d77ad8cb947ee3e58739eb3031b9e05e0687f069b5861a12170aabff8cac6610bb7e68b1d5df1030dc64792f4843f5cb1c31bbb0e709353d92e40b601fb6233b18767daf4c3d726f1ac57cd004b837a05fcab22b1c5f976db534f3236aefca6de53f9709d56a4a117021b5e9"}}}}}}, 0xc6) 14:20:44 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000037) [ 1137.387589] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:44 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x10000}, &(0x7f00000001c0)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x9effffff, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4800000000000000}}, 0x14) 14:20:44 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000003e) 14:20:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) timer_create(0x7, &(0x7f0000000200)={0x0, 0x19, 0x2, @thr={&(0x7f0000000100)="1d951b3ce91997580af3e45e20aaabf3c8ca32f594524f5e5f116ad39f2dea968e1693d4fc8e0465204b34b8e98d45d81b25dddd8a7867aeaf2b7ba2bf1a241b1a8903eba50e0f5cfa7b", &(0x7f0000000180)="1a3429800ef3f65203685119581f4783a447addd9177594c00e36e4a10d54b0df78f8e659425ccf0a8b77fdcbd50f7df4fa916d3004e056feb5d0e2c4f4359704c9be802f9f63a61edba4e6a46f84c310ecfb122aaaa9dbfd048a50fc5068f2a1ce3ac6f7586d2986da3591dd0e7fd7988212e"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x100000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1137.976356] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xffffff9e, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x5) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x140, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000140)={0x214, 0xff, 0xff, 0x4, 0x8}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x8) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4000}}, 0x14) 14:20:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xffffffffa0018000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x9effffff00000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1138.234926] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:45 executing program 5: r0 = geteuid() r1 = getuid() mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10, &(0x7f0000000180)={'trans=unix,', {[{@access_client='access=client'}, {@fscache='fscache'}, {@afid={'afid'}}], [{@euid_gt={'euid>', r0}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute'}}]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x23, &(0x7f0000000200)=0x6, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) 14:20:45 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000021) 14:20:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xffffffffa0018000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4c}}, 0x14) 14:20:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000580)={0x4, {{0xa, 0x4e24, 0x8, @empty, 0xa84e}}}, 0x88) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000640)={0xffff, 0x2, 0xb5, 0xfff, &(0x7f00000004c0)=[{}, {}]}) r2 = getpgrp(0x0) r3 = getpgid(r2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) r4 = dup2(r1, r0) write$P9_RLCREATE(r4, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x8}, 0x7ff}}, 0xffffffffffffff04) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000240)={0x6}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, &(0x7f0000000400)={r4, r4, 0x400}) recvfrom(r0, &(0x7f00000002c0)=""/101, 0xfffffffffffffd53, 0x122, 0x0, 0x4f) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000200)={0x2b5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0x1f, 0x0, 0x10000, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000480)={r5, 0x2}) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000140)=""/184) 14:20:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x1c02000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1138.833223] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xfffffffc, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:45 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000000c) 14:20:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x100000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x10000000000000}}, 0x14) 14:20:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xb000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1139.073592] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x9effffff00000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:46 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000023) 14:20:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x3000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x10000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0xffffffffffffffec) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000140)={0xc5c, 0x4, 0x4}) 14:20:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf010000}}, 0x14) 14:20:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@mcast2}, &(0x7f00000001c0)=0x14) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x2080) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 1139.681870] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x40000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x8000000000000000}}, 0x14) 14:20:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d667363616368652c7375626a5f747970653d6e7600fd313516cb1c31e42248d40b2ecb8353ab76d6504a35e142f41ca48125b9c25829e960a92797d462516df142326d194a0a3f8b817a18f12f9fd85211ea4cf745927ea872323ba8babc17854eb45f8df4c60a1e0c47944326dbf11d283e7c6ecc8f03033e91ffd05ada9a3678e2f779770c3aaf2da0fa7686d0ef94efeca374dcf90e87f2b466c32c1da9bb68f04874be842c7065726d69745f646972656374696f2c7065726d69745f646972656374696f2c7569643e", @ANYRESDEC=r2, @ANYBLOB="e526e3f2329cf4a3a2d379682dd42264f518334d373f48c5c306aa61e14d45dbd08a561a194cd6703bbfab304d31504bb7e25da6aa675ad35dd1ab2f895e2a778db9eb3b5ba394893b7721b5acb84198cec667a8a830cb8818b7b86d60156b941be5a5a1ea0ee95f96191605b3ee51526cf9f8f9c1571997e67b6612c5f96ce1afc93027a856c8743d08ebf4"]) r3 = memfd_create(&(0x7f0000000040)='-eth0\x00', 0x4) sendto$inet(r3, &(0x7f0000000140)="74926555c424cd36a0d5ea45a7e4c3d04b4fec175cff7d363076ff3d519ca671e5b52d7d1949949dbc51fd2680cca66971ed8bfb5cfc228e5e41b784a281f578e81eae1093a11a8642525c475dc5791df93729002e818f4e8a5b75220b7f99c575dc45ba11c792ff708e0082bd300ff60ce1199baf1bec7f44fb", 0x7a, 0x80, &(0x7f0000000000)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)="6e7600fd313516cb1c31e42248d40b2ecb8353ab76d6504a35e142f41ca48125b9c25829e960a92797d462516df142326d194a0a3f8b817a18f12f9fd85211ea4cf745927ea872323ba8babc17854eb45f8df4c60a1e0c47944326dbf11d283e7c6ecc8f03033e91ffd05ada9a3678e2f779770c3aaf2da0fa7686d0ef94efeca374dcf90e87f2b466c32c1da9bb68f04874be84", 0xfffffffffffffff0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f00000000c0)={0x4, 0x1, 0x8, 0x5, 0x2e0e}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) 14:20:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x4000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:46 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000028) [ 1139.848624] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:46 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x4, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xb, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xfffffffffffff000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x10000000}}, 0x14) 14:20:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf0ffffffffffff, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x4, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1140.084366] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x8001a0ffffffff, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:47 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000016) 14:20:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xec16000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x2dd, 0x120, 0x0, 0x0) 14:20:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x804}}, 0x14) 14:20:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x40030000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1140.528128] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfe80000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xa0018000}}, 0x14) 14:20:47 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000002b) 14:20:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x400000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xfcffffff, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1140.821126] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xff000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:47 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="efadcc2088cbf4063ed458581e9bec590c29f088d8f6229a2c830160c8905d1b3ae2ec4526d0aedc49de0e1c55ea732670a6b3a1a2aac53d8bfae482581c30374a684cbd4fa4665739fe806d51ff88c13e45a46769296a3c3a1371f15d5cd13780345218380dd274075f3aa1f654cceb675342c3c65fa1dfba92196c355367335bf48ba94f1b31a08d7c8ff39ce26368064c2b96986ea5cede1a854920d9d1154e3dbc9974c3810dd42e62e4762d3261d9fb78e465166d56fb3f600485e025956af3a62b4807a605cf4eec20f93dea", 0xcf, 0x1}, {&(0x7f0000000280)="faada57f0fd46e279c97dd4466b45b8e73323d4e33ebfca3e753f3b32e5a340fbf6fa13e5c35268ff54a56d237199c665c1b6828", 0x34, 0x4}], 0x40000, &(0x7f0000000440)={[{@lazytime='lazytime'}, {@four_active_logs='active_logs=4'}, {@lazytime='lazytime'}, {@noquota='noquota'}, {@grpquota={'grpquota', 0x3d, 'nv\x00'}}, {@prjjquota={'prjjquota', 0x3d, 'vmnet1'}}], [{@euid_lt={'euid<', r0}}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e25, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x600}}, 0x14) [ 1141.029435] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x1000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:48 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x10000000000001d) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x1c02, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x2, 0x0) syz_open_pts(r1, 0x200000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x7f, 0x5}]}, 0xc, 0x3) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfffffffffffffef1) 14:20:48 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x408}}, 0x14) 14:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x9effffff, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x300, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1141.396980] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000300)="699be3dac8a21dd6353ce77b1f48db47d4f7a3dceaef5f99057fa7aeb4b9cad701b53148e6d70aad8cea500e97df8bc387258e7f1f2e37cbfe3676635bca579c717ee53ab6d9dd39332152db616dad2d705766605607448cfae93abc1d70aa929e9cf9dfe60cd750a9ad298e3d4ac28af4024eaa1ad132ff42ad8539bdde5966cdeeace9d2b0bb76b6517672183c41cb900a35999365b5f6c5e04740f69bb26a2521ee86b5116623d394a0ed56fb6ac57f22ab1f629f71", 0xb7, 0x20008005, &(0x7f0000000080)={0x2, 0x4e22, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x200) getsockopt$inet_int(r1, 0x0, 0x2b, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6723, 0x880) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x38, @local}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x8}, @in={0x2, 0x4e20}, @in={0x2, 0x4e21, @multicast1}], 0x6c) 14:20:48 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xffffffffffffffff}}, 0x14) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x300000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:48 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x0) [ 1141.629216] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x400001, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0xb8, ""/184}) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x16ec, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x32, @broadcast, 0x4e22, 0x4, 'lc\x00', 0x1, 0x0, 0x21}, {@multicast1, 0x4e24, 0x1, 0x8, 0x1, 0x15}}, 0x44) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfc00000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:48 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYPTR, @ANYBLOB="ac95083b50084d568ab10ef74464794e02ae1e573c4a8aec7f6848a64fa7e415f368924ed60951d616f6247ac426872f1d6e49a49ad2e326bed1a4db9f1385a6df08ee691954dff1c06bb2140a906bdd12b348ac7a563d898410892a212ee1ada9bce23eb81236f319c630ad188696b11dae146e605150e3863069cd018eaf5e", @ANYRESDEC=r0, @ANYRESHEX=r2]], @ANYRESOCT=r0], 0xb02f) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 14:20:48 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6c00000000000000}}, 0x14) [ 1141.704760] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 14:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf00000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x4000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x80fe, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:48 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pread64(r1, &(0x7f0000000080)=""/142, 0x8e, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$void(r2, 0x5450) finit_module(r1, &(0x7f0000000000)="706f7369785f61636c5f6163636573737070703073656375726974795c249600", 0x3) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="c9", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x300000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1141.896170] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfffffff0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x8f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xff0f}}, 0x14) [ 1142.107629] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x1c, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e21, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4000) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @random="8e26cabe439a", 'veth1_to_bridge\x00'}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x6000000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x200000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) rt_sigqueueinfo(r1, 0x39, &(0x7f0000000140)={0x28, 0x3, 0x0, 0x5}) 14:20:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfffffffb}}, 0x14) 14:20:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000003040)='/dev/snd/timer\x00', 0x0, 0x40800) fgetxattr(r0, &(0x7f0000003080)=@random={'os2.', '\x00'}, &(0x7f00000030c0)=""/169, 0xa9) r1 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e1f}, 0x1c) listen(r1, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002e00)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000001540)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000001480)=""/141, 0x8d}], 0x8, 0x0, 0x0, 0x10001}, 0x101}, {{&(0x7f00000015c0)=@ax25, 0x80, &(0x7f0000001780)=[{&(0x7f0000001640)=""/115, 0x73}, {&(0x7f00000016c0)=""/148, 0x94}], 0x2, &(0x7f00000017c0)=""/244, 0xf4, 0x19}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/118, 0x76}, {&(0x7f0000001940)=""/173, 0xad}, {&(0x7f0000001a00)=""/123, 0x7b}, {&(0x7f0000001a80)=""/164, 0xa4}, {&(0x7f0000001b40)=""/103, 0x67}], 0x5, &(0x7f0000001c40)=""/59, 0x3b, 0x81}}, {{&(0x7f0000001c80)=@xdp, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001d00)=""/4096, 0x1000}], 0x1, &(0x7f0000002d40)=""/138, 0x8a, 0xfffffffffffffff9}, 0xffffffff}], 0x4, 0x40000000, 0x0) shutdown(r5, 0x100000000000002) getsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000002f00)=""/176, &(0x7f0000002fc0)=0xb0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000003000)) [ 1142.496873] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 14:20:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xff00000000000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1142.566888] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xfffff000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:49 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x80000) recvfrom$packet(r1, &(0x7f0000000540)=""/202, 0xca, 0x1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x80000001}, &(0x7f0000000080)=0x8) r5 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x400000) ioctl$sock_bt_hci(r5, 0x400448de, &(0x7f00000002c0)="c1e5950dcfa0023cf62842d0db871d203bad21d6ad1eacb9db17edc94d35b07a67c88a0b9f24e2a3a1dd124a2cb2ed0fdade7c1bf15cc83b2139bf6699116816b077e3abc69cb99ecbc6b900760a19bcab3082d57b7c5933292acd3f2dfed6958d230f68b747a0c9e94456db4b1aa984a8936c57ac73d0d5a69f0b097891bd5e38aa0f1a6c4382ec225f5dec7254cb7260681a778b56be45a530c3041c5d7025bc165ee873801290a056b803dde9a2c9ae95b80917ec6fd03dd8d9721d83bd64f81f370ad507b462107e24ed7c0715af27c53d651c26cee758b0bc2adc92b9") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000480)={r4, 0x79, "5a32884462a2bb1b86fdff30d7b4d5d28010b2f06ec329efbef6dcb09a37182f27741ecac887db7b5f394cd0e3fa2db2c72e9e2a90048e2c7d9edff1297d213f59afd66dce2f3a10bb9a65777d22745951928a48c6fa2da24f83507ead4ae0f2779cce80d97d79986c378b0d3140e969e924745cda2a0035f6"}, &(0x7f00000000c0)=0xca) write(r3, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0xfe7c) r6 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r6, 0x100000000000002) 14:20:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x300000000000000}}, 0x14) 14:20:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x800, 0x0) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000100)="7117a53760896a92448ca1fdeab320bbfe0d49302aa436a645b1bad05168786ecaaf693915c74b62ea43390578336f0639b3bd0b3b2dc497ed4b74c8f5efaa2efad14c4264233c1049fd20e11b42bc8836833be068bae4a2adb4bdcb66db1c6e42a8f641981c907afee29a4742b191150e2c26f80cadb06c4497", 0x7a}, {&(0x7f0000000180)="523421d20ac5345e84f1cd2f14cc20f47c0b857f512a9b2a2f0d851675e9b97d6693d6978a30e0f0bd58b863875832eecfcff0f1a51d46350fd3687772b7c2172704977638f745761dbc726d86cb9d06ca0e45dd8b76c0de510c7e6b40235b5e9a73befc9cf35f69038e44caa541f722278894771dd725825d864a1f0447d160b535393f2d98b5b9216b35f79576a3b889", 0x91}, {&(0x7f0000000240)="dfc4d248b53a7222ef61c3dfeb2e7df327e4b98790048cad8a3eb5b98b2495df744107d60ea7316ec293e2b2a2c1ac51fc3eb10e8ad7df681f4bb7757a28680d53381930110d0fc00573d63292b5d4c5784ecbeb9e54780763aa83acad1c1309f5121c6286a3468c64066edbe29ee81078f2a61ab7cd120cb502415ae6797fc6bb2bf345ea5a80ddc589ebb0616b011a9b7b155af2120076ae3903ee2365f8434e110a210db1a5f349666aa1f470da7f1afa5dc25d160f7fa7512208ca377d24e46177df4d54c37c1a778243e92265f7ec5d8494a4c8547bc2f2e787", 0xdc}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000440)="b6218888b4a229dfca647b6f4e1b7611881130356fbb862f06f178a96844d155c47e7fd016536d7f6635fbd0fa4f3bf49ae89bb1384bc434d6ae5c6dd0d8c825245d16c8704868a1cb5940a61602ae2fac9adbf836a4c83f7705ef41a375d3e381b867f1d686ea2e82894583c9d7c1c6528520fe01a23ec32aee755e3c0f30d2794485d34ddd0dc642fd25e248b8d040dbc6c7300a74aef2246877ed8710bafa5b", 0xa1}, {&(0x7f0000000500)="368cde5750", 0x5}, {&(0x7f0000000540)="2263f73ad5da7f92b8abbdb7daa938f273596d22c7882b2da12492bc", 0x1c}], 0x7, 0x1) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x8001a0, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xec16, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xc1f, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000002c0)=0x3f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) [ 1142.809786] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xffffff7f, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x3f00, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:49 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = getpgid(0xffffffffffffffff) kcmp(r1, r2, 0x1, r0, r0) listen(r0, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r3, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:20:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4c000000}}, 0x14) 14:20:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x52190000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1142.991721] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xfffffff0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:50 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x10}}, 0x14) 14:20:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfc000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1143.153558] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xce20, @broadcast}, 0xfffffffffffffe2d) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000002cc0)={0x0, 0xa0c}, &(0x7f0000002d00)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000002d40)=@assoc_id=r2, &(0x7f0000002d80)=0x4) recvfrom$inet(r0, &(0x7f0000000200)=""/89, 0x59, 0x100, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8124b79c225eb7264cfb1e9b9db3", 0xe, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0xffffffffffffffa1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)="000000f8486133ebcd6b518a3c314ce37ac6a2a08e03676a93b313572c50780d6740be5c1a9ed91e5070bfdc422e2d63ed27b757039b31cc60d9fb5f7bff980f409f57f23dc01281e1aa6d399de364bd40c84690008f7ff24c3ec602236185329e63220794351c1cbfe7f6df7a68673c5b8f274738b21c8ea1af50c8f2218191f43fe184a717276463c0bd846843aa8a79b5d37bc977bb6af8ddb37f4772ea44e4642df3739b3cca7d7aa6450a1fcb733049a5a888e4a51abab69b843f358a7f5cf2d868f3edd45221cec844762e1eac4e5f2b849723bdc34d9189c6bee15e565aa34b68e2e10ecbda3b9f195880da7d0e9eb87592b8e8", 0x295) 14:20:50 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) socket$pppoe(0x18, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xffffffff00000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfffffffffffff000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000100)=@ax25, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/232, 0xe8}], 0x2, &(0x7f0000000380)=""/177, 0xb1, 0x5}, 0x200}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/196, 0xc4}, {&(0x7f0000000780)=""/2, 0x2}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/169, 0xa9}, {&(0x7f0000000980)=""/211, 0xd3}], 0x7, 0x0, 0x0, 0x6}, 0x3}], 0x2, 0x2000, &(0x7f0000000b80)={0x77359400}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000bc0)={0x8, 0x7fffffff, 0x10000, 0x7, 0xff, 0x100000001, 0x401}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:50 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfbffffff}}, 0x14) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x3000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x3, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1143.610021] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x800, 0x2000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:50 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x400000000000000}}, 0x14) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x8001a0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf0ffffff00000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:50 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e27}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x200000000000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf0ffffff00000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1143.870362] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xf0ffff, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x1e6) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='\x00\x00\x00', 0x3) r1 = shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:50 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = memfd_create(&(0x7f0000000000)='wlan1em0\\+!\x00', 0x1) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x49f) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000100), 0x80800) r5 = semget(0x1, 0x1, 0x34) semop(r5, &(0x7f00000000c0)=[{0x2, 0xfffffffffffffffe, 0x1000}], 0x1) shutdown(r4, 0x100000000000002) shutdown(r2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000080)={0xfffffffffffffffc, 0x9}, 0xc) 14:20:50 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf4ffffff}}, 0x14) 14:20:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1144.118699] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0xffffffffffffff1f) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x87, @empty, 0x4e20, 0x4, 'sh\x00', 0x10, 0x10000, 0x34}, 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xfe800000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='hybla\x00', 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000400)='net/ip_tables_matches\x00') sendfile(r0, r0, 0x0, 0x9) r4 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x80000001, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x10000000000}}, 0x1, 0xfa1}, &(0x7f0000000200)=0x90) getegid() setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x400, @empty, 0x5}}}, 0x84) bind$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)={r5, 0x4000000000, 0xa8, "d17ff3977192d86843640c358eb06704739e6a1b99d8a8b9825818eb2dea20cde687b302da1e80a4c0fc88688a2a49f0a99f603098b04642207bf8fb38ff88817050959da1f7aeb78ae3eb075e1bf39acaa0f71575493c9b1fc4e3745fdc3a546041f460314f73b3958ec28e5647f66904dd6cb40ce9039ac18c71cbc516cc0e17697450bbd4c8ec62d1514340d5e82ac2d7eb10a79814356d6d97df725c0beb8efbae43b432aa26"}, 0xb0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x23, 0x120, 0x0, 0x4f) 14:20:51 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4002) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) write(r1, &(0x7f00000000c0)="8f", 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xa, 0x0, [], [{0xa9, 0x200, 0x1, 0x9, 0x0, 0x9}, {0x7fff, 0x0, 0xe2, 0xff, 0x10000, 0x7}], [[], [], [], [], [], [], [], [], [], []]}) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:20:51 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x14000000}}, 0x14) 14:20:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x6000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:51 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x7000000}}, 0x14) [ 1144.536229] 9pnet: bogus RWRITE count (33554433 > 20) [ 1144.548014] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 14:20:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xc0fe, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1144.610941] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 14:20:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x300, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:51 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x10000) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000100)=@req) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) inotify_init1(0x800) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x1) 14:20:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x2, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1144.709633] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:51 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x3fc5d5bdb7f301ce, 0x84) r2 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x6, 0x141280) ioctl$KIOCSOUND(r2, 0x4b2f, 0x0) r3 = socket$inet6(0xa, 0x6, 0xfffffffffffefffc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x7, 0x650, 0x0, 0x7, 0x0, 0x4d0, 0x80000, 0x8, 0x401, 0x2, 0xcb2b, 0x23, 0x0, 0x401, 0xa3aa, 0x80000001, 0x9, 0x80000001, 0x3, 0x20, 0x9, 0x1, 0x3, 0x4, 0x9c35, 0x1f, 0x81, 0x55, 0x10000000000000, 0xff, 0x9, 0x2, 0x11, 0x4, 0x80, 0x5696, 0x0, 0x3800000000000, 0x6, @perf_bp={&(0x7f0000000080), 0x2}, 0x100, 0x7, 0x4, 0x7, 0x1, 0x4, 0x1}, r4, 0x9, r1, 0x8) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="591be7ecabd857f159beab3b141fec97e74297f8b34b5e798383dbe37f5e4b62224169177c7f5f63", 0x28}, {&(0x7f00000002c0)="1e98706f901a6c1f83c985c75e709f8765f1f730a4964087ff65543b1f3fffc34f9c6be9b1cf75bf8fd1d97e30e6b97bf70cf584dbcaf90750e536b37a1aa3da122e359c5473b0ed4b3d70c77421fc8d26f55de713179aa8d355554569aa0d79554699572839b100e1f4281308d1f75f4f62877fe54c7daa5089998600d21837ef48e798fd83903c791631", 0x8b}, {&(0x7f0000000480)="a1722d3d099be13b2f5bafcb9ee04392636450ea3b9e8cc20f7cd63031d7b7e6af585084a6c4a57416bdcc6a444173fea4aa80d2dfcc23a17a153370d4436198c1412a6eb85d5528b5083b709c2033df09029b2727d579b4047f5dec90186594c3e65ecb82a782c62b0030dde01e2f6468e6640cc9733652f82e2e15cdf56088bfc88ee29283e4097295ddce6dc0611be26a78d8fae96902a6667d3624999e8a4a0e751c92642df4882bfc217cd510a75c03233ff1c2eb10847cc9b3011c86cd22d7f0175de34e87e9ae11ecfcf359700c04c92711ebb708f0bedd9985914a2a53792861d1d7e4938f889af9892a3b33484d0b", 0xf3}, {&(0x7f0000000580)="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", 0x1000}], 0x4, 0x0) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x4) r6 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r6, 0x100000000000002) 14:20:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x60, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:51 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfff0}}, 0x14) [ 1144.909844] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x21c, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf0ffffffffffff, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:52 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000140)="f2594e58e1bb1971ddb3fd81701bcd253d246b75077ed4e64a4ba6515f710480212a459b460b68bf9ce3f8f09992c07cf2566fa23d286f2fec2fa25705fd04ea1c91802f294fc9fd9591937db22c309e2eca82cc7767724ac860533cb092c82802cb100925465d351eff7e885b2c191ca3b2fb4d3d1fb4aa5ecee3ab4b2b6dce8da8b61577db320622e93c97abbf19333dd180ef657213f67cb48713b79d819eaf8e1f8b2346685772d4c5165bd5a6caaca6f90fa70f42cc868eebfac5691de9179f04233ba16f17c9f06a") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0xdfc5}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x3}}, 0x14) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0xffffff7f00000000, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x8001a0ffffffff, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1145.385196] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6c}}, 0x14) [ 1145.509685] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x1952, 0x0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0xffffffffffffffcd) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:52 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x0, 0x0, 0x1, '\x00', 0x8000}, 0x0, [0x42, 0x3, 0xd1, 0x9, 0x97d, 0x2, 0x1ff, 0x8cf, 0x80000000, 0x4, 0x0, 0x100000001, 0x7, 0x4, 0x8, 0x3, 0xbf, 0x82e2, 0x7, 0x6, 0x25f41f42, 0x3, 0xf207, 0xa7d4, 0x7f, 0x0, 0x200, 0x5, 0x8, 0x1f, 0x7fffffff, 0x0, 0x100, 0x2a0, 0x5, 0x6, 0xffff, 0xff, 0x800, 0x3be, 0x80000001, 0x10001, 0x800, 0x2, 0x187, 0xffffffffffffffe0, 0x4, 0x81, 0x401, 0xa877, 0x800, 0x10001, 0x9, 0x1e, 0x7, 0x2, 0x4, 0xf18, 0x6a1f, 0x5, 0x4, 0x9, 0x1, 0x1, 0x2, 0xfc0, 0x9, 0xfffffffffffffffc, 0x58, 0x400, 0x3, 0x2, 0x80000001, 0x0, 0x5f, 0x3a, 0x8d, 0xe5, 0x4, 0xffffffff, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x0, 0x6, 0x200, 0x7fff, 0x100000000, 0x131d, 0x20, 0x3ff, 0x2, 0x10000, 0x5, 0x1, 0x3, 0x3, 0x0, 0xffffffffffffff38, 0x1, 0x5, 0x2, 0x718d, 0x7, 0x5, 0x80000000, 0x9, 0x33, 0x91b, 0x7, 0x3, 0x1, 0x6, 0x685, 0x81, 0x1, 0x4, 0x1ff, 0x9, 0x1, 0x2, 0xffffffffffffffff, 0x8, 0x5, 0xfffffffffffffffc], {0x0, 0x1c9c380}}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000080)=0xc) shutdown(r5, 0x100000000000002) 14:20:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x8ef7, 0x20000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000002c0)=""/23) r4 = getpgrp(r2) kexec_load(0x1, 0x5, &(0x7f0000001500)=[{&(0x7f0000000300)="ebf6ab73b4546183d159445da8bf1748b8690b39d5fae719502b82afa3b592460f8c05fd83d4ebede2f313a93f55dae84ce3b8b49b1c7c2bd10b07c1d594a19fa49ebe6b67e9b6b86ed8a7dd13fe6aa5c9e651ff3d28b87125068f4cfb662930291a9c4c", 0x64, 0xdd, 0x3}, {&(0x7f0000000380)="a785169fc84395e12c21dc72fa8ac6b8dca4490ac6a328a0e6c27cf257ea3905cabcf308ec18d2556d27335260438548d1ed5912ad2f9bbf8a813bd4bec7f9aa014d2d12f68fff0030fadb85c7a07e117ec6af1ad065e4b3a88d792ea60121f6f51ea6ee0fc3e05006734929fbe4b7bce40c3fcbb10d11b08442a634b187ed423ad2fbe827c09341e50f63fdf30a95023f4986cc056f3e55b4a26a96ac98b134729938", 0xa3, 0x81, 0x4}, {&(0x7f0000000440)="76619e1660db303e89", 0x9, 0xe1, 0x7231}, {&(0x7f0000000480)="a265fb0a841f1f53fded79cc4447449cd42ab30ea777b51d805f76fef90bf98d2761cd2235a28a8ba8f5a52afa7ea3fe75770668c0ff129cd8652d77767f35e8c72607b9927c8c023da5ca5712c9440ef580c0d6b77eff8e68fd11f0b3da133fb58d", 0x62, 0x100, 0x6}, {&(0x7f0000000500)="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", 0x1000, 0x7, 0x5}], 0x3f0002) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) setpriority(0x3, r1, 0x6) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x8, 0x5, 0x6620, 0x7, 0x0, 0x80000000, 0x8, 0x0, 0x1000, 0x5, 0x6, 0x8, 0x5, 0x4, 0x6e3b, 0x2, 0x7, 0x3, 0x2, 0x9, 0x77, 0x800, 0x0, 0x4, 0x2, 0x518, 0x100000001, 0x3, 0x9b6, 0x9, 0x727, 0x1f, 0x5, 0x1, 0x7, 0x8, 0x0, 0x20, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1000, 0x76170d61, 0x80000001, 0x6, 0x5, 0x200, 0x2d31}, r4, 0xa, r5, 0x3) 14:20:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfbffffff00000000}}, 0x14) 14:20:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x60000000, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:52 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) setpriority(0x2, r0, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0xfffffffffffffe71) 14:20:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0xf0ffff, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xc0fe, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1145.729813] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:52 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x10f}}, 0x14) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xffffffffa0018000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0xc00e}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:52 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x10000, 0x2, 0x6, 0x6, 0x20b, 0x9f35], 0x6, 0x2, 0x3, 0xfffffffffffffffd, 0x1b53abac, 0x3, {0x6, 0x1f, 0x0, 0x400, 0x2, 0xf5f4, 0x101, 0x7, 0x3, 0x8, 0x8, 0x8f16, 0x5, 0x80000001, "041be73f1b21ba1131dc05eed6ef82bcd69c5bf29e9239fe5b4a73d271ba431f"}}) shutdown(r3, 0x100000000000002) 14:20:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x5219000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1145.938998] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0xf5b1, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000480)={0x0, 0x8, 0x8, 0xfffffffffffffff7, 0x5, 0x5, 0x100000000, 0x541b5954, 0x8, 0x1f, 0x100000000, 0x2}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000440)={0xa, 0x4, 0xfa00, {r2}}, 0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008800, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x1}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @local}}, 0x3, 0x4, 0x0, 0x0, 0x44}, &(0x7f0000000340)=0x98) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000006c0)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r2, 0x1}}, 0x18) renameat(r0, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') 14:20:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3803}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x1c020000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4000004e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:53 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x100000000000000}}, 0x14) 14:20:53 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'gretap0\x00'}}, 0x1e) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @multicast1}, 0x6}}, 0x100, 0x2, 0x1, 0x80000000, 0x80}, 0x98) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1bda) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:20:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)="35887e681f376159cb34ea61b77699ccb55f156e706c976d6cc2922df936397d7b3beedb9c6dbb609373bdd17a13125ca08b965d58d24dd5dce183c0c0ba4a33443b0fe00ea468eab23168f2813eda565a89e915c41fa2f43c19a9b964cbffeaaf8abff3017ca38c525fa9d42d28b303c90ff776240f5ac78978d09dd481e38f92c2eba3b5bef2da77f075d1f35aed94d1f3adb5ced044d1cbab834076846e780539394953c26e3c72b90a57c2e46b6af5a7d6ccca374bf15089ae0ae22da00d75d743bb58567ffdf87d0d13ce29575d", 0xd0, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000200)="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", 0x1000, 0x44, &(0x7f0000001200)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) [ 1146.558014] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xffffff7f00000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3804}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:53 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x1400000000000000}}, 0x14) 14:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xe9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x24, "e3206220abca59be1322d393b0f77b6298fb83591660f84f89b019544a93219f3a0c1cad"}, &(0x7f0000000240)=0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)="31b7d485894feae47a97fd99c322499048f0fc0d5da3d798526d37206e1d65e0f9d86bbd5047abfa115d0599dcd4247b9697", 0x32) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:53 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = accept(r1, &(0x7f0000000080)=@l2, &(0x7f0000000000)=0x80) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) fcntl$setsig(r3, 0xa, 0xd) shutdown(r4, 0x100000000000002) 14:20:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xec16000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x1c02000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1146.773434] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x200000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:53 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x800800000000}}, 0x14) 14:20:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfc00000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:53 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getspdinfo={0x14, 0x25, 0x0, 0x70bd29, 0x25dfdbfb, 0x7fff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xb01ade981ffe2e3a) shutdown(r3, 0x100000000000002) 14:20:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x3000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x5219, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x100000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1147.021710] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0xe, 0x10000, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x8000, 0x10, [0x6, 0x2, 0x1, 0x80]}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x859ef15c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="d4bfc9d7772d40e600dd73e80564c3c45891aea7a5b7c2412fad5b5b2c3be1de82df217e667846", 0x27}, {&(0x7f00000001c0)="cedc115103d63ea7c15ee7b5640e563effecd925d884b3d9c71f1db3761b6cd4c082537072482736ebe757e98a55e9160795bcf766d350176b8fabbaf6d2d2692a3fa22a02d3cbf90d402e8d47f47d59c9912b20d4f8e8d39608308bff25ee95e807b99f9eee3dc810f5e023c26bf67054", 0x71}], 0x2, 0x4) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff6e, 0x120, 0x0, 0x4f) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) prctl$intptr(0x1, 0x8) 14:20:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf0}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:54 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x65) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x109000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x42000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r3, &(0x7f0000000440)="8f", 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae0a, &(0x7f00000000c0)={0x309, [0x0, 0x0, 0x0, 0x0]}) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0xfe7c) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000180)={0x4, {{0xa, 0x4e21, 0xa25, @ipv4, 0xd31}}}, 0x88) ioctl$TIOCLINUX4(r7, 0x541c, &(0x7f0000000080)) r8 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r8, 0x100000000000002) 14:20:54 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4000000000000000}}, 0x14) 14:20:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf0ffffff, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x2000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:54 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x29, @mcast2, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x2}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x2}], 0x68) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x20000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) [ 1147.614387] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xfffffff0}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:54 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x3000000}}, 0x14) 14:20:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf00, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x187) [ 1147.855375] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x2}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x3, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:55 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x217, 0x8) 14:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:55 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x20000000}}, 0x14) 14:20:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfffffffffffff000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1148.374885] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf0ffffffffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:55 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x402080, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x7, r3, 0x1}) write(r1, &(0x7f0000000440)="8f", 0x1) tee(r2, r0, 0x2, 0x6) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:20:55 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x7a}}, 0x14) 14:20:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x34000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xffffff7f00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1148.612420] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:55 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x10000, 0x6, 0x3, 0x3f, 0xa84, 0x20, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x326, @loopback}}, 0x1ff, 0x829d, 0x3c6d, 0x9dc, 0x7fffffff}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="002298fe59228eb98f50c32d50647665c8ade855525fa82ce2c709000000"], &(0x7f0000000280)=0x22) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000a40)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@bridge_newneigh={0x30, 0x1c, 0xf10, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x4, 0x2}, [@NDA_LLADDR={0xc, 0x2, @random="68c2d68fc8ff"}, @NDA_PORT={0x8, 0x6, 0x4e23}]}, 0x30}}, 0x4000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x7}, &(0x7f0000000300)=0x8) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000340)={{0x2, 0x3, 0x5, 0x20, 'syz1\x00', 0x100000000}, 0x0, [0x768c, 0xffffffffffffff0e, 0x8001, 0x7, 0x5, 0x0, 0x6, 0x8, 0xfffffffeffffffff, 0x8, 0x7, 0x3, 0x8, 0x7, 0x9, 0x7fff, 0x0, 0x1f, 0x7fffffff, 0x8, 0x4, 0x5, 0x400, 0x1, 0x400, 0x61f, 0x3, 0x401, 0x8, 0xc0000000, 0x100, 0x3ff, 0x0, 0x8001, 0x8, 0x6, 0x1ff, 0x200, 0x4c0, 0xffff, 0xfff, 0x5cb79384, 0x9, 0x3, 0xe3, 0x2, 0xfffffffffffffffb, 0x5, 0x5, 0x7, 0xfffffffffffffffc, 0xe5, 0x1, 0x5, 0x7d, 0x2, 0xdbf2, 0x7, 0x80, 0x100000000, 0x0, 0x6, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x5, 0xff, 0x1, 0x0, 0x81, 0x100, 0x0, 0x6e17, 0x3, 0x3f, 0x2, 0x9, 0xff, 0x6, 0x3, 0x1, 0x3848, 0xff4, 0x7, 0xfffffffffffffff7, 0x6, 0x1000, 0x5, 0x1, 0x0, 0x4, 0x2, 0x9, 0x7, 0x2f5d, 0x1, 0xa4, 0xfffffffffffffff9, 0x9, 0x1000, 0xffffffffffff8001, 0x18, 0x31e, 0x100, 0x9, 0x66, 0x1, 0x694, 0x100000000, 0x3, 0x1, 0x200, 0x3ea6c250, 0x3, 0x10001, 0xad, 0x6, 0x38000000, 0x4, 0x9, 0x2, 0x1f, 0x1, 0x80000000, 0x6, 0x4, 0x5, 0x9993]}) recvfrom(r3, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x9effffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x40030000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:55 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}}) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x14) 14:20:56 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6800000000000000}}, 0x14) 14:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x300}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x1952, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:56 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1000003fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x9effffff00000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x6000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1149.255238] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:56 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x4800, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000002c0)=0x2, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:20:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003a00)=[{{&(0x7f0000000380)=@ax25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/171, 0x34000}], 0x1, &(0x7f0000000680)=""/40, 0x28}}], 0x1, 0x0, &(0x7f0000003b40)={0x77359400}) 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfc00, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x9effffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xfffffffffffffee2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) r1 = socket(0xa, 0x3, 0x1000000000ff) socketpair$inet6(0xa, 0x5, 0x2f, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x2c, @loopback, 0x0, 0x0, 'ovf\x00'}, 0x2c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x0, 0x1, 0x0, 0x2, 0x4, 0x2}, &(0x7f0000000280)=0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='ip6tnl0\x00', 0x10) sendto$unix(r1, &(0x7f0000000000), 0x5a4, 0x0, &(0x7f0000000080)=@abs, 0x6e) 14:20:56 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x7a00000000000000}}, 0x14) 14:20:56 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4002) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x120, 0x120, 0x0, 0x120, 0x0, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, [], 0xf}, @local, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xff, 0xff0000ff, 0xffffffff], 'ipddp0\x00', 'erspan0\x00', {}, {0xff}, 0x32, 0x81, 0x7, 0x44}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x3f, 0x9, 0x1, 0xe34, 0xfffffffffffffffe, 0x4}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d}}}, {{@uncond, 0x0, 0x110, 0x130, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x3, 0x5, 0x1, [0x5, 0xa50, 0x7, 0x380, 0x6, 0x8001, 0x1, 0x1, 0x0, 0x0, 0x5, 0x100000000, 0x1e9, 0x8, 0x401, 0x5], 0xe}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfec00000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1149.560991] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf0ffffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000001740)=ANY=[@ANYBLOB="b0e6b819f5b89782bc0f8a1b91af2731"], 0x10) recvmmsg(r1, &(0x7f0000003a00)=[{{&(0x7f0000000380)=@ax25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/171, 0x34000}], 0x1, &(0x7f0000000680)=""/40, 0x28}}], 0x1, 0x0, &(0x7f0000003b40)={0x77359400}) 14:20:56 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x48000000}}, 0x14) 14:20:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getpgid(0x0) r1 = open(&(0x7f0000000780)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00'], 0x2) unlink(&(0x7f0000000100)='./file0\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:56 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x5d0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x6f, 0x7, 0x2, 0x1, r3, 0x9}, 0x2c) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f6772800000007374617400", 0x2761, 0x0) rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) close(r5) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r6 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r6, 0x100000000000002) 14:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xffffffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xffffff7f, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1149.858521] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xfffff000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:56 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4c00}}, 0x14) [ 1149.881406] x86/PAT: syz-executor5:18862 map pfn RAM range req write-combining for [mem 0x1a1410000-0x1a1413fff], got write-back 14:20:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf0ffff, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1149.947364] x86/PAT: syz-executor5:18872 map pfn RAM range req write-combining for [mem 0x1a1410000-0x1a1413fff], got write-back 14:20:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x800, 0x2000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 14:20:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xffffff7f}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1150.077512] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xec160000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfffffe00}}, 0x14) 14:20:57 executing program 3: r0 = socket$inet6(0xa, 0x800000800000001, 0x801000000000008b) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xffffff9e, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:57 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf4ffffff}}, 0x14) 14:20:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf0ffffff00000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1150.608591] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x8001a0ffffffff}}, 0x14) 14:20:57 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x41, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@dev, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000080)=0xe8) getpid() sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x6, 0x5, 0x4, 0x2, 0x0, 0x4, 0x44, 0x1, 0x4, 0x9, 0x1, 0xe, 0x5, 0x8, 0x2, 0x3, 0x3, 0x8, 0x800, 0x1, 0xda, 0x793, 0x1, 0xffffffffffffff7f, 0x1, 0x2, 0x1, 0xfffffffffffffffb, 0x8, 0x20, 0xfffffffffffffff7, 0xff, 0x3, 0x0, 0x662, 0x7, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffff4a, 0xe7}, 0x10, 0x8, 0xf7, 0x2, 0x300000000, 0x5, 0x5a9a}, r4, 0xa, r3, 0x3) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) pause() [ 1150.731780] 9pnet: bogus RWRITE count (33554433 > 20) [ 1150.791091] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffffcf, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x3c000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3, 0x2082) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x81, 0x8) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x65, 0x120, 0x0, 0x0) 14:20:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xff000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:57 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x2}}, 0x14) 14:20:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xec16}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:57 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xffffff7f00000000}}, 0x14) [ 1150.967476] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:58 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6000}}, 0x14) 14:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xffffffffa0018000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfec0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1150.989439] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:58 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf01000000000000}}, 0x14) 14:20:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xff00, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x6000000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1151.173612] 9pnet: bogus RWRITE count (33554433 > 20) [ 1151.191656] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:58 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r1, r1, 0x0, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) shutdown(r3, 0x100000000000002) 14:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x2000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xff00000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:58 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfffffffffffffff0}}, 0x14) 14:20:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0), 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x20100, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0x15469}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xdc8913f1b8d93ac}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r1, 0x401, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004081}, 0x41) 14:20:58 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xffffffffffffff7f}}, 0x14) 14:20:58 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000080)="00c26ae407fe4eae3e54f936fbff21f4fcd69d38543b9ef14a4acc7c6e46e64b01546a386d7a63e0766799cc8e33e61922a8f20b926cdad8c152a8785ab013aee42bd86c4b3cb5423329177fe450df19f59f250a8db96379f196a28f99bc2dfc6c751ba255439fbf600a86beebdb5240257e59b323fabec006c3c9eb4e9749f20d8501e21ca3fa117677e2f2f8aade496e66a677", 0x94) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:20:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfe800000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x3f00}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1151.819975] 9pnet: bogus RWRITE count (33554433 > 20) [ 1151.829290] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:58 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) accept$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=@getsadinfo={0x260, 0x23, 0x400, 0x70bd26, 0x25dfdbfd, 0x0, [@output_mark={0x8, 0x1d, 0x94c5}, @policy={0xac, 0x7, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4e22, 0x8, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x0, r4, r5}, {0xc62, 0x0, 0x3, 0x7, 0x1c0000000, 0x7e7, 0x1, 0x9}, {0x7fff, 0x5, 0x101, 0x4}, 0x3, 0x0, 0x3, 0x1, 0x1, 0x3}}, @output_mark={0x8, 0x1d, 0x401}, @srcaddr={0x14, 0xd, @in6=@loopback}, @etimer_thresh={0x8, 0xc, 0x7}, @replay_thresh={0x8, 0xb, 0x7342}, @tmpl={0x144, 0x5, [{{@in=@rand_addr=0x1000, 0x4d6, 0xff}, 0xa, @in6=@mcast1, 0x3503, 0x0, 0x1, 0x7, 0x7, 0x8, 0x6}, {{@in=@multicast2, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x0, 0x7, 0x3, 0x2c, 0x3, 0x4, 0x7}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x1, 0x0, 0x2, 0x2, 0x100, 0x9, 0x0, 0x9}, {{@in6=@loopback, 0x4d2, 0x6f}, 0xa, @in=@local, 0x0, 0x3, 0x2, 0x7fffffff, 0x80000001, 0x1e250652, 0x4}, {{@in=@rand_addr=0x1, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x3, 0x15ffb70be38f9c30, 0x8, 0x8, 0x4, 0x8}]}, @address_filter={0x28, 0x1a, {@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x2, 0x6, 0x2}}]}, 0x260}}, 0x20004004) 14:20:58 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x61e, 0x20040001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x40000ab11, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7ff, 0x20000) 14:20:58 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x1000000000000000}}, 0x14) 14:20:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x52190000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:59 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x1c02, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:59 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x200000000000004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x404400, 0x2) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000140)) r2 = socket$inet(0x10, 0x3, 0x0) setxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.selinux\x00', &(0x7f0000000540)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x0) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0xec) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0xe5, 0xfffffffffffff7cc, 0x1ff, 0x3f}, 0x14) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2}}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000340)={'raw\x00', 0xa2, "d9af338c1bdb74154dcfd4eae9f841e9a86ec4d4ed5360c25b8dc818ffb4506c5286410db9131287b322883a150c700a7326e6bdbdbd7c404dcb3b09dfe70035b6c30eee2c7298151258faa946e28a5bfb3f9130f178a302fc52dc589f99c647a69ef8f5bfc2611e88242042931337955f7aeb5a834194316c08176c5259a4f1b5e3b79addbc5bc246358553e17acdef9b44318e3ff806da7b928710554f74782f4d"}, &(0x7f0000000080)=0xc6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x100}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r4, 0xfffffffffffffb48}, &(0x7f0000000440)=0x8) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000480)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000000c0)=0x401, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) 14:20:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xfffffffc}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1152.104334] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0), 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x20100, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0x15469}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xdc8913f1b8d93ac}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r1, 0x401, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004081}, 0x41) 14:20:59 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xfffffff0}}, 0x14) 14:20:59 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3c) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0xffffffff) listen(r0, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8, &(0x7f0000000080)="483f6234488da55d206070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:20:59 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x400300, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1152.206944] IPVS: ftp: loaded support on port[0] = 21 14:20:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x400000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:20:59 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) shutdown(r3, 0x100000000000002) 14:20:59 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x9effffff, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:20:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1152.414416] 9pnet: bogus RWRITE count (33554433 > 20) 14:20:59 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x2, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1152.435843] IPVS: ftp: loaded support on port[0] = 21 14:20:59 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x8001a0}}, 0x14) [ 1152.656775] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:21:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfc, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:00 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000001000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x21}}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000600)="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") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x101, 0x4, &(0x7f0000000480)=[{&(0x7f00000000c0)="5e502baad1b2e9180be6e51dca2d17753732525cb0845d0acfc0c7511ceca7dc3398", 0x22, 0x1}, {&(0x7f0000000180)="20f0255c44a6c1ba722713e8a6ef346526c942ba36fedda6f62493aa4dfc5dd3e7a7136a8d72a2c7d23ee3ecccce2925c5caa14a8ce2a154f8c5166438ab651517a032df660c3d9c150dd802600b91ad532ab8f095f321e924e99d994036bfa6dd319dc9c1f5f375d46fc874c8f55747681c22d1e91a20c709635964b4bdf5bc8cec27bfe71ea640d2302d445da46c72869167c721315029e047d7f39a5f631f3401f57035bbd54e4a63", 0xaa, 0x20}, {&(0x7f00000002c0)="274369de30e76eab18aaf85a01f28a9237f8c97dfe1589bdff03ff93fac9b38237e499a5099e5e6468a473862113db520d70a4fb9a49472a4f51de720abf6729cecddd68094bbdb5916ec084bfc478a3e63127d44a7e5358de9ef46d43f7cacc48cb04f83871d1b675d4", 0x6a, 0x8}, {&(0x7f0000000340)="4f3a3bd7fdd99e019f30374a759cee8c7b3d14247def673b1008f918df849c2a03f6619851b708a6e79e222804fa0b3e0fff8d18164d3c3e9719c4de64fc12f4d092eb93b56a6732134046a10a521e4af99515eb089b4e19ed88f5855cfa607a7716f3dba026d57e5226bea65281a0fd235e68bd20ba3960febae97b7dc90f7d99e802c7c46c61d5912e70206b7d037a4f43a2d20f8121be719804eadcd748c682d07bdaf21716e04d673121ec0b296333cfce464de329dcbd76c964379a612335f1478505ed2374143b2872e13c4d1af482b98203a524650148", 0xda, 0x8}], 0x4005, &(0x7f0000000100)='\x00') r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3b, &(0x7f0000000500)="fc305dc2fa85586234f90cfac0042c6b0dac1dda9c318417d2b1a529a84d80dff09dec323f0de4722254dd092bd1f69e0910a134cd4c058206832e8437bb564ab4e566bb89c937a938e9d1c1d9d691279823e1308d3feb2848e4bfb1bca3a95d71ac4ce040d152c47107977910cb073655b3316ecc3ab8298a375d4d8791189319e251f2dfa070534159852fc0128ff1e373a94d3b6767792148d37e38aa13cacef15de8773fae11ef6feb97305bafdc25416aa5661a051cfb6c564ddf942eb172ed4498c6da7751fcc6789be08607482cf9807f53d16943e10fafd7c73b2ce1b686e04755dfac087336302f631bf19f5bc904f390416205", 0xf8) shutdown(r3, 0x100000000000002) 14:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x60000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000440), 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x20000000447fff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0xff, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0xe8, 0x0, 0xe8, 0x0, 0xe8, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, &(0x7f0000000080), {[{{@ipv6={@ipv4={[], [], @local}, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xff0000ff], 'gretap0\x00', 'syz_tun\x00', {0xff}, {}, 0x29, 0xffffffff, 0x0, 0x4}, 0x0, 0xc8, 0xe8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x22, "3fcd3dcb763598fe73a9990ab6a696eecd16e19c700a713052e80363c7c1"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) mount(&(0x7f0000000200)=ANY=[@ANYBLOB='[d::]:6\n:'], &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x14) 14:21:00 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xff0f0000}}, 0x14) [ 1153.355261] libceph: parse_ips bad ip '[d::]:6 [ 1153.355261] ' 14:21:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x8001a0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x400300}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1153.404800] 9pnet: bogus RWRITE count (33554433 > 20) [ 1153.414984] ceph: device name is missing path (no : separator in /dev/loop3) [ 1153.415073] libceph: parse_ips bad ip '[d::]:6 [ 1153.415073] ' [ 1153.477049] ceph: device name is missing path (no : separator in /dev/loop3) 14:21:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x17) r2 = accept(r1, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x80000000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={r3, 0x6d, "7227be50d76c76183745cc91f13224a1adfb745f1385e035fedccdd2842e403a7ef410eee56bdba4fd6ceefcd1833f406e61dd0ae468565afa5ecf81a43b23a97ea4c85c7cf540f1ecab3746002b4f73677eec08a5fd97777d6ab0846b88bac47c8c72da50463e9d858b1177ba"}, &(0x7f0000000280)=0x75) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000000c0)={{0x1000, 0x5}, 0x0, 0x7, 0x79d, {0x100000001, 0xfffffffffffffffc}, 0x7}) semget$private(0x0, 0x0, 0x6510157a611725c0) 14:21:00 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x1000000}}, 0x14) 14:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x3f000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:00 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100009ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r1, 0x550b, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000100000000ab404686104d70472ceca20e192f6d315e3fb15f4564cad0e37f5cfbb71c28524004956138139712f697b2c40b9666e35c88"]) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2b, 0x15, 0x11, 0xc, 0xa, 0x1000080000080, 0x1, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xfffffffd) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x85, 0x2, 0x7fff, 0xffffffffffffff81, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r4, 0x6}, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x800000000004e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000700)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 14:21:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf0ffffffffffff, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:00 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) getsockopt$inet6_int(r0, 0x29, 0xd8, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x7) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) [ 1153.679881] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:00 executing program 1: socketpair$unix(0x1, 0x2000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']}) close(r2) close(r1) 14:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf0ffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:00 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6c00}}, 0x14) 14:21:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfe80000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1153.811426] IPVS: length: 193 != 8 [ 1153.858564] IPVS: length: 193 != 8 14:21:00 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="f1011c38713e05d0a6cdc28af67e3afd5c1c10ddb66d59ac9aaadafb21639d39ac55d73ab3c01fef3421f4872d3430fda0b61a5069686129194949b5a8a74b9bd4aa8eb53f7efe419ad0bcc3c191ebd0223cc13f7fefddb87bf2fdf5d8ed86517b9c2384a6341513b7f77ff9ab9e5468abbd8b", @ANYRES64=r2, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX=r1, @ANYRES16, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r0]], 0xc8) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x300, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf0ffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1153.928176] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:01 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x1a1200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000200)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x10000) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000080)=""/169, &(0x7f0000000140)=0xa9) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) 14:21:01 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100009ff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r1, 0x550b, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000100000000ab404686104d70472ceca20e192f6d315e3fb15f4564cad0e37f5cfbb71c28524004956138139712f697b2c40b9666e35c88"]) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x2b, 0x15, 0x11, 0xc, 0xa, 0x1000080000080, 0x1, 0x27}}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0x11}, 0x2c) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xfffffffd) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x85, 0x2, 0x7fff, 0xffffffffffffff81, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r4, 0x6}, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x800000000004e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000700)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 14:21:01 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x2000}}, 0x14) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x60}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x1000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x4}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xb, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x200000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000180)="ff8fb4d863d8922e1b08437f654d59231f1d651e832add8e97cd94d4b2259e50b6075a9ce5efc894349ddddc4bf7874bec68b0d90afb0756ff691bf5f8854abca8fa5c1a5ab228457f4872a69405e19f8f44ebd432cdbc2baea38861f43a96eb6f63c84ca6ce40676d0582c211bdb2c97a33695f6efd7a2374e104c45ee1ec03c61017d4"}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x121040, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x7) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) fsetxattr$security_smack_entry(r3, &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f00000002c0)='/dev/adsp#\x00', 0xb, 0x2) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xffffff9e}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1154.255754] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:01 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4080, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_SET_LAPIC(r2, 0xc018ae85, &(0x7f00000007c0)={"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"}) [ 1154.321693] IPVS: length: 193 != 8 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x21c, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x500000000000000}}, 0x14) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000020002100000000000000000002bb3f765f00040000140000000000001100000008000b00000000000800020000000000080017004e210a004c0cd7434de2e847dedf526245aa53d3ab36ad36bfbe2721e680977c34640000000000000000"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 14:21:01 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000480)=""/110, 0x6e}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/143, 0x8f}], 0xa, &(0x7f0000000780)=""/102, 0x66, 0x7}, 0x48}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000000a00)=""/247, 0xf7}, {&(0x7f0000000b00)=""/29, 0x1d}, {&(0x7f0000000b40)=""/49, 0x31}], 0x7, &(0x7f0000000c00)=""/4096, 0x1000, 0x7fffffff}, 0x975}, {{&(0x7f0000001c00), 0x80, &(0x7f0000004180)=[{&(0x7f0000001c80)=""/153, 0x99}, {&(0x7f0000001d40)=""/255, 0xff}, {&(0x7f0000001e40)=""/41, 0x29}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/144, 0x90}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/210, 0xd2}, {&(0x7f0000003100)=""/101, 0x65}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x4}, 0xfffffffffffffffd}], 0x3, 0x40000061, 0x0) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x80002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x3, 0x4, 0x8, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@delsa={0x28, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x0, 0x32}}, 0x28}}, 0x0) 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x200000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x40030000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) ftruncate(r2, 0x80080) r3 = getuid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000280)={0x90, 0x0, 0x7, {0x5, 0x1, 0x7f, 0x7fffffff, 0x5, 0x2, {0x3, 0x9, 0x8001, 0x4, 0x1, 0x8000, 0xfffffffffffffe01, 0x0, 0x2, 0x7, 0x7, r3, r4, 0x3, 0x10001}}}, 0x90) sendfile(r1, r2, &(0x7f0000000100), 0x200800100000001) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000500)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}}, {@subj_user={'subj_user'}}]}) [ 1154.595666] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf00000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/134) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000380)={@loopback, @local, 0x0}, &(0x7f0000000340)=0xc) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={r2, 0x7, 0x48, 0xf62, 0x4, 0x8, 0x1}) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x30103e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x40189206, &(0x7f0000000280)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x40, 0x0) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xa0018000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:01 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xffffffff00000000}}, 0x14) 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfc000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 3: r0 = socket$inet6(0xa, 0x7fffffffd, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:01 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x400) shutdown(r3, 0x100000000000002) 14:21:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xfcffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1154.851125] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfe80, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:01 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6000000}}, 0x14) 14:21:01 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x640, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffffa) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 14:21:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x8000000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x8001a0ffffffff, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1155.030132] Unknown ioctl 44547 [ 1155.089035] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x6, 0x3f, 0x0, 0x0, 0x7, 0x80020, 0x2, 0x1ff, 0x0, 0x7fff, 0xfffffffffffffffe, 0xfffffffffffff212, 0x7, 0x74e5a94d, 0x9d, 0x7, 0x2, 0x4, 0x9, 0x1000, 0xffffffffffff61f0, 0x5, 0x3, 0x2d, 0x7, 0x20, 0x6, 0x1, 0x4, 0xffffffffffffff93, 0x8, 0x5, 0xbb0, 0x9, 0xfee, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x4, 0x0, 0x2, 0x2, 0x6, 0x1}, r1, 0x5, r2, 0x9) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x6) 14:21:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x1000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:02 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000080)={0x1, 0x1}) r4 = accept4(r0, 0x0, &(0x7f00000000c0)=0xffffffffffffffc2, 0x80800) shutdown(r4, 0x100000000000002) 14:21:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xf000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:02 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4c00000000000000}}, 0x14) 14:21:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x4000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xb00, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1155.619496] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0xa, 0x3, 0x87) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getpeername(r1, &(0x7f0000002cc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002d40)=0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002d80)={0x0, @dev, @dev}, &(0x7f0000002dc0)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000002e80)={0x11, 0x0, 0x0}, &(0x7f0000002ec0)=0x14, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002f00)={0x0, @rand_addr}, &(0x7f0000002f40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002f80)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000003080)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000003340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003300)={&(0x7f00000030c0)={0x210, r3, 0x100, 0x70bd29, 0x3, {}, [{{0x8, 0x1, r4}, {0x1f4, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xffffffff7fffffff, 0x4, 0xa5, 0x10001}, {0x2, 0x8000, 0x0, 0x5}, {0x1, 0xfffffffffffff06d, 0xa1, 0xa0}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x210}}, 0x24044080) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x0, 0x8cb]}) 14:21:02 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xff0f000000000000}}, 0x14) [ 1155.791955] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:02 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0xfffffffffffffffa, &(0x7f0000000000)={0xa, 0x4e23, 0x10000000000000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000300), &(0x7f0000000240), 0x1000) recvmmsg(r1, &(0x7f0000003680)=[{{&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f00000014c0)}}], 0x1, 0x0, &(0x7f0000003880)={0x77359400}) 14:21:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfffff000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0x4c00000000000000}}, 0x14) 14:21:02 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14, 0x67, 0x0, {0x0, 0x0, 0xf0ff}}, 0x14) 14:21:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xfffffffffffff000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1155.830428] Unknown ioctl 44547 14:21:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x16ec}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1155.872392] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:02 executing program 5: syslog(0x4, &(0x7f0000000400)=""/4096, 0x1000) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x5c4, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0x5}) signalfd4(r0, &(0x7f0000000080)={0x5}, 0x8, 0x800) 14:21:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xb000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1155.966096] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x34000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:03 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffc) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 14:21:03 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r2, 0x100000000000002) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x40000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:03 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x7fffffffffffffff) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x4000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev, r1}, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote, r2}, 0x14) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x8001a0ffffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfffffff0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:03 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) getpgrp(0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)="21747205777465642a7d5b766d6e6574312900") 14:21:03 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x4200040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f00000004c0)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000003c0)) sendfile(0xffffffffffffffff, r1, &(0x7f0000000240), 0x20000102000007) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0xecc}}, 0x10) fallocate(0xffffffffffffffff, 0x10, 0x200, 0x400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) r5 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x88010, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x3}, @increfs, @acquire_done={0x40106309, r4, 0x4}, @register_looper, @exit_looper, @register_looper, @request_death={0x400c630e, 0x3, 0x4}, @free_buffer={0x40086303, r5}], 0x28, 0x0, &(0x7f0000000280)="e68f6d77f8515c5ad88249e1f4c96c9f19a6644b80f355ea59583a2f3517724afcf79393a3190814"}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000440)={[{0x6, 0x8, 0x7, 0x1000, 0x7, 0x8, 0x401, 0x7fff, 0x9, 0x8, 0x4, 0x8, 0x4}, {0x9, 0x6, 0x4, 0xb4c5, 0x4, 0x101, 0x8001, 0x8e, 0x401, 0x77, 0xca, 0x3ff, 0x100000000}, {0x5, 0x3f, 0x0, 0x1, 0x1ff, 0x0, 0x829b, 0x7, 0x8001, 0x3, 0x9, 0xffffffff, 0xba}], 0xafca}) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086610, &(0x7f0000000040)) 14:21:03 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x5f5e0ff) 14:21:03 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x6) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r2, 0x0, &(0x7f0000000000)=0x1d3, 0x0) shutdown(r3, 0x100000000000002) 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xfec0000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'rose0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38, 0x5, [0x4, 0x9, 0x6, 0x7f, 0x4]}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x300, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, &(0x7f0000000180)=""/80, &(0x7f0000000200)=""/247, &(0x7f0000000300)=""/86, 0xf001}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="01000105000000000a00000000000000ff020000000000000000000000000001000000000b894418296fe8594714833552f812490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000275ea00c000000000000000000000000000000000000000000000000"], 0x90) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x3f00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1156.407506] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 14:21:03 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x2, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getegid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f00000090c0)=""/4096) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300)={0x3f, 0x70000000}, 0xc) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}}}, 0x60) [ 1156.496224] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xb00000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x100000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x22) getsockopt$inet_tcp_buf(r3, 0x6, 0x2f, &(0x7f0000000000)=""/170, &(0x7f00000001c0)=0xaa) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x3}}, 0x18) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$FUSE_DIRENT(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xd8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) r5 = getpid() kcmp(r4, r5, 0x3, r0, r1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x3000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x300000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:03 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:03 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x8800000) 14:21:03 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0xb0002) io_setup(0x554a, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000500)="b644415255e08fc2cc06d032047c066b292ef8d5ca839bddc82a81da15dde6060407fac8e951cd6cbbeaad618853bec299482d363555eeaa2fdbb1945823727f901597581c509b52702e0e07b97073f3f48049d9563f86a659b59748293121ec0232bc18dc795527a54d22c03209fab9740f1050ca81aa5a9a10ac26733d103c6d7df73d39adf326fe732303756e880c9db82497ac9c089e078fbd9089337736a3632cab43710aa9c5bedb720c7a2d71794db6cd8f0b00b2bf53f91042a7c763dc6efd89a47592b60ea0027778a21597c4901f892a48b785ff281014dd45eb2946793810b681ab", 0xe7, 0xffffffff7fffffff, 0x0, 0x0, r0}]) setns(r0, 0xc000000) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@multicast2, @multicast1, 0x0}, &(0x7f0000000280)=0x6) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/vhci\x00', 0x401, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="8500000039000000250000a5000000009500000000000000d3ba3e880710e3396e0c30ab1452d185e26564a0569f68bc639e3e4fd8fb9be2b6ea2c8c2d9ef36baf5cdc8a1111ab08f71ff026926fcfca93b3b1468e44d2b1103d4a7ea7705f9765f7a1d61c55be30899fab7a29c5c83f8a899c8db6166427b1dcef809542745b6292eface862354a08e039bae6a3f27b1f976527d4c7ae9197942bac7c61e16bf19f5ca99781228c13c10673776b9d47b81ce847b95082adde3c66a9c7d55755e1791158fe3e33ec8aaccd80c8fe79862e65d610b8bb125a0f69f9b3435497d4649ecb"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r2}, 0x48) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000002c0)=[0xa7], 0x1, 0x10000, 0xcf0, 0x2161, 0x3f, 0x5, {0x5, 0x7, 0x5, 0x1, 0x8, 0x6, 0x101, 0x6, 0x7fff, 0x4, 0xffffffff80000000, 0x3, 0x438, 0x8, "ff5c1594cac0f4edad07d67694df4a59cdd63e4530981fcadf8aa0cd6b5ac0f8"}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000100)=0x84) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000001c0)={0x3ff, 0x8, 0x6}, 0x10) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(r4, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000b40)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$netlink(r0, &(0x7f0000000c40)={&(0x7f00000006c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0xe449400}, 0x4, &(0x7f0000000c80)=[{&(0x7f00000007c0)={0x238, 0x15, 0x2, 0x70bd27, 0x25dfdbfd, "", [@typed={0x20, 0x1e, @str='\\wlan0$user/keyring+cgroup\x00'}, @generic="801c0dca98e35cea52c134a958c0dd963627879deb6c353b9ed6289a", @generic="d7485002fb5c325c40253dde3bed911cdfb050334ed8f7591bc1a4c34a7febcb9ee70079bd6912b171b86c3080cab5eacc76f76b8dca63feccd4d5f96c8d298632a1b7da9b8d9ff79f057e8c1c29a4cc19c9e904028a4dc19fdb5983698357e957fc88937d67e31649c4664f29dea007098db396441fe20ccfc387bbfff2282fc1deea63bee27aeaec98050b273b41a071af0d44331653407d919dc672e493360858c0c5920a358f77a43322045ba563cb5365c3e6fee1fd24e330393e801e26004bcf361a9665e9e3ebbfb6fc6af2b91b018bd7a37b1e60bbf0a5c9956dd7a510e1594224", @nested={0x104, 0x8a, [@generic="2ccae1a46089", @typed={0x8, 0x6c, @ipv4=@rand_addr=0xae}, @typed={0x8, 0xf, @u32=0x8}, @typed={0x14, 0x4b, @ipv6=@remote}, @typed={0x8, 0x7f, @uid=r6}, @generic="b72287c0820836b12b244ffb789c6aa99e07d07bc3110ea65fb328fa55a52c4823993dafc39c2a2924c8ac5cd75a733879c1f125cc869cf5742c1da8336f940daad95d63ff92f65b29905f5a029ef53e0b82be7bcc4c2c3091a837cfc4566306d3793e7a0b213054dec040c881c4ea8a1f3f99bab6a153471df660267c0c481f0886", @typed={0x8, 0x45, @fd=r3}, @typed={0x8, 0x64, @fd=r4}, @generic="872175d6adf8dabaa7227beae22a5bc2beeb0847a0c39698e630d8f84f44d2f2450924073c17f9fd4bfc6b3b4e2ef826b4b99d4c46857aca17f5fd"]}]}, 0x238}], 0x1, &(0x7f0000000c00)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x20, 0x40000}, 0x4000800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r5, 0x4, 0x10, 0x5, 0x23}, &(0x7f0000000180)=0x18) connect$packet(r0, &(0x7f0000000240)={0x11, 0x15, r2, 0x1, 0x3f, 0x6, @random="a49e5484d66b"}, 0x14) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0x3) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xfcffffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x80fe, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1156.867510] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1157.123259] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:06 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x2, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getegid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f00000090c0)=""/4096) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300)={0x3f, 0x70000000}, 0xc) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}}}, 0x60) 14:21:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x300000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x8001a0}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:06 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x7, 0x70, 0x46b52a26, 0x8, 0x9, 0x6, 0x0, 0x5633, 0x200, 0x2, 0x5, 0xfff, 0x8, 0x10001, 0x4, 0x40, 0x0, 0x77, 0x7, 0x1, 0x9, 0x2, 0x4, 0x9, 0x100000000, 0x7fff, 0xef, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0x7ff, 0x9, 0x6, 0xf6, 0x84a2, 0x3, 0x5, 0x0, 0x81, 0x4, @perf_config_ext={0x2, 0xfffffffffffff5aa}, 0x800, 0x8001, 0x2, 0x7, 0x4, 0x10001, 0x100}) r0 = socket$inet6(0xa, 0xffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)="050000c906abfbb02e8004bcaf81cc431e358800", 0x14) sendto$inet6(r0, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) close(r0) 14:21:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x39) 14:21:06 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000002c0)="ec52046e8682ef309f0283102e2a578b3e0fe2cb0e3836e570750bb5e94f1bc8d55d6dcff2dd4b4c52065dd3a775b0e161fc2ccc07214f073c15ead413688ad0215acb16cc6757ebe264bb148cf0e8e456892a1f3f326c8347f83b3fdb1c1b955c53b5ad85b7364d65f09c928299d11c7bedfbfc353f7273f2c13076336daac14b6a20") bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e24, @local}}) setsockopt(r0, 0x3f, 0x80, &(0x7f0000000180)="ca761d8ca503d62de49aa076f82dcae3556165705854dd4bc07fe9dad8c1ac2ddab0d41b8d0d1f7331c49a052f74e1950cdfdc89399938b0d9a3dd457c2481587b303a3b4ad55ed55327f5a296f860c3dce1f5eeb4731cde134ee184173c623e9471756025d0413523f86cfe571fc83e09f19bf76e3eb57a1df29f6bb2338d3e4ecce72f0056decb8b2b53fb2465b11197bf8328d66245237d15e0dbf9b3c1cee5408535ad68adf57e38c2081aec1ab9171374851794e2907647b41013af00b59c7e41d7137a78a17ac757583e1a", 0xce) listen(r0, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000400)="053f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r4 = shmget(0x2, 0x3000, 0x7c000000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000080)) r6 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r6, 0x100000000000002) 14:21:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x4000000000000000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1159.724798] 9pnet: bogus RWRITE count (33554433 > 57) 14:21:06 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)="6d696d655f747970652976626f786e6574312c2474727573746564ee2c766d6e6574316b657972696e672e706f7369785f61636c5f61636365737300", 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x2, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getegid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) statfs(&(0x7f0000000400)='./file0\x00', &(0x7f00000090c0)=""/4096) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300)={0x3f, 0x70000000}, 0xc) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}}}, 0x60) 14:21:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0xf00}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0xfffffdef) 14:21:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0xa0018000, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:06 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x105000, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000100)) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200000, 0x0) read$FUSE(r4, &(0x7f0000000480), 0x1000) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000600)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0401000018000100000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x8}, 0x0) 14:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf0}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0x14}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:07 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r3, 0xfffffffffffffff8, 0x6, [0xc7, 0xffffffff7fffffff, 0xb9, 0x1, 0x7, 0x65a5]}, 0x14) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0xfffffffffffffffd) r1 = semget$private(0x0, 0x0, 0x1) semtimedop(r1, &(0x7f0000000000)=[{0x1, 0x5c, 0x1000}, {0x6, 0xffffffff7fffffff, 0x800}, {0x0, 0x8}], 0x3, &(0x7f0000000040)={0x77359400}) 14:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf00}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x1000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000400)={0x372, 0xc, [0x2, 0x5, 0x2]}) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x40) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0bd48577c671860393cd0cc499f0f2d01df5ff2ba94ebf3601f920b49064a237d12cf7b9dcae22bb1d0bfec20df100c3f3068f3e2a0c3f40febf28f5eef5da03c9ced76651d76cd03224af1fcf98a31fdceb8ffde75d38"], 0x57) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$key(r4, &(0x7f0000000200)={0xa, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) io_setup(0x0, &(0x7f00000000c0)) 14:21:07 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0xf}, 0x48) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/214, 0xd6}], 0x1, &(0x7f0000000340)=""/157, 0x9d, 0x2}, 0x2062) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x0, 0x2040) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000480)={0x0, 0x9}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x24a01) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ppp\x00', 0x400000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={r3, r4, 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000580)={0x1}, 0x1) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000009c0)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000540)) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000700)=0xe8) r7 = getgid() write$FUSE_ATTR(r2, &(0x7f0000000740)={0x78, 0x0, 0x2, {0x8001, 0xc3e, 0x0, {0x3, 0x7, 0x9, 0x140, 0xfffffffffffeffff, 0x3, 0x200000000, 0x5a, 0x401, 0x9, 0x4, r6, r7, 0x3f, 0x8001}}}, 0x78) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0000000400000000000000003d0d000000000000680d000000000000070000000000000000000000000000000000"], 0x2f) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x2a) getrlimit(0xf, &(0x7f00000005c0)) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000008c0)=""/152) prctl$setname(0xf, &(0x7f0000000880)='/dev/dsp#\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/sequencer2\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000800)=0x387b, 0x4) [ 1160.381432] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:07 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x63) 14:21:07 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) pwrite64(r1, &(0x7f0000000000)="5d49a14bd7cc193362a33d96e2bae7bc57827def", 0x14, 0x14) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, 0x8cea}, 0xa) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f00000000c0)) 14:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x40030000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x9effffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x9effffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:07 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0xfffffdef) 14:21:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x3}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0xa, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xffffffff7fffffff) 14:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1160.822247] 9pnet: Insufficient options for proto=fd 14:21:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x80fe}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:07 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000100)="b20b848ac716c6a0079699e0e5", 0xfffffffffffffdb4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x10c) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000080)) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xfcffffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:08 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x2000001) 14:21:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socketpair(0x17, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = accept(0xffffffffffffff9c, &(0x7f0000002440)=@can={0x1d, 0x0}, &(0x7f00000024c0)=0x80) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002500)={@ipv4={[], [], @rand_addr=0x1}, r4}, 0x14) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xff0c) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0)=0x52e, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000180)={@empty, r6}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="74726100000000642cfaff646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r7 = fcntl$getown(r0, 0x9) fcntl$lock(r3, 0x7, &(0x7f0000000440)={0x2, 0x3, 0x9, 0x3, r7}) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 14:21:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x300000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:08 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0x14) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/mnt\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1e) sendto$inet(r4, &(0x7f0000000080)="ff4b44b6d40768a12d123b386ab1f8d74215b631", 0x14, 0x0, &(0x7f0000000100)={0x2, 0x4e22}, 0x10) 14:21:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xffffff7f}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1161.094696] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) io_getevents(r1, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1c9c380}) 14:21:08 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e20, 0x0, @dev, 0x2}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400080, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf0ffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x3f000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x4000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:08 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = dup(r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x10000, 0x10000, 0x4, 0x5, 0x6, 0xfffffffffffffe01, 0x8001, 0x0, 0x100000000, 0xac, 0x3}, 0xb) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000080)={0x0, 0x84, 0x0, 0x9}) [ 1161.541713] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xec16000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:08 executing program 5: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000280)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f00000002c0)="61f3ae534494db52a67821096e07ed6f17d5cbdf777357be6f88b4c7f1c23e0934624be590699bccb9ecbf34639a69720a3517173aaa2f889726e6ba2dcb680a874f10dd8ea3cdc4eb1eef5a3293ea5bc98302e8f44065a54b6ebd45161081a97a8529cf8a2e", 0x66, 0x4000800, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x400) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x7b, "7b798bac39fcd8ee15f030193e884953241feb5f87fd055894b491bd377b844ffb996b1eca13e4f40d6a37ed536f77686ec1c5e8d3ccde57accc5c8bffa686cb22dde3a92c3ee0878da8a1f9efd933cf92261a89d0f4469222dce6e8ab621fd3c62b18ccbe17124b94432c5076189cc2cf4a157412c34bd14550ec"}, &(0x7f00000001c0)=0x83) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x8}, &(0x7f0000000240)=0x8) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), 0x0) 14:21:08 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0xa) 14:21:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) select(0xfffffdf2, &(0x7f00000000c0)={0xffff, 0x100000000, 0x81, 0x16, 0x61e, 0x6, 0xffff, 0x2}, &(0x7f0000000100)={0x8000000000003, 0xffff, 0x8, 0xff, 0x3d, 0x7, 0x2, 0x3}, &(0x7f0000000180)={0x3, 0x1, 0x8, 0x1, 0x101, 0x3, 0x6, 0x4}, &(0x7f00000001c0)={0x0, 0x2710}) prctl$setmm(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req={0x7, 0x2031088f, 0x7fff, 0x2}, 0x10) write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7}, 0x7) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x74}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x880) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000200)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/188) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in6=@local, 0x4e22, 0x1, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x33, 0x0, r3}, {0xffffffff00000001, 0x169, 0xfffffffeffffffff, 0x3f, 0x40, 0x1000, 0x2, 0x2}, {0x7, 0x9, 0x9, 0xaf}, 0x3, 0x6e6bba, 0x3, 0x1, 0x1}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x3507, 0x2, 0x0, 0x819, 0x8001, 0x7, 0x8}}, 0xe8) syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x400000) 14:21:08 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1f}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x1952}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xffffffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x300000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x40030000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1161.966197] 9pnet: bogus RWRITE count (33554433 > 10) 14:21:09 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x77359400}, {0x0, r2+10000000}}, &(0x7f0000000540)) listen(r0, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r3, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x1ff, 0x9}]}, 0xc, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x5, 0x4, 0x3, 0x3f, 0x0, 0x1, 0x403, 0x6, 0x1, 0x101, 0x9084, 0x404, 0x9, 0x80, 0xfffffffffffffffa, 0x1000, 0xc2c4, 0xfffffffffffffeff, 0x9, 0x83, 0x4, 0xcc49, 0x9, 0x1db, 0x401, 0x2, 0x4, 0x101, 0x5, 0x4, 0x20, 0x67, 0x8, 0x3, 0x7f, 0x9, 0x0, 0x2, 0x7, @perf_bp={&(0x7f00000001c0), 0x2}, 0x900, 0x63b7, 0x8, 0x0, 0x4bb0, 0x2000000c6, 0xfffffffffffffffd}, r4, 0x6, r3, 0x8) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000140)=0x4, 0xfffffffffffffc60) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000000c0)={0x2, 0x100000001}) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000198, 0x0) 14:21:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xcc5b, 0x101000) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x800}) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x12}}, 0x0) 14:21:09 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x20000354) 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x1c020000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1162.094580] audit: type=1804 audit(1538749269.102:1091): pid=19786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir432682161/syzkaller.SUj72l/3214/file0" dev="sda1" ino=16524 res=1 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x1000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 5: r0 = socket$inet(0x15, 0x80005, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x400100, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2b, 'memory'}, {0x2d, 'rdma'}, {0x2f, 'cpu'}, {0x2d, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'pids'}]}, 0x27) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="125ab531c19e91cabb0ed758cc3674f139b9c7cec679df505e6b496170815a98604c7bd613d19bc92a275ae80d6a53d60d85c966fd9e1c1f0bbe405616e70da29499af732c38a4154ba98bf4786f63cc466bdf0eb8cf935c2604df002c4a43d814a7d06f43ac150178c83dd339bf263968e76c517b83439c19825cb02adc61d9d2550e940b480067d4", 0x89}, {&(0x7f0000000140)="315289281a70da575b108d0dadce5395c4fafbdb6c9fe5a94ffa6005136f476d8f5cedb3ccf4e343b6c5b7e99642ac50d8c57d6f1c08dfc65029325df25c70d71134ee7b27cea87a5cd129a72a0f5b4dd3e1bc171cda928090539985f5bb514e202b40d7b6c5903284afa374295ff652", 0x70}, {&(0x7f0000000280)="b573a678c602ced7867355a346f3be688121dd79a9617847a07b8191938dda4fcf504e1fdb3342f559db0ba5463a5e964ac97a8a041f67f6bbb48aae58ee65ff0867cbbd45ea4c99b58b2a88533a0af577d981ed1feb94a665db337d57d2d01b3028d26b869484f2703fcf311de1b3d7eb7a0e97a9a3133f3c1b01983219cce202205192ce714f4a6fb5e64074c37670", 0x90}], 0x3, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0xfffffffffffffecb, &(0x7f0000000000), 0x61, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x17}, 0x0) 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xff00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x9effffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @local}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="375ae3683d7c1682c18a8c1a2cc3773ea914a6ef302e9850b2799a1d88cf08aab2c99cdc0b1e2205daad3869b14896c3ab483a0903b4119f724ae9f763a5e55a24e69ea1dee1d655542161e13366e7c3f1e8f4dd26573dcc3012ca8d8971f0e963aa87bfc914adea9e995042182c7fb0d99f34", 0x73}], 0x200000, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB=',subj_role=em1user,obj_user=+]uservboxnet1)self,euid=', @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,\x00']) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r3, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:09 executing program 5: mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000013000/0x2000)=nil, 0x2000}, &(0x7f00000003c0)=0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000040)=[@in, @in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000100)=0x10) io_submit(r4, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001000)}]) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x9b65453610b3b680, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000280)={0x101ff, 0x0, &(0x7f0000011000/0x1000)=nil}) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) dup3(r3, r3, 0x80000) 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x3000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1162.375925] FAT-fs (loop3): Unrecognized mount option "nodÚots" or missing value 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x8001a0ffffffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1162.539665] FAT-fs (loop3): Unrecognized mount option "nodÚots" or missing value [ 1162.611253] audit: type=1804 audit(1538749269.612:1092): pid=19786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir432682161/syzkaller.SUj72l/3214/file0" dev="sda1" ino=16524 res=1 [ 1162.641957] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x60000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf0ffffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1162.648120] audit: type=1804 audit(1538749269.642:1093): pid=19844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir432682161/syzkaller.SUj72l/3214/file0" dev="sda1" ino=16524 res=1 14:21:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x3, 0x188, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x200) getcwd(&(0x7f0000000340)=""/76, 0x4c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000280)=r3) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000300)) sendfile(r0, r0, &(0x7f00000002c0)=0x4f, 0x8) 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x16ec}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0xfdef) 14:21:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x5) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) r3 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000000940)={0x0, 0x0}) getresuid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000ac0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000c00)=0xe8) r9 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0}, &(0x7f0000000cc0)=0xc) getresgid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) r13 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000001200)='\x00'}, 0x30) r17 = getuid() getgroups(0x4, &(0x7f0000001280)=[0x0, 0xee00, 0x0, 0xee00]) r19 = fcntl$getown(r0, 0x9) lstat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000001380)=[0xee00, 0xee01, 0xee01]) r22 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0xe, 0x4, 0x9, 0x5, 0x20, r0, 0x8}, 0x2c) sendmmsg$unix(r0, &(0x7f0000001540)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)="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", 0xfc}, {&(0x7f0000000180)="51441edb9ada26ffa180b4d29d540ac3ce3c25354de7c5dc5a", 0x19}, {&(0x7f0000000200)="386507d3981c2dfb6820554bd8ba5cbd7953ecdf376dd69a77051c0a3621dff313c9ae47364eb143be96", 0x2a}, {&(0x7f0000000280)="f4ad1c83582b238deb398fddebf61e7aa7913032f692c9b50968f4", 0x1b}, {&(0x7f00000002c0)="1c1561a8c47d07404bca7fb1b40c8807cc8dd45f4ea1b04d991a97732dd35d80c5ba92e8cfa6de9959cc5e24243358979e86e3541a22defdc895122e13794d94537d5ebc7a9aeea4b5fa4ead4656fb7a22c97466583fca69429329b9bfd72de44140cad51f7c8568bfd0ea5ed22d96695238e91c9d66d1e163cd67695c5e156878ffbfd1ec2ecd30cca20c11273a5370b02b56ace163e80fc5eceb8dd340edd88dffd83cc6f0f2cbce37f7d91320e5c9d7e41b4060af4840d4d6d47fa827f50db58dffab3927df3900d3b748cfd63186e848af965e44b6e6c01af332", 0xdc}], 0x5, &(0x7f00000004c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x40, 0x4001}, {&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000580)="2481da5c18a0fc00184737556bc2cea6d3d44f1b5daf56148771dbb6ece4e6a8b0f716bd7f37c8215fedf66de439419d6a6d8b83e04ec32295748b4fcc367f668a559f7f1c5174042e107f117354de2439920fed", 0x54}, {&(0x7f0000000600)="53f5c9a3f2153efa479abd6ac2c6b5ea4068c6db8b98c3a81c1eccafdfbfeb52da3492e05b964ab2d9f37132a4af13645507aec93ce1e983cf83e0fa3d112d2b6a293dbfc495fbd20595377560f8c86127ce2eedfe8009b742a324a34c82701f65598c329fc47d1aaa0b703dcc29385eb34be7cf4cb0682233357c57701795b1e716ffd2351f723f9bfe8a61b804abbe78458c5042cc84a65f0d76ae", 0x9c}, {&(0x7f00000006c0)="1664bde9a73f5431ec0e49d93a543d6e6bd13dc43b94129fa9e7b0e2fa2e48f8d76ad6b3be3d7276f9f085c7e718c9a5e6a4c5ca3072da95ffdb56cd7b6fe8a2c4b35aeecae16403b3e92e9b9f8215a904cd8b8908d02be94ce00f4ed2a6c0671bf4b6e21d07183fe1b3838834c03b0ced34c6229c0172dbf88d306964495b208249648df9342336498c7139ef8edd88816408470b2eefe9c711956d0b2149", 0x9f}, {&(0x7f0000000780)="024d04c4b604b2f735db1fc4a654c05524e814eda8d63c9cdbb4b3fbc9b7984b85a15b8368d342a15e418a752ee53e86ceb6ea48073d7cd97cf79e0bfdf6da6bc4722122bd609479df17df4080dc819d75e93fc00dad7117d7c47b5384d3e3b55159ac360ca368c2a06d26f635ad76eae365109d4c09beebb98300198e3e41221a0c9b6d1afbe7587e0f26b0140912cb9dea03c8a1570d24d8d8467985fdcd965b2e70b577baeea3ebf69b57b7103a780db27d", 0xb3}, {&(0x7f0000000840)="8162ea1dd13a55cab9cda0ff465ca1593d7162e9abeb47bc67343bed3888c9e7e5b587d2a4926f912175a6a2d988e55984a8854726e3802441e1365afade6d65d4b4f9fdbccfdda1ab16d99397d8656e50516735ec2772be693cc3825e7719", 0x5f}], 0x5, &(0x7f0000000f40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xa0, 0x81}, {&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000001080)="e0f20baf39904b2543761223ab703d3a1e1afc1a99ec73f7ce74f761b4f2d2515f6dcb3c25710fa8c09cf791dc9359fb4a41ee535d17f4e31f26", 0x3a}], 0x1, &(0x7f0000001100)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x28, 0x40000}, {&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0), 0x0, &(0x7f0000001400)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r22, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x138, 0x4000004}], 0x4, 0x8000) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000240)={0x0, 0x3, 0xd81}) 14:21:09 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) r3 = accept(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000e7bebab9ece123ee6cc86cbbfd", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0xfffffffffffffffa, 0xb1}, &(0x7f0000000200)=0xc) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfec0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1162.806828] usb usb3: usbfs: process 19865 (syz-executor1) did not claim interface 0 before use [ 1162.837406] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1162.841648] usb usb3: usbfs: process 19871 (syz-executor1) did not claim interface 0 before use 14:21:09 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x0) close(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffffffffffff}, 0xfffffffffffffffd}}, 0x1b) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x8002) r3 = socket$inet6(0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3fd) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket$inet6(0xa, 0x10002, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000bc0)={{0xa, 0x7, 0x3, 0x4000000000000000, '\x00', 0x3}, 0x6, 0x100, 0xfff, r5, 0x5, 0x8, 'syz0\x00', &(0x7f0000000440)=['/dev/loop-control\x00', '/dev/ppp\x00', '/dev/input/mice\x00', '/dev/midi#\x00', '\x00'], 0x37, [], [0x3f, 0x1, 0x4, 0x8245]}) recvmmsg(r4, &(0x7f0000004400)=[{{&(0x7f0000001180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff}}], 0x1, 0x10000, &(0x7f00000045c0)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x9f, 0x4000) sendto$unix(r7, &(0x7f0000000700)="8233f6e135e8493eedcefc339d909595a44d2d3bdd9d7e91d73e7c98594910095787c0bc772f9968dcfdccb87dec200cb399d21c93771922c9fb6afccb9b6122c0b0422cc1eae03a306b0351b08e3b21de3642e7cdc0dabd22a27094e2b7bf2dbcff15177f369f57a72ab96f919a6d4f5667465d0fa08928588105d16e9922a1ed961701634be0fc1a5be33c0d5b7e46744a8c2a91c4eb7c86b3fe5a669d392d57447f173bff05dfe7131e2c6ea681dd60829878bd919951eee76caa80cbcc51fe833ecf713549676b74e383c78204ef5bce00dc6507a29e611b", 0xda, 0x804, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000480)=""/218, 0xda}], 0x3, &(0x7f0000000600)=""/48, 0x30, 0xdc}}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/78, 0x4e}, {&(0x7f0000001200)=""/143, 0x8f}], 0x3, &(0x7f0000001400)=""/252, 0xfc, 0xf0}, 0x3ff}], 0x2, 0x10000, &(0x7f0000002800)) sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect(r3, &(0x7f0000000880)=@ipx={0x4, 0x0, 0x8, "bf51f7cbf422", 0xffffffffffff5d6c}, 0x80) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000d00)={[{0x1, 0x9, 0x9, 0x1ff, 0x2, 0x2, 0x5, 0x3c, 0x4, 0x10000, 0x6db4, 0x8ae7, 0x7fffffff}, {0x7f, 0xe3a8, 0x3, 0x400, 0x4, 0x8, 0x4, 0x100000001, 0x8, 0x2, 0x6, 0x10001, 0x100}, {0x200, 0x0, 0x0, 0x4, 0x8000, 0x3f, 0x400, 0x7, 0x9, 0x9, 0x98, 0xffffffffffffffc0, 0x81}], 0x29}) sendmsg$unix(r2, &(0x7f0000000f80)={&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000005600)}], 0x1, 0x0, 0x0, 0x3a6068fa4ebf6f66}, 0x8804) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000280)=r5) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0xb7, '\x00', "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"}}, 0x110) 14:21:09 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8915, &(0x7f0000000280)="153f6234488dd25d766070") r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e9e3b6032d49ae54e3a3bffd7a0d2cfdf6ebc428ebc2cc020ce8b043c3e9706b04ec9115b18c8c6e0d8820d111586d20c0bde54f4d21b0be6384391f22d3d49c33ae0f35e73f061cff24b1494b25", 0x4e, 0xfffffffffffffffa) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) getsockname$packet(r2, &(0x7f0000000700), &(0x7f0000000740)=0x14) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)="95c1fb1e10b243afa889ccb69667a20ef6dd1433b688ea03b5ff45965e562c7aa07df7bf5c51fd446fbbab33e1ca7e43a41c69d8d18d966cfa2faac3aabc0c373eede41f336e184dfacaced7d4317dfaa123b542e2803509d0f1e3d2536eba19694f18f59198e3f0c828068be05e4722ae6d0d7344", 0x75, 0xfffffffffffffff9) r4 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="dfec0d84b34718f59ea9fa18bbde06c4fd223fc7afc7fe23e9f676343d316e63476ca690daa71e9e6790ed3f76eda15c781fec830178957db754f2ed1fb534480efdadf51897ead40e0fb4e1170f3d85eec7aa8809a3babd854f3c95b81e9a411f72102b2ec05e91327b95382a40ebc9403a515eed770f614009429036abe83802681637082d40688789cbcca83bf524666294dd6342b74c762954ce79e435f2e7cb240402952fde28a55b0fb398a1c114bff6bf1b4c6ebd770ed2573c88b85b04", 0xc1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r3, r4}, &(0x7f0000000440)=""/130, 0x82, &(0x7f0000000640)={&(0x7f0000000500)={'poly1305\x00'}, &(0x7f0000000540)="fdbd1e702c190e966203192e9e7e434d78d1609a6d527c2ef06d8dfa4f18d21970994e4a94d4e3e2b144fa4fc3bc3c91971436d7904076898884ebb2adcd062dbc188be48a136e4a61e3ca5e2b990e1ec984fea4a40cfd38b60b789c5216c393cd705903e7c19ca122eb88bc46f67619ae73248aa392362dab7ed21c565331c06475dea9a5bfe8c278e92c18ada983df1f02cf6a8b4272e34adea6bcf6ed1690ec81fb825b527dfd9d91806579ef2d6d3478951ef41eebf21d8d3dff2d545f96aa050474fee74cf12ad9f38eb85dbeed82b1d5701dfe34530fba", 0xda}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) socket$inet6(0xa, 0x3, 0x800000000000004) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000780)=0x0) migrate_pages(r5, 0xff, &(0x7f00000007c0)=0x6, &(0x7f0000000800)=0x57dc) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') preadv(r6, &(0x7f00000017c0), 0x1a4, 0x6800) ioctl$VT_ACTIVATE(r6, 0x5606, 0x47d) [ 1162.867784] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 14:21:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xfffffffffffff000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfc00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:10 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000002000), &(0x7f0000000080)='syzkaller\x00', 0x57, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0xfffffc61) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 14:21:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1163.047170] 9pnet: bogus RWRITE count (33554433 > 4096) 14:21:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfec0000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:10 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x9) 14:21:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf0ffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1163.261316] 9pnet: bogus RWRITE count (33554433 > 9) 14:21:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[]}}, 0x0) 14:21:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xff000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xfcffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:10 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff75057309bfa173a2fb00000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0xa8, &(0x7f0000000200)="3ad270b8d6628495e4d16d7220e5", &(0x7f0000000480)=""/168}, 0x28) 14:21:10 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:10 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0xfffffffffffffdef) 14:21:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000002c0)={0x10200, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', r4}) accept$alg(r3, 0x0, 0x0) r5 = accept$alg(r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000e28ac69af24554c1bf5df22317f4cb00000000000000af660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 14:21:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x60}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:10 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f00000003c0)={0x13, 0x6f, 0x2, {0x1, [{0x6, 0x0, 0x8}]}}, 0x16) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0xffffffffffffffff, 0x2, 0x200000000}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x52190000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:10 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="205e05a3db8d22768c7735b304743c94e4fb20908ea27d4d7bfa176c2687c62507ba9442b28bcb911c8df1b58916ff66e2a58aad8b6a081f43777bbb1ca5692067456d417859be242a7649567a3a1eae1061a0f6a2709bf0e35a37c8f963f822cfceb273996a75055ce37c2f81963f356b87992eb919b669fbf75fc173d4d0fa066937ce750d73f84366bd94c159622bbd2721910e480c5586a30003ceabad42f082a065f62400ae755882ec26b68533218504b18ee916d49c6f4621c0810bbe6456ed422082e77aa88218f29f146bc7ec0d10438c18d95727421e9481bb9d43a27c1892a21c7fc8cd9e23df8b8b07dd59c7daece4fab8f5b306552f6b4148", &(0x7f0000000140)="dce37a003270d1eed636db5c6024d93084d21db0c29a5099de9f9205e030f0048fa17d1dbdac1f19afb052be1a4c6584641edc5265652a0829a5ca37a6bd171bd89c07cb63d1d7ea2a4a3f8aee8aa872c7b153e68eae9921038ef8a7421c02e7725753e438fc3633ed4775fda1b84c16b5a2dc09c652b4e6aba84ead487abbc76275fbb77ef7", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102c}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) 14:21:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x5219}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x400000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:10 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r2, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @local, 'dummy0\x00'}}, 0x80) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:11 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000}) 14:21:11 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000900)=0xc) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@euid_lt={'euid<', r2}}]}}) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000080000000000000000000000000007002e2f66696c6530cee7a6be78da5bc94485e6ce4de5e7d3b67273209612cbb5a8ee7e33af49ba084a78ee4de9419223440756549469dca7248a21ead70b5a84a0c9fbc7d7227ffdbff5abdd5342c91ca87e41d58b79cc9b29da99db49c991b5a13650fe7b27802ef15a0912156b8c4526e788c118286b31b7dc4017060cfefca8e6d3976f2180403f8abb2f0775afe097"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) r3 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000b40)={0x0, 0xe5, "147745b791e1cb15819c5c236ea3cda8f4ac521448e9a268d77d797fbf149bb29c5e678888e94b89d7f67fd3e01f8460ea2e9a0686e8d3996246de530b6c6e6040fcd076af584b59de1980fd068bdb701ec9ac5f137d32af1b941131901b08f6597950a1645b11ce428318225d7c5eb50668788bf368e35ef4f188f26c5510ba9f7d67c8fd05c3bf3b460f3239f7c622dedb8dc7b88ba603b2171b72429665683111e0de22437ecddefb8b077448ab7d585a7ac552242d1e1a5a5b42ad844ff401149ab825173d2a58adc16ebf2c6423ccffb48742057c77f149db4efe40e76cfafa9259d5"}, &(0x7f00000002c0)=0xed) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r4, 0x100000000}, &(0x7f0000000480)=0x8) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe7fd, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000200)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000140)={0x18, 0x1, 0x0, {0xfffffffffffffff9}}, 0x18) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000280)={0x0, 0x0, @ioapic}) fdatasync(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x117}}, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c46000006e304000000000000000300000000000000000000000000000040000000000000000000000000000000000000000000380000000700f9ff0800040000000a00000000000000000000005a00000000000000030000000000000002000000000000007f000000000000000000000000000000d77fc8253fe5d99d605d5c17c8158a9a97ab216b36c6f6c15cd8515c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057bbf40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x494) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1f, 0x802) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 14:21:11 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xffffff7f00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xff00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x2000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x4, 0xfffffffffffffffc) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0xf675445bc48889cb, &(0x7f00000002c0)={0x100, {{0xa, 0x4e22, 0x200db802, @remote, 0x9}}, {{0xa, 0x4e23, 0xfffffffffffffffa, @mcast1, 0x2}}}, 0x108) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfffffff0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1164.233441] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000072a) [ 1164.268199] FAT-fs (loop1): Filesystem has been set read-only 14:21:11 executing program 5: rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x200000, 0xa2fffd, 0xa30000}, 0xffffffffffffffff}, 0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000040)=0x80, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x6000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000980)={0x0, 0x80, 0x0, 0x7, 0x401, 0x4, 0x3ff9, 0x415f, {0x0, @in6={{0xa, 0x4e24, 0x859, @dev={0xfe, 0x80, [], 0x1d}, 0x401}}, 0x0, 0x5, 0x40, 0x7fff, 0x1b}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x800}, &(0x7f00000003c0)=0x8) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) [ 1164.293071] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000072a) [ 1164.336951] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000072a) [ 1164.351545] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000072a) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xb00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, &(0x7f0000000240)=ANY=[]) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0xc0400, 0x0) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000001600)='./file0/file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000380)=0xe8) truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x10001) write$FUSE_GETXATTR(r1, &(0x7f0000000b00)={0x18}, 0x18) 14:21:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000140)={&(0x7f00000000c0)="ecebc6b553803f", 0x7}) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r3}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r5+30000000}) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xec16}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xa0018000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = getpgrp(0xffffffffffffffff) write$P9_RGETLOCK(r1, &(0x7f0000000100)={0x30, 0x37, 0x1, {0x2, 0x0, 0x8001, r3, 0x12, 'security.apparmor\x00'}}, 0x30) write(r1, &(0x7f0000000440)="8f", 0x1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) r5 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x3, 0x109040) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000240)) fgetxattr(r4, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000080)=""/26, 0x1a) [ 1164.499494] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:11 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0xfffffffffffffffe}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="090000006f01000200"], 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00'], 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x1c02}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0x4004551e, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = getgid() setgroups(0x3, &(0x7f0000000200)=[r2, r3, r4]) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0xba22b57e9cca78f8, 0x7, 0x8001, r1}, &(0x7f0000000100)=0x10) [ 1164.680509] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x3f00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) pause() write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x0, 0x10000000}}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) [ 1164.807209] FAT-fs (loop5): Filesystem has been set read-only 14:21:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, &(0x7f0000000240)=ANY=[]) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0xc0400, 0x0) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000001600)='./file0/file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000380)=0xe8) truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x10001) write$FUSE_GETXATTR(r1, &(0x7f0000000b00)={0x18}, 0x18) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf0ffffff00000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x80086603, 0x705000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x20, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose='cache=loose'}, {@aname={'aname', 0x3d, "2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800"}}, {@access_any='access=any'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@version_9p2000='version=9p2000'}], [{@smackfstransmute={'smackfstransmute'}}, {@obj_user={'obj_user', 0x3d, "2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800"}}, {@dont_hash='dont_hash'}]}}) 14:21:11 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x8001a0ffffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:11 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) socketpair(0x8, 0x7, 0x401, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001a40)={@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x200}, {&(0x7f0000001980)=""/122, 0x7a}, &(0x7f0000001a00), 0x19}, 0xa0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) accept$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) getpeername$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4800}, 0x0) shutdown(r4, 0x100000000000002) 14:21:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:12 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) socket$netlink(0x10, 0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000003c0)=0x5) preadv(r4, &(0x7f0000000480), 0x1000000000000157, 0x4c004800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) openat$cgroup_subtree(r5, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x9, 0x0, 0x4000, 0xf7, &(0x7f0000000180)=""/247, 0x1000, &(0x7f0000000480)=""/4096, 0x6c, &(0x7f00000002c0)=""/108}) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_vs_stats\x00') 14:21:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xffffff7f00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xfffff000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, &(0x7f0000000240)=ANY=[]) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0xc0400, 0x0) symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000001600)='./file0/file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000380)=0xe8) truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x10001) write$FUSE_GETXATTR(r1, &(0x7f0000000b00)={0x18}, 0x18) 14:21:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xb00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x400300}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:12 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:12 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000003c0)={0x21, 0x4d, 0x3efffffffff}, 0x3cc88f86c64774a7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f0000000380)={0x14, 0x69, 0x1, {0x3, 0x0, 0x5}}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="f630f88e8b4ee69b13e6042797b75f828926157eca5d22b1592bf75ce8a480043cd9cba8427ecbf8fe84e475d4a2b28432f7933d09000000ab6485e8e53dce0634593f799e694e01bb43325f02000000000000002cb1986ffb2be7d5fe0d0100000000000000bedba97e77ab1ddfd5099c24e13f58b930349e6838ee781b6f0000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:12 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x433d4c78e84f01f4, 0x0) 14:21:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x300}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x34000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:12 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x914, &(0x7f0000000000)={0x0, 0x0, 0xa7, &(0x7f0000000040)}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa0002, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x5, 0x1, 0x1}) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x8, &(0x7f00000006c0)=[{&(0x7f00000001c0)="a1e2b580f079c907c90aecbc26166e8c11b01c6a6d43433e9fe7ae459152ba6bed7226c72e7284fb8841cd3ae18371432558161475329893b3daa81295f6ca67c32ac1297dbb9d92906f5a7b61002e0ed540ba3550437c813be08b5c545f37b8278892721c19bc989e0a6b1ff931aa08acafef07c942ac267f2b90b3653618b78cbddd19445acaac16fb4157b952b2667778b39cb42103015fcb52c9bc5a9909b46fc7291b329b46edda1635bb1a2493826547f4fbc9d8f7117378c1fc85d40282054948828be44f76c5f542cc80c0270e6a4d8f4f2b9d", 0xd7, 0x1f}, {&(0x7f0000000140)="4080cecb4b013b6c305eeeaa67a80fe21f6884ec38", 0x15, 0x8}, {&(0x7f00000002c0)="03535cfe92daee1851af0ef6f1f00b55d84434716bff95bbccc3b348a6244a6ff92a5a2e6de9b2b12c194e6d73ad5d7a7eca13e6ecfc510872a73e61e26ee4e4c5d825b720cd49d4ce9f1bcaf0c327a1b728fdb75289e015a9bdb9a771991ab117c0e7ab9cabbf0ad93d60ffd2939a00b59e69", 0x73, 0x6}, {&(0x7f0000000340)="5f684b85aa58c4fb01292599c8a8c704cdfa728f4f6b199f7b839c4eaa0dd0828520e724aad8dc56a7c702c83f4f738daaea00254e90003af44df55ff09d0a697548384c1b560765cfa7e059e17f4f5895322a5b3cfcee34c894dc5240f053138950e43bfe801d97d3c79d6af0ecb0c7c4cf48c604bf9c3189f7c575d0709010add377e7800ce29864adbaec5c25102cc0b9ca03ac044c040f448850ad44c4ca7b0cc5f18618f0908c5e6bb9f9d68b3f9afd2dc7d47626cbee61c7e48db5ba34cf6ded5c1cbae57f6058fe8079ac7a72f2602d50cce7", 0xd6, 0x1000}, {&(0x7f0000000440)="ff883e7e5745189645009e99070ad18e72c483b15d5541c7854df85bb8162d4d1c7b00e681d92b52700957d6302a352e9ed1e7a919bf8bdc353f26823bad3eda609881d41aa2e462e4063ead5e7828c96d15168f41a00bd80b657d08bcfd8f93ef0ee6cb8b81a2f037f31cd587d10cb6c7011352a46c1587b26e7c57d060abc1fb7f145eba0fa23307ec5552b96b844b1dc0a04b2593b8d3cffe4a3f5107a40eb4c9249b9a90c019363b3e668d9feba22b579aad8e1c3c26062ce61302e158efe923d12d42c4a98920079149d2992fd0a81af1d2ba345398b1b79bc8b94849012928dd9a538a5a3dd2e12fe295b0", 0xee, 0xfffffffffffffff8}, {&(0x7f0000000540)="8362f5627fc1", 0x6, 0x8}, {&(0x7f0000000580)="453cc4d03bc4403216b3ca0f90fdf5792e89ac1e5ccab66c9e2fc3d69542bb6aa8fccd4e6c21b4bae10d6943479c89efad44fb57f66656f65327389ddd6cffb4558efd846401ec60f4cb0f7cdef62a8944fcbb590d609b59c88e7422e6831586afaaf2b7ccbfb60128c7c6d7cdf4efe179658b3640599bfd7fdc43eae2152f4d98fdfd301188db93161f7828af8ff6f1a3ad262841ae8a88a4fdc73c07d13da7c4f5fd700e7b9700137e", 0xaa, 0x3}, {&(0x7f0000000640)="e92a91fb0e83309d572aa955177390e7c9e424a1f6ae0d40f48131b1841b4d2d693fb3dd52b4e4e48ac2ec4359f8fe2dd13b51ea6c785506b8a5f910c6f870a39e13278cc7c9a6a5b2", 0x49, 0x72}], 0x400, &(0x7f0000000800)={[{@session={'session', 0x3d, 0x7ff}}, {@gid={'gid', 0x3d, r2}}], [{@obj_type={'obj_type', 0x3d, 'bdeveth0selftrusted$$}trusted'}}, {@hash='hash'}, {@obj_type={'obj_type', 0x3d, '/dev/md0\x00'}}, {@appraise_type='appraise_type=imasig'}]}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4) 14:21:13 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, &(0x7f0000000000)) r4 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x0, r4}) write$binfmt_elf32(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="56fe8150cb175db6"], 0x8) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x0) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f00000000c0)=0x1) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) fcntl$setlease(r0, 0x400, 0x1) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r6 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r6, 0x100000000000002) 14:21:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x4}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1165.974874] md: Autodetecting RAID arrays. [ 1165.979189] md: autorun ... [ 1165.982125] md: ... autorun DONE. [ 1166.005589] hfs: unable to parse mount options 14:21:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x400300}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1166.045977] md: Autodetecting RAID arrays. [ 1166.050250] md: autorun ... [ 1166.053182] md: ... autorun DONE. 14:21:13 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x40000, 0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001ec0)={0x0, 0x5}, &(0x7f0000001d80)=0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001dc0)={r3, @in6={{0xa, 0x4e20, 0x6, @local, 0x6}}, 0xf495, 0x1f, 0x1ff, 0x4, 0x31}, &(0x7f0000001e80)=0x98) r4 = getuid() lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b40)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000740)=0xe8) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000b40)="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", 0x1000, 0x8001}, {&(0x7f0000000980)="49b9bc72ff843985244681fa8ce1d99c53b960a68b30ddbace31db1e0e9f969d118a73327e9ba568218a1313b1748182e0141ea0150f29fa15d91206eef9ae5fd717895fe168dff92807c633f874ba064e87656d45601b18b64ea0a257171c83d357465d92c0e1aeb4bcccbce7998c5eaf9cedfd7dd80835a4571e71754142c789b8063fbfd837bd2455c35fb0286ae697e1bb3fd1f3e0fb39", 0x99, 0x7}], 0x8, &(0x7f0000001c40)={[{@check_strict='check=strict'}, {@check_strict='check=strict'}, {@map_normal='map=normal'}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {@session={'session', 0x3d, 0x1}}, {@nojoliet='nojoliet'}, {@nocompress='nocompress'}, {@norock='norock'}], [{@obj_user={'obj_user', 0x3d, 'access'}}, {@measure='measure'}, {@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r6}}]}) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0), 0x35, 0x0, &(0x7f0000001f00)="66bb3df24bbb635be357e34cf605c4ded6fb431bb31f10aed6523679aa38a006800f8e258f4051f9e47eb91cdbe35de9d737bf3664"}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r8 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r8, &(0x7f0000000340)={0x14}, 0x14) 14:21:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2009000029002d080019000000000000010000000c0000000500000000000000"], 0x20}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x8202, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x91, 0x0, 0x3, 0x15f4000}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x3ba}}}, &(0x7f0000000400)=0x84) 14:21:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2000002, 0x0, 0x200000000000000, 0x101, 0x4000000000000000, 0x1}, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x200040, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000001600)) ioctl$KVM_RUN(r0, 0xae80, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/38, 0x26, 0x0) connect(r0, &(0x7f0000000140)=@llc={0x1a, 0x33f, 0x1, 0x20, 0x6, 0x5, @local}, 0x80) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x3ff, 0x1) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x100000000000000, 0x4) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x10000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x0) mincore(&(0x7f00000be000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/29) mlock(&(0x7f0000234000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 14:21:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xffffff9e}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='{dma.mqx\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x34db) 14:21:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x9effffff00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:13 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r0, &(0x7f0000000080)="87912527523996919646b820818e0b97bc", 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) [ 1166.259302] audit: type=1800 audit(1538749273.262:1094): pid=20225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16542 res=0 14:21:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x6000000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1166.331478] audit: type=1804 audit(1538749273.292:1095): pid=20225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir554693960/syzkaller.SLTfAU/678/file0" dev="sda1" ino=16542 res=1 14:21:13 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x20000) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xffffff7f}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x200000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x80dc5521, &(0x7f0000000040)=0xf7) 14:21:13 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000200)=""/26, 0x1a) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x202002, 0x0) connect$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x1, 0x0, 0x3, 0x66e0, 0x2, "6f3328975287a35f34f1832cdbd8bbcb860a081942cc2abb473ebe3b9aba684128beda1e2eb9bb982fe0eeaebf8d25c791a28a8b76fb71a78921bf8d46d929", 0x29}, 0x60) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x4000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1166.597001] 9pnet: bogus RWRITE count (33554433 > 20) [ 1167.066214] audit: type=1804 audit(1538749274.072:1096): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir554693960/syzkaller.SLTfAU/678/file0" dev="sda1" ino=16542 res=1 14:21:14 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x101000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x408, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @local}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffffff5b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d80)={0x0, @dev, @local}, &(0x7f0000000dc0)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xdc, r2, 0x714, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0xc0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r7 = request_key(&(0x7f0000000f80)='logon\x00', &(0x7f0000000fc0)={'syz', 0x0}, &(0x7f0000001000)='lb_hash_stats\x00', 0xfffffffffffffffa) r8 = request_key(&(0x7f0000001040)='logon\x00', &(0x7f0000001080)={'syz', 0x2}, &(0x7f00000010c0)='user_linkup_enabled\x00', 0xfffffffffffffff9) r9 = request_key(&(0x7f0000001100)='pkcs7_test\x00', &(0x7f0000001140)={'syz', 0x3}, &(0x7f0000001180)='$\'(vmnet1*user^\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000011c0)={r7, r8, r9}, &(0x7f0000001200)=""/122, 0x7a, &(0x7f0000001380)={&(0x7f0000001280)={'crc32c\x00'}, &(0x7f00000012c0)="fc57f8a9e4e042c6ed5e11ec6d113b1c7516eb37c011da5e806397073614cab706bae4d87c422a7ec0d672b7bffb72de5bd801aa4a2bb2d7307491151ac8601d3a599a9e760ca3d8856ed70c26a49146e2a1eb210f7abfde36530c1571eeff325f750502e76d693bc47ec1515d6113699145d6bb7b16bbb3852b9b52401a8d39bd1e38678df3ad296c6ba01912d82d83e38d40894f359326844327321ca323ccc94b3aefba714abae86451e49949585cc24be216e9", 0xb5}) r10 = msgget(0x3, 0x400) msgctl$IPC_RMID(r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f00000013c0)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @jmp={0x5, 0x80000000, 0x0, 0x7, 0xf}, @call={0x85, 0x0, 0x0, 0x30}, @map={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x100, 0x5, 0x9, 0x8001}, @call={0x85, 0x0, 0x0, 0x42}], &(0x7f0000001440)='syzkaller\x00', 0x80000001, 0x22, &(0x7f0000001480)=""/34, 0x41f00, 0x1, [], r3, 0x8}, 0x48) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000001540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x4000, 0x1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) syz_mount_image$ntfs(&(0x7f0000001580)='ntfs\x00', &(0x7f00000015c0)='./file0\x00', 0x1, 0x2, &(0x7f00000016c0)=[{&(0x7f0000001600)="b4801125a59011f624adfdb0ce21b461c1ca132e892580e484c90cb65bdd59cefc626be2a97b0bc5b8ad9cf241295c14f482e15d6cd0b72cf24899deec054be02f652198c709f80dfcdf9bf4f6f820d2b9bc3b9e2afd41b39e0e2c4863745e1b1b940e5f0586fa", 0x67, 0x4}, {&(0x7f0000001680)="7f5ffaef0598efdc22b1071ec39f45c57e7691eb99a8eaebc95064b81a4f2c2776fdcbb541a8", 0x26, 0xb476}], 0x9, &(0x7f0000001780)={[{@umask={'umask', 0x3d, 0x7}}, {@errors_continue='errors=continue'}, {@disable_sparse_no='disable_sparse=no'}, {@dmask={'dmask', 0x3d, 0xffffffff80000001}}, {@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@gid={'gid', 0x3d, r11}}, {@case_sensitive_yes='case_sensitive=yes'}], [{@permit_directio='permit_directio'}, {@seclabel='seclabel'}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_lt={'euid<', r5}}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@hash='hash'}]}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000001900)) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x1) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000001980)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x250000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r12, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) keyctl$dh_compute(0x17, &(0x7f0000001a80)={r7, r7, r8}, &(0x7f0000001ac0)=""/102, 0x66, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000001b40)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001b80)={0x89, @broadcast, 0x4e23, 0x2, 'ovf\x00', 0x20, 0x6, 0x9}, 0x2c) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000001bc0)) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001c00)=r4) syz_genetlink_get_family_id$team(&(0x7f0000001c40)='team\x00') setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000001c80)={0x2, 0x4e24, @multicast1}, 0x10) 14:21:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfe80}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x8001a0}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:14 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x58, 0x4) shutdown(r3, 0x100000000000002) 14:21:14 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008f8406746affa0ead38d55f56cf4007501000d0000940515e25e56e67d38167607f9de66526475b8c314"], 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000000)={'teql0\x00', @ifru_addrs=@generic={0x13, "7498747c6fc67815f5260e51f1e5"}}}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x7fffffff, 0xb}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0x800}, &(0x7f0000000280)=0x98) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e24, @multicast1}}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000200)={0x52}, 0x4) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0xe000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) r5 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[]}}, 0x80) dup3(r0, r5, 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) socket$inet6(0xa, 0x4, 0xd8) [ 1167.170492] ntfs: (device loop1): parse_options(): Unrecognized mount option permit_directio. [ 1167.198666] ntfs: (device loop1): parse_options(): Unrecognized mount option seclabel. 14:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xec160000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:14 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x80, 0x480000) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC], 0xfffffffffffffd35) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) socketpair(0x3, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1, @remote}, &(0x7f0000000700)=0xc) sendmsg$can_bcm(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x1d, r6}, 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x4, 0x102, 0x5, {0x77359400}, {}, {0x0, 0x6, 0x4, 0x3}, 0x1, @can={{0x2, 0xfffffffffffffffe, 0x7, 0x8}, 0x3, 0x2, 0x0, 0x0, "d25372f60d316890"}}, 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x5d2bb07b) [ 1167.219734] ntfs: (device loop1): parse_options(): Unrecognized mount option fsmagic. [ 1167.240458] ntfs: (device loop1): parse_options(): Unrecognized mount option eu. 14:21:14 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000980)={0xfffffd1f, 0x75, 0x1, {0xee, "a5350239509823e967c98d4bb610851921eecac106d72e3d2694f55f6be1d0311e6e3427e96701ec69ba74114dbd472fac4cdd53e0b6e8843ab74e08318ccf295ab00d5a8ca78b53ae16d8757c4aef15d10b245e7c5fce15d064dac36015a5daed00f658f5c625ffa885b20e903498826e6008b62d5673496e9e8508a44050a249f3507684051308be129619e7c9ebcad85b6c2819c548469a2993ee73fe7df57a9a4e475bc19a77352e6a8b6b06257d7c77058ab611a9254704e7d457cb6177b5a8b3d9c9d41a270bd06a6e11353ee748aeb9ae550cd580fab43a46608a452ec5d1464a8b56c5322784378dd878"}}, 0xfffffffffffffcad) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x440000, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf0ffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r1, &(0x7f0000000480), 0x100000000000027e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x34000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x21c}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r1, &(0x7f0000000480), 0x100000000000027e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:21:14 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa802, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8000, &(0x7f00000000c0)=0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100)=0x40, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:14 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x141048, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e20, @multicast2}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x401}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x125}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x1000, 0xea1, 0x6, 0x86}, 0xffffffffffffff92) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='index=off,index=on,xino=auto,lowerdir=./f\x00\x00e0,workdir']) openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x84000, 0x0) 14:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xf0ffffffffffff}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x5219000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={r4, 0xbb, 0x3, [0x3, 0x80000000, 0x3]}, &(0x7f0000000300)=0xe) keyctl$set_reqkey_keyring(0xe, 0x3) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@remote}, &(0x7f0000000100)=0x14) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000), 0xfff9) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @remote, 0x0, 0x0, 'none\x00'}, 0x2c) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000140)={0x6, 0x9, 0xff, 0x5, 0x2, 0xfffffffffffffff9}) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000003c0)) [ 1167.791012] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1167.821509] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 14:21:14 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x100000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:14 executing program 1: unshare(0x2002010400) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) uselib(&(0x7f0000000000)='./file0\x00') r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r0, 0x8}, {r0, 0x8041}, {r0, 0x2006}, {r0, 0x2084}, {r0, 0x50c}, {r0, 0x800000000000090}, {r0, 0x40}, {r0}], 0x2000000000000163, 0x400007f) rmdir(&(0x7f0000000240)='./file0\x00') 14:21:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x200000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:14 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000000c0)={r2, &(0x7f0000000080)=""/7}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r3, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000180)="f02c4becc78952c3ddd2af5d2f281b70bcac165586b04687e526a43aa26f0e3fc4b817ade5f15fd1760ef108b3b7578988589262082542db8bbc8044ca0f4a9093670679b421087751eb564bca048c218ebfc499b408199a47d15abc9993b2feeb5b4c213e3f079078f3357c1a0ea1758da5a3fcb2a723429e6803fdd81cc64b5542d21043d2db9304a37fa9431e3787059c2acfc1c8584a8fb50bab72320db86bf7cfc10948c532ec896ce1580250f20d2efedaaf500fc316ec8e906aae7d9c334a8e42f34621f09aa3e3a0a99c9c2b1b26efcd1f8d081b46448d961d6f742f2961403a88fd3d2d854fefbf775c39d2db2cefe7c085", &(0x7f00000002c0)="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", 0x2}, 0x20) write(r3, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0x4a93) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r5, 0x100000000000002) 14:21:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfc00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000cb000/0x4000)=nil, 0x4000, 0x3000000, 0x8010, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000000)) futex(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0) [ 1168.036017] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xfffffffc}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:15 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:15 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x6000) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) [ 1168.286120] 9pnet: bogus RWRITE count (33554433 > 20) [ 1168.297480] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 14:21:15 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='EPL\x00'}, 0x48) io_setup(0x0, &(0x7f0000000340)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="a6de24", 0x3, 0xfffffffffffffffc}], 0x1, &(0x7f00000004c0)={[{@errors_continue='errors=continue'}, {@usrquota='usrquota'}, {@quota='quota'}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@integrity='integrity'}], [{@permit_directio='permit_directio'}, {@uid_gt={'uid>', r1}}]}) exit(0x500000000000000) 14:21:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xb000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:15 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x9, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000140)={0x2, 0x4000000000000006, 0xffffffff, 0xb, 0xadb, 0xfffffffffffffffe, 0x6, 0xfff, 0xfff, 0x10000, 0x1000, 0x101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe, 0x2) accept4(r1, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') r6 = dup2(r4, r5) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000580)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) syncfs(r7) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000840)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={r8, r9, r10}, 0xc) creat(&(0x7f0000000400)='./file1\x00', 0x8) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000240)={0x4}) 14:21:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xa0018000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:15 executing program 3: sysinfo(&(0x7f0000000180)=""/246) r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) [ 1168.355429] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 14:21:15 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) ioctl$void(r0, 0x5451) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x28b, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x2, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f00000003c0)={0xffffffffffffff8d, 0x67, 0x3, {0x0, 0x1}}, 0xfffffffffffffea7) 14:21:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfc}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x3f00}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1168.553132] jfs: Unrecognized mount option "permit_directio" or missing value 14:21:15 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vcsa#\x00'}}, 0x2c) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) finit_module(r0, &(0x7f0000000000)='(\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x40000) shutdown(r4, 0x100000000000002) 14:21:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x1c02000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xfffffff0}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:16 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1600000000000000000000000000206e720000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000bc0)={0x70, 0x7d, 0x2, {{0x0, 0x50, 0x7, 0x4, {0x0, 0x3, 0x7}, 0xe0010000, 0x7e, 0x1ff, 0x59, 0x0, "", 0x10, '{lo#vmnet0,eth1&', 0xd, 'mime_typeppp1'}, 0xb, 'cache=loose', r2, r3, r4}}, 0x70) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x2000000000004e23, 0x0, @ipv4}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0x1, @empty, 0x1f}}, 0x100000000, 0x8, 0x9, 0x9, 0x8000}, &(0x7f00000000c0)=0x98) listen(r0, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty, [0x54, 0x0, 0x0, 0xfe80000000000000]}}, 0x0, 0x3}, 0x98) socket$inet6(0xa, 0x80003, 0x800000000000006) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000004c0)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) ioctl(r0, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r2 = socket(0x11, 0x800000000003, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) accept$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) bind$packet(r2, &(0x7f0000000440)={0x11, 0x19, r3, 0x1, 0x9, 0x6, @local}, 0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000100)}, 0x10) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000005c0), 0x10, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[]}}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000480)=0x4) sendto$inet(r4, &(0x7f00000000c0), 0x0, 0x41, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0xffb2) sendto$inet(r4, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0x35e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r6, 0x1) 14:21:16 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x4000000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:18 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x9, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000140)={0x2, 0x4000000000000006, 0xffffffff, 0xb, 0xadb, 0xfffffffffffffffe, 0x6, 0xfff, 0xfff, 0x10000, 0x1000, 0x101}) r4 = open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe, 0x2) accept4(r1, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') r6 = dup2(r4, r5) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000580)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) syncfs(r7) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000840)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={r8, r9, r10}, 0xc) creat(&(0x7f0000000400)='./file1\x00', 0x8) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000240)={0x4}) 14:21:18 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x5) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0xffffffffa0018000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:18 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x100000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:18 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f00000003c0)) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREAD(r2, &(0x7f0000000480)={0x31, 0x75, 0x2, {0x26, "1b8f5e729334f9f5a4ab6a3a90719224deca19b969561b08e42a72ba3ad4ef2dd038ba736cb6"}}, 0x31) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = dup3(r0, r0, 0x7ffff) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x1, 0x2) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802, 0x0, 0x2}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:18 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_dccp_int(r0, 0x21, 0x15, &(0x7f0000000080), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") open_by_handle_at(r2, &(0x7f0000000180)={0x98, 0x673, "26246ff2e6e52aae784f80fae14001915ed22faa7a39d2785164e585f87b558ad1f36dc9eb4461ffd083fee14b8df52f8a8accfdc4ef2375759a6aa708e2e2b4f152aca8656a4c11eacda6964bafd01472aeb708aac9faed7cbb3c08837350ef839bf2513217293a82bd281e94fa2d889342cc511d775bef5fd6af311f70e5601def7ea4a4c1c95b5199f480f9509754"}, 0x424180) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x101000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 14:21:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf0ffffffffffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001d0001000c0001000800ed6a59990da41a064dfb1b580000", @ANYRES32=0x0], 0x20}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x8001, 0xd82, 0x3000000, 0x5, 0x7, 0x454, 0x80000000, 0x80000001, 0x5, 0x3, 0xfffffffffffffffb, 0x1fc, 0x4, 0x5, 0x8, 0xc97], 0x2, 0x4000}) [ 1172.104115] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xe5c, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1172.225716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor5'. 14:21:19 executing program 0: pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f221179ecf4f63b51000000000000000000"], 0x16) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x102c2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000180)={0x3f, 0xf35, 0x9595}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x200, {}, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000980)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1}}, 0xfffffffffffffe50) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) setxattr$security_evm(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f0000000640)=@md5={0x1, "d01a0f57c2641a4ee402ce2cd1acdd1a"}, 0x11, 0x1) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x4}, 0x8) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) [ 1172.271659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:19 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="29887c67ebfa2eead66db6201fa068381596cd340ca9a61cc6c24e60d18bd0bb3798674a58714a59bbec4a16415e01b6638371bfbd5952452ed804cff508a38a1bb20badb46075426882e9da6fa205777fb392814a8d06a8b757327e6391705e258395", 0x63, 0xffffffffffffffff) r4 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f00000000c0)='posix_acl_accessvmnet0\x00', r3) r5 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="febaca766094c48a841bf075ed7773fb6e3f940097e9f02ba8ec673fc9aee30bdd1f7eace0158815b1dd6de36bf926530b4f8b015909bfba18f68fef52084e72e36e", 0x42, 0xfffffffffffffffa) keyctl$reject(0x13, r4, 0x2, 0xa0, r5) ioctl(r2, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000400)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x7ff}}, [0x6, 0x1ff, 0x0, 0x9, 0xffffffff, 0x5073, 0xd2f8, 0x86d3, 0x0, 0x1, 0x7fff, 0x74a1, 0x9, 0xb7, 0x4e8f]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000003c0)={r6, 0x4, 0x4fa09f1a, 0x1f, 0x8, 0xffffffffffffff7f}, 0x14) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r7 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r7, 0x100000000000002) [ 1172.315372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor5'. [ 1172.431112] 9pnet: Insufficient options for proto=fd [ 1172.516449] 9pnet: Insufficient options for proto=fd [ 1172.553248] 9pnet: Insufficient options for proto=fd 14:21:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xcbc, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfffff000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000640)='/dev/snd/pcmC#D#c\x00', 0x8, 0x90200) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000680)={@multicast2, @multicast2, 0x0}, &(0x7f00000006c0)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000700)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={[0xd903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a8], [], @broadcast}, 0x4e, r4}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000740)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x75, r4}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000480)={@mcast1, @loopback, @empty, 0x400, 0xffffffff80000000, 0x6, 0x100, 0x3, 0x40000000, r4}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001, r3}, 0x20) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r4}) r6 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000500)=""/150, 0x1010000, 0x800, 0x4475}, 0x18) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) write$P9_RWSTAT(r5, &(0x7f0000000600)={0x7, 0x7f, 0x2}, 0x7) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r4}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) clock_nanosleep(0x6, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00001c2c766856c3d5b9fd45b091f531ab59449713744c435db3f477f731f0ebe12b878420a95ef9cbdb0adffb500b2e429f68c508fd84e91f61b598d436a6ae7f2d68c9756b1fccd3e4d68d69f2ff7a8ba756ecc2281e5274fc8a8f2d21cdaa638d12ffe83ab7115c41202538f567deb7e2c73eb52cb882271545", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) 14:21:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x55, r2}) [ 1172.588493] 9pnet: Insufficient options for proto=fd 14:21:19 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x5f, "cbffe522ff2efbf3497f1a1fa937db7c50eb75d39e6ad15fdc9c33a1d59ac6d5d9bb1bf1a1dbd640094634f9dcc9845547d24e78ec92347fd132bdf5c272c81fe401b6406e94f0cc5ee90283da770947ce81cee99a4bdfe73f5a069c89d820"}, &(0x7f0000000000)=0x67) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x1}, &(0x7f0000000180)=0x8) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xf9}, 0xb) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) [ 1172.642971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x8000000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xeac, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000002901000000000000001000000000000000000000000000000008430a1807002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xe24, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1172.795802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1172.809589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x3000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1172.860782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xcb4, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1172.923413] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000300)='gre0\x00') 14:21:19 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @empty, 0x6}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0xd2, 0xfffffffffffffffd, 0xfffffffffffff800, 0x800, 0x7f}) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000100)={0x1}) [ 1172.945167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xb}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1172.985432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) fstat(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000a00)={0xa0, 0x19, 0x1, {0x800, {0x0, 0x3, 0x5}, 0xa0, r3, r4, 0xfff, 0x0, 0x7fff, 0x6, 0x48, 0x2, 0x9, 0x8, 0x232, 0x0, 0x4, 0x200, 0x80, 0x101, 0x5000000}}, 0xa0) 14:21:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x55, r2}) 14:21:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 14:21:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xffffff9e}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:20 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x2b1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) shutdown(r3, 0x100000000000002) 14:21:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xa, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xcdc, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf0ffffff00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1173.461191] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 1173.494626] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "44f42fb2a181e9dd"}) 14:21:20 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0xfffffffffffffffd, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x80800) shutdown(r3, 0x100000000000002) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'eth1-nodev'}], 0xa, "88c33b49ca769dbb364c9113ce44c19a34ae06d1f1efabf4ba7d85da65dcd48c1c1844f4e54746edc5acd25f2a5833954fa1b9ad3304010d596cf0a336b54a86d3a0ef1259855f39c228d5306bf37b6799787c66e721222821020d8def8f81c03f5e9421fadfe8cc2ffcc10d0122c67c543d63a3bbe80d8b7e463b14e202aba5c11a665adffc56f35db9d38df7f6a1744e814535e4073a8c8dfc2ea6603401de5d233683ef23093b578239a6"}, 0xc2) sendto(r2, &(0x7f0000000180)="a3caf2365d0b14491a70393c72c3839dcca18bea489cbe6516e3dce6c94ef58403604060617b7aa553cbb4bec39641cb618e899cb451fe65617458b470d96c99b30739739ff3f6687e587599e1208d8ed0bebe0dc16d3f9ac2ab277290dff5d55b86ac69e98b0c01f89abd09cbf6014fd834f459f957f81bffe4136c2f27513e7a4fc75f74403f9fa71348d530176774b0e99e3773aa35dc82baf31e013e276bc19ff9fec223d63ddabaa9f098194a611227c2213b86224ea1d9ca9af88618a29992674f2d56655ee7d898f8297590e66acec926307d311d5c4f68109bb1b15ff54a63b7bea27bb7ec", 0xe9, 0x400000000000010, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 14:21:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfe800000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1173.569074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xda8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1173.705310] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x55, r2}) 14:21:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xce4, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:23 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:23 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x381440, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x4000010) 14:21:23 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x55, r2}) 14:21:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x300}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5000600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x5a, 0x1a0}]) 14:21:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xffffffffa0018000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x11f}, 0x2c) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000240)={@empty, @empty, 0x0}, &(0x7f0000000280)=0xc) sendmsg$xdp(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x2c, 0x1, r2, 0x15}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)="84944235a6e2b6d5a5d013457d06d79f36b91f5e9301a0c5269c2cb6a8e6407d44e118cbc255c92d4126bc9dc57eeeac7ed7b8dcc839ebb0bf3ad17e668b14fcf0b6e2363b678cf4d07fa1a513cf2f46f8b5f4df1fd6b9ddfa0cc94323859061977cd1a0681d4a4d1e50582f0d778f549d968132f11805a2e9d548090591086567710593aa61eb398018e3d24f9c06c257d7f4b5f5", 0x95}, {&(0x7f00000003c0)="9678f789e83b9d6226faaca58c248d97302f7ca67e48a89da8b36c0c4943d71e7db1e4572f0f5515a0b238cac166849fabae5565191faf325e77a489d3d7a24d021d27d81d4540895b5e8886649cff10a70e715026a8a425fec4083d15ceffdcb706d5c0c8a17aac85f439017a9eb856bc5eb3e621c30775f91872139b36bb491f99c316d8049fc93108ec054533c307e0fe3d65d629e3936c902dce1e0a1fcb310c907887b5bf0c331a90971bad3d2f26ee", 0xb2}, {&(0x7f0000000480)="dd4047e550b98602b1053254e72d28da4e5c2c7e3b5e75c119b4771ee27fe8d8e219e46b84d499391ea8a91c4e4351d4696e1ba83a66e7a3087888c229c148fc82d2d509bcc211afbb391a2726259ac356bf937d55b948da9fc6079b9900e281d4d40873002ef032636ecbb9642f379afdadb952c654367cba0484489423411ac019dc78ddfc04b29e1e4faf6b8b262a149446ef572179c375e754df1a5392cf807d63007073a3f4abfad9bf149d439855d475c254b9fe4dacbdf0c31e72fa1a6c79", 0xc2}, {&(0x7f0000000580)="d15109d1321e114abf03fa8a7e6cd500341a3ca99b312aaaa3f0ea6c7b9f765446765af2c1ad533caddb3ed5b70a92f4b4ef210687c4b9f7b0e19a94f9c7f8c72844609a860019fc93d69dcf72c5dc28856069b986aa03672cab2eb2ee93e59e9af27761dfda134a9927ce18605ec5844f96ee034ceacfd9eb09d0c215edf26017", 0x81}], 0x4, 0x0, 0x0, 0x4000000}, 0x40000) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r3}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x4, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711048000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 1176.517271] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd54, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:23 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x58) 14:21:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r1 = syz_open_procfs(0x0, &(0x7f0000000440)="6d6f756e74696e666f000e250600c96bf4fc6d6b85cd692908d8c8b9cf9e8a119d7b14c624f84b858ad3a22949e03309a2106102f1de5cfe8aa80aa2d33979aa041465bd1cdbba6f9a0f7642e3b32c468f54b1c7420613cbdc6de2e5c3b6b9e944004bda69da06c0079efbc650f2fb4d9dca87a4ec2a71d204b48c90d556dcad2a381d456df24f50627f97551108") close(r1) r2 = socket$inet(0x2, 0x840000000003, 0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfc0004) r4 = accept4(r3, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) recvmmsg(r4, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) close(r1) 14:21:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xc0fe}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xdc8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:23 executing program 3: r0 = socket$inet6(0xa, 0x800000005, 0x3) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x244000, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x3}], 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x9, 0x3, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x90}}) fsetxattr$security_evm(r3, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "4bf9ad72d1374e4328681dc200ae0c4d"}, 0x11, 0x2) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:23 executing program 1: r0 = socket(0x1000000000000001, 0x8000000802, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x5, 0x2) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x309000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000280)=r2) setresgid(r1, r1, 0x0) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x1c}], 0x20}], 0x1, 0x0) 14:21:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x3, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1176.776427] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) 14:21:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfe80000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 14:21:24 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) pause() sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000180)=""/201) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r1, 0x0, &(0x7f0000000040)=0x26e, 0xffffffffffffffff) shutdown(r4, 0x100000000000002) 14:21:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x100) 14:21:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xb, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000006240)=ANY=[@ANYBLOB="4800000010000700000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c000100697036746e6c00001800020014000200ff010000000000000000000000000001"], 0x48}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) 14:21:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1177.317534] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 1177.342353] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x40a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x7f, 0x9, 0x7, 0x3, 0x2, 0x10000}}, 0x8) 14:21:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x40000000004e22}, 0x2e9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x400a00, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000240)={0x8, 0x8, 0x80, 0x500}) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000001c0)) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) accept(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0xffffffffffffffb9) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000009c0)=0xe8) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0x5c82, 0x5, &(0x7f0000000840)=[{&(0x7f0000000380)="8d2d013182c45441d72ce7b527cdc318ceb92510a27556a48b9d4763354dfc8f3773551939fa45437d66debd46a912d0c6e99062234cfaf81925fd31d6dd2049588ddbedb7f0ac3304f24d7cd933d6b7a2e35242b38ef54671a2cf550d32c27d590824295857bd0a88997f757c12a75d3e88d1e5fb7f2a018d83d2751537028d1ed0dc3e18101a6c126877ca31562c51e7b667712b6ef174e148fdd2e7e9bcfb852cee4508bc3ec1a3e3737428d18874a741ec07b857c8112fc758cd6260d7dbbaaf1e39", 0xc4}, {&(0x7f0000000480)="af3629726a1d722059755904ba8d995f58d2ad1fe53cba1bce67e0bc253fefcbdf02a1f5a6c768332cbb0a385a9de6dd2b0800cdb4bf44adab2b68841b300e095d10a851c891c697f4cf3a0cc677b14b7b32e8e127f5f22137460efa9b4622acc414c2690e2374217f6c854b193bc3b55f1a3403a36eefbcb387a59a7868c08c9b097446b38733510bc3a30e90401b5412a45800ad5bdeb1bf2556eba25c71695198373afe387594651cd57fed6c8bdca440b7b44fd3e0924166159d4b4d203b5fe6f404693df7f386fbf4f493f6195a56c0cfa57ed4a8ec9266026cf0", 0xdd, 0x101}, {&(0x7f0000000580)="5ab0d03fbe8bd9f36da19557689d172c1fc300483813f9dad3a971bea5bfa4be6e49c37ee4b883c7ba3b01b1dd6c39e82223eed495f4d75d6dbf9bc291857195ac0bcd7a34cfaf78ad90d9ae7f9856f83a27c3fb0511bb52d1c33de9e727a635294ac2038f7bc98f26be88cc139919b9384d5d14ea2db3ad6da41e87cd8b7474abf9a32ee8fe5378", 0x88, 0x4}, {&(0x7f0000000640)="718c1a3ec5660b02d4d7137d6a3b4b1f7d099b61acb6e2aa0889212b530839d3e18965d4d018e5e6bc27d07bdf6770ce6781ef53357bfb7640a3d49f9e94c771718e8fcd606119fc534a49224d53887a396342b68e610db7714a52113d073d5df718e4aa77a728f986439634899787486226ea9f205b49de921ee2698996ccff89ad840928fdc8147372e21da7ffc5dba0fd05bf807239a17dac48bfa8c033de749bad62d39851caeb3f846d58de2e53ef4f934e5cc609d6205b3fa7847f8d0b9d84f2138ab9f573", 0xc8, 0x1}, {&(0x7f0000000740)="3f97e441df1bc3164182aa9e259dc1c3e1565362c29c381c146f6cd5f4b13e7eb68cd991c3b718a5bb4d0dc677cca6b2c82e90796084ea0e3e434401da05e0886530a5b8d648fdc1a9e8b2021b7d37ef0a632ab4c7c930d213b912e632d3a5d0ca9a797e340edcde5c9708a30264c08f66c089b836612f164199ec68e86208a3eae5930efc53ab7a54c009aa645651f7f669f517ca5b28da7677fde65b8683bac4914924a84e85376814da553b8c8a45e32613e60ff60bfea54ffc6f7aa1c39405741e12a0dfa8ea34a04f1723d45b4f99bc333f6bd51dbe87c1b90c2eb3ad2a71d66821a856c82b47e34695453dfd5c02fcdbe2", 0xf4, 0xfffffffffffffff9}], 0x800, &(0x7f0000000a00)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}], [{@subj_role={'subj_role', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@appraise='appraise'}, {@permit_directio='permit_directio'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/rfkill\x00'}}, {@hash='hash'}, {@uid_gt={'uid>', r5}}]}) ioctl$VT_RELDISP(r4, 0x5605) 14:21:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfffffffffffff000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1177.465105] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 1177.490940] QAT: Invalid ioctl [ 1177.560822] QAT: Invalid ioctl 14:21:25 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd0c, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x6) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000740)=@get={0x1, &(0x7f0000000bc0)=""/127, 0xffa}) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats\x00') write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x7}, 0x7) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x30, &(0x7f0000000000)={0x0, "73797a6b616c6c2e00df1700"}, 0x429d) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) sync() 14:21:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:25 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0xfffffffffffffff9}, 0x8) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x40000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1178.177524] nla_parse: 7 callbacks suppressed [ 1178.177531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1178.214825] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:25 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x10001, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x80, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0xc) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000000)=0x68) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) [ 1178.233748] attempt to access beyond end of device [ 1178.239781] loop1: rw=1, want=37641, limit=112 [ 1178.264809] attempt to access beyond end of device [ 1178.272500] loop1: rw=1, want=41737, limit=112 14:21:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc40, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x200) write$smack_current(r1, &(0x7f00000000c0)='ip\x00', 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8008000000008b2f, &(0x7f0000000000)={'ip\x00', @ifru_map}) 14:21:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xf000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1178.285596] QAT: Invalid ioctl [ 1178.289615] QAT: Invalid ioctl [ 1178.307343] attempt to access beyond end of device [ 1178.321375] loop1: rw=1, want=45833, limit=112 [ 1178.360261] attempt to access beyond end of device [ 1178.370616] loop1: rw=1, want=49929, limit=112 [ 1178.371355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfc000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1178.403018] attempt to access beyond end of device [ 1178.410577] loop1: rw=1, want=54025, limit=112 [ 1178.425395] attempt to access beyond end of device [ 1178.436893] loop1: rw=1, want=58121, limit=112 14:21:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd5c, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1178.460473] attempt to access beyond end of device [ 1178.472278] loop1: rw=1, want=62217, limit=112 [ 1178.499729] attempt to access beyond end of device [ 1178.502126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1178.509387] loop1: rw=1, want=63337, limit=112 [ 1178.519000] attempt to access beyond end of device [ 1178.524520] loop1: rw=1, want=63338, limit=112 [ 1178.538205] buffer_io_error: 38 callbacks suppressed [ 1178.538215] Buffer I/O error on dev loop1, logical block 63337, lost async page write [ 1178.557329] attempt to access beyond end of device [ 1178.567000] loop1: rw=1, want=63339, limit=112 [ 1178.571738] Buffer I/O error on dev loop1, logical block 63338, lost async page write [ 1178.580691] attempt to access beyond end of device [ 1178.589291] loop1: rw=1, want=63340, limit=112 [ 1178.599669] Buffer I/O error on dev loop1, logical block 63339, lost async page write [ 1178.617184] attempt to access beyond end of device [ 1178.622123] loop1: rw=1, want=63341, limit=112 [ 1178.626811] Buffer I/O error on dev loop1, logical block 63340, lost async page write [ 1178.635150] attempt to access beyond end of device [ 1178.640067] loop1: rw=1, want=130, limit=112 [ 1178.644740] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1178.652544] attempt to access beyond end of device [ 1178.657506] loop1: rw=1, want=131, limit=112 [ 1178.661935] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1178.669960] attempt to access beyond end of device [ 1178.674989] loop1: rw=1, want=132, limit=112 [ 1178.679384] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1178.687225] attempt to access beyond end of device [ 1178.692168] loop1: rw=1, want=133, limit=112 [ 1178.696627] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1178.707046] attempt to access beyond end of device [ 1178.711966] loop1: rw=1, want=3093, limit=112 14:21:25 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfec00000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:25 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0xffdffffffffffffd) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140), 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x403f00, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x14, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mount$bpf(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c80)='bpf\x00', 0x80, &(0x7f0000000cc0)) 14:21:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xe00, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000180)=0x1) write$P9_RWALK(r1, &(0x7f00000003c0)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x10) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x8001a0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1179.012074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1179.038680] overlayfs: failed to resolve './file1': -2 [ 1179.050381] 9pnet: bogus RWRITE count (33554433 > 20) [ 1179.088626] overlayfs: failed to resolve './file1': -2 14:21:26 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x4000) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc88, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:26 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="160000006f0100010000020000000000000000850700"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:26 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0xffdffffffffffffd) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140), 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x403f00, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x14, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mount$bpf(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c80)='bpf\x00', 0x80, &(0x7f0000000cc0)) 14:21:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xff00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/72) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) [ 1179.240289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1179.261113] overlayfs: failed to resolve './file1': -2 14:21:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x3000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1179.294832] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc30, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:26 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8), &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r2 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r2, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) mq_notify(r2, &(0x7f0000000100)) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x400000) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:26 executing program 1: socketpair(0x1b, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003ac0)={&(0x7f0000000040), 0xc, &(0x7f0000003a80)={&(0x7f00000000c0)={0x60, r2, 0x225, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x4, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 14:21:26 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000380)="8fffd69ec8782cd1224e416860cd16880c4cf5920200000015a2474f679c0aefd822f157e3de143fa993f17ec5734e2b745bfae88c0606a8f08e2047f25edaddc77d97754e6355f6542db32e2f38c5e32510db394a31a11a46c980b11da5df31918c55a6ecfb5bd6d62f9021272352974ef6688cc89e525b3a000eb26244908539c4d381e9b3c370", 0x104) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x8200) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0xc, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000002c0)={{0x100000001, 0xffffffff9698a0b0, 0x9, 0x6501, 0x10001, 0x3}, 0xffffffffffffffc1, 0x5, 0x4, 0x7, 0x2, "dd4ba1a3f37c1e421cae21a499ded39814d31664037fb7303e76489bfd06eb6d65b2b1ed8567e5dd8ddc9d8354ddc9c5b3ebe625282ec4fdf3d14b648332158a290136b3d0e97bd5a3699bdc7fc6dd84b9527067005cffe8b1e47c902ec2207e164a4db683e7940b5ed54ca07f8805172fc51e3515fa4dd97faa8af7df9fa07f"}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000180)=@routing={0x4, 0x8, 0x0, 0x1b0a1a73, 0x0, [@empty, @dev={0xfe, 0x80, [], 0x1a}, @mcast2, @mcast1]}, 0x48) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000080)) 14:21:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x9effffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1179.407668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x300}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc38, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1179.517381] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x3, 0x3, 0xffffffffffffff10, 0x7f, 0x0, 0x1, 0xf71, 0x9, 0x2, 0x1, 0x1, 0x9, 0x6}, {0x0, 0x7, 0x80, 0x6, 0x8000, 0x6, 0xfff, 0x3f, 0x4, 0x7f, 0x2, 0xfffffffffffffff7, 0x1}, {0x1f, 0x400000, 0xffffffffffff8000, 0x280000000, 0x7, 0xffffffffffffff01, 0x1ff, 0x2, 0x81, 0x1, 0x3f, 0xe9c, 0xffffffff}], 0x1631}) r2 = dup2(r0, r0) ioctl$KVM_SMI(r2, 0xaeb7) bind$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, {0x9, 0x4, 0xc3, 0x7, 0x7, 0x9}, 0x8}, 0xa) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/211) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000196500010000000000000000000008fdfdffff00000000000000000700fd010000001d0000000500fdfdffff0000000000000000"]) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0xe, 0x4) 14:21:26 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x240, 0x0) readlinkat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000980)=""/112, 0x70) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1179.603998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:26 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe7c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) shutdown(r2, 0x100000000000002) 14:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xdd0, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:26 executing program 1: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) close(r0) [ 1179.749486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1179.803705] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xe2c, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:27 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002e40)='/dev/ppp\x00', 0x303000, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000002e80), &(0x7f0000002ec0)=0x8) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3f, 0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x20, 0xf9]}, &(0x7f00000003c0)=0x8) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0}, &(0x7f0000002bc0)=0xc) fstat(r3, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002c80)='./file0/file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000900)='f2fs\x00', &(0x7f0000000980)='./file0/file0\x00', 0x9, 0x4, &(0x7f0000002b40)=[{&(0x7f0000001b40)="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", 0x1000, 0xa289}, {&(0x7f00000009c0)="dec759b722574f46a242766a53b9679983d790657ec250a7f58876a2dec681099486e581c654203a5e8915ceb547cc1766ad3791121d686cf9139906cf84da39f6774c4a8e335507c92eb34570b0b56982366d05867a09ef58cd10b6ee1cc7cb4faf8be59a3e4342c51065ec497889cc4cebbb8a15c36f618b529a12", 0x7c, 0x9}, {&(0x7f0000000a40)="80463e8dc668eb5b7fdbfc856ee7fa494c5cddfc3b69fb3b13084cbd61b848547dea59ab0ebb7106a4433054ab694b0d4b665e6551e993393d6903bc13", 0x3d, 0x9}, {&(0x7f0000000a80)="81ed233bad929a3b0ad5cfa5b1be754bfb641bd436e6b7cb1a9e974c5bed508e476571", 0x23, 0x80000001}], 0x1, &(0x7f0000002d40)={[{@whint_mode_off='whint_mode=off'}], [{@smackfshat={'smackfshat', 0x3d, 'trans=fd,'}}, {@uid_gt={'uid>', r4}}, {@uid_eq={'uid', 0x3d, r5}}, {@uid_lt={'uid<', r6}}, {@measure='measure'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x12}}, {@fsname={'fsname', 0x3d, '.GPL'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) lgetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000740)=@random={'user.', 'wfdno'}, &(0x7f0000000b40)=""/4096, 0x1000) r7 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r7, &(0x7f0000000340)={0x14}, 0x14) 14:21:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="00000000000000000c00100000000000000000005c00110000000000000000000000ffffe0000002fe800000000000000000000000000000000000000000000000000000fe80000000f5ffffffffffffff0000aaff010000000000000000000000000001000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40005}, 0x0) [ 1180.215312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1180.238683] f2fs_msg: 6 callbacks suppressed [ 1180.238695] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1180.241508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000002c0)='./control\x00', 0xa4000960) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './control/file0\x00'}, 0x6e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r3, r2) 14:21:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x1c020000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1180.249743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1180.274724] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1180.281947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1180.303708] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 14:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd88, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1180.335318] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1180.369720] 9pnet: bogus RWRITE count (33554433 > 20) [ 1180.374774] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 14:21:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x1000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1180.382141] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 14:21:27 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @local}, 0x1c) listen(r0, 0x4000) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x400}, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40000, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000080)={0xb4, 0x40, 0x1}) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0xa5) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000b0c000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 14:21:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd28, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:28 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:28 executing program 5: exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xcfc, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:28 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf0ffffff00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000b0c000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 14:21:28 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000080)) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x0, 0x6, 0x100000001, 0x1f, 0x1ff}) 14:21:28 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xb00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1181.127224] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc6c, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x808000c004500a, &(0x7f0000000040)=0x40000080000004) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5b00, 0xc07f000000000000}, 0xfffffefd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:21:28 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snapshot\x00', 0x490602, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000cc0)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x80}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x13}, 0x3b64}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x7}, @in={0x2, 0x4e24, @loopback}], 0x64) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/l2cap\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}}, 0x40005) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) syncfs(r0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000980)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) connect$pppoe(r3, &(0x7f0000000c80)={0x18, 0x0, {0x4, @local, 'sit0\x00'}}, 0x1e) lstat(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000b40)={0xa0, 0x19, 0x2, {0x1000, {0x20, 0x0, 0x8}, 0x0, r6, r7, 0x4, 0x5, 0x6, 0x7, 0x10001, 0x3, 0x6edc, 0xfffffffffffffff9, 0x1, 0x3, 0x0, 0x0, 0x200, 0x9, 0xffffffff80000000}}, 0xa0) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:28 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x101000) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x7) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xe54, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:28 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xb}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:28 executing program 5: exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd80, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:28 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x300, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000380)={0x0, 0x1, {0x17, 0x21, 0x15, 0x1e, 0x100, 0x401, 0x5, 0xc5, 0xffffffffffffffff}}) write$P9_RSTATFS(r1, &(0x7f0000000980)={0x43, 0x9, 0x1, {0x800, 0xc15, 0x3, 0x7, 0xff, 0x1, 0xffffffffffff7fff, 0x80, 0x400}}, 0x43) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',dno=\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',cache=loose,\x00']) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:28 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x80fe}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:28 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xdb0, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:29 executing program 1: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000a500000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000"]}, 0x108) 14:21:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xffffff7f00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:29 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="196eb0356585642c0000000000000000000000"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000980)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) [ 1182.059439] kernel msg: ebtables bug: please report to author: bad policy [ 1182.075175] kernel msg: ebtables bug: please report to author: bad policy 14:21:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd04, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x300000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1182.110417] 9pnet: Insufficient options for proto=fd [ 1182.127415] 9pnet: Insufficient options for proto=fd 14:21:29 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="82ade937827e9361f5f656ad58b38e285007b81d94dd8e4fb80474e6c9bf7d5660fcb6ba282fff2cd8435fe88d09bab89821cf4a23c91fd675adc479e3f1fa2c59ceaaf088c533a64f30e4f1470e3662b6d9947e69ee841c59d48a2f638cf9a866115c62ab742726805cbdec3409ed") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:29 executing program 5: exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:29 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="0b0000007501000000000035d7b9f87bebeaf17e446e2413f5f842ce4a6fa19738ba2309d03c64ecffcf7566a6b9b59499f1003fd1311ba41cf6f9037d436a865f3996872168bfeddcd01420c952f3f6f99bd5a414f439904246bc20e9b7503ee72ca8fa5f7788f3085ef4093ad20f7a1ec4be1dd7b41462197b153c6a5e54ea913415d9252612d19947eb9a897f20d9036ac8a108f384c3bc3c367d431bbacf78"], 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:21:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc90, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x5219}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:29 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e22, @local}}) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x46) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x7) listen(r1, 0x4002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000001, 0x3) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000003) 14:21:29 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x200000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x10000) listen(r0, 0x4000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r2, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xfe7c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r4, 0x100000000000002) 14:21:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:21:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc5c, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xffffffffa0018000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:29 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40000) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:29 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x5219000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1183.028871] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:30 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:30 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5f2, &(0x7f0000000900)="1500000000080000006070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0xcc, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000880)={0xfff, 0x7f, 0x40, 0x100000000}, 0x8) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) recvmsg(r3, &(0x7f0000000840)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/6, 0x6}], 0x7, &(0x7f0000000740)=""/212, 0xd4, 0x2}, 0x2001) 14:21:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xc64, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:30 executing program 1: 14:21:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xff000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:30 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:30 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) [ 1183.669236] nla_parse: 12 callbacks suppressed [ 1183.669244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1183.698218] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1183.727874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xdf8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:30 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x618c}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfSno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',cache=loose,\x00']) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfffffff0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x9, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1183.811635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:30 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0xfffffffffffffd3b) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) [ 1183.910412] 9pnet: Insufficient options for proto=fd [ 1183.937019] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 1183.958512] 9pnet: Insufficient options for proto=fd 14:21:31 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:31 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00009ecff8), 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:21:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x8000000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x5, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:31 executing program 0: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d661300000000000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:31 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r3, 0x100000000000002) 14:21:31 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r1, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) write(r1, &(0x7f0000000440)="8f", 0x1) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x220000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="81"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0x10001) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x0, 0xfffffff0}) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x73, 0x1, {{}, 0x6}}, 0x18) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1939) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x21010010) r6 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r6, 0x100000000000002) [ 1184.535627] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 1184.552752] 9pnet: Could not find request transport: f 14:21:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000ecffffffffffffff0000000000009e613cee00"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)={0x0, 0x7f, 0x8, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00000000000000]}) 14:21:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x10, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x9effffff00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1184.591083] 9pnet: Could not find request transport: f 14:21:31 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file1\x00', 0x40) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RWALK(r1, &(0x7f0000000040)={0x3d, 0x6f, 0x1, {0x4, [{0x1, 0x1}, {0xc1, 0x4, 0x2}, {0x4, 0x1, 0x2}, {0x88, 0x1, 0x1}]}}, 0x3d) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfc00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1184.649558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1184.689544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:32 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xe90, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'team_slave_0\x00', 0xd03}) 14:21:32 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfe80}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:32 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000040)={0x4}, 0x8) [ 1185.376131] device team_slave_0 entered promiscuous mode [ 1185.385364] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1185.391305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1185.405652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1185.419033] device team_slave_0 left promiscuous mode 14:21:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd38, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:32 executing program 3: [ 1185.434086] 9pnet: bogus RWRITE count (33554433 > 20) [ 1185.439571] device team_slave_0 entered promiscuous mode 14:21:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:32 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="16175e709700000000"], 0x16) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) setxattr$security_evm(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f0000000740)=@md5={0x1, "614005a79ca17c9145267132e7b6ca8d"}, 0x11, 0x3) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:32 executing program 1: 14:21:32 executing program 3: [ 1185.514621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:33 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RRENAMEAT(r1, &(0x7f00000003c0)={0x7, 0x4b, 0x2}, 0x7) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000740)=0x8) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0x8) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000980)={0x962, {{0x2, 0x4e24, @rand_addr}}}, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) pipe(&(0x7f0000000a40)) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf0ffffffffffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:33 executing program 1: 14:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x6, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:33 executing program 3: 14:21:33 executing program 5: 14:21:33 executing program 1: 14:21:33 executing program 3: 14:21:33 executing program 5: [ 1186.294249] netlink: 'syz-executor4': attribute type 1 has an invalid length. 14:21:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x2000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:33 executing program 1: 14:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0xd30, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:33 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="070000006f0100810000ac8696d6e5d610ac8640a9dc7b4717671d1c1a14dd5156ec09889b04b8fe21af3c02a18712a9e144badac50b68e2c607f1c34ca891839fed42e420862029ee3e31c6"], 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:33 executing program 3: 14:21:33 executing program 5: 14:21:33 executing program 1: 14:21:33 executing program 3: 14:21:33 executing program 5: [ 1186.504654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:33 executing program 1: 14:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x4, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:33 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000b40)=""/4096, &(0x7f0000000180)=0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 14:21:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000000480)=""/222, 0x620}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 14:21:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xffffff9e}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x8, r2}, {0x4}}]}, 0x20}}, 0x0) [ 1186.741583] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:33 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000980)=""/187) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000500)=0x1b, 0x4) dup3(r1, r2, 0x0) 14:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x2, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:33 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) 14:21:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x1952}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0xffffff1f, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:34 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RRENAMEAT(r1, &(0x7f00000003c0)={0x7, 0x4b, 0x2}, 0x7) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000740)=0x8) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0x8) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000980)={0x962, {{0x2, 0x4e24, @rand_addr}}}, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) pipe(&(0x7f0000000a40)) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) [ 1187.030866] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x300, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:34 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snapshot\x00', 0x490602, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000cc0)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x80}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x13}, 0x3b64}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x7}, @in={0x2, 0x4e24, @loopback}], 0x64) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/l2cap\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}}, 0x40005) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) syncfs(r0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000980)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) connect$pppoe(r3, &(0x7f0000000c80)={0x18, 0x0, {0x4, @local, 'sit0\x00'}}, 0x1e) lstat(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000b40)={0xa0, 0x19, 0x2, {0x1000, {0x20, 0x0, 0x8}, 0x0, r6, r7, 0x4, 0x5, 0x6, 0x7, 0x10001, 0x3, 0x6edc, 0xfffffffffffffff9, 0x1, 0x3, 0x0, 0x0, 0x200, 0x9, 0xffffffff80000000}}, 0xa0) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:34 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x34000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:34 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0xc00e, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0xffffffffffffff4e, 0x0, &(0x7f0000000040)}) 14:21:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfec0000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:34 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="fdff00027501000d0040006da9c5a3056adc2c0044f076865ef7557da8fb8eccc8ed925959337e0ad3bc532dc0381da8cbb4c94c9742a536bbb330a76640f453df36f65c459e2ac01a56c4abef644737283122653688736021b2e652c21cf58bdad1833fd46494d2d4f1e554c9c1087b00000000000000"], 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x40) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x3, r2}, {0x4}}]}, 0x20}}, 0x0) 14:21:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x8001a0ffffffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000980)=@ethernet={0x0, @random}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000a00)=""/199, 0xc7}, {&(0x7f0000000b40)=""/78, 0x4e}, {&(0x7f0000000bc0)=""/232, 0xe8}], 0x4, &(0x7f0000000cc0)=""/201, 0xc9, 0xf2}, 0x2040) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r2, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) pwrite64(r0, &(0x7f0000000dc0)="ccccdea2ee2f06c90889ed547bfaf05620350d00b4cda0289761bbd0606bac61116418944293d2614dc2b92265ff3063270fda68e49c7a1fe34234cb9b582ea48215a7283bee3da036d3e461dba34add8c97cbbc3b1bb8fdea149727b19cd570d631f274d93e4399e8489c50fb08534abd3f3c14711f61b128a639f48c1c5e8219f51b301578f29759836f9007ce8cd698b91456096d6de31e02ffe7c159b45c23bf0b", 0xa3, 0x0) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB='\v\x00\x00\x00u\x00\x00\x00\x00\x00\x00'], 0xb) write$P9_RWALK(r2, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x3}}]}, 0x20}}, 0x0) 14:21:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xffffff7f}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x502}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001680)={0x0, 0x812}, &(0x7f00000016c0)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000001700)=@assoc_value={r4, 0xb20}, 0x8) write$cgroup_int(r2, &(0x7f0000000240), 0x3) [ 1187.516943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1187.638173] device nr0 entered promiscuous mode 14:21:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x2}}]}, 0x20}}, 0x0) 14:21:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xc0fe}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:35 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6fb0b1b6a16c67f30f"]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RVERSION(r1, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000180)) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfe80000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1188.136779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xea4}}]}, 0x20}}, 0x0) 14:21:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r2, r1, 0x0) 14:21:35 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="160002006f0100010000000000000000000000000000ae3342bbe6c244922249b5f3058a27c8e2c5802cbffeb4ed8ad16efdaa71c6fefb6b255a3fefb4d2a5ee84b921f6d89b3fa7e1ccba0a10688caad216f2dace421fc3201405406bf4ee3af40ac4475ac6d2a6d36a9be17febdc2f0896040f666ec8661cbca809a9ce9f4ed3d8a2419ce07cdd7606d8d113194578c13688739403d0ec5de3ac1532e163d3c673e71299eea04cec17b7dc8273983d71832a992e1016208d614ef8cac24932c1b4cc6cda41cab0e39a30c7db3c7b41e029b2dda30e12a1482ac5794d74b13921ac6a99418df714688d59b5681e69325937764d1c6f404e6b95c4ceeb8fd8cbe09c12658bef3298bdf5dc93aabd38"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000180)={&(0x7f0000000080)=""/41, 0x29, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r2, 0x10, &(0x7f0000000480)={&(0x7f0000000b40)=""/81, 0x51, r3}}, 0x10) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x1c02000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xea0}}]}, 0x20}}, 0x0) 14:21:35 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77e1646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',cache=loose,\x00']) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) [ 1188.565113] 9pnet: Insufficient options for proto=fd [ 1188.574320] 9pnet: Insufficient options for proto=fd 14:21:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x200001fa, 0x0) 14:21:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r2, r1, 0x0) 14:21:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xda0}}]}, 0x20}}, 0x0) 14:21:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0xffff8000}}]}) 14:21:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf0ffffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:35 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000ff7f01000000010000fa0000040000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) io_setup(0xc000000, &(0x7f0000000140)=0x0) r3 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x20, 0x400000) r4 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x7fffffff, 0x40400) r5 = syz_open_dev$mice(&(0x7f0000000b40)='/dev/input/mice\x00', 0x0, 0xc01) io_submit(r2, 0x3, &(0x7f0000000bc0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xff, r0, &(0x7f0000000980)="59f02ee0f581b4682dae233543914bde6267eb9980cd8fa662021aa1d3c74924c28b0caad2d8400bf089f486d607f1a84db4b1b3100da923afcf3aac2dfe51014e8b6525ee98d3", 0x47, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000a00)="39648b6d138eecf6ed14b302e0e87ac47ee1cbf2975115e5a70b1e696ff53314a835113d6fb6abdf3be276714fcd71e10e2c03209674609bb52da3a669264032509b1ff332f854cb068ef2d347f6a06383ed654df5e34becf225740406878915832d197b0341eaf954f493318a2b35e36c2990fdadb10026aebec5b9322a1c06990be6cf", 0x84, 0x6, 0x0, 0x0, r4}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0xb16, r1, &(0x7f0000000ac0)="7ae4a0551a4915b48f7413353c79688f1d6a16b28e1a222297ed277e09", 0x1d, 0x400, 0x0, 0x1, r5}]) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r6 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r6, &(0x7f0000000340)={0x14}, 0x14) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000c00)='veth1_to_bond\x00') setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x7, 0x4) [ 1188.949147] nla_parse: 2 callbacks suppressed [ 1188.949156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x21c}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r2, r1, 0x0) 14:21:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xc54}}]}, 0x20}}, 0x0) 14:21:36 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000240)=0x100000000) fcntl$setlease(r0, 0x400, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000080)) 14:21:36 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000a80)='./file0/file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x30000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000900)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x48000500}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000cc0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000d00)=0x1c) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x810, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none='cache=none'}], [{@fowner_gt={'fowner>', r2}}, {@uid_lt={'uid<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0xf9}}, {@subj_user={'subj_user', 0x3d, "626465767d2d5c6370757365747b5d2a2d1c766d6e6574317b"}}, {@obj_role={'obj_role', 0x3d, 'noextend'}}]}}) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x18d, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r6 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r6, &(0x7f0000000340)={0x14}, 0x14) 14:21:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x3}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1189.103855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:36 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x8) write$eventfd(r1, &(0x7f00000000c0)=0x6, 0x8) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) pread64(r1, &(0x7f0000000180)=""/122, 0x7a, 0x0) getsockopt(r1, 0xfffffffffffffff9, 0xffff, &(0x7f0000000200)=""/134, &(0x7f0000000100)=0x86) 14:21:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xdf0}}]}, 0x20}}, 0x0) 14:21:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02b78092004a0180922600f4b90db5aa39a3bad7783b3bbe0165d695cb08254f0844a6123718c19c9312d006dbd01ef6e469428e2872a3f683c0ca1824c8fb4bdd9f1e0c58eaa8883512d3e4ec3d7d16d387cfb8e6e84ceed347fe300e5a2a899ae7d6386a11baa4aec119dd4af04cb688ad86f23b3084b4458d6ea3a361a7a793b48bc9041dc0b46367dada338e83a2f02b8b6235f7a94ca1c8bb45eed065d68fce7ff0f8610cf3d046f96142f817c6f37ad77c6c1245e1e73a523fc6633d4a621a1e6abc2f762c7fdc1c355ad9012f355a8093fd9cb5f85c401e8543193da0f137f331f2c0000a16da2c01c474"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, 0x0, 0x1, 0x7}, 0x80, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)={0x4}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept(r2, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffffffffffd, @loopback, 0x80000001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x9) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000400)) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmmsg(r3, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) mq_notify(r5, &(0x7f0000000380)={0x400000, 0x2a, 0x40000000000000}) 14:21:36 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000740)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) socketpair(0x9, 0x803, 0x80000000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r2, &(0x7f0000000900)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000480)={&(0x7f0000000180)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000980)="67194b213a4f374c6eddaf4870dacad64e730177c94af96847f73f7ffe18c06897bccb07f43da2501777919afcc8dfe0f9a66a203867a314bd699de64506bc4f9f107d", 0x43}, {&(0x7f0000000a00)="826c663387c7622bafa18b3313ae5fc389ca143f2ba5f8068fbd4dab92615c453a2059af8b00355c54111a40e31e79384aa53394cd6cbf6714160a0da1f65501d2dc48d2348392471d58969f02f43ca1ac129bff1b2a91610f80336c2259aefe345af86aa93ce7a935017cb7f6dfa845e46c87bc52c5cf4c9e93edcb44f05532e182ca57e9a35ec933c3357147bd91f344c2294833a01fa3fcc57c15", 0x9c}], 0x2, 0x0, 0x0, 0x14}, 0x4000000) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x40030000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:36 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20040, 0x0) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r2, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r2, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r2, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r2, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:36 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x400300}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xc80}}]}, 0x20}}, 0x0) [ 1189.829658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1189.855180] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)) dup2(r0, r2) dup3(r2, r1, 0x0) [ 1189.963056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xd78}}]}, 0x20}}, 0x0) 14:21:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)) dup2(r0, r2) dup3(r2, r1, 0x0) [ 1190.054362] dccp_close: ABORT with 8192 bytes unread [ 1190.083543] 9pnet: bogus RWRITE count (33554433 > 20) [ 1190.115672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1190.151469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10a00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x15c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1c}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffc0}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffff000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb4f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd5}, 0x8800) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xb000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:37 executing program 5: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000), 0x4) r1 = dup2(r0, r0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x6, 0x0, [{0x6, 0x2, 0x0, 0x0, @adapter={0x8000, 0x2, 0x80000000, 0x7fffffff, 0x1}}, {0x10001, 0x1, 0x0, 0x0, @irqchip={0x10001, 0x4}}, {0x8, 0x3, 0x0, 0x0, @adapter={0x61, 0x3f, 0x1, 0x7f, 0x1}}, {0x21e, 0x4, 0x0, 0x0, @sint={0x3, 0x4}}, {0x3, 0x7, 0x0, 0x0, @sint={0x0, 0x8}}, {0x3, 0x3, 0x0, 0x0, @irqchip={0x5, 0x4}}]}) syz_emit_ethernet(0x203, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x0, [0x3, 0x401]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x7) 14:21:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:37 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x401, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x7, 0x4) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xcf4}}]}, 0x20}}, 0x0) 14:21:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x40000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1190.694892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1190.725195] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:37 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',qccess=', @ANYRESDEC=0x0, @ANYBLOB=',cache=loose,\x00']) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x20000080) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) sched_getscheduler(r4) 14:21:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xcd0}}]}, 0x20}}, 0x0) 14:21:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x400448ef, &(0x7f0000000140)="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") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2000000011, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x100000000000, 0x300) sendto$inet6(r2, &(0x7f0000000100)="957a88cae30171d0777fb6899aa36ff45509", 0x12, 0x0, &(0x7f0000000040)={0xa, 0x20008100, 0x2}, 0x1c) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="fe99ac2b93de20e6290022834cb07d36d67ce8606f44e9d2f81da43f235e1e7bf0b8ec0e31619328e5b93270768db53f2f008e4341d41433fe8d", 0x3a}, {&(0x7f0000000240)="5b24fcea96c5c3abebaa36477a3cb3b7e853eb8663e4cbd4aa4192677e92dcd181cf7bfce76281135c14c3b576fa171f894dbba346859b1f14a9858a7d2648de7c6218f87068f7745957b6f9dfd7d5612cf3e4025fcd0ee994b038f78aefef399358d53c306b697efcd3a63d91274f4a09bd4b1ddf58ed95cc89f376665df6ecfa18011bb25859b18ea2bd98", 0x8c}, {&(0x7f0000000080)="4699993da8e5504ec8e9e0dce817155b7d3e627004e08a5c8cdcf33a4610536ef373f086afa178", 0x27}, {&(0x7f0000000300)="81d87afab2f9103848d8a4636afa1a9d583af541d8420834923f10654cb3612d2fb7e85144e46609110ed52525d2d4c5148fabd0a296c94a9f0ad01d1bc72fe6a0bdc436b624f4d17c9367845389bdbec67863f49be1b654cd04187162fe99f57150a70772998a47d35443e1095abd186b245d0dd6eeeebcbb568c2e6a9603a1ce407c", 0x83}, {&(0x7f00000003c0)="3ccde6e1b256d0c9cfe644270d2598bcca93e777d04bf714b94e34fa93e61dd5c461e27da483ae4dbe6dff081caeb3f2aee27a2925af3845665631dabc03cbac7230b4d59a70d7ed145158ec852bffead88b67457d353fe48b1202", 0x5b}, {&(0x7f0000000440)="18a774c1147cce4e3214883f3418581bf59cf90b7acf3d418606e0b7480d1e67dc9c9f63baa68ab28d4ccce485720de2daa0f2684d6cb16ca0fef23d0797f585a6f7ed8cbfa6112d0034d0590613a9cc8dc9567cafe1313a8b74a7c226", 0x5d}, {&(0x7f00000004c0)="6d0cb1c300e7de60d7c0f6931728f87016a35aa760f1f7ecebca7f5906b1a495d2e129888fcc", 0x26}, {&(0x7f0000000500)="f5ddbadc9b50c98bbe49077eaad02c41789fa7eb6441024df94c0c38ac0e783d9bf797cab4faaf8be0e9f20d15e1409a119ee31a43b415732518ee90d10e950fa2ff64847c75cf99d5be174d68e1894e82f7ffff6787ae8a85747e5d771187314ca17a19e650b61aeb35bfec581c1f0cf702bdd6e36aab73de663ba35fb6e62cb43ee2c9fc11bc3279d467a516dc9b5d1ca838772ba2480b2f3051e1", 0x9c}, {&(0x7f00000005c0)="ab0503b45e859f46b727a65cafd785e29f231956d7fcd86bd8c69b0a69691f09c5528d94fba0c7a2adec9187ca688b617bc81eb036ee2bbe280b07b9ecb3c2bb9617509afc6d7938946180a149b08857765d43776b9223ab6926dca37f045562e70668d793fcf27dd7da15bcc79f31ea78fe220c71c5ed95adf1c85a1553cff6fe153db4369735e4981644ec1708ca2a3f6c8197548eeab0d37fb26585759a34ca57cf655b7d3750f7", 0xa9}], 0x9, 0x0) 14:21:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) [ 1190.859301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1190.903947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 14:21:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/208) exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:38 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf0ffff}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:38 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x83) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xcd4}}]}, 0x20}}, 0x0) 14:21:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:38 executing program 5: r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="63245d755d9d784130d5eaa67c1e35ed70bb9602ba1257b91ca09faeece8dcdd47e5e40803683e714db374abadfae60273dd5ce22e91f6dbb7e54a998ae91b89a84194d9553bba11aa7b066638ee115c348e1a896af22a585a3249485dcfb47471425d27d855b152024fe79f5eee516590c6e0fddf4921aea50498b6be75040852c88e0a205a211781892af449c277cf98a71bd556d533c43a48", 0x9a, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="65746831736563757269747991706f7369785f61636c5f6163636573732d2700", 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e65772065637279707466732075736572ffff7275737465646d696d655f74797065203138343436373434303733373039353531363335007c6286fe49b0d61600120a3120b308b2916edf667163730d04f60ea6b22b9a3b3cbc8b6384b386c86560c257ea857adde462e31815ccb725b5458e9bfb49c73182e048fd87bff78a9af97c28802d011fc1"], 0x38, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KIOCSOUND(r2, 0x8982, 0x0) [ 1191.527749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1191.554802] 9pnet: Insufficient options for proto=fd [ 1191.566471] 9pnet: Insufficient options for proto=fd 14:21:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xd20}}]}, 0x20}}, 0x0) 14:21:38 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfec00000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', r1}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ipx, &(0x7f00000000c0)=0x80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, 0x1c) 14:21:38 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000180)={0xfffffffffffffffa, 0x0, 0x0, 0x100000000}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) [ 1191.574213] 9pnet: Insufficient options for proto=fd [ 1191.580678] 9pnet: Insufficient options for proto=fd 14:21:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xd4c}}]}, 0x20}}, 0x0) [ 1191.732073] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:39 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x9, 0x59da5b0654afcb35, 0x100000001, 0x7fffffff}, &(0x7f0000000100)=0x18) 14:21:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x200000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xe1c}}]}, 0x20}}, 0x0) 14:21:39 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) pwrite64(r0, &(0x7f0000000980)="1dd185ee7058aec8753575709cbff2e076178377652b28e6a033898b0fe21b25eeb2c9828b0b33883ce56cb8420ebca4b55a66e1d266860883ecfe02845dd72ea63a8b3a38b9eadf2a68e5d649e51374f0d6878fa4582687cc084689170890f005a74721f8937a0f3f6e4104e6b04db9e47a1785a5db5abae7d195fa", 0x7c, 0x0) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:39 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x8080) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x2b9) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2a01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) 14:21:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xe78}}]}, 0x20}}, 0x0) 14:21:39 executing program 5: [ 1192.477133] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x4000000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) 14:21:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xcac}}]}, 0x20}}, 0x0) 14:21:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xa0018000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x800000) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000100)={@loopback, @remote, @broadcast}, 0xc) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffa) keyctl$set_timeout(0xf, r1, 0x200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pread64(r2, &(0x7f0000000300)=""/122, 0xfffffdcc, 0x0) 14:21:40 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f010001000000a745387c6a5f7c77000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) getgroups(0x1, &(0x7f0000000180)=[0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000b40)={0xa0, 0x19, 0x2, {0x200, {0xc0, 0x3, 0x5}, 0x140, r2, r3, 0x8, 0x2d9f, 0x78, 0x8, 0x5, 0x1a, 0x4, 0x8000, 0x5f8, 0xfffffffffffff801, 0xce9, 0x9, 0x5, 0x100, 0x2}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x806}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33f) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 14:21:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfc000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xd9c}}]}, 0x20}}, 0x0) 14:21:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xdc0}}]}, 0x20}}, 0x0) 14:21:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfe800000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1193.374640] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:40 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x4, &(0x7f00000004c0)=ANY=[]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="090000006f014a0300"], 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0xa0000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000980)={r3, 0x83, "e7d7be78a509a3a9f93bfdacf11c87f41ada5a3ec1788fe132fda40c1184206d4da362745aec87fc0aad21a45716b533beed0174b02ed09ce91fbb07bf8967b1d89bc0465bc0d3c9db1f4e967ebce3154283e82dc5000cac447c9d1cd5b1d9e6f2117c719c4878dd33c90719d24bbd1161c3e93a3130f4150f72a8ab32f8f3c885dafc"}, &(0x7f0000000480)=0x8b) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0xe4c}}]}, 0x20}}, 0x0) 14:21:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4, 0x3}}]}, 0x20}}, 0x0) 14:21:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4, 0x4}}]}, 0x20}}, 0x0) 14:21:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r2 = getuid() fstat(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/autofs\x00', 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000001000)={0x6, 0x82, 0x8000}) r6 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) syz_mount_image$vfat(&(0x7f0000000940)='vfat\x00', &(0x7f0000000980)='./file0\x00', 0x7fff, 0x6, &(0x7f0000000e40)=[{&(0x7f00000009c0)="6a09b81aa1877d913de5e2970f124aec233e0dafe87c377263a4ae2130c3abc9ccc4c3d32362c0161946b88f3766c30307fc164325a34c778702a0bf4084c59d83637aacd7a2e766feb637954d24d00bddee419d044cca916b8a32e270448fabff6eb8c0926ac00bfff9103dc96b15ae39f5b95ea7f14137d8e6ecb2994a5bfc71f02a68b348a6e8b7040281165a3450efa9b62f2ce4667590bc", 0x9a, 0x2}, {&(0x7f0000000a80)="479492f453b26756d605f9f38387277afe114f3ec373c5eba0df0aa4b2552f03f9c47e7b8ddafc3f4bcc7b82551f425d3db9bc197c80f696c2348337055cb2e489d98e011093af666a1cb75c66b7039fcaf2cac72d572ea6982cb4b8aa92c9fdc1b3caf29f63cf078596be29d4936ee8248b6e94009d42c1312e709e402edae18f9e2b7f72b3cab410ab83b60f73188a3559c3996630c1bf6d26e6635b72099f19b65d297fb4cfd3e5", 0xa9, 0x28d}, {&(0x7f0000000b40)="055b58bf164eaeb95b1ebe1b476d521b4579820404876ff7bb8f3e804ddead59aefb91478f897f99aec275ee1f8deba19e1a59564775fedc2fad86b0438f2bf590128561efa2bb1f608fef8bf3f6c8ac23c7196ab26fc1d962e7ee4416a02dce5945e67816a0de41ee6b70cd431fcf39e2e12f613467696c9bc3774660206e08d303386930dab2b4f5cc2e82152aa49429845cb81c7cef551f44ac71e457ec68d2b6937498f06acf00b5c016254ab95fe2e9691ece5fa9ab5e3194278015bd373651e4f35951c1c8697536d4a22226b51758c0b18cecf00b75d6ce8ee8b4c5abaf2d6ca6be2b8ee6e63920c9e9d4", 0xee, 0x8}, {&(0x7f0000000c40)="4d4e93e367ef06362014a0d3c3d9f26d6f457b6ee234f55745138f7683ec96a4f8e6bdcba50ae15a541d3a977dece5a8b3a9a0bb67580a4411b2d1bb6f12ab8e4718b70072c67ceb35d01044ea92e159", 0x50, 0x1000}, {&(0x7f0000000cc0)="3b02987878831826380844319acc793494cdf8ed5884f5e551321df193eeb2ce61c0391a50e67127dda7ac031aaac2fd7e772b24180748201902b7f6c0e8368b88225079ecef6d325bc90e291d1d2bcb59d1788ffaec749c690f10bd1155b978e9e1bb841de94b9dea5d5387dd3a15369af72256ae54beae6a4d5db3609721449438c4104d233f25cc441d89b793115bde4031984f5774c16f2811d289b217c243c6bb43ddd311dae2ea4c9d3dc094dc9feab3be23b12b7c02063e7531ed", 0xbe, 0x7}, {&(0x7f0000000d80)="e078042d6e5001501c19e2b3a89013c5adc7d36984fef97fec70f87f9dad4b47a0f5543660af2e7fe33f9ed44b37eb31d219b42d7c13737c6596a293f990f9ba66c79fd207d9ec41d80202ad415df1378fd2c6df9326024ce13acb50da467bf25d0c64dd0dc15c72e1cc5f2710bccb61df6ff1c18b6a22f13937ad9e1c92857a607c47fc48af3ea6047861801934d6dbdc9129", 0x93, 0x1}], 0x20000, &(0x7f0000000f00)={[{@uni_xlateno='uni_xlate=0'}, {@numtail='nonumtail=0'}, {@nonumtail='nnonumtail=1'}, {@uni_xlateno='uni_xlate=0'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}, {@utf8no='utf8=0'}, {@fat=@errors_continue='errors=continue'}, {@rodir='rodir'}], [{@obj_user={'obj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@fsname={'fsname', 0x3d, 'user{:,self+{/'}}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x4, r6}, {0x2, 0x4, r7}, {0x2, 0x6, r8}, {0x2, 0x5, r9}], {0x4, 0x6}, [{0x8, 0x7, r10}], {0x10, 0x6}, {0x20, 0x1}}, 0x6c, 0xa965c1a476ffe478) exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/122, 0x7a, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000001040)={r5, r5}) r11 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x42000) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000040)={0x6, 0x5, 0xa82, 0x776, "3b9063daa874353a731ce4c5d91efaf0a1df3ea0ee6927878389868871f909d8"}) 14:21:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0xec0}}, 0x0) 14:21:41 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x84, &(0x7f0000000980)=[@in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0x9}, @in6={0xa, 0x4e22, 0x0, @mcast1}, @in6={0xa, 0x4e21, 0x6, @local, 0xff}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000a40)={r3, 0x9f, "068199ba974cbb8c4f8546254b64cde9ae23bda6628f4d14868f934aabd3f79cfdcb15e2c0dd0d04d796f53ef93f5448cc6fcff3c8ac809679266bbdc17bedbb80c197e52d8d81342be210289f8ac93d46b6da57d179f5bfb60fa909fe9983162bb1852b100a60178468d634fe97fee64dde61ec8f8469be25819c49a30036c54d2b8f174c1aba48517a3c74457bd1d053785adad48c881229245b8ea679e3"}, &(0x7f0000000480)=0xa7) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f010001000000a745387c6a5f7c77000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) getgroups(0x1, &(0x7f0000000180)=[0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000b40)={0xa0, 0x19, 0x2, {0x200, {0xc0, 0x3, 0x5}, 0x140, r2, r3, 0x8, 0x2d9f, 0x78, 0x8, 0x5, 0x1a, 0x4, 0x8000, 0x5f8, 0xfffffffffffff801, 0xce9, 0x9, 0x5, 0x100, 0x2}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0xf}}, 0x0) 14:21:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xb00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1194.274913] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0xfffffdef}}, 0x0) 14:21:41 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000980)={0x7, {{0x2, 0x4ea3, @rand_addr=0x3ff}}}, 0x26) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000b40)) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000a40)={0x74, 0x0, [0x9, 0x2, 0x120e, 0x311]}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) [ 1194.345818] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfc}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) [ 1194.450411] 9pnet: Insufficient options for proto=fd [ 1194.472612] 9pnet: Insufficient options for proto=fd [ 1194.506462] 9pnet: Insufficient options for proto=fd [ 1194.515974] 9pnet: Insufficient options for proto=fd 14:21:42 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='sessionid\x00') exit(0x7fffffff) pread64(r1, &(0x7f0000000180)=""/122, 0x7a, 0x0) r2 = msgget(0x1, 0x4) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000200)=""/4096) 14:21:42 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ftruncate(r1, 0xa00000) sendfile(r1, r1, &(0x7f0000000040), 0xff8) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{0x3, 0xffffffffffffff80}, {0xa, 0x3}, {0x0, 0x80000000}, {0x2, 0xfffffffffffff000}, {0x2, 0x2}, {0x552806a79ea3d0fb, 0x6b0a}, {0x2}, {0xb, 0x3}], 0x8) ftruncate(r0, 0x3) 14:21:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x2000dd60}}, 0x0) 14:21:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfc00000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r1) dup3(r1, 0xffffffffffffffff, 0x0) 14:21:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x0, 0x0, 0x7}}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:42 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) 14:21:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x33fe0}}, 0x0) 14:21:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:42 executing program 5: unshare(0x400) r0 = timerfd_create(0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@local, @loopback, @dev={0xfe, 0x80, [], 0x21}, 0x8, 0x1, 0x4, 0x400, 0x80000000, 0x810040, r2}) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r0, &(0x7f0000000080)) 14:21:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x8001a0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:42 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[], 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000040)='trans=fd,', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000180)='!-)(\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r2, &(0x7f0000000740)='net/snmp\x00') setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000900)={0x6, 0x7, 0x9, 0x1}, 0x8) rt_tgsigqueueinfo(r2, r3, 0x12, &(0x7f0000000480)={0x3c, 0x5, 0xff, 0x4336}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e73b4860000000000006f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='s=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',cache=loose,\x00']) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) [ 1195.395510] Unknown ioctl 35084 [ 1195.400500] Unknown ioctl 35084 14:21:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x6, 0x100000000, 0x7fffffff, "f303c93196edf3cb2e45a8c1706bf016ef92ad6894bd8becb3f658a7805d77886e5c68d28bdce26d171ed75c9ba0f2590003d62ad2fbd1bd304c40b19ee028", 0x22}, 0x60) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x7ffff000}}, 0x0) 14:21:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x80000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/213, 0xd5, 0x60a5, 0x8, 0x4, 0x101, 0x1}, 0x120) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@dev, 0x0, 0x0, 0x2, 0x1}, 0x2a) socket$inet6_tcp(0xa, 0x1, 0x0) 14:21:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfec0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) socketpair$inet(0x2, 0x6, 0x1f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000980)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x3}}, 0x38f, 0x20, 0x5184}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000003c0)={r3, 0xcd6, 0x1f, 0x84}, 0x10) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x14}}, 0x0) 14:21:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast1}, @in6}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) pipe(&(0x7f0000000000)) getsockopt$SO_COOKIE(r0, 0x1, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0x2) [ 1196.214125] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x7fff, 0x3f, 0x0, 0xffffffffffffffff, 0x0, [0x2400000018cf63, 0xe00000f, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32000]}, 0x1f1) 14:21:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0x43) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) r4 = fcntl$getown(r1, 0x9) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r5, 0x189b7959}, 0x8) setpgid(r3, r4) 14:21:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0xc0}}, 0x0) 14:21:43 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfffffffffffff000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:43 executing program 3: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000012c0)='net/ipv6_route\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xff, 0x100000000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x1000, "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"}, &(0x7f0000001280)=0x1008) exit(0x0) fstatfs(r1, &(0x7f0000000080)=""/216) pread64(r1, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:43 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000700)=0x0) r3 = getuid() getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000a40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) fstat(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000640)="6eba6f35626ab98341121342c36f4a07c50c9e66dc1a807b5828d48a93142fec2efb50039e4b8c2b61af185fe72a331f448bd45c6b3998b8a1162a21853804ba52852d3233fc4718c12affe94e78e0b271802ae13af06279fe8d785c6f75b1b5f6cd667b12eb62a4694825bd9b1b39eb95059964ef03091ef53c94be941a70448483b71be0a4ea427bd9fa182e33105add98d0abf402efbe19e090219b3c4798aec630f3da6dd45ba44c454fdb3f081467eddeec57fe5f9845af4f30", 0xbc}], 0x1, &(0x7f0000000c40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc8, 0x40}, 0x20008080) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x2) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x9, 0x3, 0x22f, 0x3, 0x3, 0xffffffff, 0x25b, 0x40, 0xe4, 0x3, 0x9, 0x38, 0x1, 0x6, 0x5, 0x8}, [{0x6474e551, 0x8, 0x6a5c, 0x0, 0x7fff, 0x3, 0xa7c, 0x4}], "fc9c8f63b6eb0a7f345ef535723e77ff4bedd74558bb9cc109d0587b8c3647523d211599184c087ca01b881226af805829fa83897f8851f5ed0d4ebbadfe9f56bcdc0b0cbc3c6f93d9876731fd0987ce88840d2ef238bcbf4d951fd158be998ac96f732e50336ca5163dbe02ad5aacaebc59bd5ac9efa72e2ab0ee0e13bfea2f9110e6c5f88327f8fc7c5a2e8ebc10d72ac2c9eac984fb5e67c911498aa1d959a04dd7ee5a2ca4ad2fd6d406dfcc492884bb605167ac38eb17dc78652ae8de1c1695", [[], [], []]}, 0x43a) 14:21:43 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RREADLINK(r1, &(0x7f0000000980)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) getsockname$packet(r2, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e00)={'team0\x00'}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000ec0)={@local, @multicast2}, &(0x7f0000000f00)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000f80)={@loopback, @loopback, 0x0}, &(0x7f0000000fc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e80)={'team0\x00', r3}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000003c0)={@empty, 0x2, r4}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x80000, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000740)='trusted.overlay.origin\x00', &(0x7f0000000900)='y\x00', 0x2, 0x1) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x100000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x3}, 0x0) [ 1197.046493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000203) 14:21:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="160000006f0100010000020000000000000000000000485b6902fab9b6ec2d02703a2d7d6122b043f69262161da999fd32ffe9c1ea40dc227d04fe7dfef8841c91d8d6af22a7813c340daa33dad0bc14c580986f68621f94c3f0de0dc8d17226af907ee4fbe8e25390ea9636b58906cee0c70805a8a46057c7c6b5330c81a7fe81bdea142a0bd3adbcc1bd2829a404ef36665a9ac932349fb8998fe41e0c57a8f98bd66d0d10146976c2237a3da41f00cd48a6f8"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) write$P9_RXATTRCREATE(r1, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) 14:21:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x52190000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1197.121041] FAT-fs (loop5): Filesystem has been set read-only 14:21:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x4}, 0x0) 14:21:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="ed3a9aa760fdba7f425c3f96bef66a45c40cb4d1f089d1db35e5d792ee69f608ca1a5e914fa39633d80ad42e31b3e9c22215c25f715f8c433c97319c8ca5a1a53094b0977f5c44b4886a6ce199f47d2f55a004098b4864f0cc46c823", @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="7a7006848fbb9812997503bf331579f9ca41c28242d4a754623dd26d4ebf7f5f66f2a723892194ed804fb9e1dd4ad93d7ed41f411de2243e04343ff90683fbb538d852fb6fab02bc0a4dde99f8f28a727402771555458209f4029985d117fcb50f7398783adf06a0af479a16b3ab6f667dac274faa0fa99d", @ANYRES16=0x0], @ANYRES32=r0, @ANYPTR64, @ANYBLOB="7fb240c96ea031b394c5"]], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)="62706600938851d1db157253bb82e26aa326efed277438ad5286311d666c4bf21f8bc412efceb720f4dc6cad66991dd067e8218b5d03eb21c7ae8c395d61224f3345f8ddcc679c3e203a920474bad3ec00", 0x0, &(0x7f0000000100)='GPL\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0/file0\x00', r0}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0/file0\x00'}, 0x10) 14:21:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x1c02}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x8}, 0x0) 14:21:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:44 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f0000000b40)={0x78, 0xffffffffffffffda, 0x5, {0x5, 0x1, 0x0, {0x2, 0x5, 0x7, 0x81, 0x4, 0x5, 0x3, 0x80000001, 0x0, 0x1, 0x1, r3, r4, 0x7, 0x3}}}, 0x78) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xfffff000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0xffffff1f}, 0x0) 14:21:44 executing program 5: set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xff010000, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 14:21:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xf0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x300}, 0x0) 14:21:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0xff00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = accept(r1, &(0x7f0000000980)=@nfc, &(0x7f0000000040)=0x80) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000180)=0x4f6, 0x4) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r1, &(0x7f0000000340)={0x14, 0x67, 0x3}, 0xffffffffffffffe0) 14:21:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0xc00e}, 0x0) 14:21:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0xb}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x2}, 0x0) 14:21:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="6f43449aeecb6ad7f58a9f7c9842ffc6f87c89fdbd0b984d8d7450f2f1decbf2418e9d02068005cade995175d6d49ad715d9a461a7336c71a584e4c78026a1ba3c0523e8462a1ad3683ab2e659e46891550c8cbf359e2745b0f080f2141c64eaf33c712ec1ea06f780886a506f7eb49c16ba150554685369b4866ca0ba715813782fadaa518f16f9a35d938eb955e8f6b6634307065cd7b422fe452096c115cd44f1e3b911bd23251390947224f327d7a5c0b31f41b99d22b0a27b7d7e88d6cddd909ade64c258", 0xc7, 0xfffffffffffffffa) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/78, 0x4e) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @multicast2}}) 14:21:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x722b}}, 0x18) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000980)=""/178) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r3, &(0x7f0000000340)={0x14}, 0x14) 14:21:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4000000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x3}, 0x0) 14:21:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0xf000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) [ 1198.829099] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:45 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x220000, 0x1b4) init_module(&(0x7f0000000080)='cpuset\x00', 0x7, &(0x7f00000003c0)='wfdno') setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x8, 0x4) write$P9_RWALK(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="160000006f01050000000000000004000000000000c07ee5f00f8da9ac4b7c741cedc4bc51f4ee6a478581a30d26dd5bbedd92b361b522ae030000000000000025171e56b674d524"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000ac0)={0x3, 0x6}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000b40)={0x1, 0x1, [@broadcast]}) sendmsg$can_bcm(r2, &(0x7f0000000a80)={&(0x7f0000000480), 0x10, &(0x7f0000000900)={&(0x7f0000000a00)={0x0, 0x500, 0xfffffffffffffffd, {0x0, 0x7530}, {r3, r4/1000+10000}, {0x0, 0xfffffffffffffffd, 0x100, 0x85e7}, 0x1, @can={{0x1, 0x6, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0, "b8eacfc9290261c7"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="09000000ef01000200"], 0x9) write$P9_RREAD(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000047501000d0000006d8e2d11088a44f8ac32e38ecc"], 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000c00)={0x8, 0x75, 0x2, {0x3c7e2940f681fa35, "9235dd04"}}, 0xe) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r5 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000b80)={0x0, 0x4, 0x7}) write$P9_RAUTH(r5, &(0x7f0000000340)={0x14}, 0x14) 14:21:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x3) 14:21:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x5219000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xfcffffff00000000}, 0x0) 14:21:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0xffffff7f00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000140), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 14:21:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xa0018000}, 0x0) 14:21:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, r2, 0x0, 0x5, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x482001) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000180)=0x8000000) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000003c0)={0x3, 0x2, 0x2}) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) 14:21:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x3000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) [ 1199.695509] 9pnet: bogus RWRITE count (33554433 > 20) 14:21:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x8001a0}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x3f000000}, 0x0) 14:21:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc0fe}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:47 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0xf, 0x400) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0xfffffffffffff0ad) 14:21:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x1000000}, 0x0) 14:21:47 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)) getpid() r0 = gettid() r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x49}, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) getpgid(r0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000080)="308b18245e00000000000000000000000800000000") exit(0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200100, 0x0) pread64(r3, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f00000006c0)=""/115, &(0x7f00000007c0)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) 14:21:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x8000000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xffffff9e}, 0x0) 14:21:47 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r2 = accept4$inet(r0, &(0x7f0000000d80), &(0x7f0000000180)=0x1, 0x80000) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) getresgid(&(0x7f0000000740), &(0x7f0000000900)=0x0, &(0x7f0000000980)) r4 = geteuid() write$P9_RREADDIR(r1, &(0x7f0000000b40)={0x102, 0x29, 0x1, {0x4, [{{0x4, 0x1, 0x4}, 0x9, 0xffffffffffff15ec, 0xd, './file0/file0'}, {{0x1, 0x4, 0x3}, 0x2, 0x0, 0xd, './file0/file0'}, {{0x81}, 0x8, 0x6a, 0xd, './file0/file0'}, {{0x0, 0x1, 0x7}, 0x2, 0x0, 0xd, './file0/file1'}, {{0x34, 0x3, 0x7}, 0x6, 0x5, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x5, 0x101, 0x7, './file0'}, {{0x0, 0x2, 0x7}, 0x9, 0x16, 0xd, './file0/file0'}]}}, 0x102) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x210020, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="7fe62c773d", @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX=r3, @ANYBLOB=',fscache,access=', @ANYRESDEC=r4, @ANYBLOB=',nodevmap,dfltuid=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,smackfsdef=rfdno,\x00']) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1, {0x34c}}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) r6 = syz_open_dev$audion(&(0x7f0000000c80)='/dev/audio#\x00', 0x1, 0x1d9801) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_value={0x0, 0x9ab}, &(0x7f0000000d00)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000d40)={r7, 0x13}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r8 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r8, &(0x7f0000000340)={0x14}, 0x14) 14:21:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 14:21:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x100000000000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf}, 0x0) 14:21:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x48]}) set_robust_list(&(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) 14:21:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) [ 1200.791831] 9pnet: bogus RWRITE count (844 > 20) 14:21:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0xf00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:48 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="161200006f0100010000020000000000000000000000"], 0x16) write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0x7, 0x4d, 0x2}, 0x7) write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) write$P9_RGETATTR(r1, &(0x7f0000000800)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r2, &(0x7f0000000340)={0x14}, 0x14) 14:21:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x300000000000000}, 0x0) 14:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 14:21:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f00000002c0)=[@cstype0={0x4, 0xe}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:21:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0xf0ffffff00000000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 14:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 14:21:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x910}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x52190000}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 14:21:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000dc40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e640)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r1, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf00000000000000}, 0x0) 14:21:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x28, 0x829, 0x0, 0x0, {0x4}}, 0x14}}, 0xfffffffffffffffd) 14:21:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') exit(0x0) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x100010, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ppp1GPL^'}}, {@subj_type={'subj_type', 0x3d, 'sessionid\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'em0'}}, {@fowner_lt={'fowner<', r1}}, {@fsname={'fsname', 0x3d, 'em1-cpusettrustedwlan0'}}]}}) pread64(r0, &(0x7f0000000180)=""/122, 0x7a, 0x0) 14:21:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) [ 1269.484097] kworker/dying (11034) used greatest stack depth: 4616 bytes left