914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000086dd6002fd5f004c2b00fe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000842065580000000000000800600086dd080088be000000001000000088a8ffff00000000080022eb00000000200000000200000000000000"], 0x78) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async) 22:19:35 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 521.308233][T19783] syz-executor.5[19783]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 521.326500][T19788] 9pnet_fd: Insufficient options for proto=fd [ 521.360395][T19790] 9pnet_fd: Insufficient options for proto=fd [ 521.378637][T19773] EXT4-fs (loop2): 1 orphan inode deleted [ 521.384460][T19773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.387749][T19800] bridge0: entered promiscuous mode [ 521.402381][T19800] bridge0: entered allmulticast mode 22:19:35 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:35 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:35 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="e8e568521dda9ded324ce256d10c93f59523d88adbd883b2442a9d76239caa19b26e596210737b16e0b10649e59b15e918a6c3f36623a1083c7fd5804e8c2a38b517e7e26d16acf683bccd9e6104f64149d243b55793ba246060fb1e499ab0821f1d691f5d58754a2637983673d21e6a36502bf925a12e817520468c4d7720752f7004f1046a7e55a079984d54f34d648a25cf5918e0171c838cc4876160c3684df0daa8b974e3d71cf7fce7800af3a9f02700ce3cbca6c92826b2f9d4cf4c422adec86fd505e0cf51888494063a889539e8726a922af94099655a3469ebde", 0xdf}, {&(0x7f0000000040)="a4b27c799ddb2057eefe640c6e89266ba51e7e6a4cbae3e70fff6cd12251876d6b260f96147cfc9bf1bd1b84729b01883d449fd99e0b37f0aa67809e90f9b1933c875106a4ce9243edc07980e99b78550794a947161750e33dd6e32fcb579714374ad3ef589723409ba1c65e983d2fa0320e95bb1326cc0c494176002427ea17bfc5d1a08db770ccc492551c36212535275c634bdeced22886d00e131bf44a0722c56b37989489380ec43366ab73225181963b6ea88e81e2", 0xb8}, {&(0x7f00000002c0)="cd2a5ecafa5201e2ce8fa42ebb4bf5bb8b3c71be9701f0eb2a15158a8032777563b332cc62d2f8b7c3c1a8667a7b856c8769aaea801f73785ddcfc363d1b67a127ff90f1e5bddf14a0112c869949cc12bf3110686d11764d5e402a9bb2e0f36a3e71aa2ecbefd50b5ccff2705fbbae0615b87030de1663375abc546d680978570931c3153f658d7b3732788e68de058a9fcccda6e27e7979425c713fc4c448e20f90d8236a2dd4d8b68386eff913b23bbee4c1b511", 0xb5}], 0x3}, 0x40011) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, &(0x7f0000000440)={'veth1\x00', @ifru_ivalue=0x9}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) [ 521.413530][T19773] ext4 filesystem being mounted at /root/syzkaller-testdir3388036091/syzkaller.TdHKPg/1101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.437132][T19802] 9pnet_fd: Insufficient options for proto=fd [ 521.453877][T19810] 9pnet_fd: Insufficient options for proto=fd [ 521.495171][T19814] 9pnet_fd: Insufficient options for proto=fd 22:19:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="000086dd6002fd5f004c2b00fe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000842065580000000000000800600086dd080088be000000001000000088a8ffff00000000080022eb00000000200000000200000000000000"], 0x78) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) 22:19:35 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:35 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:35 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x7}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)=@setneightbl={0x8c, 0x43, 0x200, 0x70bd28, 0x25dfdbfd, {0xa}, [@NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x5}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x7}]}, @NDTA_NAME={0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_PARMS={0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x5}, @NDTA_THRESH1={0x8, 0x2, 0x9}, @NDTA_PARMS={0x24, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8, 0x1, r5}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x1000}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x40}, @NDTPA_APP_PROBES={0x8, 0x9, 0xffffc2be}]}, @NDTA_THRESH2={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb12994784ec53a97250b5c41dc759ec6d7570661db3715eeab7232e24328fb2fbf34d8644a78316c51f76b8c153f0f645b13592760ea286c3910f0228ee5b3afc026f91175553813758112c09dd694c2f45558d3ca19807174e2c06d6cc5663323b3e91c10b06119bb5a66422863bf64406109be0f9e8726bed71b46d24460d09e566eb2702f56a6a2100dfd4c6434a126129f98c21a4bab523e2c76174525b877d5100cf47df386b99ca24236c4f992cad5ab484abd2424f55f74619e39f0a2045e22a26f609c258d36ce31ef2797574c3e910f359fc9d0f066ea55f746fbc13ab80b6cedbee4467f9e05797b7b296e9c54ecd92ed273effa770031c8b6f328dbb64f030da225f5c87374406ef172c916bef775d300b84b2da9c3f28a2308c5bd9040388203054548d0dde308f45dd846defb69278b14a31b4037897a38417c725fa8ca5f5534a816ff455335f79acafe2f94de6dde7debab5491c34c4777e81c9fd1420a410231916e7984f53ca6f2f688b863c3d42834c1b45d6a1549edb6289ae513753e21516967e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:35 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="e8e568521dda9ded324ce256d10c93f59523d88adbd883b2442a9d76239caa19b26e596210737b16e0b10649e59b15e918a6c3f36623a1083c7fd5804e8c2a38b517e7e26d16acf683bccd9e6104f64149d243b55793ba246060fb1e499ab0821f1d691f5d58754a2637983673d21e6a36502bf925a12e817520468c4d7720752f7004f1046a7e55a079984d54f34d648a25cf5918e0171c838cc4876160c3684df0daa8b974e3d71cf7fce7800af3a9f02700ce3cbca6c92826b2f9d4cf4c422adec86fd505e0cf51888494063a889539e8726a922af94099655a3469ebde", 0xdf}, {&(0x7f0000000040)="a4b27c799ddb2057eefe640c6e89266ba51e7e6a4cbae3e70fff6cd12251876d6b260f96147cfc9bf1bd1b84729b01883d449fd99e0b37f0aa67809e90f9b1933c875106a4ce9243edc07980e99b78550794a947161750e33dd6e32fcb579714374ad3ef589723409ba1c65e983d2fa0320e95bb1326cc0c494176002427ea17bfc5d1a08db770ccc492551c36212535275c634bdeced22886d00e131bf44a0722c56b37989489380ec43366ab73225181963b6ea88e81e2", 0xb8}, {&(0x7f00000002c0)="cd2a5ecafa5201e2ce8fa42ebb4bf5bb8b3c71be9701f0eb2a15158a8032777563b332cc62d2f8b7c3c1a8667a7b856c8769aaea801f73785ddcfc363d1b67a127ff90f1e5bddf14a0112c869949cc12bf3110686d11764d5e402a9bb2e0f36a3e71aa2ecbefd50b5ccff2705fbbae0615b87030de1663375abc546d680978570931c3153f658d7b3732788e68de058a9fcccda6e27e7979425c713fc4c448e20f90d8236a2dd4d8b68386eff913b23bbee4c1b511", 0xb5}], 0x3}, 0x40011) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, &(0x7f0000000440)={'veth1\x00', @ifru_ivalue=0x9}) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) 22:19:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x12, 0x4b4, &(0x7f0000001b00)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x101, &(0x7f0000000080)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 22:19:35 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 521.604004][T19821] 9pnet_fd: Insufficient options for proto=fd [ 521.608129][ T26] audit: type=1400 audit(1693606775.623:2840): avc: denied { unmount } for pid=5864 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 521.610958][ T3097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.637568][T19825] bridge0: entered promiscuous mode [ 521.645061][T19825] bridge0: entered allmulticast mode 22:19:35 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:35 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}]}}) [ 521.685439][T19824] 9pnet_fd: Insufficient options for proto=fd [ 521.691946][T19834] 9pnet_fd: Insufficient options for proto=fd 22:19:35 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="e8e568521dda9ded324ce256d10c93f59523d88adbd883b2442a9d76239caa19b26e596210737b16e0b10649e59b15e918a6c3f36623a1083c7fd5804e8c2a38b517e7e26d16acf683bccd9e6104f64149d243b55793ba246060fb1e499ab0821f1d691f5d58754a2637983673d21e6a36502bf925a12e817520468c4d7720752f7004f1046a7e55a079984d54f34d648a25cf5918e0171c838cc4876160c3684df0daa8b974e3d71cf7fce7800af3a9f02700ce3cbca6c92826b2f9d4cf4c422adec86fd505e0cf51888494063a889539e8726a922af94099655a3469ebde", 0xdf}, {&(0x7f0000000040)="a4b27c799ddb2057eefe640c6e89266ba51e7e6a4cbae3e70fff6cd12251876d6b260f96147cfc9bf1bd1b84729b01883d449fd99e0b37f0aa67809e90f9b1933c875106a4ce9243edc07980e99b78550794a947161750e33dd6e32fcb579714374ad3ef589723409ba1c65e983d2fa0320e95bb1326cc0c494176002427ea17bfc5d1a08db770ccc492551c36212535275c634bdeced22886d00e131bf44a0722c56b37989489380ec43366ab73225181963b6ea88e81e2", 0xb8}, {&(0x7f00000002c0)="cd2a5ecafa5201e2ce8fa42ebb4bf5bb8b3c71be9701f0eb2a15158a8032777563b332cc62d2f8b7c3c1a8667a7b856c8769aaea801f73785ddcfc363d1b67a127ff90f1e5bddf14a0112c869949cc12bf3110686d11764d5e402a9bb2e0f36a3e71aa2ecbefd50b5ccff2705fbbae0615b87030de1663375abc546d680978570931c3153f658d7b3732788e68de058a9fcccda6e27e7979425c713fc4c448e20f90d8236a2dd4d8b68386eff913b23bbee4c1b511", 0xb5}], 0x3}, 0x40011) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, &(0x7f0000000440)={'veth1\x00', @ifru_ivalue=0x9}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="e8e568521dda9ded324ce256d10c93f59523d88adbd883b2442a9d76239caa19b26e596210737b16e0b10649e59b15e918a6c3f36623a1083c7fd5804e8c2a38b517e7e26d16acf683bccd9e6104f64149d243b55793ba246060fb1e499ab0821f1d691f5d58754a2637983673d21e6a36502bf925a12e817520468c4d7720752f7004f1046a7e55a079984d54f34d648a25cf5918e0171c838cc4876160c3684df0daa8b974e3d71cf7fce7800af3a9f02700ce3cbca6c92826b2f9d4cf4c422adec86fd505e0cf51888494063a889539e8726a922af94099655a3469ebde", 0xdf}, {&(0x7f0000000040)="a4b27c799ddb2057eefe640c6e89266ba51e7e6a4cbae3e70fff6cd12251876d6b260f96147cfc9bf1bd1b84729b01883d449fd99e0b37f0aa67809e90f9b1933c875106a4ce9243edc07980e99b78550794a947161750e33dd6e32fcb579714374ad3ef589723409ba1c65e983d2fa0320e95bb1326cc0c494176002427ea17bfc5d1a08db770ccc492551c36212535275c634bdeced22886d00e131bf44a0722c56b37989489380ec43366ab73225181963b6ea88e81e2", 0xb8}, {&(0x7f00000002c0)="cd2a5ecafa5201e2ce8fa42ebb4bf5bb8b3c71be9701f0eb2a15158a8032777563b332cc62d2f8b7c3c1a8667a7b856c8769aaea801f73785ddcfc363d1b67a127ff90f1e5bddf14a0112c869949cc12bf3110686d11764d5e402a9bb2e0f36a3e71aa2ecbefd50b5ccff2705fbbae0615b87030de1663375abc546d680978570931c3153f658d7b3732788e68de058a9fcccda6e27e7979425c713fc4c448e20f90d8236a2dd4d8b68386eff913b23bbee4c1b511", 0xb5}], 0x3}, 0x40011) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, &(0x7f0000000440)={'veth1\x00', @ifru_ivalue=0x9}) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r1, r0, 0x0, 0x100801700) (async) 22:19:35 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}]}}) [ 521.772150][T19840] 9pnet_fd: Insufficient options for proto=fd [ 521.795310][T19844] syz-executor.2[19844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 22:19:35 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 521.822317][T19844] loop2: detected capacity change from 0 to 512 [ 521.883760][T19844] EXT4-fs (loop2): 1 orphan inode deleted [ 521.889552][T19844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.915101][T19844] ext4 filesystem being mounted at /root/syzkaller-testdir3388036091/syzkaller.TdHKPg/1102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.007481][ T3097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:19:36 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}]}}) 22:19:36 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x7}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:36 executing program 5: set_mempolicy(0x8000, &(0x7f0000000000)=0x40000000001, 0x9) unshare(0x46060480) set_mempolicy(0x0, 0x0, 0x0) 22:19:36 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x12, 0x4b4, &(0x7f0000001b00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") (async) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x101, &(0x7f0000000080)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 22:19:36 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0xff) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0xe0, 0xff, 0x20, 0x0, 0x6, 0x400, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x40, 0x7d6, 0x5, 0x7, 0x762, 0x7, 0x1, 0x0, 0x81, 0x0, 0x1}, 0x0, 0x8, r0, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e903d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',uname=^\'&-%%//-/,access=user\"\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0xe0, 0x90, 0x7, 0x0, 0x7b3, 0x805, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x400, 0x0, 0x7, 0x0, 0x9, 0x1, 0xfc4b, 0x0, 0x8591, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x2) 22:19:36 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:36 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0xff) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0xe0, 0xff, 0x20, 0x0, 0x6, 0x400, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x40, 0x7d6, 0x5, 0x7, 0x762, 0x7, 0x1, 0x0, 0x81, 0x0, 0x1}, 0x0, 0x8, r0, 0x8) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e903d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',uname=^\'&-%%//-/,access=user\"\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0xe0, 0x90, 0x7, 0x0, 0x7b3, 0x805, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x400, 0x0, 0x7, 0x0, 0x9, 0x1, 0xfc4b, 0x0, 0x8591, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x2) [ 522.462265][T19932] syz-executor.2[19932]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 522.491712][T19933] bridge0: entered promiscuous mode [ 522.496985][T19933] bridge0: entered allmulticast mode 22:19:36 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:19:36 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 522.523422][T19932] loop2: detected capacity change from 0 to 512 [ 522.560145][ T7789] SELinux: failure in sel_netif_sid_slow(), invalid network interface (130) 22:19:36 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 1) [ 522.580624][T19945] 9p: Unknown access argument user": -22 [ 522.584428][T19932] EXT4-fs (loop2): 1 orphan inode deleted [ 522.592127][T19932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 22:19:36 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 2) 22:19:36 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:36 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 522.624259][T19934] lo speed is unknown, defaulting to 1000 [ 522.692054][T19932] ext4 filesystem being mounted at /root/syzkaller-testdir3388036091/syzkaller.TdHKPg/1103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.709372][T19975] FAULT_INJECTION: forcing a failure. [ 522.709372][T19975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 522.722624][T19975] CPU: 0 PID: 19975 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 522.732794][T19975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 522.742882][T19975] Call Trace: [ 522.746184][T19975] [ 522.749194][T19975] dump_stack_lvl+0xda/0x130 [ 522.753814][T19975] dump_stack+0x15/0x20 [ 522.758002][T19975] should_fail_ex+0x21f/0x230 [ 522.762753][T19975] should_fail+0xb/0x10 [ 522.766948][T19975] should_fail_usercopy+0x1a/0x20 [ 522.772003][T19975] _copy_from_user+0x1e/0xd0 [ 522.776677][T19975] memdup_user+0x64/0xc0 [ 522.781120][T19975] strndup_user+0x68/0xa0 [ 522.785554][T19975] __se_sys_mount+0x4e/0x2d0 [ 522.790250][T19975] ? fput+0x112/0x140 [ 522.794274][T19975] ? ksys_write+0x178/0x1a0 [ 522.798808][T19975] __x64_sys_mount+0x67/0x80 [ 522.803541][T19975] do_syscall_64+0x41/0xc0 [ 522.807994][T19975] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 522.813982][T19975] RIP: 0033:0x7fd83d377ae9 [ 522.818497][T19975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 22:19:36 executing program 5: set_mempolicy(0x8000, &(0x7f0000000000)=0x40000000001, 0x9) unshare(0x46060480) set_mempolicy(0x0, 0x0, 0x0) (async) set_mempolicy(0x0, 0x0, 0x0) 22:19:36 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 522.838136][T19975] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 522.846639][T19975] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 522.854694][T19975] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 522.862752][T19975] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 522.870772][T19975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.878849][T19975] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 522.886883][T19975] 22:19:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x7}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb12994784ec53a97250b5c41dc759ec6d7570661db3715eeab7232e24328fb2fbf34d8644a78316c51f76b8c153f0f645b13592760ea286c3910f0228ee5b3afc026f91175553813758112c09dd694c2f45558d3ca19807174e2c06d6cc5663323b3e91c10b06119bb5a66422863bf64406109be0f9e8726bed71b46d24460d09e566eb2702f56a6a2100dfd4c6434a126129f98c21a4bab523e2c76174525b877d5100cf47df386b99ca24236c4f992cad5ab484abd2424f55f74619e39f0a2045e22a26f609c258d36ce31ef2797574c3e910f359fc9d0f066ea55f746fbc13ab80b6cedbee4467f9e05797b7b296e9c54ecd92ed273effa770031c8b6f328dbb64f030da225f5c87374406ef172c916bef775d300b84b2da9c3f28a2308c5bd9040388203054548d0dde308f45dd846defb69278b14a31b4037897a38417c725fa8ca5f5534a816ff455335f79acafe2f94de6dde7debab5491c34c4777e81c9fd1420a410231916e7984f53ca6f2f688b863c3d42834c1b45d6a1549edb6289ae513753e21516967e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:36 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:36 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0xff) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0xe0, 0xff, 0x20, 0x0, 0x6, 0x400, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x40, 0x7d6, 0x5, 0x7, 0x762, 0x7, 0x1, 0x0, 0x81, 0x0, 0x1}, 0x0, 0x8, r0, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e903d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',uname=^\'&-%%//-/,access=user\"\x00']) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0xe0, 0x90, 0x7, 0x0, 0x7b3, 0x805, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x400, 0x0, 0x7, 0x0, 0x9, 0x1, 0xfc4b, 0x0, 0x8591, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x2) 22:19:36 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 3) [ 522.932410][T19998] lo speed is unknown, defaulting to 1000 [ 522.949772][ T3097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.968477][T20007] FAULT_INJECTION: forcing a failure. [ 522.968477][T20007] name failslab, interval 1, probability 0, space 0, times 0 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 22:19:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb12994784ec53a97250b5c41dc759ec6d7570661db3715eeab7232e24328fb2fbf34d8644a78316c51f76b8c153f0f645b13592760ea286c3910f0228ee5b3afc026f91175553813758112c09dd694c2f45558d3ca19807174e2c06d6cc5663323b3e91c10b06119bb5a66422863bf64406109be0f9e8726bed71b46d24460d09e566eb2702f56a6a2100dfd4c6434a126129f98c21a4bab523e2c76174525b877d5100cf47df386b99ca24236c4f992cad5ab484abd2424f55f74619e39f0a2045e22a26f609c258d36ce31ef2797574c3e910f359fc9d0f066ea55f746fbc13ab80b6cedbee4467f9e05797b7b296e9c54ecd92ed273effa770031c8b6f328dbb64f030da225f5c87374406ef172c916bef775d300b84b2da9c3f28a2308c5bd9040388203054548d0dde308f45dd846defb69278b14a31b4037897a38417c725fa8ca5f5534a816ff455335f79acafe2f94de6dde7debab5491c34c4777e81c9fd1420a410231916e7984f53ca6f2f688b863c3d42834c1b45d6a1549edb6289ae513753e21516967e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 522.981187][T20007] CPU: 0 PID: 20007 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 522.991284][T20007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 523.001408][T20007] Call Trace: [ 523.004708][T20007] [ 523.007654][T20007] dump_stack_lvl+0xda/0x130 [ 523.012274][T20007] dump_stack+0x15/0x20 [ 523.016456][T20007] should_fail_ex+0x21f/0x230 [ 523.021170][T20007] ? __se_sys_mount+0xf7/0x2d0 [ 523.025981][T20007] __should_failslab+0x92/0xa0 [ 523.030824][T20007] should_failslab+0x9/0x20 [ 523.035374][T20007] slab_pre_alloc_hook+0x38/0x180 [ 523.040437][T20007] ? __se_sys_mount+0xf7/0x2d0 [ 523.044712][T20013] bridge15: entered promiscuous mode [ 523.045233][T20007] __kmem_cache_alloc_node+0x48/0x1d0 [ 523.050550][T20013] bridge15: entered allmulticast mode [ 523.055883][T20007] ? __se_sys_mount+0xf7/0x2d0 [ 523.066053][T20007] kmalloc_trace+0x2a/0xa0 [ 523.070506][T20007] __se_sys_mount+0xf7/0x2d0 [ 523.075181][T20007] ? fput+0x112/0x140 [ 523.079192][T20007] ? ksys_write+0x178/0x1a0 [ 523.083759][T20007] __x64_sys_mount+0x67/0x80 [ 523.088414][T20007] do_syscall_64+0x41/0xc0 [ 523.092900][T20007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 523.098895][T20007] RIP: 0033:0x7fd83d377ae9 [ 523.103322][T20007] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 523.123052][T20007] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 22:19:37 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x40044) 22:19:37 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x40044) [ 523.131489][T20007] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 523.139492][T20007] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 523.147497][T20007] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 523.155509][T20007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.163504][T20007] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 523.171589][T20007] 22:19:37 executing program 5: set_mempolicy(0x8000, &(0x7f0000000000)=0x40000000001, 0x9) (async) unshare(0x46060480) (async) set_mempolicy(0x0, 0x0, 0x0) 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 22:19:37 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x40044) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x40044) 22:19:37 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 4) 22:19:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff9b, &(0x7f0000000400)={&(0x7f0000001100)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffe81}, [@IFLA_MASTER={0x0, 0xa, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000140)=ANY=[@ANYBLOB='nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',resgid=', @ANYRESHEX=0xee00, @ANYBLOB="320075b0028d26ec0743938d37809ea0173193c871b5a6b607dde177f3bb53b799690d12efbe8f9737df0ee7bfe6566e24decbcb82c1bce00f15006f11a1bdcbbea20704162151711d7cad55000beaf2c40189a503e96c9eee8e1326e80c436166bff573dd42766d972624a347acdd585970ab864cc514d633e62fd18c247f112d61fd205c6cc86b42bef3879244aac5df3ec78d7a3b6afda6fdbaf13ba2de45e2a3cd9136c628b7d62ad682dce6a4ae7f348a8fc0a0500118cd83d6063fc73f7c45e3a83514afdeb7df22b8e17003d26f6d77386c2cbaf7"], 0x1e, 0x4c6, &(0x7f0000000ec0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=ANY=[@ANYBLOB='/dev/loor0\x00'], 0xffffffffffffffff, &(0x7f0000000540)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, 0xffffffffffffffff, 0x2, 0x2}}, 0x20) r6 = accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x80800) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000640)=""/67, 0x43}], 0x4}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, r8, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008880) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f0000000080)='./file0\x00', r1, r9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@empty, @in6=@private1}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 523.288738][T20031] FAULT_INJECTION: forcing a failure. [ 523.288738][T20031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.302031][T20031] CPU: 0 PID: 20031 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 523.312241][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 523.322383][T20031] Call Trace: [ 523.325680][T20031] [ 523.328635][T20031] dump_stack_lvl+0xda/0x130 [ 523.333311][T20031] dump_stack+0x15/0x20 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 523.337486][T20031] should_fail_ex+0x21f/0x230 [ 523.342187][T20031] should_fail+0xb/0x10 [ 523.343398][T20038] 9pnet_fd: Insufficient options for proto=fd [ 523.346418][T20031] should_fail_usercopy+0x1a/0x20 [ 523.346445][T20031] _copy_from_user+0x1e/0xd0 [ 523.354986][T20035] lo speed is unknown, defaulting to 1000 [ 523.357568][T20031] __se_sys_mount+0x119/0x2d0 [ 523.357605][T20031] ? ksys_write+0x178/0x1a0 [ 523.377354][T20031] __x64_sys_mount+0x67/0x80 [ 523.382101][T20031] do_syscall_64+0x41/0xc0 [ 523.386555][T20031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 523.391490][T20040] syz-executor.2[20040]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 523.392557][T20031] RIP: 0033:0x7fd83d377ae9 [ 523.392578][T20031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 523.423414][T20042] 9pnet_fd: Insufficient options for proto=fd 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 523.426441][T20031] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.426487][T20031] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 523.426500][T20031] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 523.444196][T20040] loop2: detected capacity change from 0 to 512 [ 523.448970][T20031] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 523.448989][T20031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.449005][T20031] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 22:19:37 executing program 3: getdents(0xffffffffffffffff, 0x0, 0x18) bpf$ITER_CREATE(0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0xff970000, 0x2811fdff) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0xfffffdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x233000, 0x1000}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0xff970000, 0x2811fdff) r5 = memfd_secret(0x80000) renameat(r5, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x101802, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x66163000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 523.487367][T20031] 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:37 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 5) [ 523.509799][T20031] 9p: Unknown access argument user": -22 [ 523.515774][T20046] 9pnet_fd: Insufficient options for proto=fd [ 523.531247][T20040] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.567725][T20051] 9pnet_fd: Insufficient options for proto=fd [ 523.575631][T20052] FAULT_INJECTION: forcing a failure. [ 523.575631][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 523.588351][T20052] CPU: 1 PID: 20052 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 523.598487][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 523.608559][T20052] Call Trace: [ 523.611861][T20052] [ 523.614800][T20052] dump_stack_lvl+0xda/0x130 [ 523.619470][T20052] dump_stack+0x15/0x20 [ 523.623640][T20052] should_fail_ex+0x21f/0x230 [ 523.628367][T20052] __should_failslab+0x92/0xa0 [ 523.633244][T20052] should_failslab+0x9/0x20 [ 523.637779][T20052] slab_pre_alloc_hook+0x38/0x180 [ 523.642857][T20052] kmem_cache_alloc+0x52/0x220 [ 523.647698][T20052] ? getname_flags+0x85/0x360 [ 523.652406][T20052] getname_flags+0x85/0x360 [ 523.655385][T20040] EXT4-fs (loop2): 1 truncate cleaned up [ 523.656937][T20052] user_path_at_empty+0x2c/0x110 [ 523.662674][T20040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.667515][T20052] __se_sys_mount+0x24b/0x2d0 [ 523.680487][ T3907] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 523.684578][T20052] __x64_sys_mount+0x67/0x80 [ 523.700797][T20052] do_syscall_64+0x41/0xc0 [ 523.705253][T20052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 523.711217][T20052] RIP: 0033:0x7fd83d377ae9 [ 523.715732][T20052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 523.735528][T20052] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.743975][T20052] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 523.752015][T20052] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 523.760007][T20052] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) 22:19:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000140)=ANY=[@ANYBLOB='nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',resgid=', @ANYRESHEX=0xee00, @ANYBLOB="320075b0028d26ec0743938d37809ea0173193c871b5a6b607dde177f3bb53b799690d12efbe8f9737df0ee7bfe6566e24decbcb82c1bce00f15006f11a1bdcbbea20704162151711d7cad55000beaf2c40189a503e96c9eee8e1326e80c436166bff573dd42766d972624a347acdd585970ab864cc514d633e62fd18c247f112d61fd205c6cc86b42bef3879244aac5df3ec78d7a3b6afda6fdbaf13ba2de45e2a3cd9136c628b7d62ad682dce6a4ae7f348a8fc0a0500118cd83d6063fc73f7c45e3a83514afdeb7df22b8e17003d26f6d77386c2cbaf7"], 0x1e, 0x4c6, &(0x7f0000000ec0)="$eJzs3V9rW+cZAPDnHFtZ/jizw3aRBZaFJcMOWyQ7XhKzi2yDsV0FtmX3mWfLxli2jCUnsQmbwz7AYJS20Kte9abQD1Ao+QilEGjvS1taSpu0F71oo6J/qeNIsU1kKVi/HxzrPUdHfp5HQq/0nvOiE0DfOhMRFyPiUaVSOR8Rw43taWO5dywiNuv7PXxwZ6a6JFGpXP8iiaSxrbr/2Jb/2XhIHI6Iv/8l4l/J03FL6xuL04VCfrWxnisvreRK6xsXFpam5/Pz+eXJyYnLU1emLk2Nd6TOoYi4+qdPXv7fG3+++s5vbn1447OxfyeN7bGljk6rl56pPRdNgxGxuh/BemCgUU+m14kAALArze/5v4yI8zEcA7VvcwAAAMBBUvn9UHybRFQAAACAAyutzYFN0mxjHsBQpGk2W5/D+9M4mhaKpfKv54pry7P1ubIjkUnnFgr58cZc4ZHIJNX1iVr7h/WL29YnI+JERLw0fKS2np0pFmZ7ffADAAAA+sSxbeP/r4fr438AAADggBnpdQIAAADAvjP+BwAAgIPP+B8AAAAOtL9eu1ZdKs3rX8/eXF9bLN68MJsvLWaX1mayM8XVlex8sThf+82+pZ3+X6FYXPltLK/dzpXzpXKutL5xY6m4tly+sfDEJbABAACALjrxi3sfJBGx+bsjtaXqUK+TArpicC87f7x/eQDdN9DrBICe2dPnP3CgZHqdANBzyQ73t528827ncwEAAPbH6M9an/9Pdjw2sJl2KUVgnzj+B/3L+X/oX87/Q//KxEAYyEN/2//z/5XKnhICAAA6bqi2JGk2onYcYCjSNJuNOF67LEAmmVso5Mcj4scR8f5w5kfV9YnaI5MdxwwAAAAAAAAAAAAAAAAAAAAAAAAAQF2lkkQFAAAAONAi0k+TxvW/RofPDW0/PnAo+Wa4dhsRt167/srt6XJ5daK6/cvH28uvNrZf7MURDAAAAGC75ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE56+ODOTHPpZtzP/xgRI63iD8bh2u3hyETE0a+SGNzyuCQiBjoQf/NuRJxsFT+pphUjjSxaxT/Sw/hpRBzrQHzoZ/eq/c8fWr3/0jhTu239/rtc66GeX/v+L33c/w206X+O7zLGqftv5drGvxtxarB1/9OMn7SJf3aX8f/5j42NdvdVXo8Ybfn5kzwRK1deWsmV1jcuLCxNz+fn88uTkxOXp65MXZoaz80tFPKNvy1j/P/nbz96Vv1H28Qf2aH+c7us/7v7tx/8pN7MtIo/drb163+yTfy08dn3q0a7ev9os71Zb291+s33Tj+r/tk29e/0+o/tsv7zf/vvR7vcFQDogtL6xuJ0oZBf7evGcz0b1a9FL0QVGntt/OfFSOOFbPS2XwIAADrv6TEwAAAAAAAAAAAAAAAAAAAA0G3d/HW9ps3elAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EzfBwAA//+8vtTr") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=ANY=[@ANYBLOB='/dev/loor0\x00'], 0xffffffffffffffff, &(0x7f0000000540)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, 0xffffffffffffffff, 0x2, 0x2}}, 0x20) r6 = accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x80800) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000640)=""/67, 0x43}], 0x4}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, r8, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008880) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f0000000080)='./file0\x00', r1, r9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@empty, @in6=@private1}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000140)=ANY=[@ANYBLOB='nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',resgid=', @ANYRESHEX=0xee00, @ANYBLOB="320075b0028d26ec0743938d37809ea0173193c871b5a6b607dde177f3bb53b799690d12efbe8f9737df0ee7bfe6566e24decbcb82c1bce00f15006f11a1bdcbbea20704162151711d7cad55000beaf2c40189a503e96c9eee8e1326e80c436166bff573dd42766d972624a347acdd585970ab864cc514d633e62fd18c247f112d61fd205c6cc86b42bef3879244aac5df3ec78d7a3b6afda6fdbaf13ba2de45e2a3cd9136c628b7d62ad682dce6a4ae7f348a8fc0a0500118cd83d6063fc73f7c45e3a83514afdeb7df22b8e17003d26f6d77386c2cbaf7"], 0x1e, 0x4c6, &(0x7f0000000ec0)="$eJzs3V9rW+cZAPDnHFtZ/jizw3aRBZaFJcMOWyQ7XhKzi2yDsV0FtmX3mWfLxli2jCUnsQmbwz7AYJS20Kte9abQD1Ao+QilEGjvS1taSpu0F71oo6J/qeNIsU1kKVi/HxzrPUdHfp5HQq/0nvOiE0DfOhMRFyPiUaVSOR8Rw43taWO5dywiNuv7PXxwZ6a6JFGpXP8iiaSxrbr/2Jb/2XhIHI6Iv/8l4l/J03FL6xuL04VCfrWxnisvreRK6xsXFpam5/Pz+eXJyYnLU1emLk2Nd6TOoYi4+qdPXv7fG3+++s5vbn1447OxfyeN7bGljk6rl56pPRdNgxGxuh/BemCgUU+m14kAALArze/5v4yI8zEcA7VvcwAAAMBBUvn9UHybRFQAAACAAyutzYFN0mxjHsBQpGk2W5/D+9M4mhaKpfKv54pry7P1ubIjkUnnFgr58cZc4ZHIJNX1iVr7h/WL29YnI+JERLw0fKS2np0pFmZ7ffADAAAA+sSxbeP/r4fr438AAADggBnpdQIAAADAvjP+BwAAgIPP+B8AAAAOtL9eu1ZdKs3rX8/eXF9bLN68MJsvLWaX1mayM8XVlex8sThf+82+pZ3+X6FYXPltLK/dzpXzpXKutL5xY6m4tly+sfDEJbABAACALjrxi3sfJBGx+bsjtaXqUK+TArpicC87f7x/eQDdN9DrBICe2dPnP3CgZHqdANBzyQ73t528827ncwEAAPbH6M9an/9Pdjw2sJl2KUVgnzj+B/3L+X/oX87/Q//KxEAYyEN/2//z/5XKnhICAAA6bqi2JGk2onYcYCjSNJuNOF67LEAmmVso5Mcj4scR8f5w5kfV9YnaI5MdxwwAAAAAAAAAAAAAAAAAAAAAAAAAQF2lkkQFAAAAONAi0k+TxvW/RofPDW0/PnAo+Wa4dhsRt167/srt6XJ5daK6/cvH28uvNrZf7MURDAAAAGC75ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE56+ODOTHPpZtzP/xgRI63iD8bh2u3hyETE0a+SGNzyuCQiBjoQf/NuRJxsFT+pphUjjSxaxT/Sw/hpRBzrQHzoZ/eq/c8fWr3/0jhTu239/rtc66GeX/v+L33c/w206X+O7zLGqftv5drGvxtxarB1/9OMn7SJf3aX8f/5j42NdvdVXo8Ybfn5kzwRK1deWsmV1jcuLCxNz+fn88uTkxOXp65MXZoaz80tFPKNvy1j/P/nbz96Vv1H28Qf2aH+c7us/7v7tx/8pN7MtIo/drb163+yTfy08dn3q0a7ev9os71Zb291+s33Tj+r/tk29e/0+o/tsv7zf/vvR7vcFQDogtL6xuJ0oZBf7evGcz0b1a9FL0QVGntt/OfFSOOFbPS2XwIAADrv6TEwAAAAAAAAAAAAAAAAAAAA0G3d/HW9ps3elAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EzfBwAA//+8vtTr") (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=ANY=[@ANYBLOB='/dev/loor0\x00'], 0xffffffffffffffff, &(0x7f0000000540)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r1) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, 0xffffffffffffffff, 0x2, 0x2}}, 0x20) (async) accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x80800) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) (async) recvmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000640)=""/67, 0x43}], 0x4}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) (async) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, r8, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008880) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), 0x800) (async) chown(&(0x7f0000000080)='./file0\x00', r1, r9) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@empty, @in6=@private1}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) (async) 22:19:37 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xf0, r0, 0x405, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0xf71}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 523.767993][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.776032][T20052] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 523.784010][T20052] 22:19:37 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 6) 22:19:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb12994784ec53a97250b5c41dc759ec6d7570661db3715eeab7232e24328fb2fbf34d8644a78316c51f76b8c153f0f645b13592760ea286c3910f0228ee5b3afc026f91175553813758112c09dd694c2f45558d3ca19807174e2c06d6cc5663323b3e91c10b06119bb5a66422863bf64406109be0f9e8726bed71b46d24460d09e566eb2702f56a6a2100dfd4c6434a126129f98c21a4bab523e2c76174525b877d5100cf47df386b99ca24236c4f992cad5ab484abd2424f55f74619e39f0a2045e22a26f609c258d36ce31ef2797574c3e910f359fc9d0f066ea55f746fbc13ab80b6cedbee4467f9e05797b7b296e9c54ecd92ed273effa770031c8b6f328dbb64f030da225f5c87374406ef172c916bef775d300b84b2da9c3f28a2308c5bd9040388203054548d0dde308f45dd846defb69278b14a31b4037897a38417c725fa8ca5f5534a816ff455335f79acafe2f94de6dde7debab5491c34c4777e81c9fd1420a410231916e7984f53ca6f2f688b863c3d42834c1b45d6a1549edb6289ae513753e21516967e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:37 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) [ 523.836126][T20063] lo speed is unknown, defaulting to 1000 [ 523.848689][ T3097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.858071][T20065] FAULT_INJECTION: forcing a failure. [ 523.858071][T20065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.871237][T20065] CPU: 1 PID: 20065 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 22:19:37 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 7) 22:19:37 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 523.871266][T20065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 523.871357][T20065] Call Trace: [ 523.871365][T20065] [ 523.871372][T20065] dump_stack_lvl+0xda/0x130 [ 523.871401][T20065] dump_stack+0x15/0x20 [ 523.871420][T20065] should_fail_ex+0x21f/0x230 [ 523.871504][T20065] should_fail+0xb/0x10 [ 523.871524][T20065] should_fail_usercopy+0x1a/0x20 [ 523.871546][T20065] strncpy_from_user+0x25/0x270 [ 523.871569][T20065] ? getname_flags+0x85/0x360 [ 523.871671][T20065] getname_flags+0xb3/0x360 [ 523.871757][T20065] user_path_at_empty+0x2c/0x110 [ 523.871787][T20065] __se_sys_mount+0x24b/0x2d0 [ 523.871862][T20065] __x64_sys_mount+0x67/0x80 [ 523.871894][T20065] do_syscall_64+0x41/0xc0 [ 523.871920][T20065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 523.871961][T20065] RIP: 0033:0x7fd83d377ae9 [ 523.871978][T20065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 523.872068][T20065] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.872091][T20065] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 523.872103][T20065] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 523.872119][T20065] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 523.872135][T20065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.872150][T20065] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 523.872216][T20065] [ 523.884070][T20061] 9pnet_fd: Insufficient options for proto=fd [ 523.930086][T20070] 9pnet_fd: Insufficient options for proto=fd [ 523.946847][T20074] FAULT_INJECTION: forcing a failure. [ 523.946847][T20074] name failslab, interval 1, probability 0, space 0, times 0 [ 523.946875][T20074] CPU: 0 PID: 20074 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 523.946903][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 523.946918][T20074] Call Trace: [ 523.946925][T20074] [ 523.946933][T20074] dump_stack_lvl+0xda/0x130 [ 523.947023][T20074] dump_stack+0x15/0x20 [ 523.947047][T20074] should_fail_ex+0x21f/0x230 [ 523.947071][T20074] ? alloc_fs_context+0x44/0x4e0 [ 523.947172][T20074] __should_failslab+0x92/0xa0 [ 523.947242][T20074] should_failslab+0x9/0x20 [ 523.947265][T20074] slab_pre_alloc_hook+0x38/0x180 [ 523.947305][T20074] ? alloc_fs_context+0x44/0x4e0 [ 523.947345][T20074] __kmem_cache_alloc_node+0x48/0x1d0 [ 523.947372][T20074] ? alloc_fs_context+0x44/0x4e0 [ 523.947431][T20074] kmalloc_trace+0x2a/0xa0 [ 523.947456][T20074] alloc_fs_context+0x44/0x4e0 [ 523.947569][T20074] ? try_module_get+0xaa/0x1a0 [ 523.947593][T20074] fs_context_for_mount+0x21/0x30 [ 523.947629][T20074] do_new_mount+0xf4/0x660 [ 523.947657][T20074] path_mount+0x496/0xb30 [ 523.947702][T20074] __se_sys_mount+0x27f/0x2d0 [ 523.947738][T20074] __x64_sys_mount+0x67/0x80 [ 523.947771][T20074] do_syscall_64+0x41/0xc0 [ 523.947796][T20074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 523.947842][T20074] RIP: 0033:0x7fd83d377ae9 [ 523.947856][T20074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 523.947879][T20074] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.947902][T20074] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 523.947992][T20074] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 523.948004][T20074] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 523.948016][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.948028][T20074] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 523.948046][T20074] [ 523.953803][T20075] syz-executor.2[20075]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 523.956537][T20075] loop2: detected capacity change from 0 to 512 [ 523.962840][T20075] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.975296][T20075] EXT4-fs (loop2): 1 truncate cleaned up 22:19:38 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}]}}) 22:19:38 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 8) 22:19:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000140)=ANY=[@ANYBLOB='nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',errors=remount-ro,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',resgid=', @ANYRESHEX=0xee00, @ANYBLOB="320075b0028d26ec0743938d37809ea0173193c871b5a6b607dde177f3bb53b799690d12efbe8f9737df0ee7bfe6566e24decbcb82c1bce00f15006f11a1bdcbbea20704162151711d7cad55000beaf2c40189a503e96c9eee8e1326e80c436166bff573dd42766d972624a347acdd585970ab864cc514d633e62fd18c247f112d61fd205c6cc86b42bef3879244aac5df3ec78d7a3b6afda6fdbaf13ba2de45e2a3cd9136c628b7d62ad682dce6a4ae7f348a8fc0a0500118cd83d6063fc73f7c45e3a83514afdeb7df22b8e17003d26f6d77386c2cbaf7"], 0x1e, 0x4c6, &(0x7f0000000ec0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=ANY=[@ANYBLOB='/dev/loor0\x00'], 0xffffffffffffffff, &(0x7f0000000540)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) (async) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}, {@access_user, 0x22}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, 0xffffffffffffffff, 0x2, 0x2}}, 0x20) accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x80800) (async) r6 = accept4$inet6(r5, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x80800) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000640)=""/67, 0x43}], 0x4}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, r8, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, r8, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008880) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f0000000080)='./file0\x00', r1, r9) (async) chown(&(0x7f0000000080)='./file0\x00', r1, r9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@empty, @in6=@private1}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) 22:19:38 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb12994784ec53a97250b5c41dc759ec6d7570661db3715eeab7232e24328fb2fbf34d8644a78316c51f76b8c153f0f645b13592760ea286c3910f0228ee5b3afc026f91175553813758112c09dd694c2f45558d3ca19807174e2c06d6cc5663323b3e91c10b06119bb5a66422863bf64406109be0f9e8726bed71b46d24460d09e566eb2702f56a6a2100dfd4c6434a126129f98c21a4bab523e2c76174525b877d5100cf47df386b99ca24236c4f992cad5ab484abd2424f55f74619e39f0a2045e22a26f609c258d36ce31ef2797574c3e910f359fc9d0f066ea55f746fbc13ab80b6cedbee4467f9e05797b7b296e9c54ecd92ed273effa770031c8b6f328dbb64f030da225f5c87374406ef172c916bef775d300b84b2da9c3f28a2308c5bd9040388203054548d0dde308f45dd846defb69278b14a31b4037897a38417c725fa8ca5f5534a816ff455335f79acafe2f94de6dde7debab5491c34c4777e81c9fd1420a410231916e7984f53ca6f2f688b863c3d42834c1b45d6a1549edb6289ae513753e21516967e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:38 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xf0, r0, 0x405, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0xf71}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x40000400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xf0, r0, 0x405, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0xf71}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) [ 523.975316][T20075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.978239][T20075] syz-executor.2[20075]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 523.990067][ T3908] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 523.998601][ T3097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 22:19:38 executing program 3: getdents(0xffffffffffffffff, 0x0, 0x18) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0xff970000, 0x2811fdff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x233000, 0x1000}, 0x20) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0xff970000, 0x2811fdff) r5 = memfd_secret(0x80000) renameat(r5, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x101802, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) syz_clone(0x66163000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 524.649935][T20094] syz-executor.2[20094]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 524.654056][T20090] FAULT_INJECTION: forcing a failure. [ 524.654056][T20090] name failslab, interval 1, probability 0, space 0, times 0 [ 524.672317][T20090] CPU: 0 PID: 20090 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 524.673679][T20094] loop2: detected capacity change from 0 to 512 [ 524.682396][T20090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 524.682413][T20090] Call Trace: [ 524.682422][T20090] [ 524.682448][T20090] dump_stack_lvl+0xda/0x130 [ 524.682479][T20090] dump_stack+0x15/0x20 [ 524.713832][T20090] should_fail_ex+0x21f/0x230 [ 524.718686][T20090] ? legacy_init_fs_context+0x31/0x70 [ 524.724119][T20090] __should_failslab+0x92/0xa0 [ 524.729021][T20090] should_failslab+0x9/0x20 [ 524.733533][T20090] slab_pre_alloc_hook+0x38/0x180 [ 524.738648][T20090] ? legacy_init_fs_context+0x31/0x70 [ 524.744045][T20090] __kmem_cache_alloc_node+0x48/0x1d0 [ 524.749426][T20090] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 524.755251][T20090] ? legacy_init_fs_context+0x31/0x70 [ 524.760751][T20090] kmalloc_trace+0x2a/0xa0 [ 524.765174][T20090] legacy_init_fs_context+0x31/0x70 [ 524.770462][T20090] alloc_fs_context+0x3f4/0x4e0 [ 524.775335][T20090] fs_context_for_mount+0x21/0x30 [ 524.780380][T20090] do_new_mount+0xf4/0x660 [ 524.784816][T20090] path_mount+0x496/0xb30 [ 524.789209][T20090] __se_sys_mount+0x27f/0x2d0 [ 524.793927][T20090] __x64_sys_mount+0x67/0x80 [ 524.798544][T20090] do_syscall_64+0x41/0xc0 [ 524.802978][T20090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.808954][T20090] RIP: 0033:0x7fd83d377ae9 [ 524.813414][T20090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 524.833169][T20090] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 524.841684][T20090] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 524.849776][T20090] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 524.857867][T20090] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 524.865844][T20090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.873905][T20090] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 524.881902][T20090] 22:19:38 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 9) [ 524.892630][T20094] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 524.900565][T20096] __nla_validate_parse: 12 callbacks suppressed [ 524.900583][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 524.925470][T20094] EXT4-fs (loop2): 1 truncate cleaned up [ 524.931203][T20094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 22:19:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:39 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}]}}) [ 524.950667][T15518] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 524.951395][T20097] lo speed is unknown, defaulting to 1000 [ 525.014987][T20107] lo speed is unknown, defaulting to 1000 [ 525.022360][T20118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 525.036655][T20106] FAULT_INJECTION: forcing a failure. [ 525.036655][T20106] name failslab, interval 1, probability 0, space 0, times 0 [ 525.049371][T20106] CPU: 0 PID: 20106 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 525.050313][T20113] 9p: Unknown access argument user": -22 [ 525.059452][T20106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 525.059533][T20106] Call Trace: [ 525.059541][T20106] [ 525.059573][T20106] dump_stack_lvl+0xda/0x130 [ 525.086335][T20106] dump_stack+0x15/0x20 [ 525.090527][T20106] should_fail_ex+0x21f/0x230 [ 525.095398][T20106] ? v9fs_mount+0x53/0x630 [ 525.099865][T20106] __should_failslab+0x92/0xa0 [ 525.104720][T20106] should_failslab+0x9/0x20 [ 525.109243][T20106] slab_pre_alloc_hook+0x38/0x180 22:19:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000000002010300000000000000000cc5ffdb175cf8b2550000020a000600482e3234f8000400080009407fffffff0dd1054a1587426507f51a0fb714056b503782c55dc395393f62ad39f036e923cd8d38a21e87db838b68a4cc445ad7c3c06c6b9bc4b6cc9cccd0d4139433e7441282e9a26eed4934152ae327b8c214d8222fd497f12deff4f1fb815807cfc83ab4c53fc9ecbfe3ae763514e349154e5f509dd9ebee264037a7735527f8c5e16e5de77ce7a4b479edc172c6ecf3845839b0ac3e729a0c9b652bd3583422f426914d17d9fee58934e049abe495cb1f0be0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 525.114333][T20106] ? v9fs_mount+0x53/0x630 [ 525.118881][T20106] __kmem_cache_alloc_node+0x48/0x1d0 [ 525.124367][T20106] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 525.130644][T20106] ? v9fs_mount+0x53/0x630 [ 525.135180][T20106] kmalloc_trace+0x2a/0xa0 [ 525.139634][T20106] v9fs_mount+0x53/0x630 [ 525.144044][T20106] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 525.150337][T20106] legacy_get_tree+0x74/0xd0 [ 525.155076][T20106] vfs_get_tree+0x51/0x1b0 [ 525.159557][T20106] do_new_mount+0x203/0x660 [ 525.164099][T20106] path_mount+0x496/0xb30 [ 525.168566][T20106] __se_sys_mount+0x27f/0x2d0 [ 525.173383][T20106] __x64_sys_mount+0x67/0x80 [ 525.178016][T20106] do_syscall_64+0x41/0xc0 [ 525.182453][T20106] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.188401][T20106] RIP: 0033:0x7fd83d377ae9 [ 525.192852][T20106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 22:19:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5, 0x2800}, 0x48) 22:19:39 executing program 5: unshare(0x40000400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0xf0, r0, 0x405, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0xf71}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 22:19:39 executing program 3: getdents(0xffffffffffffffff, 0x0, 0x18) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0xff970000, 0x2811fdff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x233000, 0x1000}, 0x20) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0xff970000, 0x2811fdff) (async) r5 = memfd_secret(0x80000) renameat(r5, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x101802, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x66163000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 525.212584][T20106] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.221116][T20106] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 525.229111][T20106] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 525.237284][T20106] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 525.245318][T20106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.253315][T20106] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 525.261343][T20106] 22:19:39 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '^\'&-%%//-/'}}]}}) 22:19:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:39 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 10) [ 525.269658][T20132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 525.304957][ T3097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.326098][T20136] FAULT_INJECTION: forcing a failure. [ 525.326098][T20136] name failslab, interval 1, probability 0, space 0, times 0 [ 525.334092][T20124] lo speed is unknown, defaulting to 1000 [ 525.338767][T20136] CPU: 0 PID: 20136 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 525.346196][T20138] validate_nla: 24 callbacks suppressed [ 525.346212][T20138] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:19:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 525.354552][T20136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 525.354569][T20136] Call Trace: [ 525.354578][T20136] [ 525.354585][T20136] dump_stack_lvl+0xda/0x130 [ 525.360186][T20138] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 525.368205][T20136] dump_stack+0x15/0x20 [ 525.401397][T20136] should_fail_ex+0x21f/0x230 [ 525.406111][T20136] ? v9fs_session_init+0x4c/0xd90 [ 525.411179][T20136] __should_failslab+0x92/0xa0 [ 525.416017][T20136] should_failslab+0x9/0x20 [ 525.420550][T20136] slab_pre_alloc_hook+0x38/0x180 [ 525.425620][T20136] ? v9fs_session_init+0x4c/0xd90 [ 525.430686][T20136] __kmem_cache_alloc_node+0x48/0x1d0 [ 525.436085][T20136] ? v9fs_session_init+0x4c/0xd90 [ 525.441142][T20136] __kmalloc_node_track_caller+0x96/0x1a0 [ 525.446950][T20136] kstrdup+0x3a/0x70 [ 525.450940][T20136] v9fs_session_init+0x4c/0xd90 [ 525.455806][T20136] ? slab_post_alloc_hook+0x8c/0x340 [ 525.461103][T20136] ? v9fs_mount+0x53/0x630 [ 525.465612][T20136] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 525.471255][T20136] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 525.477513][T20136] ? v9fs_mount+0x53/0x630 [ 525.482082][T20136] v9fs_mount+0x69/0x630 [ 525.486347][T20136] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 525.492526][T20136] legacy_get_tree+0x74/0xd0 [ 525.497344][T20136] vfs_get_tree+0x51/0x1b0 [ 525.501778][T20136] do_new_mount+0x203/0x660 [ 525.506302][T20136] path_mount+0x496/0xb30 [ 525.510726][T20136] __se_sys_mount+0x27f/0x2d0 [ 525.515420][T20136] __x64_sys_mount+0x67/0x80 [ 525.520046][T20136] do_syscall_64+0x41/0xc0 [ 525.524473][T20136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.530440][T20136] RIP: 0033:0x7fd83d377ae9 [ 525.534858][T20136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 525.554607][T20136] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.563041][T20136] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:39 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:19:39 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 11) [ 525.571023][T20136] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 525.578996][T20136] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 525.587040][T20136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.595085][T20136] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 525.603067][T20136] [ 525.631657][T20140] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 525.639909][T20140] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 525.666944][T20142] 9p: Unknown access argument user": -22 22:19:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5, 0x2800}, 0x48) [ 525.702618][T20146] FAULT_INJECTION: forcing a failure. [ 525.702618][T20146] name failslab, interval 1, probability 0, space 0, times 0 [ 525.716073][T20146] CPU: 1 PID: 20146 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 525.726247][T20146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 525.736419][T20146] Call Trace: [ 525.739751][T20146] [ 525.742702][T20146] dump_stack_lvl+0xda/0x130 [ 525.747326][T20146] dump_stack+0x15/0x20 22:19:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000002940)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000015c0)="cf", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1}, 0x0) 22:19:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5, 0x2800}, 0x48) [ 525.751511][T20146] should_fail_ex+0x21f/0x230 [ 525.756210][T20146] ? v9fs_session_init+0x79/0xd90 [ 525.761296][T20146] __should_failslab+0x92/0xa0 [ 525.766198][T20146] should_failslab+0x9/0x20 [ 525.770734][T20146] slab_pre_alloc_hook+0x38/0x180 [ 525.775851][T20146] ? v9fs_session_init+0x79/0xd90 [ 525.781044][T20146] __kmem_cache_alloc_node+0x48/0x1d0 [ 525.786484][T20146] ? v9fs_session_init+0x79/0xd90 [ 525.791595][T20146] __kmalloc_node_track_caller+0x96/0x1a0 [ 525.797341][T20146] kstrdup+0x3a/0x70 [ 525.801319][T20146] v9fs_session_init+0x79/0xd90 [ 525.806251][T20146] ? slab_post_alloc_hook+0x8c/0x340 [ 525.811664][T20146] ? v9fs_mount+0x53/0x630 [ 525.816127][T20146] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 525.821881][T20146] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 525.828183][T20146] ? v9fs_mount+0x53/0x630 [ 525.832627][T20146] v9fs_mount+0x69/0x630 [ 525.836903][T20146] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 525.843252][T20146] legacy_get_tree+0x74/0xd0 [ 525.847868][T20146] vfs_get_tree+0x51/0x1b0 [ 525.852336][T20146] do_new_mount+0x203/0x660 [ 525.856956][T20146] path_mount+0x496/0xb30 [ 525.861296][T20146] __se_sys_mount+0x27f/0x2d0 [ 525.866036][T20146] __x64_sys_mount+0x67/0x80 [ 525.870716][T20146] do_syscall_64+0x41/0xc0 [ 525.875150][T20146] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.881139][T20146] RIP: 0033:0x7fd83d377ae9 [ 525.885666][T20146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 525.905384][T20146] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.913919][T20146] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 525.921902][T20146] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 525.929881][T20146] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 525.937867][T20146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.945840][T20146] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 525.953896][T20146] 22:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000ff050b0000080001"], 0x1c}}, 0x0) 22:19:40 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 22:19:40 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 12) 22:19:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2}, {@in=@loopback, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5, 0x2800}, 0x48) [ 526.015011][T20155] FAULT_INJECTION: forcing a failure. [ 526.015011][T20155] name failslab, interval 1, probability 0, space 0, times 0 [ 526.027718][T20155] CPU: 0 PID: 20155 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 526.037846][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 526.047935][T20155] Call Trace: [ 526.051291][T20155] [ 526.054238][T20155] dump_stack_lvl+0xda/0x130 [ 526.058977][T20155] dump_stack+0x15/0x20 [ 526.063166][T20155] should_fail_ex+0x21f/0x230 [ 526.067923][T20155] ? p9_client_create+0x57/0xa70 [ 526.072893][T20155] __should_failslab+0x92/0xa0 [ 526.077726][T20155] should_failslab+0x9/0x20 [ 526.082266][T20155] slab_pre_alloc_hook+0x38/0x180 [ 526.087322][T20155] ? p9_client_create+0x57/0xa70 [ 526.092306][T20155] __kmem_cache_alloc_node+0x48/0x1d0 [ 526.097786][T20155] ? p9_client_create+0x57/0xa70 [ 526.102834][T20155] kmalloc_trace+0x2a/0xa0 [ 526.107290][T20155] p9_client_create+0x57/0xa70 22:19:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000008000000", @ANYRES32, @ANYBLOB="6401010164010102100000000000000001"], 0x74}}], 0x2, 0x0) 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 22:19:40 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) 22:19:40 executing program 5: bpf$BPF_TASK_FD_QUERY(0x6, 0x0, 0x10) [ 526.112093][T20155] ? v9fs_session_init+0x79/0xd90 [ 526.117169][T20155] ? __kmalloc_node_track_caller+0x96/0x1a0 [ 526.123105][T20155] v9fs_session_init+0xf9/0xd90 [ 526.128102][T20155] ? slab_post_alloc_hook+0x8c/0x340 [ 526.133428][T20155] ? v9fs_mount+0x53/0x630 [ 526.137894][T20155] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 526.143619][T20155] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 526.149910][T20155] ? v9fs_mount+0x53/0x630 [ 526.154423][T20155] v9fs_mount+0x69/0x630 [ 526.158821][T20155] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 526.165078][T20155] legacy_get_tree+0x74/0xd0 [ 526.169734][T20155] vfs_get_tree+0x51/0x1b0 [ 526.174259][T20155] do_new_mount+0x203/0x660 [ 526.178816][T20155] path_mount+0x496/0xb30 [ 526.183321][T20155] __se_sys_mount+0x27f/0x2d0 [ 526.188074][T20155] __x64_sys_mount+0x67/0x80 [ 526.192728][T20155] do_syscall_64+0x41/0xc0 [ 526.197189][T20155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 526.203177][T20155] RIP: 0033:0x7fd83d377ae9 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x0, 0x4, 0x8, 0x5, 0x2800}, 0x48) [ 526.207604][T20155] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 526.227289][T20155] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 526.235845][T20155] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 526.243857][T20155] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 526.251935][T20155] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:40 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:40 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x201000, 0x800, 0x9a9}, 0x20) 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x0, 0x4, 0x8, 0x5, 0x2800}, 0x48) 22:19:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:19:40 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 13) [ 526.259932][T20155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.267976][T20155] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 526.275981][T20155] [ 526.283703][T20161] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 526.291927][T20161] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 526.350384][T20190] FAULT_INJECTION: forcing a failure. [ 526.350384][T20190] name failslab, interval 1, probability 0, space 0, times 0 [ 526.363056][T20190] CPU: 1 PID: 20190 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 526.373332][T20190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 526.379970][T20191] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 526.383863][T20190] Call Trace: [ 526.392015][T20191] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 526.395220][T20190] [ 526.406450][T20190] dump_stack_lvl+0xda/0x130 [ 526.411077][T20190] dump_stack+0x15/0x20 [ 526.415391][T20190] should_fail_ex+0x21f/0x230 [ 526.420127][T20190] ? p9_client_create+0x1a6/0xa70 [ 526.425173][T20190] __should_failslab+0x92/0xa0 [ 526.430050][T20190] should_failslab+0x9/0x20 [ 526.434581][T20190] slab_pre_alloc_hook+0x38/0x180 [ 526.439614][T20190] ? p9_client_create+0x1a6/0xa70 [ 526.444648][T20190] __kmem_cache_alloc_node+0x48/0x1d0 [ 526.450048][T20190] ? p9_client_create+0x1a6/0xa70 [ 526.455088][T20190] __kmalloc_node_track_caller+0x96/0x1a0 [ 526.460934][T20190] kstrdup+0x3a/0x70 [ 526.464864][T20190] p9_client_create+0x1a6/0xa70 [ 526.469777][T20190] v9fs_session_init+0xf9/0xd90 [ 526.474760][T20190] ? slab_post_alloc_hook+0x8c/0x340 [ 526.480102][T20190] ? v9fs_mount+0x53/0x630 [ 526.484546][T20190] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 526.490250][T20190] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 526.496422][T20190] ? v9fs_mount+0x53/0x630 [ 526.500950][T20190] v9fs_mount+0x69/0x630 [ 526.505224][T20190] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 526.511395][T20190] legacy_get_tree+0x74/0xd0 [ 526.516176][T20190] vfs_get_tree+0x51/0x1b0 [ 526.520631][T20190] do_new_mount+0x203/0x660 [ 526.525206][T20190] path_mount+0x496/0xb30 [ 526.529620][T20190] __se_sys_mount+0x27f/0x2d0 [ 526.534323][T20190] __x64_sys_mount+0x67/0x80 [ 526.539021][T20190] do_syscall_64+0x41/0xc0 [ 526.543489][T20190] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 526.549404][T20190] RIP: 0033:0x7fd83d377ae9 [ 526.553874][T20190] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 526.573487][T20190] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 526.581994][T20190] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 526.590017][T20190] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 526.598016][T20190] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 526.606092][T20190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.614071][T20190] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 526.622157][T20190] 22:19:40 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 22:19:40 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:40 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x0, 0x4, 0x8, 0x5, 0x2800}, 0x48) 22:19:40 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f0000000800)={'vxcan0\x00'}) 22:19:40 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 14) 22:19:40 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x400}, 0x20, 0x0, 0x5, 0x7, 0x2, 0x4d101ae, 0x7, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedca7907001175"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 22:19:40 executing program 0: socket$kcm(0x29, 0x2, 0x0) r0 = syz_clone(0x60040080, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b6640f16355b6067af7235f20932ec45e005cc9f59a180b4434b50a58cd62f8ce72e5432ee118820195f32b03f4cec15484c2e16c1d12e8930a0c40b192d3499680e7b8ed4d88d9a8b34") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r0, 0x12) 22:19:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x0, 0x8, 0x5, 0x2800}, 0x48) 22:19:41 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) [ 526.940167][T20201] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 526.948288][T20201] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 526.977174][T20202] FAULT_INJECTION: forcing a failure. [ 526.977174][T20202] name failslab, interval 1, probability 0, space 0, times 0 [ 526.989985][T20202] CPU: 1 PID: 20202 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 527.000210][T20202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 527.010288][T20202] Call Trace: [ 527.013593][T20202] [ 527.016537][T20202] dump_stack_lvl+0xda/0x130 [ 527.021307][T20202] dump_stack+0x15/0x20 [ 527.025594][T20202] should_fail_ex+0x21f/0x230 [ 527.030138][T20209] lo speed is unknown, defaulting to 1000 [ 527.030278][T20202] ? match_strdup+0x37/0x40 [ 527.040605][T20202] __should_failslab+0x92/0xa0 [ 527.045406][T20202] should_failslab+0x9/0x20 [ 527.049934][T20202] slab_pre_alloc_hook+0x38/0x180 [ 527.055008][T20202] ? match_strdup+0x37/0x40 [ 527.059619][T20202] __kmem_cache_alloc_node+0x48/0x1d0 [ 527.065013][T20202] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 527.070762][T20202] ? match_strdup+0x37/0x40 [ 527.075298][T20202] __kmalloc_node_track_caller+0x96/0x1a0 [ 527.081054][T20202] ? match_token+0x3f5/0x420 [ 527.085739][T20202] kmemdup_nul+0x30/0x80 22:19:41 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:41 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 527.090145][T20202] match_strdup+0x37/0x40 [ 527.094689][T20202] p9_client_create+0x25b/0xa70 [ 527.099560][T20202] v9fs_session_init+0xf9/0xd90 [ 527.104437][T20202] ? slab_post_alloc_hook+0x8c/0x340 [ 527.109750][T20202] ? v9fs_mount+0x53/0x630 [ 527.114204][T20202] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 527.120070][T20202] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 527.126310][T20202] ? v9fs_mount+0x53/0x630 [ 527.130892][T20202] v9fs_mount+0x69/0x630 [ 527.135265][T20202] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 527.141544][T20202] legacy_get_tree+0x74/0xd0 [ 527.146190][T20202] vfs_get_tree+0x51/0x1b0 [ 527.150810][T20202] do_new_mount+0x203/0x660 [ 527.155366][T20202] path_mount+0x496/0xb30 [ 527.159732][T20202] __se_sys_mount+0x27f/0x2d0 [ 527.164466][T20202] __x64_sys_mount+0x67/0x80 [ 527.169189][T20202] do_syscall_64+0x41/0xc0 [ 527.173758][T20202] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 527.179771][T20202] RIP: 0033:0x7fd83d377ae9 22:19:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x0, 0x8, 0x5, 0x2800}, 0x48) 22:19:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4d101ae, 0x7, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) [ 527.184239][T20202] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 527.203950][T20202] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 527.212535][T20202] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 527.220526][T20202] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 527.228593][T20202] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x7, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) [ 527.236618][T20202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.244764][T20202] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 527.252768][T20202] 22:19:41 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 15) 22:19:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x0, 0x8, 0x5, 0x2800}, 0x48) 22:19:41 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="4e845765b2a247e4e9b20000e5b909c43bdcd7f1428cbe600bf2db87ac1213fde578d64a0fcdfa093171ba98de8b1ad245fd67ef5b7963d6ce8a36570642e2b1b76c6474f31604a2668ca8be30032704e8bf48d5a0366fd14a120213f6f46c9cf9f9f1e3ed98f6c9c78a19f1f83aa94fc9289ab1678397422d01436e8e08e9aa950eb7e0ad5bee9505517820260722cc317a6f96233bb189470a4e9f4f2453bdbe76f4186f4718041c1edf0ddcb4a15127dfd222e2b6789be60306815a192924b37ba61bf98ec71f7241fe0263385d7d"], 0x18}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x2000000000000008) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @remote}) socket$kcm(0x29, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000440)) openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xda00) 22:19:41 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x0, 0x5, 0x2800}, 0x48) [ 527.340888][T20233] FAULT_INJECTION: forcing a failure. [ 527.340888][T20233] name failslab, interval 1, probability 0, space 0, times 0 [ 527.353619][T20233] CPU: 1 PID: 20233 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 527.363823][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 527.373908][T20233] Call Trace: [ 527.377202][T20233] [ 527.380154][T20233] dump_stack_lvl+0xda/0x130 [ 527.384781][T20233] dump_stack+0x15/0x20 [ 527.388984][T20233] should_fail_ex+0x21f/0x230 [ 527.393678][T20233] ? parse_opts+0xba/0x2b0 [ 527.398141][T20233] __should_failslab+0x92/0xa0 [ 527.402989][T20233] should_failslab+0x9/0x20 [ 527.407595][T20233] slab_pre_alloc_hook+0x38/0x180 [ 527.412661][T20233] ? parse_opts+0xba/0x2b0 [ 527.417104][T20233] __kmem_cache_alloc_node+0x48/0x1d0 [ 527.422664][T20233] ? parse_opts+0xba/0x2b0 [ 527.427109][T20233] __kmalloc_node_track_caller+0x96/0x1a0 [ 527.432851][T20233] ? match_strdup+0x37/0x40 [ 527.437436][T20233] kstrdup+0x3a/0x70 [ 527.441353][T20233] parse_opts+0xba/0x2b0 [ 527.445609][T20233] p9_fd_create+0x46/0x250 [ 527.450107][T20233] p9_client_create+0x595/0xa70 [ 527.454979][T20233] v9fs_session_init+0xf9/0xd90 [ 527.459842][T20233] ? slab_post_alloc_hook+0x8c/0x340 [ 527.465287][T20233] ? v9fs_mount+0x53/0x630 [ 527.469821][T20233] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 527.475487][T20233] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 527.481742][T20233] ? v9fs_mount+0x53/0x630 [ 527.486262][T20233] v9fs_mount+0x69/0x630 [ 527.490611][T20233] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 527.496833][T20233] legacy_get_tree+0x74/0xd0 [ 527.501504][T20233] vfs_get_tree+0x51/0x1b0 [ 527.505944][T20233] do_new_mount+0x203/0x660 [ 527.510550][T20233] path_mount+0x496/0xb30 [ 527.515000][T20233] __se_sys_mount+0x27f/0x2d0 [ 527.519701][T20233] __x64_sys_mount+0x67/0x80 [ 527.524379][T20233] do_syscall_64+0x41/0xc0 [ 527.528831][T20233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 527.534761][T20233] RIP: 0033:0x7fd83d377ae9 [ 527.539182][T20233] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 527.558803][T20233] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 527.567259][T20233] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 527.575243][T20233] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 527.583381][T20233] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x24602, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 22:19:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 527.591393][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.599372][T20233] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 527.607386][T20233] 22:19:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x0, 0x5, 0x2800}, 0x48) 22:19:41 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:41 executing program 5: r0 = socket(0x0, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:41 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 16) 22:19:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x0, 0x5, 0x2800}, 0x48) 22:19:41 executing program 3: socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) [ 527.732167][T20238] macvlan0: entered allmulticast mode [ 527.756454][T20259] FAULT_INJECTION: forcing a failure. [ 527.756454][T20259] name failslab, interval 1, probability 0, space 0, times 0 [ 527.769195][T20259] CPU: 0 PID: 20259 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 527.779296][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 527.789392][T20259] Call Trace: [ 527.792684][T20259] [ 527.795613][T20259] dump_stack_lvl+0xda/0x130 [ 527.800207][T20259] dump_stack+0x15/0x20 [ 527.804388][T20259] should_fail_ex+0x21f/0x230 [ 527.809072][T20259] ? p9_fd_create+0xc6/0x250 [ 527.813682][T20259] __should_failslab+0x92/0xa0 [ 527.818479][T20259] should_failslab+0x9/0x20 [ 527.823041][T20259] slab_pre_alloc_hook+0x38/0x180 [ 527.828194][T20259] ? p9_fd_create+0xc6/0x250 [ 527.832790][T20259] __kmem_cache_alloc_node+0x48/0x1d0 [ 527.838270][T20259] ? p9_fd_create+0xc6/0x250 [ 527.842865][T20259] kmalloc_trace+0x2a/0xa0 [ 527.847283][T20259] p9_fd_create+0xc6/0x250 [ 527.851739][T20259] p9_client_create+0x595/0xa70 [ 527.856594][T20259] v9fs_session_init+0xf9/0xd90 [ 527.861514][T20259] ? slab_post_alloc_hook+0x8c/0x340 [ 527.866885][T20259] ? v9fs_mount+0x53/0x630 [ 527.871347][T20259] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 527.877145][T20259] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 527.883428][T20259] ? v9fs_mount+0x53/0x630 [ 527.887911][T20259] v9fs_mount+0x69/0x630 [ 527.892301][T20259] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 527.898536][T20259] legacy_get_tree+0x74/0xd0 [ 527.903145][T20259] vfs_get_tree+0x51/0x1b0 [ 527.907612][T20259] do_new_mount+0x203/0x660 [ 527.912212][T20259] path_mount+0x496/0xb30 [ 527.916702][T20259] __se_sys_mount+0x27f/0x2d0 [ 527.921593][T20259] __x64_sys_mount+0x67/0x80 [ 527.926269][T20259] do_syscall_64+0x41/0xc0 [ 527.930738][T20259] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 527.936644][T20259] RIP: 0033:0x7fd83d377ae9 [ 527.941107][T20259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 527.960730][T20259] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 527.969309][T20259] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 527.977283][T20259] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 527.985276][T20259] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 527.993255][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.001381][T20259] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 528.009378][T20259] 22:19:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="4e845765b2a247e4e9b20000e5b909c43bdcd7f1428cbe600bf2db87ac1213fde578d64a0fcdfa093171ba98de8b1ad245fd67ef5b7963d6ce8a36570642e2b1b76c6474f31604a2668ca8be30032704e8bf48d5a0366fd14a120213f6f46c9cf9f9f1e3ed98f6c9c78a19f1f83aa94fc9289ab1678397422d01436e8e08e9aa950eb7e0ad5bee9505517820260722cc317a6f96233bb189470a4e9f4f2453bdbe76f4186f4718041c1edf0ddcb4a15127dfd222e2b6789be60306815a192924b37ba61bf98ec71f7241fe0263385d7d"], 0x18}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x2000000000000008) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @remote}) socket$kcm(0x29, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000440)) openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xda00) 22:19:42 executing program 5: r0 = socket(0x0, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x0, 0x2800}, 0x48) 22:19:42 executing program 3: syz_io_uring_setup(0x6007, &(0x7f0000005c80)={0x0, 0x0, 0x200}, &(0x7f0000005d00), &(0x7f0000005d40)) 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 22:19:42 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 17) 22:19:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x0, 0x2800}, 0x48) [ 528.109703][T20268] FAULT_INJECTION: forcing a failure. [ 528.109703][T20268] name failslab, interval 1, probability 0, space 0, times 0 [ 528.122545][T20268] CPU: 0 PID: 20268 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 528.132641][T20268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 528.142770][T20268] Call Trace: [ 528.146075][T20268] [ 528.149064][T20268] dump_stack_lvl+0xda/0x130 [ 528.153676][T20268] dump_stack+0x15/0x20 [ 528.157858][T20268] should_fail_ex+0x21f/0x230 [ 528.162548][T20268] __should_failslab+0x92/0xa0 [ 528.167361][T20268] should_failslab+0x9/0x20 [ 528.171883][T20268] slab_pre_alloc_hook+0x38/0x180 [ 528.177017][T20268] kmem_cache_alloc+0x52/0x220 [ 528.181791][T20268] ? p9_client_prepare_req+0xef/0x830 [ 528.187180][T20268] p9_client_prepare_req+0xef/0x830 [ 528.192467][T20268] ? simple_strtol+0x63/0x70 [ 528.197081][T20268] ? strncmp+0x34/0x70 [ 528.201281][T20268] ? match_token+0x3f5/0x420 [ 528.205887][T20268] ? p9_fd_create+0xc6/0x250 [ 528.210491][T20268] p9_client_rpc+0xf0/0x6f0 [ 528.215036][T20268] ? p9_write_work+0x740/0x740 [ 528.219902][T20268] ? pipe_poll+0x22d/0x250 [ 528.224338][T20268] ? p9_client_create+0x658/0xa70 [ 528.229490][T20268] ? p9_conn_create+0x2ec/0x320 [ 528.234366][T20268] p9_client_create+0x6d1/0xa70 [ 528.239277][T20268] v9fs_session_init+0xf9/0xd90 [ 528.244178][T20268] ? slab_post_alloc_hook+0x8c/0x340 [ 528.249489][T20268] ? v9fs_mount+0x53/0x630 [ 528.253983][T20268] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 528.259786][T20268] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 528.265981][T20268] ? v9fs_mount+0x53/0x630 [ 528.270558][T20268] v9fs_mount+0x69/0x630 [ 528.274939][T20268] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 528.281196][T20268] legacy_get_tree+0x74/0xd0 [ 528.285854][T20268] vfs_get_tree+0x51/0x1b0 [ 528.290313][T20268] do_new_mount+0x203/0x660 [ 528.294855][T20268] path_mount+0x496/0xb30 [ 528.299201][T20268] __se_sys_mount+0x27f/0x2d0 [ 528.304107][T20268] __x64_sys_mount+0x67/0x80 [ 528.308816][T20268] do_syscall_64+0x41/0xc0 [ 528.313279][T20268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 528.319253][T20268] RIP: 0033:0x7fd83d377ae9 [ 528.323697][T20268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 528.343414][T20268] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.351841][T20268] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 22:19:42 executing program 5: r0 = socket(0x0, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:42 executing program 3: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 22:19:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xdaa2) [ 528.359818][T20268] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 528.367853][T20268] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 528.375847][T20268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.383903][T20268] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 528.391931][T20268] 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:42 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 18) 22:19:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000003340), 0xffffffffffffffff) socket(0x0, 0x0, 0x3) syz_genetlink_get_family_id$batadv(0x0, r0) 22:19:42 executing program 5: r0 = socket(0x2, 0x0, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x0, 0x2800}, 0x48) 22:19:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48) [ 528.621452][T20293] FAULT_INJECTION: forcing a failure. [ 528.621452][T20293] name failslab, interval 1, probability 0, space 0, times 0 [ 528.634188][T20293] CPU: 1 PID: 20293 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 528.644299][T20293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 528.654388][T20293] Call Trace: [ 528.657688][T20293] [ 528.660650][T20293] dump_stack_lvl+0xda/0x130 [ 528.665366][T20293] dump_stack+0x15/0x20 22:19:42 executing program 5: r0 = socket(0x2, 0x0, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:42 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) [ 528.669625][T20293] should_fail_ex+0x21f/0x230 [ 528.674455][T20293] ? p9_client_prepare_req+0x284/0x830 [ 528.679962][T20293] __should_failslab+0x92/0xa0 [ 528.684837][T20293] should_failslab+0x9/0x20 [ 528.689394][T20293] slab_pre_alloc_hook+0x38/0x180 [ 528.694470][T20293] ? p9_client_prepare_req+0x284/0x830 [ 528.699977][T20293] ? p9_client_prepare_req+0x284/0x830 [ 528.705528][T20293] __kmem_cache_alloc_node+0x48/0x1d0 [ 528.710940][T20293] ? p9_client_prepare_req+0x284/0x830 [ 528.716438][T20293] __kmalloc+0x95/0x1a0 [ 528.720717][T20293] p9_client_prepare_req+0x284/0x830 [ 528.726045][T20293] ? simple_strtol+0x63/0x70 [ 528.730764][T20293] ? should_fail_ex+0xd1/0x230 [ 528.735618][T20293] ? p9_fd_create+0xc6/0x250 [ 528.738868][ T26] audit: type=1400 audit(1693606782.753:2841): avc: denied { create } for pid=20294 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 528.740231][T20293] p9_client_rpc+0xf0/0x6f0 [ 528.740262][T20293] ? p9_write_work+0x740/0x740 22:19:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 528.740312][T20293] ? pipe_poll+0x22d/0x250 [ 528.773936][T20293] ? p9_client_create+0x658/0xa70 [ 528.779000][T20293] ? p9_conn_create+0x2ec/0x320 [ 528.783899][T20293] p9_client_create+0x6d1/0xa70 [ 528.788874][T20293] v9fs_session_init+0xf9/0xd90 [ 528.793776][T20293] ? slab_post_alloc_hook+0x8c/0x340 [ 528.799109][T20293] ? v9fs_mount+0x53/0x630 [ 528.803605][T20293] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 528.809275][T20293] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 528.815562][T20293] ? v9fs_mount+0x53/0x630 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 528.820049][T20293] v9fs_mount+0x69/0x630 [ 528.824351][T20293] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 528.830603][T20293] legacy_get_tree+0x74/0xd0 [ 528.835268][T20293] vfs_get_tree+0x51/0x1b0 [ 528.839863][T20293] do_new_mount+0x203/0x660 [ 528.844528][T20293] path_mount+0x496/0xb30 [ 528.848904][T20293] __se_sys_mount+0x27f/0x2d0 [ 528.853694][T20293] __x64_sys_mount+0x67/0x80 [ 528.858328][T20293] do_syscall_64+0x41/0xc0 [ 528.862815][T20293] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 528.868849][T20293] RIP: 0033:0x7fd83d377ae9 [ 528.873282][T20293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 528.892927][T20293] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.901453][T20293] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 528.909455][T20293] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:42 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 22:19:42 executing program 5: r0 = socket(0x2, 0x0, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:42 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 22:19:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) [ 528.917459][T20293] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 528.925464][T20293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.933465][T20293] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 528.941471][T20293] 22:19:43 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 22:19:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x5411, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}}) 22:19:43 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 19) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05012dbd7000fddbdf25010000000c00060002000000000000000800010003"], 0x48}}, 0x0) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 529.032384][T20338] FAULT_INJECTION: forcing a failure. [ 529.032384][T20338] name failslab, interval 1, probability 0, space 0, times 0 [ 529.045163][T20338] CPU: 1 PID: 20338 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 529.055335][T20338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 529.065538][T20338] Call Trace: [ 529.068847][T20338] [ 529.071800][T20338] dump_stack_lvl+0xda/0x130 [ 529.076427][T20338] dump_stack+0x15/0x20 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 2: socketpair(0x29, 0x2, 0x0, &(0x7f0000000080)) [ 529.080607][T20338] should_fail_ex+0x21f/0x230 [ 529.084297][T20345] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 529.085290][T20338] ? p9_client_prepare_req+0x364/0x830 [ 529.100129][T20338] __should_failslab+0x92/0xa0 [ 529.104933][T20338] should_failslab+0x9/0x20 [ 529.109498][T20338] slab_pre_alloc_hook+0x38/0x180 [ 529.114559][T20338] ? p9_client_prepare_req+0x364/0x830 [ 529.120135][T20338] ? p9_client_prepare_req+0x364/0x830 [ 529.125616][T20338] __kmem_cache_alloc_node+0x48/0x1d0 [ 529.131074][T20338] ? p9_client_prepare_req+0x364/0x830 [ 529.136582][T20338] __kmalloc+0x95/0x1a0 [ 529.140775][T20338] p9_client_prepare_req+0x364/0x830 [ 529.146116][T20338] ? should_fail_ex+0xd1/0x230 [ 529.150923][T20338] ? p9_fd_create+0xc6/0x250 [ 529.155552][T20338] p9_client_rpc+0xf0/0x6f0 [ 529.160142][T20338] ? p9_write_work+0x740/0x740 [ 529.164946][T20338] ? pipe_poll+0x22d/0x250 [ 529.169464][T20338] ? p9_client_create+0x658/0xa70 [ 529.174605][T20338] ? p9_conn_create+0x2ec/0x320 [ 529.179602][T20338] p9_client_create+0x6d1/0xa70 [ 529.184488][T20338] v9fs_session_init+0xf9/0xd90 [ 529.189377][T20338] ? slab_post_alloc_hook+0x8c/0x340 [ 529.194693][T20338] ? v9fs_mount+0x53/0x630 [ 529.199149][T20338] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 529.204821][T20338] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 529.211067][T20338] ? v9fs_mount+0x53/0x630 [ 529.215632][T20338] v9fs_mount+0x69/0x630 [ 529.219908][T20338] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 529.226238][T20338] legacy_get_tree+0x74/0xd0 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006f00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000500)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) 22:19:43 executing program 5: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:43 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 529.230958][T20338] vfs_get_tree+0x51/0x1b0 [ 529.235403][T20338] do_new_mount+0x203/0x660 [ 529.239977][T20338] path_mount+0x496/0xb30 [ 529.244358][T20338] __se_sys_mount+0x27f/0x2d0 [ 529.249095][T20338] __x64_sys_mount+0x67/0x80 [ 529.253749][T20338] do_syscall_64+0x41/0xc0 [ 529.258273][T20338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 529.264214][T20338] RIP: 0033:0x7fd83d377ae9 [ 529.268735][T20338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 529.288416][T20338] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 529.296874][T20338] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 529.304885][T20338] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 529.312894][T20338] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 529.320969][T20338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:43 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 22:19:43 executing program 5: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) [ 529.329051][T20338] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 529.337051][T20338] 22:19:43 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 20) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 22:19:43 executing program 5: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 0: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8953, &(0x7f0000000000)) 22:19:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000440)='S', 0x1) 22:19:43 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 21) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 529.424757][T20359] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 529.447845][T20378] 9p: Unknown access argument user": -22 22:19:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) 22:19:43 executing program 3: sigaltstack(&(0x7f0000000500)={0x0}, 0x0) 22:19:43 executing program 0: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8953, &(0x7f0000000000)) 22:19:43 executing program 5: socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb12994784ec53a97250b5c41dc759ec6d7570661db3715eeab7232e24328fb2fbf34d8644a78316c51f76b8c153f0f645b13592760ea286c3910f0228ee5b3afc026f91175553813758112c09dd694c2f45558d3ca19807174e2c06d6cc5663323b3e91c10b06119bb5a66422863bf64406109be0f9e8726bed71b46d24460d09e566eb2702"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000100), 0x0) 22:19:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 22:19:43 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 22) [ 529.540855][T20389] 9p: Unknown access argument user": -22 22:19:43 executing program 5: socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:43 executing program 0: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8953, &(0x7f0000000000)) 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 5: socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@ra={0x94, 0x4}]}}}}}) 22:19:43 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getdents(r0, &(0x7f0000002200)=""/28, 0x1c) 22:19:43 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 22:19:43 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) [ 529.654536][T20410] 9p: Unknown access argument user": -22 22:19:43 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 23) 22:19:43 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 22:19:43 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) [ 529.692610][T20412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20412 comm=syz-executor.1 22:19:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) 22:19:43 executing program 2: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x4) 22:19:43 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) [ 529.783976][T20421] FAULT_INJECTION: forcing a failure. [ 529.783976][T20421] name failslab, interval 1, probability 0, space 0, times 0 [ 529.796682][T20421] CPU: 1 PID: 20421 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 529.806838][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 529.816928][T20421] Call Trace: [ 529.820233][T20421] [ 529.823177][T20421] dump_stack_lvl+0xda/0x130 [ 529.827968][T20421] dump_stack+0x15/0x20 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 529.832221][T20421] should_fail_ex+0x21f/0x230 [ 529.837064][T20421] ? p9pdu_readf+0xf54/0x15d0 [ 529.841790][T20421] __should_failslab+0x92/0xa0 [ 529.846600][T20421] should_failslab+0x9/0x20 [ 529.851151][T20421] slab_pre_alloc_hook+0x38/0x180 [ 529.856383][T20421] ? p9pdu_readf+0xf54/0x15d0 [ 529.861160][T20421] ? p9pdu_readf+0xf54/0x15d0 [ 529.865978][T20421] __kmem_cache_alloc_node+0x48/0x1d0 [ 529.871152][T20433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20433 comm=syz-executor.1 22:19:43 executing program 2: pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={0x0}) [ 529.871489][T20421] ? p9pdu_readf+0xf54/0x15d0 [ 529.888957][T20421] __kmalloc+0x95/0x1a0 [ 529.893148][T20421] p9pdu_readf+0xf54/0x15d0 [ 529.897735][T20421] ? p9_client_rpc+0x51f/0x6f0 [ 529.902534][T20421] ? p9_write_work+0x740/0x740 [ 529.907402][T20421] ? pipe_poll+0x22d/0x250 [ 529.911921][T20421] ? p9_client_create+0x658/0xa70 [ 529.916970][T20421] ? p9_conn_create+0x2ec/0x320 [ 529.921865][T20421] p9_client_create+0x71b/0xa70 [ 529.926776][T20421] v9fs_session_init+0xf9/0xd90 22:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:43 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x410300, 0x0) [ 529.931669][T20421] ? slab_post_alloc_hook+0x8c/0x340 [ 529.937034][T20421] ? v9fs_mount+0x53/0x630 [ 529.941501][T20421] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 529.947186][T20421] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 529.953562][T20421] ? v9fs_mount+0x53/0x630 [ 529.958101][T20421] v9fs_mount+0x69/0x630 [ 529.962467][T20421] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 529.968738][T20421] legacy_get_tree+0x74/0xd0 [ 529.973394][T20421] vfs_get_tree+0x51/0x1b0 [ 529.977865][T20421] do_new_mount+0x203/0x660 22:19:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) [ 529.980676][T20437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20437 comm=syz-executor.1 [ 529.982393][T20421] path_mount+0x496/0xb30 [ 529.999596][T20421] __se_sys_mount+0x27f/0x2d0 [ 530.004321][T20421] __x64_sys_mount+0x67/0x80 [ 530.008955][T20421] do_syscall_64+0x41/0xc0 [ 530.013394][T20421] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 530.019388][T20421] RIP: 0033:0x7fd83d377ae9 [ 530.023893][T20421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 530.043551][T20421] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 530.051997][T20421] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 530.060036][T20421] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 530.068031][T20421] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 530.076029][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:44 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 22:19:44 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 24) 22:19:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec0008000000000000000000d3b7ad963bd0f47b3a4c78d11ec367c78d65bb0283282f80ee3832098db70f723deca3e59d9b6a98bd1a66ea278aaeee3a63d14dfe285f28eb129947"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:44 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 22:19:44 executing program 3: pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0xfffffffffffffff8}, 0x0, 0x0) [ 530.084122][T20421] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 530.092107][T20421] 22:19:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:44 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 22:19:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) [ 530.189179][T20462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20462 comm=syz-executor.1 [ 530.197659][T20456] FAULT_INJECTION: forcing a failure. [ 530.197659][T20456] name failslab, interval 1, probability 0, space 0, times 0 [ 530.214794][T20456] CPU: 0 PID: 20456 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 530.224961][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 530.235045][T20456] Call Trace: 22:19:44 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) 22:19:44 executing program 2: syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x0) 22:19:44 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) 22:19:44 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x8003) 22:19:44 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) [ 530.238344][T20456] [ 530.241295][T20456] dump_stack_lvl+0xda/0x130 [ 530.245911][T20456] dump_stack+0x15/0x20 [ 530.250100][T20456] should_fail_ex+0x21f/0x230 [ 530.254818][T20456] __should_failslab+0x92/0xa0 [ 530.259635][T20456] should_failslab+0x9/0x20 [ 530.264219][T20456] slab_pre_alloc_hook+0x38/0x180 [ 530.269309][T20456] kmem_cache_alloc_node+0x54/0x240 [ 530.274537][T20456] ? __kmem_cache_create+0x18c/0x6c0 [ 530.279953][T20456] __kmem_cache_create+0x18c/0x6c0 [ 530.285113][T20456] ? kmem_cache_alloc+0x10f/0x220 [ 530.290185][T20456] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 530.296243][T20456] kmem_cache_create_usercopy+0x156/0x2b0 [ 530.302020][T20456] p9_client_create+0x80c/0xa70 [ 530.306927][T20456] v9fs_session_init+0xf9/0xd90 [ 530.311898][T20456] ? slab_post_alloc_hook+0x8c/0x340 [ 530.317230][T20456] ? v9fs_mount+0x53/0x630 [ 530.321707][T20456] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 530.327432][T20456] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 530.333648][T20456] ? v9fs_mount+0x53/0x630 [ 530.338120][T20456] v9fs_mount+0x69/0x630 [ 530.342489][T20456] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 530.348762][T20456] legacy_get_tree+0x74/0xd0 [ 530.353432][T20456] vfs_get_tree+0x51/0x1b0 [ 530.357916][T20456] do_new_mount+0x203/0x660 [ 530.362471][T20456] path_mount+0x496/0xb30 [ 530.367021][T20456] __se_sys_mount+0x27f/0x2d0 [ 530.371780][T20456] __x64_sys_mount+0x67/0x80 [ 530.376436][T20456] do_syscall_64+0x41/0xc0 [ 530.380906][T20456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 530.386854][T20456] RIP: 0033:0x7fd83d377ae9 [ 530.391318][T20456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 530.411005][T20456] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 530.419472][T20456] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 530.427549][T20456] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 530.435522][T20456] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 530.443556][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.451533][T20456] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 530.459507][T20456] [ 530.462770][T20456] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 530.471007][T20456] CPU: 0 PID: 20456 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 530.481179][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 530.491303][T20456] Call Trace: [ 530.494586][T20456] [ 530.497515][T20456] dump_stack_lvl+0xda/0x130 [ 530.502112][T20456] dump_stack+0x15/0x20 [ 530.506278][T20456] kmem_cache_create_usercopy+0x237/0x2b0 [ 530.512029][T20456] p9_client_create+0x80c/0xa70 [ 530.516912][T20456] v9fs_session_init+0xf9/0xd90 [ 530.521780][T20456] ? slab_post_alloc_hook+0x8c/0x340 [ 530.527079][T20456] ? v9fs_mount+0x53/0x630 [ 530.531561][T20456] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 530.537221][T20456] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 530.543443][T20456] ? v9fs_mount+0x53/0x630 [ 530.547927][T20456] v9fs_mount+0x69/0x630 [ 530.552189][T20456] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 530.558376][T20456] legacy_get_tree+0x74/0xd0 [ 530.563006][T20456] vfs_get_tree+0x51/0x1b0 [ 530.567493][T20456] do_new_mount+0x203/0x660 [ 530.572117][T20456] path_mount+0x496/0xb30 [ 530.576459][T20456] __se_sys_mount+0x27f/0x2d0 [ 530.581226][T20456] __x64_sys_mount+0x67/0x80 [ 530.585868][T20456] do_syscall_64+0x41/0xc0 [ 530.590304][T20456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 530.596210][T20456] RIP: 0033:0x7fd83d377ae9 [ 530.600683][T20456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 530.620304][T20456] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 530.628762][T20456] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:44 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) 22:19:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:44 executing program 3: clock_gettime(0x3, &(0x7f0000000400)) 22:19:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 22:19:44 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 25) 22:19:44 executing program 0: socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8953, &(0x7f0000000000)) [ 530.636740][T20456] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 530.644739][T20456] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 530.652763][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.660820][T20456] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 530.668847][T20456] [ 530.673489][T20456] 9p: Unknown access argument user": -22 22:19:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 22:19:44 executing program 0: socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8953, &(0x7f0000000000)) 22:19:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x28}}, 0x0) 22:19:44 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}) [ 530.710988][T20480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20480 comm=syz-executor.1 22:19:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)={0x3c, r1, 0x11, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xfed1, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 22:19:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x28}}, 0x0) [ 530.772251][T20482] FAULT_INJECTION: forcing a failure. [ 530.772251][T20482] name failslab, interval 1, probability 0, space 0, times 0 [ 530.785188][T20482] CPU: 0 PID: 20482 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 530.795339][T20482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 530.804326][T20499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.805410][T20482] Call Trace: [ 530.805419][T20482] [ 530.805427][T20482] dump_stack_lvl+0xda/0x130 [ 530.825566][T20482] dump_stack+0x15/0x20 [ 530.829752][T20482] should_fail_ex+0x21f/0x230 [ 530.834458][T20482] __should_failslab+0x92/0xa0 [ 530.839259][T20482] should_failslab+0x9/0x20 [ 530.843836][T20482] slab_pre_alloc_hook+0x38/0x180 [ 530.848895][T20482] kmem_cache_alloc+0x52/0x220 [ 530.853793][T20482] ? __kernfs_new_node+0x6a/0x380 [ 530.858866][T20482] __kernfs_new_node+0x6a/0x380 [ 530.863873][T20482] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 530.870018][T20482] kernfs_create_dir_ns+0x62/0x150 [ 530.875172][T20482] sysfs_create_dir_ns+0xd7/0x1d0 [ 530.880282][T20482] kobject_add_internal+0x3eb/0x730 [ 530.885502][T20482] kobject_init_and_add+0x15e/0x200 [ 530.890804][T20482] ? kernfs_find_ns+0x2ac/0x2e0 [ 530.895692][T20482] ? up_write+0x30/0xe0 [ 530.899873][T20482] ? kernfs_remove_by_name_ns+0xc4/0xe0 [ 530.905517][T20482] sysfs_slab_add+0x7d/0x2a0 [ 530.910167][T20482] __kmem_cache_create+0x533/0x6c0 [ 530.915355][T20482] ? kmem_cache_alloc+0x10f/0x220 [ 530.920520][T20482] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 530.926481][T20482] kmem_cache_create_usercopy+0x156/0x2b0 [ 530.932234][T20482] p9_client_create+0x80c/0xa70 [ 530.937175][T20482] v9fs_session_init+0xf9/0xd90 [ 530.942102][T20482] ? slab_post_alloc_hook+0x8c/0x340 [ 530.947404][T20482] ? v9fs_mount+0x53/0x630 [ 530.951846][T20482] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 530.957573][T20482] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 530.963805][T20482] ? v9fs_mount+0x53/0x630 [ 530.968239][T20482] v9fs_mount+0x69/0x630 [ 530.972729][T20482] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 530.979027][T20482] legacy_get_tree+0x74/0xd0 [ 530.983680][T20482] vfs_get_tree+0x51/0x1b0 [ 530.988253][T20482] do_new_mount+0x203/0x660 [ 530.992825][T20482] path_mount+0x496/0xb30 [ 530.997242][T20482] __se_sys_mount+0x27f/0x2d0 [ 531.001932][T20482] __x64_sys_mount+0x67/0x80 [ 531.006585][T20482] do_syscall_64+0x41/0xc0 [ 531.011066][T20482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 531.016981][T20482] RIP: 0033:0x7fd83d377ae9 [ 531.021419][T20482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 531.041088][T20482] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.049524][T20482] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 531.057629][T20482] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 531.065605][T20482] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 531.073583][T20482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.081633][T20482] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 531.089618][T20482] [ 531.092758][T20482] kobject: kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 531.102891][T20482] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 531.110952][T20482] CPU: 0 PID: 20482 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 531.121055][T20482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 531.131147][T20482] Call Trace: [ 531.134426][T20482] [ 531.137414][T20482] dump_stack_lvl+0xda/0x130 [ 531.142009][T20482] dump_stack+0x15/0x20 [ 531.146167][T20482] kmem_cache_create_usercopy+0x237/0x2b0 [ 531.151961][T20482] p9_client_create+0x80c/0xa70 [ 531.156841][T20482] v9fs_session_init+0xf9/0xd90 [ 531.161696][T20482] ? slab_post_alloc_hook+0x8c/0x340 [ 531.167078][T20482] ? v9fs_mount+0x53/0x630 [ 531.171522][T20482] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 531.177176][T20482] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 531.183370][T20482] ? v9fs_mount+0x53/0x630 [ 531.187842][T20482] v9fs_mount+0x69/0x630 [ 531.192104][T20482] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 531.198366][T20482] legacy_get_tree+0x74/0xd0 [ 531.203087][T20482] vfs_get_tree+0x51/0x1b0 [ 531.207541][T20482] do_new_mount+0x203/0x660 [ 531.212069][T20482] path_mount+0x496/0xb30 [ 531.216437][T20482] __se_sys_mount+0x27f/0x2d0 [ 531.221224][T20482] __x64_sys_mount+0x67/0x80 [ 531.225876][T20482] do_syscall_64+0x41/0xc0 [ 531.230388][T20482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 531.236306][T20482] RIP: 0033:0x7fd83d377ae9 [ 531.240737][T20482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 531.260426][T20482] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:19:45 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}) 22:19:45 executing program 3: semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x6}, {0x1, 0x80, 0x1000}], 0x2, 0x0) 22:19:45 executing program 0: socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8953, &(0x7f0000000000)) 22:19:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:45 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 26) 22:19:45 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) 22:19:45 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200) [ 531.268881][T20482] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 531.276855][T20482] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 531.284831][T20482] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 531.292803][T20482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.300781][T20482] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 531.308794][T20482] [ 531.312994][T20482] 9p: Unknown access argument user": -22 22:19:45 executing program 2: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0xffffffff, 0x9, 0x4, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x2, 0xb, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x8fc773d504b3188f, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x706, 0x0, &(0x7f0000000180), 0x40f00, 0x40, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r2, 0x1, r3, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x4, 0xa, 0x8}, {0x1, 0x4, 0x8, 0x8}], 0x10, 0x30db}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4b}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xc, 0x5, 0x7, 0xfffffffffffffff8, 0x83e96abb7739233a}, @ldst={0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0xffff0000, 0xec, &(0x7f0000000580)=""/236, 0x40f00, 0x5, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x6, 0x8, 0x80000}, 0x10, r9, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000d40)=[{0x5, 0x4, 0x2, 0x7}, {0x3, 0x2, 0x10, 0x6}], 0x10, 0x5}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e40)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x1, 0x3, 0x5, 0xa, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0xc, 0xa, 0x9, 0xfffffffffffffef8, 0xfffffffffffffffc}]}, &(0x7f0000000f00)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, 0x0, r7, 0x8, &(0x7f0000000f40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0xf, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{0x5, 0x5, 0x1, 0x2}, {0x1, 0x2, 0x6, 0x1}], 0x10, 0x3}, 0x90) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r10}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@exit, @call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000001180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', r13, 0x1b, r11, 0x8, &(0x7f00000014c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x10, 0x3b, 0x7}, 0x10, r6, 0x0, 0x2, &(0x7f0000001540)=[r11, r3, r3, r12], &(0x7f0000001580)=[{0x0, 0x3, 0x7, 0x3}, {0x0, 0x5, 0x9, 0x6}]}, 0x90) 22:19:45 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, 0x0) 22:19:45 executing program 5: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}) 22:19:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}}, 0x0) 22:19:45 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 27) [ 531.358285][T20509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20509 comm=syz-executor.1 [ 531.375733][T20510] 9p: Unknown access argument user": -22 22:19:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007000000000000000000ec000800000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:45 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, 0x0) 22:19:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, r1, 0x1}, 0x14}}, 0x0) 22:19:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2}]}, 0x18}}, 0x0) [ 531.453250][T20522] FAULT_INJECTION: forcing a failure. [ 531.453250][T20522] name failslab, interval 1, probability 0, space 0, times 0 [ 531.461227][T20527] validate_nla: 6 callbacks suppressed [ 531.461245][T20527] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 531.466032][T20522] CPU: 0 PID: 20522 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 531.471409][T20527] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 22:19:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, r1, 0x1}, 0x14}}, 0x0) 22:19:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, r1, 0x1}, 0x14}}, 0x0) 22:19:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 531.479433][T20522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 531.507690][T20522] Call Trace: [ 531.510990][T20522] [ 531.513968][T20522] dump_stack_lvl+0xda/0x130 [ 531.518602][T20522] dump_stack+0x15/0x20 [ 531.522783][T20522] should_fail_ex+0x21f/0x230 [ 531.527523][T20522] __should_failslab+0x92/0xa0 [ 531.532364][T20522] should_failslab+0x9/0x20 [ 531.536946][T20522] slab_pre_alloc_hook+0x38/0x180 [ 531.542061][T20522] kmem_cache_alloc+0x52/0x220 [ 531.546931][T20522] ? __kernfs_new_node+0x6a/0x380 22:19:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, r1, 0x1}, 0x14}}, 0x0) [ 531.552124][T20522] ? rb_insert_color+0x6a/0x290 [ 531.557023][T20522] __kernfs_new_node+0x6a/0x380 [ 531.561926][T20522] ? kernfs_add_one+0x330/0x390 [ 531.564898][T20534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20534 comm=syz-executor.1 [ 531.566799][T20522] kernfs_new_node+0x5f/0xd0 [ 531.584182][T20522] __kernfs_create_file+0x49/0x180 [ 531.589355][T20522] ? slab_attr_show+0x20/0x20 [ 531.594074][T20522] sysfs_add_file_mode_ns+0x136/0x1b0 22:19:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) [ 531.599638][T20522] internal_create_group+0x2e4/0x800 [ 531.604966][T20522] sysfs_create_group+0x1f/0x30 [ 531.609857][T20522] sysfs_slab_add+0x163/0x2a0 [ 531.614958][T20522] __kmem_cache_create+0x533/0x6c0 [ 531.620272][T20522] ? kmem_cache_alloc+0x10f/0x220 [ 531.625334][T20522] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 531.631341][T20522] kmem_cache_create_usercopy+0x156/0x2b0 [ 531.637410][T20522] p9_client_create+0x80c/0xa70 [ 531.642381][T20522] v9fs_session_init+0xf9/0xd90 [ 531.647278][T20522] ? slab_post_alloc_hook+0x8c/0x340 [ 531.652654][T20522] ? v9fs_mount+0x53/0x630 [ 531.657042][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.657193][T20522] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 531.669101][T20542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20542 comm=syz-executor.1 [ 531.672009][T20522] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 531.672058][T20522] ? v9fs_mount+0x53/0x630 [ 531.695544][T20522] v9fs_mount+0x69/0x630 22:19:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 531.699920][T20522] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 531.706267][T20522] legacy_get_tree+0x74/0xd0 [ 531.710938][T20522] vfs_get_tree+0x51/0x1b0 [ 531.715393][T20522] do_new_mount+0x203/0x660 [ 531.719982][T20522] path_mount+0x496/0xb30 [ 531.724373][T20522] __se_sys_mount+0x27f/0x2d0 [ 531.729150][T20522] __x64_sys_mount+0x67/0x80 [ 531.733822][T20522] do_syscall_64+0x41/0xc0 [ 531.738279][T20522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 531.744210][T20522] RIP: 0033:0x7fd83d377ae9 [ 531.748667][T20522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 531.768393][T20522] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.776882][T20522] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 531.784999][T20522] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 531.793009][T20522] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 531.801058][T20522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.809107][T20522] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 531.817220][T20522] [ 531.822382][T20522] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 531.830374][T20522] CPU: 0 PID: 20522 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 531.840505][T20522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 531.850576][T20522] Call Trace: [ 531.853879][T20522] [ 531.856808][T20522] dump_stack_lvl+0xda/0x130 [ 531.861535][T20522] dump_stack+0x15/0x20 [ 531.865739][T20522] kmem_cache_create_usercopy+0x237/0x2b0 [ 531.871553][T20522] p9_client_create+0x80c/0xa70 [ 531.876482][T20522] v9fs_session_init+0xf9/0xd90 [ 531.881340][T20522] ? slab_post_alloc_hook+0x8c/0x340 [ 531.886631][T20522] ? v9fs_mount+0x53/0x630 [ 531.891097][T20522] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 531.896754][T20522] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 531.902928][T20522] ? v9fs_mount+0x53/0x630 [ 531.907401][T20522] v9fs_mount+0x69/0x630 [ 531.911678][T20522] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 531.917957][T20522] legacy_get_tree+0x74/0xd0 [ 531.922562][T20522] vfs_get_tree+0x51/0x1b0 [ 531.927015][T20522] do_new_mount+0x203/0x660 [ 531.931603][T20522] path_mount+0x496/0xb30 [ 531.935973][T20522] __se_sys_mount+0x27f/0x2d0 [ 531.940756][T20522] __x64_sys_mount+0x67/0x80 [ 531.945410][T20522] do_syscall_64+0x41/0xc0 [ 531.949905][T20522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 531.955861][T20522] RIP: 0033:0x7fd83d377ae9 [ 531.960274][T20522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 531.979951][T20522] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.988364][T20522] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 531.996367][T20522] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:46 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 28) 22:19:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 22:19:46 executing program 2: shmat(0x0, &(0x7f0000c00000/0x400000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 22:19:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:46 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, 0x0) [ 532.004340][T20522] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 532.012319][T20522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.020333][T20522] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 532.028339][T20522] [ 532.032408][T20522] 9p: Unknown access argument user": -22 22:19:46 executing program 5: pipe2$watch_queue(&(0x7f0000004600), 0x80) 22:19:46 executing program 2: openat$hwrng(0xffffffffffffff9c, 0x0, 0x199542, 0x0) 22:19:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c61"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 532.057185][T20551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20551 comm=syz-executor.1 22:19:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 22:19:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xe, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 532.097869][T20557] FAULT_INJECTION: forcing a failure. [ 532.097869][T20557] name failslab, interval 1, probability 0, space 0, times 0 [ 532.110628][T20557] CPU: 0 PID: 20557 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 532.120872][T20557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 532.130954][T20557] Call Trace: [ 532.134419][T20557] [ 532.137376][T20557] dump_stack_lvl+0xda/0x130 [ 532.142085][T20557] dump_stack+0x15/0x20 22:19:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}}}}) [ 532.146448][T20557] should_fail_ex+0x21f/0x230 [ 532.151207][T20557] __should_failslab+0x92/0xa0 [ 532.156016][T20557] should_failslab+0x9/0x20 [ 532.160644][T20557] slab_pre_alloc_hook+0x38/0x180 [ 532.165804][T20557] kmem_cache_alloc+0x52/0x220 [ 532.170625][T20557] ? __kernfs_new_node+0x6a/0x380 [ 532.175769][T20557] __kernfs_new_node+0x6a/0x380 [ 532.180661][T20557] ? rb_insert_color+0x280/0x290 [ 532.185673][T20557] ? up_write+0x30/0xe0 [ 532.188851][T20568] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 532.189876][T20557] ? kernfs_activate+0x252/0x270 [ 532.189919][T20557] kernfs_new_node+0x5f/0xd0 [ 532.197970][T20568] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.202896][T20557] __kernfs_create_file+0x49/0x180 [ 532.222095][T20557] ? slab_attr_show+0x20/0x20 [ 532.226844][T20557] sysfs_add_file_mode_ns+0x136/0x1b0 [ 532.232278][T20557] internal_create_group+0x2e4/0x800 [ 532.237603][T20557] sysfs_create_group+0x1f/0x30 [ 532.242486][T20557] sysfs_slab_add+0x163/0x2a0 [ 532.247201][T20557] __kmem_cache_create+0x533/0x6c0 [ 532.252406][T20557] ? kmem_cache_alloc+0x10f/0x220 [ 532.257476][T20557] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 532.263499][T20557] kmem_cache_create_usercopy+0x156/0x2b0 [ 532.269384][T20557] p9_client_create+0x80c/0xa70 [ 532.274356][T20557] v9fs_session_init+0xf9/0xd90 [ 532.279249][T20557] ? slab_post_alloc_hook+0x8c/0x340 [ 532.284624][T20557] ? v9fs_mount+0x53/0x630 [ 532.289143][T20557] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 532.294878][T20557] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.301083][T20557] ? v9fs_mount+0x53/0x630 [ 532.305674][T20557] v9fs_mount+0x69/0x630 [ 532.309959][T20557] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.316157][T20557] legacy_get_tree+0x74/0xd0 [ 532.320780][T20557] vfs_get_tree+0x51/0x1b0 [ 532.325256][T20557] do_new_mount+0x203/0x660 [ 532.329786][T20557] path_mount+0x496/0xb30 [ 532.334276][T20557] __se_sys_mount+0x27f/0x2d0 [ 532.339005][T20557] __x64_sys_mount+0x67/0x80 [ 532.343623][T20557] do_syscall_64+0x41/0xc0 [ 532.348066][T20557] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 532.354038][T20557] RIP: 0033:0x7fd83d377ae9 [ 532.358467][T20557] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 532.378108][T20557] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.386609][T20557] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 532.394580][T20557] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 532.402556][T20557] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 532.410589][T20557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.418565][T20557] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 532.426557][T20557] [ 532.430653][T20557] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 532.438636][T20557] CPU: 0 PID: 20557 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 532.448894][T20557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 532.458961][T20557] Call Trace: [ 532.462276][T20557] [ 532.465248][T20557] dump_stack_lvl+0xda/0x130 [ 532.469921][T20557] dump_stack+0x15/0x20 [ 532.474084][T20557] kmem_cache_create_usercopy+0x237/0x2b0 [ 532.479828][T20557] p9_client_create+0x80c/0xa70 [ 532.484738][T20557] v9fs_session_init+0xf9/0xd90 [ 532.489597][T20557] ? slab_post_alloc_hook+0x8c/0x340 [ 532.494957][T20557] ? v9fs_mount+0x53/0x630 [ 532.499515][T20557] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 532.505156][T20557] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.511325][T20557] ? v9fs_mount+0x53/0x630 [ 532.515765][T20557] v9fs_mount+0x69/0x630 [ 532.520081][T20557] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.526296][T20557] legacy_get_tree+0x74/0xd0 [ 532.530924][T20557] vfs_get_tree+0x51/0x1b0 [ 532.535352][T20557] do_new_mount+0x203/0x660 [ 532.539911][T20557] path_mount+0x496/0xb30 [ 532.544277][T20557] __se_sys_mount+0x27f/0x2d0 [ 532.549009][T20557] __x64_sys_mount+0x67/0x80 [ 532.553611][T20557] do_syscall_64+0x41/0xc0 [ 532.558033][T20557] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 532.564026][T20557] RIP: 0033:0x7fd83d377ae9 [ 532.568532][T20557] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 532.588253][T20557] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:19:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c61"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 532.596764][T20557] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 532.604751][T20557] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 532.612734][T20557] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 532.620784][T20557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.622092][T20574] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 532.628802][T20557] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 532.628826][T20557] 22:19:46 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 29) 22:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b48090987f70e06d038e7ff7fc6e5539b326d078b089b0708356d090890e0878f0e1ac6e7049b3366959b619a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d14ad546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c32fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b887b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfddf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675dde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a12ff1210465483cd3b2d7839f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ef66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe430013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c75a4c20e3dd5484b4d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d68ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949dfe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 22:19:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val, @val={0x5, 0x0, 0x0, 0x0, 0x9801}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x198, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x0, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x29, "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"}]}}}}}, 0xfdef) 22:19:46 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(0x0, 0x80) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x201}, 0x51}, 0x1, 0x0, 0x0, 0x840}, 0x0) 22:19:46 executing program 5: syz_clone3(&(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 532.630699][T20557] 9p: Unknown access argument user": -22 [ 532.636963][T20574] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.683530][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 22:19:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000bc8701d0606000008000300", @ANYRES32=r3, @ANYBLOB="080005000c"], 0x24}}, 0x0) 22:19:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 532.724771][T20584] FAULT_INJECTION: forcing a failure. [ 532.724771][T20584] name failslab, interval 1, probability 0, space 0, times 0 [ 532.737703][T20584] CPU: 0 PID: 20584 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 532.747804][T20584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 532.757960][T20584] Call Trace: [ 532.761255][T20584] [ 532.764260][T20584] dump_stack_lvl+0xda/0x130 [ 532.768881][T20584] dump_stack+0x15/0x20 22:19:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c61"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val, @val={0x5, 0x0, 0x0, 0x0, 0x9801}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x198, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x0, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x29, "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"}]}}}}}, 0xfdef) 22:19:46 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 532.773127][T20584] should_fail_ex+0x21f/0x230 [ 532.777908][T20584] __should_failslab+0x92/0xa0 [ 532.777948][T20584] should_failslab+0x9/0x20 [ 532.777972][T20584] slab_pre_alloc_hook+0x38/0x180 [ 532.778000][T20584] kmem_cache_alloc+0x52/0x220 [ 532.778025][T20584] ? __kernfs_new_node+0x6a/0x380 [ 532.778124][T20584] __kernfs_new_node+0x6a/0x380 [ 532.778160][T20584] ? rb_insert_color+0x6a/0x290 [ 532.778194][T20584] ? up_write+0x30/0xe0 [ 532.778308][T20584] ? kernfs_activate+0x252/0x270 [ 532.778343][T20584] kernfs_new_node+0x5f/0xd0 [ 532.778381][T20584] __kernfs_create_file+0x49/0x180 [ 532.778419][T20584] ? slab_attr_show+0x20/0x20 [ 532.778478][T20584] sysfs_add_file_mode_ns+0x136/0x1b0 [ 532.778523][T20584] internal_create_group+0x2e4/0x800 [ 532.778592][T20584] sysfs_create_group+0x1f/0x30 [ 532.778617][T20584] sysfs_slab_add+0x163/0x2a0 [ 532.778650][T20584] __kmem_cache_create+0x533/0x6c0 [ 532.778707][T20584] ? kmem_cache_alloc+0x10f/0x220 [ 532.778732][T20584] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 532.778772][T20584] kmem_cache_create_usercopy+0x156/0x2b0 [ 532.778854][T20584] p9_client_create+0x80c/0xa70 [ 532.778882][T20584] v9fs_session_init+0xf9/0xd90 [ 532.778906][T20584] ? slab_post_alloc_hook+0x8c/0x340 22:19:46 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 30) 22:19:46 executing program 5: r0 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 532.778928][T20584] ? v9fs_mount+0x53/0x630 [ 532.778994][T20584] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 532.779023][T20584] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.779102][T20584] ? v9fs_mount+0x53/0x630 [ 532.779166][T20584] v9fs_mount+0x69/0x630 [ 532.779198][T20584] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.779242][T20584] legacy_get_tree+0x74/0xd0 [ 532.779302][T20584] vfs_get_tree+0x51/0x1b0 [ 532.779376][T20584] do_new_mount+0x203/0x660 [ 532.779406][T20584] path_mount+0x496/0xb30 22:19:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006000c0007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:47 executing program 5: r0 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000003000010000000000000000007a00000078000100740001000b000100706f6c6963650000640002803c0001000000000003"], 0x8c}}, 0x0) 22:19:47 executing program 5: r0 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 532.779455][T20584] __se_sys_mount+0x27f/0x2d0 [ 532.779558][T20584] __x64_sys_mount+0x67/0x80 [ 532.779593][T20584] do_syscall_64+0x41/0xc0 [ 532.779619][T20584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 532.779692][T20584] RIP: 0033:0x7fd83d377ae9 [ 532.779707][T20584] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 22:19:47 executing program 5: r0 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 532.779728][T20584] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.779750][T20584] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 532.779765][T20584] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 532.779778][T20584] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 532.779791][T20584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.779860][T20584] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 532.779881][T20584] 22:19:47 executing program 5: r0 = socket(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 532.832843][T20584] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 532.832924][T20584] CPU: 0 PID: 20584 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 532.832952][T20584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 532.832965][T20584] Call Trace: [ 532.832971][T20584] [ 532.832978][T20584] dump_stack_lvl+0xda/0x130 [ 532.833011][T20584] dump_stack+0x15/0x20 [ 532.833035][T20584] kmem_cache_create_usercopy+0x237/0x2b0 [ 532.833117][T20584] p9_client_create+0x80c/0xa70 [ 532.833183][T20584] v9fs_session_init+0xf9/0xd90 [ 532.833207][T20584] ? slab_post_alloc_hook+0x8c/0x340 [ 532.833235][T20584] ? v9fs_mount+0x53/0x630 [ 532.833275][T20584] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 532.833316][T20584] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.833353][T20584] ? v9fs_mount+0x53/0x630 [ 532.833386][T20584] v9fs_mount+0x69/0x630 [ 532.833450][T20584] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 532.833494][T20584] legacy_get_tree+0x74/0xd0 [ 532.833548][T20584] vfs_get_tree+0x51/0x1b0 [ 532.833584][T20584] do_new_mount+0x203/0x660 [ 532.833621][T20584] path_mount+0x496/0xb30 [ 532.833664][T20584] __se_sys_mount+0x27f/0x2d0 [ 532.833737][T20584] __x64_sys_mount+0x67/0x80 [ 532.833766][T20584] do_syscall_64+0x41/0xc0 [ 532.833788][T20584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 532.833848][T20584] RIP: 0033:0x7fd83d377ae9 [ 532.833864][T20584] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 532.833886][T20584] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.833972][T20584] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 532.833986][T20584] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 532.833999][T20584] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 532.834012][T20584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.834027][T20584] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 532.834049][T20584] [ 532.834229][T20584] 9p: Unknown access argument user": -22 [ 532.835714][T20598] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 532.929952][T20603] FAULT_INJECTION: forcing a failure. [ 532.929952][T20603] name failslab, interval 1, probability 0, space 0, times 0 [ 532.934796][T20598] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.983630][ T26] audit: type=1400 audit(1693606786.973:2842): avc: denied { setopt } for pid=20601 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 532.984058][T20603] CPU: 0 PID: 20603 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 533.352577][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 533.352590][T20603] Call Trace: [ 533.352597][T20603] [ 533.352603][T20603] dump_stack_lvl+0xda/0x130 [ 533.352664][T20603] dump_stack+0x15/0x20 [ 533.352688][T20603] should_fail_ex+0x21f/0x230 [ 533.352718][T20603] __should_failslab+0x92/0xa0 [ 533.352757][T20603] should_failslab+0x9/0x20 [ 533.352787][T20603] slab_pre_alloc_hook+0x38/0x180 [ 533.352811][T20603] kmem_cache_alloc+0x52/0x220 [ 533.352832][T20603] ? __kernfs_new_node+0x6a/0x380 [ 533.352870][T20603] __kernfs_new_node+0x6a/0x380 [ 533.352908][T20603] ? rb_insert_color+0x280/0x290 [ 533.416565][T20603] ? up_write+0x30/0xe0 [ 533.416653][T20603] ? kernfs_activate+0x252/0x270 [ 533.416702][T20603] kernfs_new_node+0x5f/0xd0 [ 533.416737][T20603] __kernfs_create_file+0x49/0x180 [ 533.416816][T20603] ? slab_attr_show+0x20/0x20 [ 533.416847][T20603] sysfs_add_file_mode_ns+0x136/0x1b0 [ 533.416890][T20603] internal_create_group+0x2e4/0x800 [ 533.416922][T20603] sysfs_create_group+0x1f/0x30 [ 533.416990][T20603] sysfs_slab_add+0x163/0x2a0 [ 533.417021][T20603] __kmem_cache_create+0x533/0x6c0 [ 533.417048][T20603] ? kmem_cache_alloc+0x10f/0x220 [ 533.417070][T20603] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 533.417126][T20603] kmem_cache_create_usercopy+0x156/0x2b0 [ 533.417188][T20603] p9_client_create+0x80c/0xa70 [ 533.417213][T20603] v9fs_session_init+0xf9/0xd90 [ 533.417240][T20603] ? slab_post_alloc_hook+0x8c/0x340 [ 533.417270][T20603] ? v9fs_mount+0x53/0x630 [ 533.417384][T20603] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 533.417410][T20603] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 533.417494][T20603] ? v9fs_mount+0x53/0x630 [ 533.417535][T20603] v9fs_mount+0x69/0x630 [ 533.417570][T20603] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 533.417623][T20603] legacy_get_tree+0x74/0xd0 [ 533.417730][T20603] vfs_get_tree+0x51/0x1b0 [ 533.417770][T20603] do_new_mount+0x203/0x660 [ 533.417883][T20603] path_mount+0x496/0xb30 [ 533.417920][T20603] __se_sys_mount+0x27f/0x2d0 [ 533.417958][T20603] __x64_sys_mount+0x67/0x80 [ 533.417995][T20603] do_syscall_64+0x41/0xc0 [ 533.418099][T20603] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 533.418203][T20603] RIP: 0033:0x7fd83d377ae9 [ 533.418222][T20603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 533.418245][T20603] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 533.418265][T20603] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 533.418278][T20603] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 533.418291][T20603] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 533.418316][T20603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.418328][T20603] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 533.418345][T20603] [ 533.419782][T20603] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 533.419802][T20603] CPU: 0 PID: 20603 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 533.419829][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 533.419841][T20603] Call Trace: [ 533.419848][T20603] [ 533.419854][T20603] dump_stack_lvl+0xda/0x130 [ 533.419884][T20603] dump_stack+0x15/0x20 [ 533.419945][T20603] kmem_cache_create_usercopy+0x237/0x2b0 [ 533.419989][T20603] p9_client_create+0x80c/0xa70 [ 533.420050][T20603] v9fs_session_init+0xf9/0xd90 [ 533.420078][T20603] ? slab_post_alloc_hook+0x8c/0x340 [ 533.420104][T20603] ? v9fs_mount+0x53/0x630 [ 533.420180][T20603] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 533.420208][T20603] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 533.420253][T20603] ? v9fs_mount+0x53/0x630 [ 533.420318][T20603] v9fs_mount+0x69/0x630 [ 533.420377][T20603] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 533.420428][T20603] legacy_get_tree+0x74/0xd0 [ 533.420479][T20603] vfs_get_tree+0x51/0x1b0 [ 533.420516][T20603] do_new_mount+0x203/0x660 [ 533.420547][T20603] path_mount+0x496/0xb30 [ 533.420609][T20603] __se_sys_mount+0x27f/0x2d0 [ 533.420651][T20603] __x64_sys_mount+0x67/0x80 [ 533.420687][T20603] do_syscall_64+0x41/0xc0 [ 533.420713][T20603] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 533.420748][T20603] RIP: 0033:0x7fd83d377ae9 [ 533.420836][T20603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 533.420859][T20603] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 533.420882][T20603] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 533.420898][T20603] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 533.420914][T20603] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 533.421008][T20603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.421023][T20603] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 533.421044][T20603] [ 533.421095][T20603] 9p: Unknown access argument user": -22 [ 533.486678][T20610] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 533.876945][T20610] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 22:19:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:47 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:47 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x9f}], 0x1, 0x0) 22:19:47 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 31) 22:19:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c61"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:47 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1, 0x8000, 0x0) 22:19:47 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 533.880282][T20611] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 22:19:48 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 533.953186][T20625] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 533.959206][T20620] FAULT_INJECTION: forcing a failure. [ 533.959206][T20620] name failslab, interval 1, probability 0, space 0, times 0 [ 533.961435][T20625] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 533.974077][T20620] CPU: 0 PID: 20620 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 533.993440][T20620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 22:19:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0x40000000}, {0x2, 0x0, @multicast2}, 0x3f9d2240e0ae61e5}) 22:19:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x10, 0x1}, 0x1c}}, 0x0) [ 534.003596][T20620] Call Trace: [ 534.006992][T20620] [ 534.009953][T20620] dump_stack_lvl+0xda/0x130 [ 534.014603][T20620] dump_stack+0x15/0x20 [ 534.018779][T20620] should_fail_ex+0x21f/0x230 [ 534.023492][T20620] __should_failslab+0x92/0xa0 [ 534.028374][T20620] should_failslab+0x9/0x20 [ 534.032906][T20620] slab_pre_alloc_hook+0x38/0x180 [ 534.037968][T20620] kmem_cache_alloc+0x52/0x220 [ 534.042814][T20620] ? __kernfs_new_node+0x6a/0x380 [ 534.047955][T20620] __kernfs_new_node+0x6a/0x380 22:19:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c61"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 534.052941][T20620] ? rb_insert_color+0x263/0x290 [ 534.057957][T20620] ? up_write+0x30/0xe0 [ 534.062200][T20620] ? kernfs_activate+0x252/0x270 [ 534.067186][T20620] kernfs_new_node+0x5f/0xd0 [ 534.071834][T20620] __kernfs_create_file+0x49/0x180 [ 534.077227][T20620] ? slab_attr_show+0x20/0x20 [ 534.082025][T20620] sysfs_add_file_mode_ns+0x136/0x1b0 [ 534.087468][T20620] internal_create_group+0x2e4/0x800 [ 534.092784][T20620] sysfs_create_group+0x1f/0x30 [ 534.093418][T20636] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 534.097641][T20620] sysfs_slab_add+0x163/0x2a0 [ 534.097675][T20620] __kmem_cache_create+0x533/0x6c0 [ 534.105749][T20636] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.110385][T20620] ? kmem_cache_alloc+0x10f/0x220 [ 534.110419][T20620] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 534.135772][T20620] kmem_cache_create_usercopy+0x156/0x2b0 [ 534.141844][T20620] p9_client_create+0x80c/0xa70 [ 534.146828][T20620] v9fs_session_init+0xf9/0xd90 22:19:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c61"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 534.151777][T20620] ? slab_post_alloc_hook+0x8c/0x340 [ 534.157186][T20620] ? v9fs_mount+0x53/0x630 [ 534.161726][T20620] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 534.167406][T20620] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 534.167798][T20640] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 534.173593][T20620] ? v9fs_mount+0x53/0x630 [ 534.173637][T20620] v9fs_mount+0x69/0x630 [ 534.173674][T20620] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 534.181993][T20640] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.186260][T20620] legacy_get_tree+0x74/0xd0 [ 534.210771][T20620] vfs_get_tree+0x51/0x1b0 [ 534.215485][T20620] do_new_mount+0x203/0x660 [ 534.220025][T20620] path_mount+0x496/0xb30 [ 534.224410][T20620] __se_sys_mount+0x27f/0x2d0 [ 534.229160][T20620] __x64_sys_mount+0x67/0x80 [ 534.233781][T20620] do_syscall_64+0x41/0xc0 [ 534.238219][T20620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 534.244154][T20620] RIP: 0033:0x7fd83d377ae9 [ 534.248626][T20620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 534.268268][T20620] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.276725][T20620] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 534.284733][T20620] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 534.292789][T20620] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 534.300788][T20620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.308787][T20620] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 534.316789][T20620] [ 534.328610][T20620] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 534.336589][T20620] CPU: 0 PID: 20620 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 22:19:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 534.346797][T20620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 534.356907][T20620] Call Trace: [ 534.360198][T20620] [ 534.363180][T20620] dump_stack_lvl+0xda/0x130 [ 534.367809][T20620] dump_stack+0x15/0x20 [ 534.372033][T20620] kmem_cache_create_usercopy+0x237/0x2b0 [ 534.377878][T20620] p9_client_create+0x80c/0xa70 [ 534.382765][T20620] v9fs_session_init+0xf9/0xd90 [ 534.387775][T20620] ? slab_post_alloc_hook+0x8c/0x340 [ 534.393085][T20620] ? v9fs_mount+0x53/0x630 [ 534.397566][T20620] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 534.403313][T20620] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 534.409578][T20620] ? v9fs_mount+0x53/0x630 [ 534.414077][T20620] v9fs_mount+0x69/0x630 [ 534.418359][T20620] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 534.424560][T20620] legacy_get_tree+0x74/0xd0 [ 534.429215][T20620] vfs_get_tree+0x51/0x1b0 [ 534.433676][T20620] do_new_mount+0x203/0x660 [ 534.438251][T20620] path_mount+0x496/0xb30 [ 534.442772][T20620] __se_sys_mount+0x27f/0x2d0 [ 534.447499][T20620] __x64_sys_mount+0x67/0x80 [ 534.452115][T20620] do_syscall_64+0x41/0xc0 [ 534.456635][T20620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 534.462667][T20620] RIP: 0033:0x7fd83d377ae9 [ 534.467088][T20620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 534.486709][T20620] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.495148][T20620] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, &(0x7f0000000540), &(0x7f0000000600)=0xc) 22:19:48 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 32) 22:19:48 executing program 5: r0 = socket(0x0, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:48 executing program 0: r0 = socket(0x18, 0x0, 0x1) bind$unix(r0, 0x0, 0x0) 22:19:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 534.503125][T20620] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 534.511106][T20620] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 534.519113][T20620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.527108][T20620] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 534.535103][T20620] [ 534.538744][T20620] 9p: Unknown access argument user": -22 22:19:48 executing program 0: r0 = syz_clone(0x40000000, &(0x7f0000000040)="ed17761be02b", 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x0, 0x4002) pipe2(0x0, 0x880) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000001700)) syz_open_procfs$namespace(0x0, 0x0) 22:19:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:48 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_mreq(r0, 0x29, 0x33, 0x0, &(0x7f0000001300)) [ 534.617056][T20656] lo speed is unknown, defaulting to 1000 [ 534.654982][T20659] FAULT_INJECTION: forcing a failure. 22:19:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:48 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:48 executing program 3: r0 = socket(0x2, 0x3, 0x2) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) [ 534.654982][T20659] name failslab, interval 1, probability 0, space 0, times 0 [ 534.667711][T20659] CPU: 1 PID: 20659 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 534.677901][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 534.688013][T20659] Call Trace: [ 534.691317][T20659] [ 534.694272][T20659] dump_stack_lvl+0xda/0x130 [ 534.698950][T20659] dump_stack+0x15/0x20 [ 534.703256][T20659] should_fail_ex+0x21f/0x230 [ 534.707964][T20659] __should_failslab+0x92/0xa0 [ 534.712798][T20659] should_failslab+0x9/0x20 22:19:48 executing program 3: mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/105) [ 534.717353][T20659] slab_pre_alloc_hook+0x38/0x180 [ 534.722534][T20659] kmem_cache_alloc+0x52/0x220 [ 534.727432][T20659] ? __kernfs_new_node+0x6a/0x380 [ 534.732597][T20659] __kernfs_new_node+0x6a/0x380 [ 534.737565][T20659] ? rb_insert_color+0x6a/0x290 [ 534.742522][T20659] ? up_write+0x30/0xe0 [ 534.746730][T20659] ? kernfs_activate+0x252/0x270 [ 534.751729][T20659] kernfs_new_node+0x5f/0xd0 [ 534.756373][T20659] __kernfs_create_file+0x49/0x180 [ 534.761527][T20659] ? slab_attr_show+0x20/0x20 [ 534.766238][T20659] sysfs_add_file_mode_ns+0x136/0x1b0 [ 534.771743][T20659] internal_create_group+0x2e4/0x800 [ 534.777130][T20659] sysfs_create_group+0x1f/0x30 [ 534.782003][T20659] sysfs_slab_add+0x163/0x2a0 [ 534.786787][T20659] __kmem_cache_create+0x533/0x6c0 [ 534.791922][T20659] ? kmem_cache_alloc+0x10f/0x220 [ 534.796990][T20659] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 534.802955][T20659] kmem_cache_create_usercopy+0x156/0x2b0 [ 534.808717][T20659] p9_client_create+0x80c/0xa70 [ 534.813613][T20659] v9fs_session_init+0xf9/0xd90 [ 534.818495][T20659] ? slab_post_alloc_hook+0x8c/0x340 [ 534.823813][T20659] ? v9fs_mount+0x53/0x630 [ 534.828311][T20659] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 534.833988][T20659] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 534.840267][T20659] ? v9fs_mount+0x53/0x630 [ 534.844857][T20659] v9fs_mount+0x69/0x630 [ 534.849214][T20659] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 534.855442][T20659] legacy_get_tree+0x74/0xd0 [ 534.860216][T20659] vfs_get_tree+0x51/0x1b0 [ 534.864715][T20659] do_new_mount+0x203/0x660 [ 534.869269][T20659] path_mount+0x496/0xb30 [ 534.873671][T20659] __se_sys_mount+0x27f/0x2d0 [ 534.878389][T20659] __x64_sys_mount+0x67/0x80 [ 534.883092][T20659] do_syscall_64+0x41/0xc0 [ 534.887537][T20659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 534.893475][T20659] RIP: 0033:0x7fd83d377ae9 [ 534.897985][T20659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 534.917633][T20659] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.926158][T20659] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 534.934223][T20659] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 534.942228][T20659] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 534.950229][T20659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.958261][T20659] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 534.966241][T20659] [ 534.976403][T20659] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 534.984387][T20659] CPU: 1 PID: 20659 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 534.994578][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 535.004723][T20659] Call Trace: [ 535.008019][T20659] [ 535.011012][T20659] dump_stack_lvl+0xda/0x130 [ 535.015643][T20659] dump_stack+0x15/0x20 [ 535.019928][T20659] kmem_cache_create_usercopy+0x237/0x2b0 [ 535.025700][T20659] p9_client_create+0x80c/0xa70 [ 535.030660][T20659] v9fs_session_init+0xf9/0xd90 [ 535.035537][T20659] ? slab_post_alloc_hook+0x8c/0x340 [ 535.040936][T20659] ? v9fs_mount+0x53/0x630 [ 535.045418][T20659] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 535.051094][T20659] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 535.057360][T20659] ? v9fs_mount+0x53/0x630 [ 535.061862][T20659] v9fs_mount+0x69/0x630 [ 535.066142][T20659] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 535.072400][T20659] legacy_get_tree+0x74/0xd0 [ 535.077039][T20659] vfs_get_tree+0x51/0x1b0 [ 535.081488][T20659] do_new_mount+0x203/0x660 [ 535.086036][T20659] path_mount+0x496/0xb30 [ 535.090474][T20659] __se_sys_mount+0x27f/0x2d0 [ 535.095186][T20659] __x64_sys_mount+0x67/0x80 [ 535.099854][T20659] do_syscall_64+0x41/0xc0 [ 535.104302][T20659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 535.110293][T20659] RIP: 0033:0x7fd83d377ae9 [ 535.114715][T20659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 535.134395][T20659] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.142897][T20659] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 535.150880][T20659] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 535.158868][T20659] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xf, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) 22:19:49 executing program 5: r0 = socket(0x0, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:49 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:19:49 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 33) 22:19:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 535.166845][T20659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.174874][T20659] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 535.182853][T20659] [ 535.186338][T20659] 9p: Unknown access argument user": -22 22:19:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:49 executing program 3: rt_sigaction(0xe, &(0x7f0000000200)={&(0x7f0000000180)="7f258d5e6e62320f1b05bf3babba88a1b2d64b13cb351799c914380bcb2b52dfdf08f7e622ab61741e1d4a6827af72694277", 0x0, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) 22:19:49 executing program 5: r0 = socket(0x0, 0x2, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:49 executing program 2: r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:49 executing program 2: r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 535.291309][T20697] FAULT_INJECTION: forcing a failure. [ 535.291309][T20697] name failslab, interval 1, probability 0, space 0, times 0 [ 535.304056][T20697] CPU: 1 PID: 20697 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 535.314211][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 535.324359][T20697] Call Trace: [ 535.327670][T20697] [ 535.330632][T20697] dump_stack_lvl+0xda/0x130 [ 535.335246][T20697] dump_stack+0x15/0x20 22:19:49 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x80108906, 0x0) [ 535.339421][T20697] should_fail_ex+0x21f/0x230 [ 535.344189][T20697] __should_failslab+0x92/0xa0 [ 535.349004][T20697] should_failslab+0x9/0x20 [ 535.353555][T20697] slab_pre_alloc_hook+0x38/0x180 [ 535.358621][T20697] kmem_cache_alloc+0x52/0x220 [ 535.363446][T20697] ? __kernfs_new_node+0x6a/0x380 [ 535.368508][T20697] __kernfs_new_node+0x6a/0x380 [ 535.373402][T20697] ? rb_insert_color+0x263/0x290 [ 535.378390][T20697] ? up_write+0x30/0xe0 [ 535.382636][T20697] ? kernfs_activate+0x252/0x270 [ 535.387708][T20697] kernfs_new_node+0x5f/0xd0 [ 535.392346][T20697] __kernfs_create_file+0x49/0x180 [ 535.397608][T20697] ? slab_attr_show+0x20/0x20 [ 535.402409][T20697] sysfs_add_file_mode_ns+0x136/0x1b0 [ 535.408105][T20697] internal_create_group+0x2e4/0x800 [ 535.413437][T20697] sysfs_create_group+0x1f/0x30 [ 535.418430][T20697] sysfs_slab_add+0x163/0x2a0 [ 535.423195][T20697] __kmem_cache_create+0x533/0x6c0 [ 535.428355][T20697] ? kmem_cache_alloc+0x10f/0x220 [ 535.433404][T20697] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 535.439361][T20697] kmem_cache_create_usercopy+0x156/0x2b0 [ 535.445296][T20697] p9_client_create+0x80c/0xa70 [ 535.450207][T20697] v9fs_session_init+0xf9/0xd90 [ 535.455195][T20697] ? slab_post_alloc_hook+0x8c/0x340 [ 535.460617][T20697] ? v9fs_mount+0x53/0x630 [ 535.465080][T20697] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 535.470835][T20697] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 535.477066][T20697] ? v9fs_mount+0x53/0x630 [ 535.481520][T20697] v9fs_mount+0x69/0x630 [ 535.485802][T20697] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 535.492124][T20697] legacy_get_tree+0x74/0xd0 [ 535.496800][T20697] vfs_get_tree+0x51/0x1b0 [ 535.501328][T20697] do_new_mount+0x203/0x660 [ 535.505864][T20697] path_mount+0x496/0xb30 [ 535.510341][T20697] __se_sys_mount+0x27f/0x2d0 [ 535.515066][T20697] __x64_sys_mount+0x67/0x80 [ 535.519714][T20697] do_syscall_64+0x41/0xc0 [ 535.524356][T20697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 535.530287][T20697] RIP: 0033:0x7fd83d377ae9 [ 535.534734][T20697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 535.554402][T20697] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.562839][T20697] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 535.570887][T20697] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 535.578897][T20697] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 535.586901][T20697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.594907][T20697] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 535.602916][T20697] [ 535.610004][T20697] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 535.617963][T20697] CPU: 1 PID: 20697 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 535.628052][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 535.638207][T20697] Call Trace: [ 535.641515][T20697] [ 535.644468][T20697] dump_stack_lvl+0xda/0x130 [ 535.649088][T20697] dump_stack+0x15/0x20 [ 535.653477][T20697] kmem_cache_create_usercopy+0x237/0x2b0 [ 535.659259][T20697] p9_client_create+0x80c/0xa70 [ 535.664229][T20697] v9fs_session_init+0xf9/0xd90 [ 535.669188][T20697] ? slab_post_alloc_hook+0x8c/0x340 [ 535.674512][T20697] ? v9fs_mount+0x53/0x630 [ 535.679036][T20697] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 535.684756][T20697] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 535.691030][T20697] ? v9fs_mount+0x53/0x630 [ 535.695525][T20697] v9fs_mount+0x69/0x630 [ 535.699914][T20697] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 535.706110][T20697] legacy_get_tree+0x74/0xd0 [ 535.710864][T20697] vfs_get_tree+0x51/0x1b0 [ 535.715340][T20697] do_new_mount+0x203/0x660 [ 535.719884][T20697] path_mount+0x496/0xb30 [ 535.724341][T20697] __se_sys_mount+0x27f/0x2d0 [ 535.729064][T20697] __x64_sys_mount+0x67/0x80 [ 535.733694][T20697] do_syscall_64+0x41/0xc0 [ 535.738143][T20697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 535.744120][T20697] RIP: 0033:0x7fd83d377ae9 [ 535.748605][T20697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 535.768246][T20697] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.776679][T20697] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 535.784673][T20697] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:49 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 34) 22:19:49 executing program 3: socketpair$nbd(0x2, 0xa, 0x0, &(0x7f0000000e80)) 22:19:49 executing program 5: r0 = socket(0x2, 0x0, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}) 22:19:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:49 executing program 2: r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 535.792682][T20697] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 535.800683][T20697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.808676][T20697] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 535.816655][T20697] [ 535.826659][T20697] 9p: Unknown access argument user": -22 22:19:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) 22:19:49 executing program 5: r0 = socket(0x2, 0x0, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 535.888594][T20715] __nla_validate_parse: 3 callbacks suppressed [ 535.888614][T20715] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 535.927712][T20719] FAULT_INJECTION: forcing a failure. 22:19:49 executing program 0: syz_emit_ethernet(0xe4d, &(0x7f00000020c0)={@broadcast, @random="453762c7bade", @val, {@ipv6}}, 0x0) [ 535.927712][T20719] name failslab, interval 1, probability 0, space 0, times 0 [ 535.940464][T20719] CPU: 1 PID: 20719 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 535.950621][T20719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 535.960709][T20719] Call Trace: [ 535.964033][T20719] [ 535.967055][T20719] dump_stack_lvl+0xda/0x130 [ 535.971681][T20719] dump_stack+0x15/0x20 [ 535.975871][T20719] should_fail_ex+0x21f/0x230 22:19:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a8004"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 535.976015][T20723] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 535.980634][T20719] __should_failslab+0x92/0xa0 [ 535.980673][T20719] should_failslab+0x9/0x20 [ 535.980697][T20719] slab_pre_alloc_hook+0x38/0x180 [ 536.004530][T20719] kmem_cache_alloc+0x52/0x220 [ 536.009333][T20719] ? __kernfs_new_node+0x6a/0x380 [ 536.014393][T20719] __kernfs_new_node+0x6a/0x380 [ 536.019299][T20719] ? rb_insert_color+0x263/0x290 [ 536.024282][T20719] ? up_write+0x30/0xe0 [ 536.028540][T20719] ? kernfs_activate+0x252/0x270 [ 536.033527][T20719] kernfs_new_node+0x5f/0xd0 [ 536.038187][T20719] __kernfs_create_file+0x49/0x180 [ 536.043424][T20719] ? slab_attr_show+0x20/0x20 [ 536.045354][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 536.048133][T20719] sysfs_add_file_mode_ns+0x136/0x1b0 [ 536.062842][T20719] internal_create_group+0x2e4/0x800 [ 536.068187][T20719] sysfs_create_group+0x1f/0x30 [ 536.073152][T20719] sysfs_slab_add+0x163/0x2a0 [ 536.077920][T20719] __kmem_cache_create+0x533/0x6c0 [ 536.083064][T20719] ? kmem_cache_alloc+0x10f/0x220 [ 536.088132][T20719] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 536.094160][T20719] kmem_cache_create_usercopy+0x156/0x2b0 [ 536.100026][T20719] p9_client_create+0x80c/0xa70 [ 536.104943][T20719] v9fs_session_init+0xf9/0xd90 [ 536.109912][T20719] ? slab_post_alloc_hook+0x8c/0x340 [ 536.115245][T20719] ? v9fs_mount+0x53/0x630 [ 536.119769][T20719] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 536.125493][T20719] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.131823][T20719] ? v9fs_mount+0x53/0x630 [ 536.136344][T20719] v9fs_mount+0x69/0x630 [ 536.140707][T20719] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.146983][T20719] legacy_get_tree+0x74/0xd0 [ 536.151663][T20719] vfs_get_tree+0x51/0x1b0 [ 536.156125][T20719] do_new_mount+0x203/0x660 [ 536.160733][T20719] path_mount+0x496/0xb30 [ 536.165120][T20719] __se_sys_mount+0x27f/0x2d0 [ 536.169857][T20719] __x64_sys_mount+0x67/0x80 [ 536.174525][T20719] do_syscall_64+0x41/0xc0 [ 536.179045][T20719] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 536.185042][T20719] RIP: 0033:0x7fd83d377ae9 [ 536.189522][T20719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 536.209243][T20719] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 536.217732][T20719] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 536.225792][T20719] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 536.233837][T20719] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 536.241817][T20719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.249815][T20719] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 536.257865][T20719] [ 536.262775][T20719] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 536.270810][T20719] CPU: 0 PID: 20719 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 536.281135][T20719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 536.291232][T20719] Call Trace: [ 536.294582][T20719] [ 536.297513][T20719] dump_stack_lvl+0xda/0x130 [ 536.302120][T20719] dump_stack+0x15/0x20 [ 536.306331][T20719] kmem_cache_create_usercopy+0x237/0x2b0 [ 536.312186][T20719] p9_client_create+0x80c/0xa70 [ 536.317108][T20719] v9fs_session_init+0xf9/0xd90 [ 536.322030][T20719] ? slab_post_alloc_hook+0x8c/0x340 [ 536.327325][T20719] ? v9fs_mount+0x53/0x630 [ 536.331781][T20719] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 536.337582][T20719] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.343771][T20719] ? v9fs_mount+0x53/0x630 [ 536.348202][T20719] v9fs_mount+0x69/0x630 [ 536.352479][T20719] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.358651][T20719] legacy_get_tree+0x74/0xd0 [ 536.363262][T20719] vfs_get_tree+0x51/0x1b0 [ 536.367800][T20719] do_new_mount+0x203/0x660 [ 536.372450][T20719] path_mount+0x496/0xb30 [ 536.376855][T20719] __se_sys_mount+0x27f/0x2d0 [ 536.381596][T20719] __x64_sys_mount+0x67/0x80 [ 536.386262][T20719] do_syscall_64+0x41/0xc0 [ 536.390775][T20719] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 536.396760][T20719] RIP: 0033:0x7fd83d377ae9 [ 536.401176][T20719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 536.420979][T20719] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 536.429407][T20719] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:50 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 35) 22:19:50 executing program 0: syz_emit_ethernet(0x227, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6798000000000000000000000000000000000000ac141420000000000000000000bb8408020400000000fc"], 0x0) 22:19:50 executing program 3: syz_emit_ethernet(0x227, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd67980000000000000000002c000000000000fe8000000000000000000000000000bb8408020400002f00fc"], 0x0) 22:19:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a8004"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:50 executing program 5: r0 = socket(0x2, 0x0, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:50 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000c80), 0x88000, 0x0) [ 536.437387][T20719] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 536.445381][T20719] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 536.453360][T20719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.461334][T20719] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 536.469335][T20719] [ 536.474021][T20719] 9p: Unknown access argument user": -22 22:19:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 536.527613][T20742] validate_nla: 8 callbacks suppressed [ 536.527627][T20742] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 536.541382][T20742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 536.557198][T20749] FAULT_INJECTION: forcing a failure. [ 536.557198][T20749] name failslab, interval 1, probability 0, space 0, times 0 [ 536.569953][T20749] CPU: 0 PID: 20749 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 536.580061][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 536.590148][T20749] Call Trace: [ 536.593450][T20749] [ 536.596459][T20749] dump_stack_lvl+0xda/0x130 [ 536.601091][T20749] dump_stack+0x15/0x20 [ 536.605288][T20749] should_fail_ex+0x21f/0x230 [ 536.610075][T20749] __should_failslab+0x92/0xa0 [ 536.614900][T20749] should_failslab+0x9/0x20 [ 536.619455][T20749] slab_pre_alloc_hook+0x38/0x180 [ 536.624578][T20749] kmem_cache_alloc+0x52/0x220 [ 536.629387][T20749] ? __kernfs_new_node+0x6a/0x380 [ 536.634450][T20749] __kernfs_new_node+0x6a/0x380 [ 536.639328][T20749] ? rb_insert_color+0x6a/0x290 [ 536.644205][T20749] ? up_write+0x30/0xe0 [ 536.648456][T20749] ? kernfs_activate+0x252/0x270 [ 536.653466][T20749] kernfs_new_node+0x5f/0xd0 [ 536.658096][T20749] __kernfs_create_file+0x49/0x180 [ 536.663332][T20749] ? slab_attr_show+0x20/0x20 [ 536.668023][T20749] sysfs_add_file_mode_ns+0x136/0x1b0 22:19:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r1) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 22:19:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 22:19:50 executing program 3: getpid() syz_clone(0x58102000, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="5f1c014fb1d720b64fef87563ae585cb4466d97e56557277d233e60413465ce95e94c4e5be4c98a26acab6c32cae9d6c865866a9fa7c05692568aeff82e147ec03437c78e74d674d677c5acfab64ac0f3bb3ece71532c054fb70931c24de46ed0d0556bc5a9dd9f5650bc7506664419fa86acfe8a20f26a8de1b9b954924460152f6cb10365ce9f72c15ae3bd7a2a78f41b2204590e4084a6c05c33ac93dce41903311e52cd82171f4105cdafa908d02c2d0485f20af8c0afd6f8d768bb3be0157299874430f748e036be5d15fda21952f0549dda6dbb03ea02c6ea0a50372077c246c7ab58049dc90615c4881ca56d6f238063478d7a29409a99766f2ec47f34ccc234b519c47451856a080b3ff3923234cd826dfd2b1083eca7ee9267f3e6ee4c5786c83cb906650da2fde6e7562fa905bc801349bd390bc90ed71889017abcfc7c5b671d4ba552fbfd5ac9ce4a478f69e64a8edb00c9362d9b00ab3522634cb0d023a766614874691d7f162e1f039a28011517b363c05fb30699cd1a22e86c72da000509d212c480bce6ced310149a00eb8973370a2a8e0f3b89030a6fc5ff08571c0c0826238d29fa22d730770e51a153ccdbfff06b4d308972a004e2b9edd54516c696198b292333e79dd5da017445a7cc787cd3fe362d2576dd9755d12cb201edc211c71e19684fa57ae9133a943d87c1a11f91b1ae50fa5cdec552cee9291864515d9022fba8029ffa1ea606b2b0103f552f8f8082154cd25d853566157673f8a0fbe09aa40666a1bb810e0741674ed4f4bf9870fbe41b60fc9c84d3831a9e9b09f7b43b6bc9a40d43f0925e6c9d02d9df7c7f8a9acf9dbfc8a58330494f8ee167f0e665c82ea30eaef381d6b9aa58c588fe8dee7ba2c95eb37becb4ecd6765d09e13d8a6cfb1f3964b6f0eb4df2dd69b7c55074695f70a504d341e058c1c869fe49abe09253bc364f4dcb53813dd6d86f380d75da966bcc60bb9f47deb71d2966b98f56cc09a58fd8e41edd409ac3cf47b900a77ce2ec8889e245ef20d106bb22471c46bf8110e2f0f80049ec5ec66afc02a66dee75abec4947dd2c4dc54bda8f2336a0f2a42eaa05e7a58efbedaf0a7f5a1e3009e48f6b4b25febb895c4764604c787fb7307262d00fae98666a145e565c0fca9d6ae070f1f2b175d9883efa2d094d617701a8a38da1f9f3f7038dd6287410f4d5f540132c187fc72b3ed1c7f393f0d11ff4c7a8ffbc37b57506c1fcde83117a42601d357692da7023113111024204e2ec1ea0b04619ab95baa96689a6c72a39536bd237c26631bde7ca5e4487037ab36056ba3a734f2ac14a3f1c57450f12e21e3d54676b61b1180451517e3ed08081def81581fa8fcf397fdfcc34dcca79ef09c29372a9fbcc8b401aaac8c929cbd52829d9bb6ba9f6dff01c6a79e23c619a55fb1a13ed50ce0f52436ac26312363397d898732cc0563edda18227da8f9e73e17c26ceaef8a19354310465a098d537633ddc1d31153763012118cfe1444abeacecb7400a35d0cb5a6857d6601d6a1922ed105b6a152d45b35159d009cebafbc2616e8768d060d31d0f77ef23b8a71cacd8853a21d21f32874b6e26f7832472e65cd7253e35224d3bf8ff62e8bf1db570b911c8b684aa2bd771e625d09ab2f0d6f77f9d5ccaed2eb0493460815af28602f769263854c49e4afaa42dc1069e05730e1672dff68f6400d91074483b64db00b14c035afd486ab25d26ea7cbcbefc34a846c90dd734bc1ff63cd6161a44d6ea290c0839aae71a7e2d84529e299e3524a8dede8ead9a4f91b88668c39e1d03fe12215961b8b45f4d391bd9fa709800c9f3a4f93ecc0824e5facae8d169d65a8d970bffb2cdc5e22e28004c2ea130422a5fc6660f7704684407dc4b16fd9b0a4fbdcfb8481a8fcd2a10c343e9167b488edec969a337417b0aff2bd8f3307fad9fe11b746f0e6f5cc0cc09e73931f8a1012c43d050108d988ecebfde736002dbb368cfb724dccd88b7404745bef889ab10612a03bb680a73b4166c132f1e0c2a027faafd4f56cee4323e2f5ce4a25fc88b431a953ea81bffdd2cc2a7c1b1d7ae0a4aa7163f17bbf46ac2c5fef769a5b73b1de6c296256d6b7be37e293c71afab0ad5689cd2a97cef55767fe39d30539832bc50ce6e6b58dee4dc720b5618dd0e8bded3422da96ed48ebe1fdb67d6703b4152798ccb12c0c8b0aeb74aaa7af276f8ef859f78fdf58804a22fa7b35b48e02d2109b5eb7f49160cc8f0d975fa86687bf40b221ff656f474ae81ce777897f0f559d1ad091619d21084d336661f4a13211741f629f9662f1c8d17066891b45129c6bfca6d00a1b39dc531aa701e796beeed4974f597838eb9a78e9112ce2eafc87ab8c9ed05a817f11f16b7632901bc8830bc8428e8bdbdc50de675e1ea09ce9b710703dda039ebf3aa2d43058bbf0ca1107d3c774dea933b3b53ba3ae634ce0ae16fe54b5164e7ed6a35aeae151f16604ce6ad47304144ed62194ec3ef7276927a72c557cfd82d3899d7013e8fc6569fabe2991322f9a3d988fa3301e42e500ca251b348bd0d7fadaf226806dca180ec9d55c47a038d7325d78924076967371f4fa88366bdba057e418845b20822330939293360d299c743812b9ef3042fab014ad299dfaa45f8bd0b17456c948c860326b33355cd75670b2c6edda6fe201416c61070b2322e4c29d775f8603efc31f835b6628832f2cfeb9e11505ba050a3bba55348fbf9ffd79695e2959eadc86e6d8822f0d46cd2c238b4530fcdee71908b519a6fcb6a53b8acf0e6d9b65197a9bfb6e566123d0d0aa7fd8156850e3cc028e4f0dd5cf4e67961fb09c72a3dc1f826ca9884b218ea2c2834bff4a737b03f879a50921541b4055b5985486cc01984f63d77b21c26b40a6b57e6cba39e584199ba4111313f22c6d09c20bbf4e982389ab3b880daf4b17842639e19c1ac83ecaed35febf9d77f096693f0b5a5b704720c87dc8b2ce39d1f8bfe25157605a064ef69f797aeb9a17e93b59c71a7d002bb89e49d00333e8ec4a6ccd67f1bdccfddd88ca38e5616962605b2771958a96528f39c55997ea7ba32fe598f3943b91f195301eb91d1d148ff98dc67874ad208dc97c6d7634f52ee747618546a1e269ecdc83f253c16fe4ee3471bfab91f17f192a7cd47c46921896045c3f74f7b6ab2b1606f714276b3f09adfd9a7f1650e6a1bad7269e664e0839010e09c2c8548ed8a62df94859a5a30db3b4eec231da8e44860442e797ac2ff790331df6722769eb4f60d4145625602a7a488aafc47629af96216f6b86f2bd25e0224466b9229a78d19fa9903e24fec9ee278124c2ed0c2e4398580972c4b1c6c7b7fe2c4a5183da6ec7f4d345af500d5a962ff63a53c6c4010d1f31acaa86d7b078df8ae65c6201f5deba7e5bd40be3c63c924dd4bbd6dbc6b2e512d91e399bbfd8ee67e72cfd08468ac1fcc4728bd3874769f414175ec28428c355c747b989c80b46b6a9b7a8d1a177a50a71d854bab7f8d5db10eaabca1f48b728af98c555a0fb5e9a1b73f2c0868c84e09f6977da347cbcc678e67acaaf726c209757983dc28e13a03a1c") 22:19:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 536.673478][T20749] internal_create_group+0x2e4/0x800 [ 536.678827][T20749] sysfs_create_group+0x1f/0x30 [ 536.683690][T20749] sysfs_slab_add+0x163/0x2a0 [ 536.688451][T20749] __kmem_cache_create+0x533/0x6c0 [ 536.693591][T20749] ? kmem_cache_alloc+0x10f/0x220 [ 536.698624][T20749] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 536.704588][T20749] kmem_cache_create_usercopy+0x156/0x2b0 [ 536.710335][T20749] p9_client_create+0x80c/0xa70 [ 536.715198][T20749] v9fs_session_init+0xf9/0xd90 [ 536.720062][T20749] ? slab_post_alloc_hook+0x8c/0x340 [ 536.725362][T20749] ? v9fs_mount+0x53/0x630 [ 536.729798][T20749] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 536.735449][T20749] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.741630][T20749] ? v9fs_mount+0x53/0x630 [ 536.746104][T20749] v9fs_mount+0x69/0x630 [ 536.750481][T20749] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.756657][T20749] legacy_get_tree+0x74/0xd0 [ 536.761310][T20749] vfs_get_tree+0x51/0x1b0 [ 536.765803][T20749] do_new_mount+0x203/0x660 [ 536.770327][T20749] path_mount+0x496/0xb30 [ 536.774694][T20749] __se_sys_mount+0x27f/0x2d0 [ 536.779394][T20749] __x64_sys_mount+0x67/0x80 [ 536.784118][T20749] do_syscall_64+0x41/0xc0 [ 536.788600][T20749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 536.794547][T20749] RIP: 0033:0x7fd83d377ae9 [ 536.798999][T20749] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 536.818619][T20749] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 536.827172][T20749] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 536.835152][T20749] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 536.843132][T20749] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 536.851108][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.859094][T20749] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 536.867142][T20749] [ 536.871449][T20749] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 536.879378][T20749] CPU: 1 PID: 20749 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 536.889504][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 536.899642][T20749] Call Trace: [ 536.902936][T20749] [ 536.905889][T20749] dump_stack_lvl+0xda/0x130 [ 536.910588][T20749] dump_stack+0x15/0x20 [ 536.914889][T20749] kmem_cache_create_usercopy+0x237/0x2b0 [ 536.917640][T20759] lo speed is unknown, defaulting to 1000 [ 536.920644][T20749] p9_client_create+0x80c/0xa70 [ 536.920692][T20749] v9fs_session_init+0xf9/0xd90 [ 536.936199][T20749] ? slab_post_alloc_hook+0x8c/0x340 [ 536.941579][T20749] ? v9fs_mount+0x53/0x630 [ 536.946178][T20749] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 536.951921][T20749] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.958113][T20749] ? v9fs_mount+0x53/0x630 [ 536.962594][T20749] v9fs_mount+0x69/0x630 [ 536.966909][T20749] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 536.973114][T20749] legacy_get_tree+0x74/0xd0 [ 536.977853][T20749] vfs_get_tree+0x51/0x1b0 [ 536.982306][T20749] do_new_mount+0x203/0x660 [ 536.986901][T20749] path_mount+0x496/0xb30 [ 536.991392][T20749] __se_sys_mount+0x27f/0x2d0 [ 536.996173][T20749] __x64_sys_mount+0x67/0x80 [ 537.000875][T20749] do_syscall_64+0x41/0xc0 [ 537.005424][T20749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 537.011419][T20749] RIP: 0033:0x7fd83d377ae9 [ 537.015859][T20749] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 537.035532][T20749] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 537.044095][T20749] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 537.052154][T20749] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 537.060186][T20749] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 537.068182][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:51 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 36) 22:19:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a8004"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:51 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8905, 0x0) 22:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x900}]}, 0x24}}, 0x0) 22:19:51 executing program 5: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 537.076190][T20749] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 537.084215][T20749] [ 537.090662][T20749] 9p: Unknown access argument user": -22 [ 537.119698][T20766] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:19:51 executing program 5: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x5, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 22:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:19:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a800400"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 537.127923][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:19:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000004940), 0x8, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) 22:19:51 executing program 5: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 537.173601][T20774] FAULT_INJECTION: forcing a failure. [ 537.173601][T20774] name failslab, interval 1, probability 0, space 0, times 0 [ 537.186313][T20774] CPU: 0 PID: 20774 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 537.196465][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 537.206548][T20774] Call Trace: [ 537.209895][T20774] [ 537.212903][T20774] dump_stack_lvl+0xda/0x130 [ 537.217566][T20774] dump_stack+0x15/0x20 [ 537.221843][T20774] should_fail_ex+0x21f/0x230 [ 537.226602][T20774] __should_failslab+0x92/0xa0 [ 537.231474][T20774] should_failslab+0x9/0x20 [ 537.236048][T20774] slab_pre_alloc_hook+0x38/0x180 [ 537.241102][T20774] kmem_cache_alloc+0x52/0x220 [ 537.245927][T20774] ? __kernfs_new_node+0x6a/0x380 [ 537.251027][T20774] __kernfs_new_node+0x6a/0x380 [ 537.255918][T20774] ? rb_insert_color+0x263/0x290 [ 537.261004][T20774] ? up_write+0x30/0xe0 [ 537.265235][T20774] ? kernfs_activate+0x252/0x270 [ 537.270300][T20774] kernfs_new_node+0x5f/0xd0 [ 537.275013][T20774] __kernfs_create_file+0x49/0x180 [ 537.280180][T20774] ? slab_attr_show+0x20/0x20 [ 537.284976][T20774] sysfs_add_file_mode_ns+0x136/0x1b0 [ 537.287215][T20786] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 537.290374][T20774] internal_create_group+0x2e4/0x800 [ 537.290462][T20774] sysfs_create_group+0x1f/0x30 [ 537.290485][T20774] sysfs_slab_add+0x163/0x2a0 [ 537.298586][T20786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.303859][T20774] __kmem_cache_create+0x533/0x6c0 [ 537.303891][T20774] ? kmem_cache_alloc+0x10f/0x220 [ 537.332900][T20774] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 537.338846][T20774] kmem_cache_create_usercopy+0x156/0x2b0 [ 537.344646][T20774] p9_client_create+0x80c/0xa70 [ 537.349527][T20774] v9fs_session_init+0xf9/0xd90 [ 537.354391][T20774] ? slab_post_alloc_hook+0x8c/0x340 [ 537.359723][T20774] ? v9fs_mount+0x53/0x630 [ 537.364174][T20774] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 537.369838][T20774] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 537.376076][T20774] ? v9fs_mount+0x53/0x630 [ 537.380531][T20774] v9fs_mount+0x69/0x630 [ 537.384844][T20774] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 537.391044][T20774] legacy_get_tree+0x74/0xd0 [ 537.395665][T20774] vfs_get_tree+0x51/0x1b0 [ 537.400105][T20774] do_new_mount+0x203/0x660 [ 537.404717][T20774] path_mount+0x496/0xb30 [ 537.409248][T20774] __se_sys_mount+0x27f/0x2d0 [ 537.414027][T20774] __x64_sys_mount+0x67/0x80 [ 537.418702][T20774] do_syscall_64+0x41/0xc0 [ 537.423123][T20774] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 537.429071][T20774] RIP: 0033:0x7fd83d377ae9 [ 537.433486][T20774] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 537.453099][T20774] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 537.461523][T20774] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 537.469523][T20774] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 537.477499][T20774] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 537.485488][T20774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.493504][T20774] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 537.501510][T20774] [ 537.507093][T20774] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 537.515093][T20774] CPU: 1 PID: 20774 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 537.525164][T20774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 537.535298][T20774] Call Trace: [ 537.538664][T20774] [ 537.541630][T20774] dump_stack_lvl+0xda/0x130 [ 537.546331][T20774] dump_stack+0x15/0x20 [ 537.550540][T20774] kmem_cache_create_usercopy+0x237/0x2b0 [ 537.556355][T20774] p9_client_create+0x80c/0xa70 [ 537.561217][T20774] v9fs_session_init+0xf9/0xd90 [ 537.566076][T20774] ? slab_post_alloc_hook+0x8c/0x340 [ 537.571452][T20774] ? v9fs_mount+0x53/0x630 [ 537.576099][T20774] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 537.581755][T20774] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 537.587945][T20774] ? v9fs_mount+0x53/0x630 [ 537.592441][T20774] v9fs_mount+0x69/0x630 [ 537.596756][T20774] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 537.603019][T20774] legacy_get_tree+0x74/0xd0 [ 537.607787][T20774] vfs_get_tree+0x51/0x1b0 [ 537.612225][T20774] do_new_mount+0x203/0x660 [ 537.616781][T20774] path_mount+0x496/0xb30 [ 537.621120][T20774] __se_sys_mount+0x27f/0x2d0 [ 537.625977][T20774] __x64_sys_mount+0x67/0x80 [ 537.630595][T20774] do_syscall_64+0x41/0xc0 [ 537.635096][T20774] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 537.641088][T20774] RIP: 0033:0x7fd83d377ae9 [ 537.645583][T20774] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 537.665220][T20774] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:19:51 executing program 5: socket(0x2, 0x2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000004940), 0x8, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 22:19:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b48090987f70e06d038e7ff7fc6e5539b324b078b089b0708356d090890e0878f0e1ac6e7049b3366959b619a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d14ad546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c32fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b887b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfddf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675dde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a12ff1210465483cd3b2d7839f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ef66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe430013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c75a4c20e3dd5484b4d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d68ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949dfe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 22:19:51 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000004940), 0x8, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) 22:19:51 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 37) 22:19:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a800400"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000004940), 0x8, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x440000, 0x0) 22:19:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) [ 537.673671][T20774] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 537.681665][T20774] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 537.689644][T20774] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 537.697659][T20774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.705634][T20774] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 537.713660][T20774] [ 537.719328][T20774] 9p: Unknown access argument user": -22 22:19:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/232, 0xffffffffffffffda}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000580)=""/39, 0x27}], 0x8, 0x0, 0x0, 0x0) 22:19:51 executing program 5: socket(0x2, 0x2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a800400"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:19:51 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x28000, 0x1c0) [ 537.780399][T20802] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 537.788561][T20802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.799458][T20803] FAULT_INJECTION: forcing a failure. [ 537.799458][T20803] name failslab, interval 1, probability 0, space 0, times 0 [ 537.812195][T20803] CPU: 0 PID: 20803 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 537.822281][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 537.832364][T20803] Call Trace: [ 537.835687][T20803] [ 537.838642][T20803] dump_stack_lvl+0xda/0x130 [ 537.843298][T20803] dump_stack+0x15/0x20 [ 537.847558][T20803] should_fail_ex+0x21f/0x230 [ 537.852274][T20803] __should_failslab+0x92/0xa0 [ 537.857073][T20803] should_failslab+0x9/0x20 [ 537.861677][T20803] slab_pre_alloc_hook+0x38/0x180 [ 537.866750][T20803] kmem_cache_alloc+0x52/0x220 [ 537.871586][T20803] ? __kernfs_new_node+0x6a/0x380 [ 537.873924][T20809] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 537.876716][T20803] __kernfs_new_node+0x6a/0x380 [ 537.884808][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.889626][T20803] ? rb_insert_color+0x6a/0x290 [ 537.903790][T20803] ? up_write+0x30/0xe0 [ 537.908052][T20803] ? kernfs_activate+0x252/0x270 [ 537.913039][T20803] kernfs_new_node+0x5f/0xd0 [ 537.917668][T20803] __kernfs_create_file+0x49/0x180 [ 537.922869][T20803] ? slab_attr_show+0x20/0x20 [ 537.927613][T20803] sysfs_add_file_mode_ns+0x136/0x1b0 [ 537.933074][T20803] internal_create_group+0x2e4/0x800 [ 537.938400][T20803] sysfs_create_group+0x1f/0x30 [ 537.943286][T20803] sysfs_slab_add+0x163/0x2a0 [ 537.947993][T20803] __kmem_cache_create+0x533/0x6c0 [ 537.953166][T20803] ? kmem_cache_alloc+0x10f/0x220 [ 537.958299][T20803] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 537.964292][T20803] kmem_cache_create_usercopy+0x156/0x2b0 [ 537.970045][T20803] p9_client_create+0x80c/0xa70 [ 537.975009][T20803] v9fs_session_init+0xf9/0xd90 [ 537.979869][T20803] ? slab_post_alloc_hook+0x8c/0x340 [ 537.985182][T20803] ? v9fs_mount+0x53/0x630 [ 537.989611][T20803] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 537.995326][T20803] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.001564][T20803] ? v9fs_mount+0x53/0x630 [ 538.006155][T20803] v9fs_mount+0x69/0x630 [ 538.010482][T20803] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.016676][T20803] legacy_get_tree+0x74/0xd0 [ 538.021293][T20803] vfs_get_tree+0x51/0x1b0 [ 538.025761][T20803] do_new_mount+0x203/0x660 [ 538.030281][T20803] path_mount+0x496/0xb30 [ 538.034692][T20803] __se_sys_mount+0x27f/0x2d0 [ 538.039458][T20803] __x64_sys_mount+0x67/0x80 [ 538.044152][T20803] do_syscall_64+0x41/0xc0 [ 538.048610][T20803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.054526][T20803] RIP: 0033:0x7fd83d377ae9 [ 538.058971][T20803] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 538.078661][T20803] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.087195][T20803] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 538.095240][T20803] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 538.103215][T20803] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 538.111230][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.119200][T20803] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 538.127241][T20803] [ 538.145456][T20803] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 538.153458][T20803] CPU: 1 PID: 20803 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 538.163534][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 538.173600][T20803] Call Trace: [ 538.176878][T20803] [ 538.179814][T20803] dump_stack_lvl+0xda/0x130 [ 538.184461][T20803] dump_stack+0x15/0x20 [ 538.188642][T20803] kmem_cache_create_usercopy+0x237/0x2b0 [ 538.194443][T20803] p9_client_create+0x80c/0xa70 [ 538.199310][T20803] v9fs_session_init+0xf9/0xd90 [ 538.204168][T20803] ? slab_post_alloc_hook+0x8c/0x340 [ 538.209457][T20803] ? v9fs_mount+0x53/0x630 [ 538.213897][T20803] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 538.219547][T20803] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.225819][T20803] ? v9fs_mount+0x53/0x630 [ 538.230251][T20803] v9fs_mount+0x69/0x630 [ 538.234510][T20803] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.240742][T20803] legacy_get_tree+0x74/0xd0 [ 538.245350][T20803] vfs_get_tree+0x51/0x1b0 [ 538.249845][T20803] do_new_mount+0x203/0x660 [ 538.254410][T20803] path_mount+0x496/0xb30 [ 538.258804][T20803] __se_sys_mount+0x27f/0x2d0 [ 538.263511][T20803] __x64_sys_mount+0x67/0x80 [ 538.268158][T20803] do_syscall_64+0x41/0xc0 [ 538.272649][T20803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.278653][T20803] RIP: 0033:0x7fd83d377ae9 [ 538.283074][T20803] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 538.302768][T20803] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.311305][T20803] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 538.319295][T20803] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 538.327341][T20803] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 538.335397][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="480000001e000901000000000000000000000000340001003000080009000800766c616e0000000004000a80040006"], 0x48}}, 0x0) 22:19:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 22:19:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 22:19:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pread64(r0, 0x0, 0x0, 0x0) [ 538.343367][T20803] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 538.351345][T20803] [ 538.360448][T20803] 9p: Unknown access argument user": -22 22:19:52 executing program 5: socket(0x2, 0x2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 22:19:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x381) write$tcp_mem(r0, &(0x7f0000000080), 0x48) 22:19:52 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 38) 22:19:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 22:19:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 22:19:52 executing program 5: r0 = socket(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) [ 538.388390][T20816] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 538.396673][T20816] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 22:19:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') fsmount(r0, 0x0, 0x5) 22:19:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) [ 538.475610][T20828] FAULT_INJECTION: forcing a failure. [ 538.475610][T20828] name failslab, interval 1, probability 0, space 0, times 0 [ 538.488556][T20828] CPU: 1 PID: 20828 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 538.498720][T20828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 538.508868][T20828] Call Trace: [ 538.512172][T20828] [ 538.515127][T20828] dump_stack_lvl+0xda/0x130 [ 538.519753][T20828] dump_stack+0x15/0x20 [ 538.524027][T20828] should_fail_ex+0x21f/0x230 [ 538.528726][T20828] __should_failslab+0x92/0xa0 [ 538.533608][T20828] should_failslab+0x9/0x20 [ 538.538143][T20828] slab_pre_alloc_hook+0x38/0x180 [ 538.543244][T20828] kmem_cache_alloc+0x52/0x220 [ 538.548040][T20828] ? __kernfs_new_node+0x6a/0x380 [ 538.553134][T20828] __kernfs_new_node+0x6a/0x380 [ 538.558191][T20828] ? rb_insert_color+0x263/0x290 [ 538.563161][T20828] ? up_write+0x30/0xe0 [ 538.567359][T20828] ? kernfs_activate+0x252/0x270 [ 538.572336][T20828] kernfs_new_node+0x5f/0xd0 [ 538.576990][T20828] __kernfs_create_file+0x49/0x180 [ 538.582149][T20828] ? slab_attr_show+0x20/0x20 [ 538.586932][T20828] sysfs_add_file_mode_ns+0x136/0x1b0 [ 538.592419][T20828] internal_create_group+0x2e4/0x800 [ 538.597812][T20828] sysfs_create_group+0x1f/0x30 [ 538.602705][T20828] sysfs_slab_add+0x163/0x2a0 [ 538.607422][T20828] __kmem_cache_create+0x533/0x6c0 [ 538.612579][T20828] ? kmem_cache_alloc+0x10f/0x220 [ 538.617634][T20828] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 538.623575][T20828] kmem_cache_create_usercopy+0x156/0x2b0 [ 538.629348][T20828] p9_client_create+0x80c/0xa70 [ 538.634228][T20828] v9fs_session_init+0xf9/0xd90 [ 538.639190][T20828] ? slab_post_alloc_hook+0x8c/0x340 [ 538.644517][T20828] ? v9fs_mount+0x53/0x630 [ 538.648964][T20828] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 538.654697][T20828] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.661003][T20828] ? v9fs_mount+0x53/0x630 [ 538.665544][T20828] v9fs_mount+0x69/0x630 [ 538.669862][T20828] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.676073][T20828] legacy_get_tree+0x74/0xd0 [ 538.680704][T20828] vfs_get_tree+0x51/0x1b0 [ 538.685187][T20828] do_new_mount+0x203/0x660 [ 538.689769][T20828] path_mount+0x496/0xb30 [ 538.694210][T20828] __se_sys_mount+0x27f/0x2d0 [ 538.698942][T20828] __x64_sys_mount+0x67/0x80 [ 538.703656][T20828] do_syscall_64+0x41/0xc0 [ 538.708166][T20828] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.714172][T20828] RIP: 0033:0x7fd83d377ae9 [ 538.718610][T20828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 538.738282][T20828] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.746731][T20828] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 538.754733][T20828] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 538.762727][T20828] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 538.770727][T20828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.778729][T20828] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 538.786796][T20828] [ 538.798128][T20828] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 538.806113][T20828] CPU: 1 PID: 20828 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 538.816265][T20828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 538.826387][T20828] Call Trace: [ 538.829688][T20828] [ 538.832677][T20828] dump_stack_lvl+0xda/0x130 [ 538.837275][T20828] dump_stack+0x15/0x20 [ 538.841515][T20828] kmem_cache_create_usercopy+0x237/0x2b0 [ 538.847313][T20828] p9_client_create+0x80c/0xa70 [ 538.852250][T20828] v9fs_session_init+0xf9/0xd90 [ 538.857110][T20828] ? slab_post_alloc_hook+0x8c/0x340 [ 538.862474][T20828] ? v9fs_mount+0x53/0x630 [ 538.866982][T20828] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 538.872624][T20828] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.878814][T20828] ? v9fs_mount+0x53/0x630 [ 538.883279][T20828] v9fs_mount+0x69/0x630 [ 538.887609][T20828] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 538.893779][T20828] legacy_get_tree+0x74/0xd0 [ 538.898392][T20828] vfs_get_tree+0x51/0x1b0 [ 538.902827][T20828] do_new_mount+0x203/0x660 [ 538.907361][T20828] path_mount+0x496/0xb30 [ 538.911792][T20828] __se_sys_mount+0x27f/0x2d0 [ 538.916510][T20828] __x64_sys_mount+0x67/0x80 [ 538.921134][T20828] do_syscall_64+0x41/0xc0 [ 538.925576][T20828] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.931617][T20828] RIP: 0033:0x7fd83d377ae9 [ 538.936031][T20828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 538.955652][T20828] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.964075][T20828] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:53 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 39) 22:19:53 executing program 3: capget(&(0x7f0000000600)={0x20071026}, 0x0) 22:19:53 executing program 5: r0 = socket(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) 22:19:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbd0}, 0x1c) 22:19:53 executing program 1: set_mempolicy(0x3, &(0x7f0000000080)=0x8, 0x8) 22:19:53 executing program 2: syz_open_dev$vcsa(&(0x7f0000000400), 0x0, 0x200) 22:19:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x8904, 0x0) 22:19:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x0, 0x0, 0x0, 0x0, 0x31dc, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) [ 538.972080][T20828] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 538.980079][T20828] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 538.988066][T20828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.996215][T20828] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 539.004347][T20828] [ 539.008744][T20828] 9p: Unknown access argument user": -22 22:19:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x890b, 0x0) 22:19:53 executing program 5: r0 = socket(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) 22:19:53 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x88, 0x2d7, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x3a140, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x149802, 0x0) write(r1, &(0x7f0000004200)="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", 0x154) sendfile(r1, r0, 0x0, 0x21003) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x149802, 0x0) sendfile(r3, r2, 0x0, 0x21003) 22:19:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x8, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x38}}, 0x0) [ 539.101241][T20853] FAULT_INJECTION: forcing a failure. [ 539.101241][T20853] name failslab, interval 1, probability 0, space 0, times 0 [ 539.105534][T20856] syz-executor.3[20856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 539.113913][T20853] CPU: 0 PID: 20853 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 539.133735][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 539.139964][T20856] loop3: detected capacity change from 0 to 128 [ 539.143803][T20853] Call Trace: [ 539.143814][T20853] [ 539.143822][T20853] dump_stack_lvl+0xda/0x130 [ 539.143863][T20853] dump_stack+0x15/0x20 [ 539.143886][T20853] should_fail_ex+0x21f/0x230 [ 539.143911][T20853] __should_failslab+0x92/0xa0 [ 539.174658][T20853] should_failslab+0x9/0x20 [ 539.179194][T20853] slab_pre_alloc_hook+0x38/0x180 [ 539.184329][T20853] kmem_cache_alloc+0x52/0x220 [ 539.189192][T20853] ? __kernfs_new_node+0x6a/0x380 [ 539.194263][T20853] __kernfs_new_node+0x6a/0x380 [ 539.199182][T20853] ? rb_insert_color+0x263/0x290 [ 539.204186][T20853] ? up_write+0x30/0xe0 [ 539.208381][T20853] ? kernfs_activate+0x252/0x270 [ 539.213481][T20853] kernfs_new_node+0x5f/0xd0 [ 539.218192][T20853] __kernfs_create_file+0x49/0x180 [ 539.223353][T20853] ? slab_attr_show+0x20/0x20 [ 539.228073][T20853] sysfs_add_file_mode_ns+0x136/0x1b0 [ 539.233559][T20853] internal_create_group+0x2e4/0x800 [ 539.238902][T20853] sysfs_create_group+0x1f/0x30 [ 539.243757][T20853] sysfs_slab_add+0x163/0x2a0 [ 539.248440][T20853] __kmem_cache_create+0x533/0x6c0 [ 539.253557][T20853] ? kmem_cache_alloc+0x10f/0x220 [ 539.258590][T20853] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 539.264564][T20853] kmem_cache_create_usercopy+0x156/0x2b0 [ 539.270368][T20853] p9_client_create+0x80c/0xa70 [ 539.275374][T20853] v9fs_session_init+0xf9/0xd90 [ 539.280231][T20853] ? slab_post_alloc_hook+0x8c/0x340 [ 539.285524][T20853] ? v9fs_mount+0x53/0x630 [ 539.289955][T20853] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 539.295625][T20853] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 539.301847][T20853] ? v9fs_mount+0x53/0x630 [ 539.306278][T20853] v9fs_mount+0x69/0x630 [ 539.310614][T20853] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 539.316822][T20853] legacy_get_tree+0x74/0xd0 [ 539.321504][T20853] vfs_get_tree+0x51/0x1b0 [ 539.326010][T20853] do_new_mount+0x203/0x660 [ 539.330526][T20853] path_mount+0x496/0xb30 [ 539.334878][T20853] __se_sys_mount+0x27f/0x2d0 [ 539.339611][T20853] __x64_sys_mount+0x67/0x80 [ 539.344288][T20853] do_syscall_64+0x41/0xc0 [ 539.348713][T20853] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 539.354645][T20853] RIP: 0033:0x7fd83d377ae9 [ 539.359093][T20853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 539.378867][T20853] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 539.387303][T20853] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 539.395309][T20853] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 539.403305][T20853] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 539.411305][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.419346][T20853] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 539.427340][T20853] [ 539.431697][T20853] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 539.439671][T20853] CPU: 0 PID: 20853 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 539.449780][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 539.459882][T20853] Call Trace: [ 539.463181][T20853] [ 539.466116][T20853] dump_stack_lvl+0xda/0x130 [ 539.470774][T20853] dump_stack+0x15/0x20 [ 539.474959][T20853] kmem_cache_create_usercopy+0x237/0x2b0 [ 539.480787][T20853] p9_client_create+0x80c/0xa70 [ 539.485678][T20853] v9fs_session_init+0xf9/0xd90 [ 539.490659][T20853] ? slab_post_alloc_hook+0x8c/0x340 [ 539.495963][T20853] ? v9fs_mount+0x53/0x630 [ 539.500394][T20853] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 539.506102][T20853] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 539.512343][T20853] ? v9fs_mount+0x53/0x630 [ 539.516844][T20853] v9fs_mount+0x69/0x630 [ 539.521148][T20853] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 539.527374][T20853] legacy_get_tree+0x74/0xd0 [ 539.532042][T20853] vfs_get_tree+0x51/0x1b0 [ 539.536477][T20853] do_new_mount+0x203/0x660 [ 539.541016][T20853] path_mount+0x496/0xb30 [ 539.545384][T20853] __se_sys_mount+0x27f/0x2d0 [ 539.550181][T20853] __x64_sys_mount+0x67/0x80 [ 539.554893][T20853] do_syscall_64+0x41/0xc0 [ 539.559331][T20853] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 539.565246][T20853] RIP: 0033:0x7fd83d377ae9 [ 539.569698][T20853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 539.589343][T20853] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:19:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x38}}, 0x0) 22:19:53 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x224c60, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 22:19:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:19:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@ipv6_getroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) 22:19:53 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xc800) 22:19:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e00014f"], 0x24}}, 0x0) [ 539.597849][T20853] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 539.605842][T20853] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 539.613814][T20853] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 539.621923][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.629911][T20853] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 539.637886][T20853] [ 539.642145][T20853] 9p: Unknown access argument user": -22 22:19:53 executing program 5: syz_emit_ethernet(0x166, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb89000000000286dd6000000001302f00fe8000000000000000000000000000aafc0200000000000000000000000000003b0c"], 0x0) 22:19:53 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 40) 22:19:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000180001fec0ffff00000000000a68000000000408"], 0x24}}, 0x0) [ 539.715270][T20871] FAULT_INJECTION: forcing a failure. [ 539.715270][T20871] name failslab, interval 1, probability 0, space 0, times 0 [ 539.727980][T20871] CPU: 0 PID: 20871 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 539.738074][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 539.748189][T20871] Call Trace: [ 539.751501][T20871] [ 539.752858][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:19:53 executing program 1: syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200810, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x4, 0x4f6, &(0x7f0000001c40)="$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") r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1f600) sendfile(r0, r1, 0x0, 0x1f600) 22:19:53 executing program 5: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0xfc) [ 539.754489][T20871] dump_stack_lvl+0xda/0x130 [ 539.754521][T20871] dump_stack+0x15/0x20 [ 539.772562][T20871] should_fail_ex+0x21f/0x230 [ 539.777276][T20871] __should_failslab+0x92/0xa0 [ 539.782137][T20871] should_failslab+0x9/0x20 [ 539.786678][T20871] slab_pre_alloc_hook+0x38/0x180 [ 539.791749][T20871] kmem_cache_alloc+0x52/0x220 [ 539.796546][T20871] ? __kernfs_new_node+0x6a/0x380 [ 539.797085][T20883] syz-executor.1[20883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 22:19:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f00000003c0)={'batadv_slave_1\x00'}) [ 539.801665][T20871] __kernfs_new_node+0x6a/0x380 [ 539.801771][T20871] ? rb_insert_color+0x6a/0x290 [ 539.821111][T20871] ? up_write+0x30/0xe0 [ 539.825350][T20871] ? kernfs_activate+0x252/0x270 [ 539.830338][T20871] kernfs_new_node+0x5f/0xd0 [ 539.835030][T20871] __kernfs_create_file+0x49/0x180 [ 539.840231][T20871] ? slab_attr_show+0x20/0x20 [ 539.844946][T20871] sysfs_add_file_mode_ns+0x136/0x1b0 [ 539.850363][T20871] internal_create_group+0x2e4/0x800 [ 539.855689][T20871] sysfs_create_group+0x1f/0x30 [ 539.860647][T20871] sysfs_slab_add+0x163/0x2a0 [ 539.865362][T20871] __kmem_cache_create+0x533/0x6c0 [ 539.870548][T20871] ? kmem_cache_alloc+0x10f/0x220 [ 539.875600][T20871] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 539.881813][T20871] kmem_cache_create_usercopy+0x156/0x2b0 [ 539.887681][T20871] p9_client_create+0x80c/0xa70 [ 539.892625][T20871] v9fs_session_init+0xf9/0xd90 [ 539.897578][T20871] ? slab_post_alloc_hook+0x8c/0x340 [ 539.898798][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.902956][T20871] ? v9fs_mount+0x53/0x630 [ 539.916611][T20871] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 539.922283][T20871] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 539.928575][T20871] ? v9fs_mount+0x53/0x630 [ 539.933091][T20871] v9fs_mount+0x69/0x630 [ 539.937456][T20871] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 539.941914][T20887] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 539.943686][T20871] legacy_get_tree+0x74/0xd0 [ 539.956516][T20871] vfs_get_tree+0x51/0x1b0 [ 539.961073][T20871] do_new_mount+0x203/0x660 [ 539.965624][T20871] path_mount+0x496/0xb30 [ 539.970178][T20871] __se_sys_mount+0x27f/0x2d0 [ 539.974936][T20871] __x64_sys_mount+0x67/0x80 [ 539.979575][T20871] do_syscall_64+0x41/0xc0 [ 539.984171][T20871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 539.990111][T20871] RIP: 0033:0x7fd83d377ae9 [ 539.994549][T20871] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 540.014205][T20871] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 540.022657][T20871] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 540.030729][T20871] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 540.038797][T20871] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 540.046839][T20871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.054869][T20871] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 540.062885][T20871] [ 540.068073][T20871] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 540.076089][T20871] CPU: 0 PID: 20871 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 540.086190][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 540.096339][T20871] Call Trace: [ 540.099646][T20871] [ 540.102595][T20871] dump_stack_lvl+0xda/0x130 [ 540.107228][T20871] dump_stack+0x15/0x20 [ 540.111414][T20871] kmem_cache_create_usercopy+0x237/0x2b0 [ 540.117198][T20871] p9_client_create+0x80c/0xa70 [ 540.122109][T20871] v9fs_session_init+0xf9/0xd90 [ 540.127031][T20871] ? slab_post_alloc_hook+0x8c/0x340 [ 540.132345][T20871] ? v9fs_mount+0x53/0x630 [ 540.136863][T20871] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 540.142528][T20871] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 540.148751][T20871] ? v9fs_mount+0x53/0x630 [ 540.153226][T20871] v9fs_mount+0x69/0x630 [ 540.157635][T20871] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 540.163932][T20871] legacy_get_tree+0x74/0xd0 [ 540.168635][T20871] vfs_get_tree+0x51/0x1b0 [ 540.173126][T20871] do_new_mount+0x203/0x660 [ 540.177851][T20871] path_mount+0x496/0xb30 [ 540.182263][T20871] __se_sys_mount+0x27f/0x2d0 [ 540.187004][T20871] __x64_sys_mount+0x67/0x80 [ 540.191787][T20871] do_syscall_64+0x41/0xc0 [ 540.196236][T20871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 540.202169][T20871] RIP: 0033:0x7fd83d377ae9 [ 540.206696][T20871] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 540.226370][T20871] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 540.234809][T20871] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 540.242981][T20871] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 540.251138][T20871] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 540.259134][T20871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:54 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 41) 22:19:54 executing program 2: r0 = eventfd2(0x93, 0x801) read$eventfd(r0, &(0x7f0000000100), 0x8) 22:19:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) [ 540.267144][T20871] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 540.275193][T20871] [ 540.280072][T20871] 9p: Unknown access argument user": -22 [ 540.344589][T20934] FAULT_INJECTION: forcing a failure. [ 540.344589][T20934] name failslab, interval 1, probability 0, space 0, times 0 [ 540.357294][T20934] CPU: 0 PID: 20934 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 540.367510][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 540.377600][T20934] Call Trace: [ 540.380982][T20934] [ 540.383931][T20934] dump_stack_lvl+0xda/0x130 [ 540.388601][T20934] dump_stack+0x15/0x20 [ 540.392788][T20934] should_fail_ex+0x21f/0x230 [ 540.397503][T20934] __should_failslab+0x92/0xa0 [ 540.402392][T20934] should_failslab+0x9/0x20 [ 540.406990][T20934] slab_pre_alloc_hook+0x38/0x180 [ 540.412049][T20934] kmem_cache_alloc+0x52/0x220 [ 540.416840][T20934] ? __kernfs_new_node+0x6a/0x380 [ 540.422026][T20934] __kernfs_new_node+0x6a/0x380 [ 540.426996][T20934] ? rb_insert_color+0x280/0x290 [ 540.432019][T20934] ? up_write+0x30/0xe0 [ 540.436262][T20934] ? kernfs_activate+0x252/0x270 [ 540.441274][T20934] kernfs_new_node+0x5f/0xd0 [ 540.445910][T20934] __kernfs_create_file+0x49/0x180 [ 540.451058][T20934] ? slab_attr_show+0x20/0x20 [ 540.455772][T20934] sysfs_add_file_mode_ns+0x136/0x1b0 [ 540.461243][T20934] internal_create_group+0x2e4/0x800 [ 540.466618][T20934] sysfs_create_group+0x1f/0x30 [ 540.471506][T20934] sysfs_slab_add+0x163/0x2a0 [ 540.476231][T20934] __kmem_cache_create+0x533/0x6c0 [ 540.481381][T20934] ? kmem_cache_alloc+0x10f/0x220 [ 540.486439][T20934] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 540.492395][T20934] kmem_cache_create_usercopy+0x156/0x2b0 [ 540.498255][T20934] p9_client_create+0x80c/0xa70 [ 540.503151][T20934] v9fs_session_init+0xf9/0xd90 [ 540.508060][T20934] ? slab_post_alloc_hook+0x8c/0x340 [ 540.513378][T20934] ? v9fs_mount+0x53/0x630 [ 540.517871][T20934] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 540.523542][T20934] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 540.529770][T20934] ? v9fs_mount+0x53/0x630 [ 540.534258][T20934] v9fs_mount+0x69/0x630 [ 540.538636][T20934] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 540.544846][T20934] legacy_get_tree+0x74/0xd0 [ 540.549533][T20934] vfs_get_tree+0x51/0x1b0 [ 540.554015][T20934] do_new_mount+0x203/0x660 [ 540.558627][T20934] path_mount+0x496/0xb30 [ 540.563054][T20934] __se_sys_mount+0x27f/0x2d0 [ 540.567775][T20934] __x64_sys_mount+0x67/0x80 [ 540.572502][T20934] do_syscall_64+0x41/0xc0 [ 540.576959][T20934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 540.582972][T20934] RIP: 0033:0x7fd83d377ae9 [ 540.587418][T20934] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 540.607072][T20934] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 540.615628][T20934] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 540.623628][T20934] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 540.631684][T20934] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 22:19:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x895c, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 22:19:54 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), 0x4) 22:19:54 executing program 2: socket(0x3, 0x0, 0x10001) [ 540.639700][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.647741][T20934] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 540.655764][T20934] [ 540.664758][T20934] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 540.672757][T20934] CPU: 1 PID: 20934 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 540.682887][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 540.692997][T20934] Call Trace: 22:19:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x400}, 0x48) [ 540.696299][T20934] [ 540.699238][T20934] dump_stack_lvl+0xda/0x130 [ 540.703912][T20934] dump_stack+0x15/0x20 [ 540.708099][T20934] kmem_cache_create_usercopy+0x237/0x2b0 [ 540.713870][T20934] p9_client_create+0x80c/0xa70 [ 540.718762][T20934] v9fs_session_init+0xf9/0xd90 [ 540.723707][T20934] ? slab_post_alloc_hook+0x8c/0x340 [ 540.729049][T20934] ? v9fs_mount+0x53/0x630 [ 540.733514][T20934] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 540.739246][T20934] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 22:19:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'team_slave_0\x00'}) [ 540.745512][T20934] ? v9fs_mount+0x53/0x630 [ 540.750033][T20934] v9fs_mount+0x69/0x630 [ 540.754492][T20934] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 540.760781][T20934] legacy_get_tree+0x74/0xd0 [ 540.765477][T20934] vfs_get_tree+0x51/0x1b0 [ 540.769949][T20934] do_new_mount+0x203/0x660 [ 540.774530][T20934] path_mount+0x496/0xb30 [ 540.778997][T20934] __se_sys_mount+0x27f/0x2d0 [ 540.783797][T20934] __x64_sys_mount+0x67/0x80 [ 540.788444][T20934] do_syscall_64+0x41/0xc0 22:19:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x13}, 0x48) 22:19:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1}) close(r0) [ 540.792926][T20934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 540.798923][T20934] RIP: 0033:0x7fd83d377ae9 [ 540.803418][T20934] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 540.823749][T20934] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 540.832191][T20934] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:19:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) 22:19:54 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 42) 22:19:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x1ff, 0x4) 22:19:54 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) [ 540.840235][T20934] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 540.848276][T20934] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 540.856279][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.864276][T20934] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 540.872373][T20934] [ 540.885891][T20934] 9p: Unknown access argument user": -22 22:19:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000003c0), 0xc) 22:19:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x8f6, 0x5}, 0x10) 22:19:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)) 22:19:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 540.960734][T21002] FAULT_INJECTION: forcing a failure. [ 540.960734][T21002] name failslab, interval 1, probability 0, space 0, times 0 [ 540.973551][T21002] CPU: 0 PID: 21002 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 540.983762][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 540.993867][T21002] Call Trace: [ 540.997170][T21002] [ 541.000138][T21002] dump_stack_lvl+0xda/0x130 [ 541.004825][T21002] dump_stack+0x15/0x20 22:19:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 22:19:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 22:19:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, 0x0, 0x0) 22:19:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000280), &(0x7f0000000340)=0x8c) 22:19:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x3) [ 541.009012][T21002] should_fail_ex+0x21f/0x230 [ 541.013716][T21002] __should_failslab+0x92/0xa0 [ 541.018585][T21002] should_failslab+0x9/0x20 [ 541.023236][T21002] slab_pre_alloc_hook+0x38/0x180 [ 541.028295][T21002] kmem_cache_alloc+0x52/0x220 [ 541.033089][T21002] ? __kernfs_new_node+0x6a/0x380 [ 541.038150][T21002] __kernfs_new_node+0x6a/0x380 [ 541.043061][T21002] ? rb_insert_color+0x6a/0x290 [ 541.048032][T21002] ? up_write+0x30/0xe0 [ 541.052244][T21002] ? kernfs_activate+0x252/0x270 [ 541.057273][T21002] kernfs_new_node+0x5f/0xd0 [ 541.061975][T21002] __kernfs_create_file+0x49/0x180 [ 541.067136][T21002] ? slab_attr_show+0x20/0x20 [ 541.071941][T21002] sysfs_add_file_mode_ns+0x136/0x1b0 [ 541.077357][T21002] internal_create_group+0x2e4/0x800 [ 541.082702][T21002] sysfs_create_group+0x1f/0x30 [ 541.087622][T21002] sysfs_slab_add+0x163/0x2a0 [ 541.092329][T21002] __kmem_cache_create+0x533/0x6c0 [ 541.097480][T21002] ? kmem_cache_alloc+0x10f/0x220 [ 541.102585][T21002] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 541.108578][T21002] kmem_cache_create_usercopy+0x156/0x2b0 [ 541.114351][T21002] p9_client_create+0x80c/0xa70 [ 541.119281][T21002] v9fs_session_init+0xf9/0xd90 [ 541.124168][T21002] ? slab_post_alloc_hook+0x8c/0x340 [ 541.129500][T21002] ? v9fs_mount+0x53/0x630 [ 541.133965][T21002] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 541.139625][T21002] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.145979][T21002] ? v9fs_mount+0x53/0x630 [ 541.150505][T21002] v9fs_mount+0x69/0x630 [ 541.154810][T21002] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.161025][T21002] legacy_get_tree+0x74/0xd0 [ 541.165762][T21002] vfs_get_tree+0x51/0x1b0 [ 541.170255][T21002] do_new_mount+0x203/0x660 [ 541.174849][T21002] path_mount+0x496/0xb30 [ 541.179227][T21002] __se_sys_mount+0x27f/0x2d0 [ 541.184010][T21002] __x64_sys_mount+0x67/0x80 [ 541.188762][T21002] do_syscall_64+0x41/0xc0 [ 541.193240][T21002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 541.199148][T21002] RIP: 0033:0x7fd83d377ae9 [ 541.203612][T21002] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 541.223265][T21002] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 541.231744][T21002] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 541.239767][T21002] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 541.247740][T21002] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 541.255712][T21002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.263680][T21002] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 541.271675][T21002] [ 541.277153][T21002] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 541.285164][T21002] CPU: 0 PID: 21002 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 541.295249][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 541.305367][T21002] Call Trace: [ 541.308732][T21002] [ 541.311771][T21002] dump_stack_lvl+0xda/0x130 [ 541.316368][T21002] dump_stack+0x15/0x20 [ 541.320617][T21002] kmem_cache_create_usercopy+0x237/0x2b0 [ 541.326409][T21002] p9_client_create+0x80c/0xa70 [ 541.331315][T21002] v9fs_session_init+0xf9/0xd90 [ 541.336198][T21002] ? slab_post_alloc_hook+0x8c/0x340 [ 541.341594][T21002] ? v9fs_mount+0x53/0x630 [ 541.346046][T21002] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 541.351750][T21002] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.357979][T21002] ? v9fs_mount+0x53/0x630 [ 541.362410][T21002] v9fs_mount+0x69/0x630 [ 541.366701][T21002] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.372871][T21002] legacy_get_tree+0x74/0xd0 [ 541.377487][T21002] vfs_get_tree+0x51/0x1b0 [ 541.381964][T21002] do_new_mount+0x203/0x660 [ 541.386478][T21002] path_mount+0x496/0xb30 [ 541.390874][T21002] __se_sys_mount+0x27f/0x2d0 [ 541.395584][T21002] __x64_sys_mount+0x67/0x80 [ 541.400232][T21002] do_syscall_64+0x41/0xc0 [ 541.404672][T21002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 541.410609][T21002] RIP: 0033:0x7fd83d377ae9 [ 541.415028][T21002] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 541.434653][T21002] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 541.443082][T21002] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 541.451071][T21002] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:55 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 43) 22:19:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 22:19:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 22:19:55 executing program 3: pipe(&(0x7f0000000200)) 22:19:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001180)={'wpan1\x00'}) 22:19:55 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 22:19:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:19:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000880)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r0, r3, r1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x1, 0xb, 0x3}, {0x5, 0x0, 0x10}, {0x2, 0x0, 0x1}]}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000001380)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000013c0)=0x28) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006e80)=[{{&(0x7f0000001400)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001700)=[{0x0}, {&(0x7f0000001540)}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)=[@dstopts_2292={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005ac0)="58acc256b935ff129864c8616811e9481f91a7184d75a068a1421391b5cc", 0x1e}, {&(0x7f0000005b40)}], 0x2, &(0x7f0000005c80)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xef}]}}}], 0x20}}], 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000007340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) [ 541.459046][T21002] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 541.467065][T21002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.475038][T21002] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 541.483357][T21002] [ 541.487453][T21002] 9p: Unknown access argument user": -22 22:19:55 executing program 3: clock_gettime(0x2, &(0x7f00000059c0)) [ 541.536593][T21040] FAULT_INJECTION: forcing a failure. [ 541.536593][T21040] name failslab, interval 1, probability 0, space 0, times 0 [ 541.549496][T21040] CPU: 0 PID: 21040 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 541.559590][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 541.569667][T21040] Call Trace: [ 541.572966][T21040] [ 541.575913][T21040] dump_stack_lvl+0xda/0x130 [ 541.580704][T21040] dump_stack+0x15/0x20 [ 541.584887][T21040] should_fail_ex+0x21f/0x230 [ 541.589672][T21040] __should_failslab+0x92/0xa0 [ 541.594493][T21040] should_failslab+0x9/0x20 [ 541.599012][T21040] slab_pre_alloc_hook+0x38/0x180 [ 541.604054][T21040] kmem_cache_alloc+0x52/0x220 [ 541.608867][T21040] ? __kernfs_new_node+0x6a/0x380 [ 541.613987][T21040] __kernfs_new_node+0x6a/0x380 [ 541.618984][T21040] ? rb_insert_color+0x263/0x290 [ 541.624032][T21040] ? up_write+0x30/0xe0 [ 541.628221][T21040] ? kernfs_activate+0x252/0x270 [ 541.633268][T21040] kernfs_new_node+0x5f/0xd0 [ 541.637909][T21040] __kernfs_create_file+0x49/0x180 [ 541.643047][T21040] ? slab_attr_show+0x20/0x20 [ 541.647737][T21040] sysfs_add_file_mode_ns+0x136/0x1b0 [ 541.653143][T21040] internal_create_group+0x2e4/0x800 [ 541.658452][T21040] sysfs_create_group+0x1f/0x30 [ 541.663318][T21040] sysfs_slab_add+0x163/0x2a0 [ 541.668074][T21040] __kmem_cache_create+0x533/0x6c0 [ 541.673315][T21040] ? kmem_cache_alloc+0x10f/0x220 [ 541.678381][T21040] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 541.684409][T21040] kmem_cache_create_usercopy+0x156/0x2b0 [ 541.690164][T21040] p9_client_create+0x80c/0xa70 [ 541.695028][T21040] v9fs_session_init+0xf9/0xd90 [ 541.699965][T21040] ? slab_post_alloc_hook+0x8c/0x340 [ 541.705403][T21040] ? v9fs_mount+0x53/0x630 [ 541.709855][T21040] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 541.715498][T21040] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.721750][T21040] ? v9fs_mount+0x53/0x630 [ 541.726329][T21040] v9fs_mount+0x69/0x630 [ 541.730594][T21040] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.736899][T21040] legacy_get_tree+0x74/0xd0 [ 541.741525][T21040] vfs_get_tree+0x51/0x1b0 [ 541.745988][T21040] do_new_mount+0x203/0x660 [ 541.750523][T21040] path_mount+0x496/0xb30 [ 541.755047][T21040] __se_sys_mount+0x27f/0x2d0 [ 541.759788][T21040] __x64_sys_mount+0x67/0x80 [ 541.764514][T21040] do_syscall_64+0x41/0xc0 [ 541.768948][T21040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 541.775017][T21040] RIP: 0033:0x7fd83d377ae9 [ 541.779453][T21040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 541.799167][T21040] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 541.807588][T21040] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 541.815646][T21040] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 541.823633][T21040] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 541.831831][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.839911][T21040] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 541.847891][T21040] 22:19:55 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x14}, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 22:19:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000400)='wg0\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xd6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x5, 0xfff}, [{}], "", ['\x00', '\x00']}, 0x278) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffd9d) 22:19:55 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) [ 541.913309][T21040] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 541.921422][T21040] CPU: 0 PID: 21040 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 541.931629][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 541.941734][T21040] Call Trace: [ 541.945027][T21040] [ 541.947972][T21040] dump_stack_lvl+0xda/0x130 [ 541.952595][T21040] dump_stack+0x15/0x20 [ 541.956767][T21040] kmem_cache_create_usercopy+0x237/0x2b0 [ 541.962580][T21040] p9_client_create+0x80c/0xa70 [ 541.967506][T21040] v9fs_session_init+0xf9/0xd90 [ 541.972492][T21040] ? slab_post_alloc_hook+0x8c/0x340 [ 541.977790][T21040] ? v9fs_mount+0x53/0x630 [ 541.982740][T21040] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 541.988434][T21040] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 541.994689][T21040] ? v9fs_mount+0x53/0x630 [ 541.999244][T21040] v9fs_mount+0x69/0x630 [ 542.003525][T21040] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.009747][T21040] legacy_get_tree+0x74/0xd0 [ 542.014403][T21040] vfs_get_tree+0x51/0x1b0 [ 542.018861][T21040] do_new_mount+0x203/0x660 [ 542.023380][T21040] path_mount+0x496/0xb30 [ 542.027733][T21040] __se_sys_mount+0x27f/0x2d0 [ 542.032444][T21040] __x64_sys_mount+0x67/0x80 [ 542.037223][T21040] do_syscall_64+0x41/0xc0 [ 542.041653][T21040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 542.047564][T21040] RIP: 0033:0x7fd83d377ae9 [ 542.052063][T21040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.071743][T21040] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.080185][T21040] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 542.088181][T21040] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 542.096158][T21040] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 542.104196][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:56 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 44) 22:19:56 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x14}, 0x14}}, 0x0) 22:19:56 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private, @loopback}, &(0x7f00000001c0)=0xc) 22:19:56 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000000)=@raw=[@initr0, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @cb_func, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:19:56 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) 22:19:56 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x0, 0x0) [ 542.112176][T21040] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 542.120188][T21040] [ 542.125600][T21040] 9p: Unknown access argument user": -22 22:19:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{}, {}, {}]}, 0x57) 22:19:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}}, 0x0) 22:19:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x7fffffff, 0x0, "713604dce25a1667ca057d348ab7c1b2b87881"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 22:19:56 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) [ 542.240621][T21075] FAULT_INJECTION: forcing a failure. [ 542.240621][T21075] name failslab, interval 1, probability 0, space 0, times 0 [ 542.253776][T21075] CPU: 0 PID: 21075 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 542.263892][T21075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 542.273975][T21075] Call Trace: [ 542.277309][T21075] [ 542.280333][T21075] dump_stack_lvl+0xda/0x130 [ 542.284979][T21075] dump_stack+0x15/0x20 [ 542.289145][T21075] should_fail_ex+0x21f/0x230 [ 542.293836][T21075] __should_failslab+0x92/0xa0 [ 542.298696][T21075] should_failslab+0x9/0x20 [ 542.303247][T21075] slab_pre_alloc_hook+0x38/0x180 [ 542.308380][T21075] kmem_cache_alloc+0x52/0x220 [ 542.313167][T21075] ? __kernfs_new_node+0x6a/0x380 [ 542.318250][T21075] __kernfs_new_node+0x6a/0x380 [ 542.323129][T21075] ? rb_insert_color+0x263/0x290 [ 542.328267][T21075] ? up_write+0x30/0xe0 [ 542.328305][T21075] ? kernfs_activate+0x252/0x270 [ 542.328368][T21075] kernfs_new_node+0x5f/0xd0 [ 542.328416][T21075] __kernfs_create_file+0x49/0x180 [ 542.328486][T21075] ? slab_attr_show+0x20/0x20 [ 542.328519][T21075] sysfs_add_file_mode_ns+0x136/0x1b0 [ 542.328579][T21075] internal_create_group+0x2e4/0x800 [ 542.328605][T21075] sysfs_create_group+0x1f/0x30 [ 542.328680][T21075] sysfs_slab_add+0x163/0x2a0 [ 542.328711][T21075] __kmem_cache_create+0x533/0x6c0 [ 542.328741][T21075] ? kmem_cache_alloc+0x10f/0x220 [ 542.328766][T21075] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 542.328821][T21075] kmem_cache_create_usercopy+0x156/0x2b0 [ 542.328883][T21075] p9_client_create+0x80c/0xa70 [ 542.328914][T21075] v9fs_session_init+0xf9/0xd90 [ 542.328944][T21075] ? slab_post_alloc_hook+0x8c/0x340 [ 542.328990][T21075] ? v9fs_mount+0x53/0x630 [ 542.329029][T21075] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 542.329056][T21075] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.329157][T21075] ? v9fs_mount+0x53/0x630 [ 542.329248][T21075] v9fs_mount+0x69/0x630 [ 542.329282][T21075] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.329431][T21075] legacy_get_tree+0x74/0xd0 [ 542.329474][T21075] vfs_get_tree+0x51/0x1b0 [ 542.329513][T21075] do_new_mount+0x203/0x660 [ 542.329558][T21075] path_mount+0x496/0xb30 [ 542.329594][T21075] __se_sys_mount+0x27f/0x2d0 [ 542.329677][T21075] __x64_sys_mount+0x67/0x80 [ 542.329714][T21075] do_syscall_64+0x41/0xc0 [ 542.474201][T21075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 542.474240][T21075] RIP: 0033:0x7fd83d377ae9 [ 542.474261][T21075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.474352][T21075] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.474372][T21075] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 542.474385][T21075] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 542.474398][T21075] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 542.474411][T21075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.474423][T21075] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 542.474440][T21075] [ 542.479484][T21075] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 542.565013][T21075] CPU: 0 PID: 21075 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 542.575122][T21075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 542.585285][T21075] Call Trace: [ 542.588568][T21075] [ 542.591557][T21075] dump_stack_lvl+0xda/0x130 [ 542.596167][T21075] dump_stack+0x15/0x20 [ 542.600329][T21075] kmem_cache_create_usercopy+0x237/0x2b0 [ 542.606156][T21075] p9_client_create+0x80c/0xa70 [ 542.611014][T21075] v9fs_session_init+0xf9/0xd90 [ 542.615874][T21075] ? slab_post_alloc_hook+0x8c/0x340 [ 542.621179][T21075] ? v9fs_mount+0x53/0x630 [ 542.625691][T21075] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 542.631416][T21075] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.637640][T21075] ? v9fs_mount+0x53/0x630 [ 542.642139][T21075] v9fs_mount+0x69/0x630 [ 542.646467][T21075] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.652728][T21075] legacy_get_tree+0x74/0xd0 [ 542.657336][T21075] vfs_get_tree+0x51/0x1b0 [ 542.661800][T21075] do_new_mount+0x203/0x660 [ 542.666495][T21075] path_mount+0x496/0xb30 [ 542.670906][T21075] __se_sys_mount+0x27f/0x2d0 [ 542.675618][T21075] __x64_sys_mount+0x67/0x80 [ 542.680219][T21075] do_syscall_64+0x41/0xc0 [ 542.684704][T21075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 542.690674][T21075] RIP: 0033:0x7fd83d377ae9 [ 542.695099][T21075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.714797][T21075] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.723232][T21075] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 542.731259][T21075] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:56 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 45) 22:19:56 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:56 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000002e40)=""/4096) 22:19:56 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:56 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000006e40), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "81bef3f8c625cb48115c07828d8d2c533092d00587b923eae123a9ed9c2c21a7a968e84c689cd765f167099cd251f218c05cd22139b4aa1ae90553e87c2e4d24"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) 22:19:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x7fffffff, 0x0, "713604dce25a1667ca057d348ab7c1b2b87881"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 22:19:56 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000004100)='ns/cgroup\x00') [ 542.739305][T21075] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 542.747426][T21075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.755445][T21075] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 542.763440][T21075] [ 542.770563][T21075] 9p: Unknown access argument user": -22 22:19:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x7fffffff, 0x0, "713604dce25a1667ca057d348ab7c1b2b87881"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 22:19:56 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:56 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, &(0x7f00000002c0)={0x0, 0x0, 0x160000}, 0x20) [ 542.844761][T21093] FAULT_INJECTION: forcing a failure. [ 542.844761][T21093] name failslab, interval 1, probability 0, space 0, times 0 [ 542.857611][T21093] CPU: 1 PID: 21093 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 542.867786][T21093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 542.877957][T21093] Call Trace: [ 542.881355][T21093] [ 542.884313][T21093] dump_stack_lvl+0xda/0x130 [ 542.888945][T21093] dump_stack+0x15/0x20 [ 542.893129][T21093] should_fail_ex+0x21f/0x230 [ 542.897901][T21093] __should_failslab+0x92/0xa0 [ 542.902769][T21093] should_failslab+0x9/0x20 [ 542.907350][T21093] slab_pre_alloc_hook+0x38/0x180 [ 542.912411][T21093] kmem_cache_alloc+0x52/0x220 [ 542.917219][T21093] ? __kernfs_new_node+0x6a/0x380 [ 542.922359][T21093] __kernfs_new_node+0x6a/0x380 [ 542.927321][T21093] ? rb_insert_color+0x263/0x290 [ 542.932300][T21093] ? up_write+0x30/0xe0 [ 542.936615][T21093] ? kernfs_activate+0x252/0x270 22:19:56 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:56 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) [ 542.941695][T21093] kernfs_new_node+0x5f/0xd0 [ 542.946343][T21093] __kernfs_create_file+0x49/0x180 [ 542.951622][T21093] ? slab_attr_show+0x20/0x20 [ 542.956421][T21093] sysfs_add_file_mode_ns+0x136/0x1b0 [ 542.961870][T21093] internal_create_group+0x2e4/0x800 [ 542.967260][T21093] sysfs_create_group+0x1f/0x30 [ 542.972150][T21093] sysfs_slab_add+0x163/0x2a0 [ 542.976876][T21093] __kmem_cache_create+0x533/0x6c0 22:19:57 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 46) 22:19:57 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:57 executing program 5: migrate_pages(0x0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001680)='.', 0x1}], 0x1, &(0x7f0000003340)=ANY=[], 0x100}}], 0x2, 0x0) 22:19:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) 22:19:57 executing program 3: syz_clone(0x24048100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 542.976919][T21093] ? kmem_cache_alloc+0x10f/0x220 [ 542.976982][T21093] ? kmem_cache_create_usercopy+0x103/0x2b0 22:19:57 executing program 2: bpf$PROG_LOAD_XDP(0x13, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 542.977030][T21093] kmem_cache_create_usercopy+0x156/0x2b0 [ 542.977076][T21093] p9_client_create+0x80c/0xa70 [ 542.977107][T21093] v9fs_session_init+0xf9/0xd90 [ 542.977205][T21093] ? slab_post_alloc_hook+0x8c/0x340 [ 542.977229][T21093] ? v9fs_mount+0x53/0x630 [ 542.977268][T21093] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 542.977297][T21093] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.977391][T21093] ? v9fs_mount+0x53/0x630 [ 542.977426][T21093] v9fs_mount+0x69/0x630 [ 542.977467][T21093] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.977559][T21093] legacy_get_tree+0x74/0xd0 [ 542.977601][T21093] vfs_get_tree+0x51/0x1b0 [ 542.977637][T21093] do_new_mount+0x203/0x660 [ 542.977735][T21093] path_mount+0x496/0xb30 [ 542.977764][T21093] __se_sys_mount+0x27f/0x2d0 [ 542.977826][T21093] __x64_sys_mount+0x67/0x80 [ 542.977857][T21093] do_syscall_64+0x41/0xc0 [ 542.977881][T21093] ? irqentry_exit+0x12/0x40 [ 542.977973][T21093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 542.978010][T21093] RIP: 0033:0x7fd83d377ae9 [ 542.978028][T21093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.978076][T21093] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.978101][T21093] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 542.978117][T21093] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 542.978133][T21093] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 542.978148][T21093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.978234][T21093] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 542.978255][T21093] [ 542.978596][T21093] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 542.978614][T21093] CPU: 0 PID: 21093 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 542.978637][T21093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 542.978711][T21093] Call Trace: [ 542.978720][T21093] [ 542.978728][T21093] dump_stack_lvl+0xda/0x130 [ 542.978757][T21093] dump_stack+0x15/0x20 [ 542.978782][T21093] kmem_cache_create_usercopy+0x237/0x2b0 [ 542.978830][T21093] p9_client_create+0x80c/0xa70 [ 542.978854][T21093] v9fs_session_init+0xf9/0xd90 [ 542.978911][T21093] ? slab_post_alloc_hook+0x8c/0x340 [ 542.978940][T21093] ? v9fs_mount+0x53/0x630 [ 542.978974][T21093] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 542.979077][T21093] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.979120][T21093] ? v9fs_mount+0x53/0x630 [ 542.979175][T21093] v9fs_mount+0x69/0x630 [ 542.979208][T21093] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 542.979374][T21093] legacy_get_tree+0x74/0xd0 [ 542.979426][T21093] vfs_get_tree+0x51/0x1b0 [ 542.979459][T21093] do_new_mount+0x203/0x660 [ 542.979492][T21093] path_mount+0x496/0xb30 [ 542.979533][T21093] __se_sys_mount+0x27f/0x2d0 [ 542.979650][T21093] __x64_sys_mount+0x67/0x80 [ 542.979680][T21093] do_syscall_64+0x41/0xc0 [ 542.979719][T21093] ? irqentry_exit+0x12/0x40 [ 542.979746][T21093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 542.979823][T21093] RIP: 0033:0x7fd83d377ae9 [ 542.979841][T21093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.979864][T21093] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.979935][T21093] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 542.979948][T21093] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 542.979963][T21093] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 542.979978][T21093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.979994][T21093] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 542.980013][T21093] [ 542.980737][T21093] 9p: Unknown access argument user": -22 [ 543.068134][T21116] FAULT_INJECTION: forcing a failure. [ 543.068134][T21116] name failslab, interval 1, probability 0, space 0, times 0 [ 543.068159][T21116] CPU: 1 PID: 21116 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 543.068186][T21116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 543.068201][T21116] Call Trace: [ 543.068208][T21116] [ 543.068216][T21116] dump_stack_lvl+0xda/0x130 [ 543.068248][T21116] dump_stack+0x15/0x20 [ 543.068271][T21116] should_fail_ex+0x21f/0x230 [ 543.068307][T21116] __should_failslab+0x92/0xa0 [ 543.068345][T21116] should_failslab+0x9/0x20 [ 543.068371][T21116] slab_pre_alloc_hook+0x38/0x180 [ 543.068401][T21116] kmem_cache_alloc+0x52/0x220 [ 543.068505][T21116] ? __kernfs_new_node+0x6a/0x380 [ 543.068543][T21116] __kernfs_new_node+0x6a/0x380 [ 543.068581][T21116] ? rb_insert_color+0x6a/0x290 [ 543.068614][T21116] ? up_write+0x30/0xe0 [ 543.068699][T21116] ? kernfs_activate+0x252/0x270 [ 543.068739][T21116] kernfs_new_node+0x5f/0xd0 [ 543.068778][T21116] __kernfs_create_file+0x49/0x180 [ 543.068849][T21116] ? slab_attr_show+0x20/0x20 [ 543.068879][T21116] sysfs_add_file_mode_ns+0x136/0x1b0 [ 543.068999][T21116] internal_create_group+0x2e4/0x800 [ 543.069060][T21116] sysfs_create_group+0x1f/0x30 [ 543.069086][T21116] sysfs_slab_add+0x163/0x2a0 [ 543.069175][T21116] __kmem_cache_create+0x533/0x6c0 [ 543.069204][T21116] ? kmem_cache_alloc+0x10f/0x220 [ 543.069230][T21116] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 543.069307][T21116] kmem_cache_create_usercopy+0x156/0x2b0 [ 543.069345][T21116] p9_client_create+0x80c/0xa70 [ 543.069428][T21116] v9fs_session_init+0xf9/0xd90 [ 543.069453][T21116] ? slab_post_alloc_hook+0x8c/0x340 [ 543.069477][T21116] ? v9fs_mount+0x53/0x630 [ 543.069518][T21116] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 543.069580][T21116] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 543.069625][T21116] ? v9fs_mount+0x53/0x630 [ 543.069707][T21116] v9fs_mount+0x69/0x630 [ 543.069761][T21116] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 543.069863][T21116] legacy_get_tree+0x74/0xd0 [ 543.069908][T21116] vfs_get_tree+0x51/0x1b0 [ 543.069946][T21116] do_new_mount+0x203/0x660 [ 543.069983][T21116] path_mount+0x496/0xb30 [ 543.070059][T21116] __se_sys_mount+0x27f/0x2d0 [ 543.070170][T21116] __x64_sys_mount+0x67/0x80 [ 543.070227][T21116] do_syscall_64+0x41/0xc0 [ 543.070253][T21116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 543.070284][T21116] RIP: 0033:0x7fd83d377ae9 [ 543.070307][T21116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 543.070329][T21116] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 543.070349][T21116] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 543.070366][T21116] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 543.070382][T21116] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 543.070396][T21116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.070408][T21116] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 543.070428][T21116] [ 543.070706][T21116] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 543.070725][T21116] CPU: 1 PID: 21116 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 543.070833][T21116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 543.070848][T21116] Call Trace: [ 543.070856][T21116] [ 543.070864][T21116] dump_stack_lvl+0xda/0x130 [ 543.070889][T21116] dump_stack+0x15/0x20 [ 543.070908][T21116] kmem_cache_create_usercopy+0x237/0x2b0 [ 543.070995][T21116] p9_client_create+0x80c/0xa70 [ 543.071021][T21116] v9fs_session_init+0xf9/0xd90 [ 543.071050][T21116] ? slab_post_alloc_hook+0x8c/0x340 [ 543.071088][T21116] ? v9fs_mount+0x53/0x630 [ 543.071157][T21116] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 543.071182][T21116] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 543.071341][T21116] ? v9fs_mount+0x53/0x630 [ 543.071422][T21116] v9fs_mount+0x69/0x630 [ 543.071461][T21116] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 543.071533][T21116] legacy_get_tree+0x74/0xd0 [ 543.071575][T21116] vfs_get_tree+0x51/0x1b0 [ 543.071611][T21116] do_new_mount+0x203/0x660 [ 543.071721][T21116] path_mount+0x496/0xb30 [ 543.071757][T21116] __se_sys_mount+0x27f/0x2d0 [ 543.071790][T21116] __x64_sys_mount+0x67/0x80 [ 543.071863][T21116] do_syscall_64+0x41/0xc0 [ 543.071884][T21116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 543.071919][T21116] RIP: 0033:0x7fd83d377ae9 [ 543.071936][T21116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 543.071959][T21116] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 543.072053][T21116] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 543.072065][T21116] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 543.072077][T21116] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 543.072158][T21116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:19:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x7fffffff, 0x0, "713604dce25a1667ca057d348ab7c1b2b87881"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 22:19:58 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800008510000000000000000000f7ff841000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:19:58 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 47) 22:19:58 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:58 executing program 2: bpf$PROG_LOAD_XDP(0x16, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:19:58 executing program 5: migrate_pages(0x0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:58 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) [ 543.072170][T21116] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 543.072191][T21116] [ 543.072286][T21116] 9p: Unknown access argument user": -22 22:19:58 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003900), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 22:19:58 executing program 5: migrate_pages(0x0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:58 executing program 2: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/164) [ 544.048595][T21132] FAULT_INJECTION: forcing a failure. [ 544.048595][T21132] name failslab, interval 1, probability 0, space 0, times 0 [ 544.061379][T21132] CPU: 1 PID: 21132 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 544.071473][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 544.081582][T21132] Call Trace: 22:19:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002580)={'ip6gre0\x00', 0x0}) [ 544.081594][T21132] [ 544.081602][T21132] dump_stack_lvl+0xda/0x130 [ 544.081639][T21132] dump_stack+0x15/0x20 [ 544.081662][T21132] should_fail_ex+0x21f/0x230 [ 544.081688][T21132] __should_failslab+0x92/0xa0 [ 544.081724][T21132] should_failslab+0x9/0x20 [ 544.081758][T21132] slab_pre_alloc_hook+0x38/0x180 [ 544.081782][T21132] kmem_cache_alloc+0x52/0x220 [ 544.081870][T21132] ? __kernfs_new_node+0x6a/0x380 [ 544.081913][T21132] __kernfs_new_node+0x6a/0x380 [ 544.081962][T21132] ? rb_insert_color+0x6a/0x290 [ 544.082000][T21132] ? up_write+0x30/0xe0 [ 544.082036][T21132] ? kernfs_activate+0x252/0x270 [ 544.082069][T21132] kernfs_new_node+0x5f/0xd0 [ 544.082107][T21132] __kernfs_create_file+0x49/0x180 [ 544.082217][T21132] ? slab_attr_show+0x20/0x20 [ 544.082303][T21132] sysfs_add_file_mode_ns+0x136/0x1b0 [ 544.082350][T21132] internal_create_group+0x2e4/0x800 [ 544.082382][T21132] sysfs_create_group+0x1f/0x30 [ 544.082457][T21132] sysfs_slab_add+0x163/0x2a0 [ 544.082488][T21132] __kmem_cache_create+0x533/0x6c0 [ 544.082517][T21132] ? kmem_cache_alloc+0x10f/0x220 [ 544.082548][T21132] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 544.082595][T21132] kmem_cache_create_usercopy+0x156/0x2b0 [ 544.082704][T21132] p9_client_create+0x80c/0xa70 [ 544.082728][T21132] v9fs_session_init+0xf9/0xd90 [ 544.082768][T21132] ? slab_post_alloc_hook+0x8c/0x340 [ 544.082807][T21132] ? v9fs_mount+0x53/0x630 [ 544.082849][T21132] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 544.082873][T21132] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 544.083029][T21132] ? v9fs_mount+0x53/0x630 [ 544.083071][T21132] v9fs_mount+0x69/0x630 [ 544.083115][T21132] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 544.083187][T21132] legacy_get_tree+0x74/0xd0 [ 544.083228][T21132] vfs_get_tree+0x51/0x1b0 [ 544.083315][T21132] do_new_mount+0x203/0x660 [ 544.083349][T21132] path_mount+0x496/0xb30 [ 544.083378][T21132] __se_sys_mount+0x27f/0x2d0 [ 544.083412][T21132] __x64_sys_mount+0x67/0x80 [ 544.083484][T21132] do_syscall_64+0x41/0xc0 [ 544.083510][T21132] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 544.083542][T21132] RIP: 0033:0x7fd83d377ae9 [ 544.083557][T21132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 544.083620][T21132] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.083647][T21132] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 544.083662][T21132] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 544.083675][T21132] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 544.083689][T21132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.083701][T21132] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 544.083718][T21132] [ 544.157644][T21132] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 544.157669][T21132] CPU: 1 PID: 21132 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 544.157693][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 544.157705][T21132] Call Trace: [ 544.157712][T21132] [ 544.157720][T21132] dump_stack_lvl+0xda/0x130 [ 544.157753][T21132] dump_stack+0x15/0x20 [ 544.157833][T21132] kmem_cache_create_usercopy+0x237/0x2b0 [ 544.157877][T21132] p9_client_create+0x80c/0xa70 [ 544.157905][T21132] v9fs_session_init+0xf9/0xd90 [ 544.157929][T21132] ? slab_post_alloc_hook+0x8c/0x340 [ 544.158035][T21132] ? v9fs_mount+0x53/0x630 [ 544.158069][T21132] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 544.158100][T21132] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 544.158217][T21132] ? v9fs_mount+0x53/0x630 [ 544.158317][T21132] v9fs_mount+0x69/0x630 [ 544.158421][T21132] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 544.158457][T21132] legacy_get_tree+0x74/0xd0 [ 544.158512][T21132] vfs_get_tree+0x51/0x1b0 [ 544.158550][T21132] do_new_mount+0x203/0x660 [ 544.158592][T21132] path_mount+0x496/0xb30 [ 544.158670][T21132] __se_sys_mount+0x27f/0x2d0 [ 544.158709][T21132] __x64_sys_mount+0x67/0x80 [ 544.158745][T21132] do_syscall_64+0x41/0xc0 [ 544.158769][T21132] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 544.158799][T21132] RIP: 0033:0x7fd83d377ae9 [ 544.158849][T21132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 544.158872][T21132] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.158891][T21132] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 544.158905][T21132] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 544.158921][T21132] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 22:19:58 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 48) 22:19:58 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:58 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:19:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01"], 0x54}}, 0x0) 22:19:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 544.158938][T21132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.158954][T21132] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 544.159045][T21132] [ 544.159181][T21132] 9p: Unknown access argument user": -22 22:19:58 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:19:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x202406, 0x128) 22:19:58 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2040, 0x33) 22:19:58 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x208c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c0201, 0x10) [ 544.703340][T21157] FAULT_INJECTION: forcing a failure. [ 544.703340][T21157] name failslab, interval 1, probability 0, space 0, times 0 [ 544.716081][T21157] CPU: 1 PID: 21157 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 544.726181][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 544.736295][T21157] Call Trace: [ 544.739592][T21157] [ 544.742537][T21157] dump_stack_lvl+0xda/0x130 [ 544.747161][T21157] dump_stack+0x15/0x20 22:19:58 executing program 0: r0 = inotify_init() close(r0) 22:19:58 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) [ 544.751345][T21157] should_fail_ex+0x21f/0x230 [ 544.756154][T21157] __should_failslab+0x92/0xa0 [ 544.760980][T21157] should_failslab+0x9/0x20 [ 544.765606][T21157] slab_pre_alloc_hook+0x38/0x180 [ 544.770683][T21157] kmem_cache_alloc+0x52/0x220 [ 544.775493][T21157] ? __kernfs_new_node+0x6a/0x380 [ 544.780581][T21157] __kernfs_new_node+0x6a/0x380 [ 544.785501][T21157] ? rb_insert_color+0x6a/0x290 [ 544.790390][T21157] ? up_write+0x30/0xe0 [ 544.794642][T21157] ? kernfs_activate+0x252/0x270 [ 544.799664][T21157] kernfs_new_node+0x5f/0xd0 [ 544.804321][T21157] __kernfs_create_file+0x49/0x180 [ 544.809508][T21157] ? slab_attr_show+0x20/0x20 [ 544.814235][T21157] sysfs_add_file_mode_ns+0x136/0x1b0 [ 544.819733][T21157] internal_create_group+0x2e4/0x800 [ 544.825145][T21157] sysfs_create_group+0x1f/0x30 [ 544.830033][T21157] sysfs_slab_add+0x163/0x2a0 [ 544.834746][T21157] __kmem_cache_create+0x533/0x6c0 [ 544.839900][T21157] ? kmem_cache_alloc+0x10f/0x220 [ 544.845098][T21157] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 544.851041][T21157] kmem_cache_create_usercopy+0x156/0x2b0 [ 544.856859][T21157] p9_client_create+0x80c/0xa70 [ 544.861811][T21157] v9fs_session_init+0xf9/0xd90 [ 544.866740][T21157] ? slab_post_alloc_hook+0x8c/0x340 [ 544.872130][T21157] ? v9fs_mount+0x53/0x630 [ 544.876601][T21157] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 544.882277][T21157] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 544.888452][T21157] ? v9fs_mount+0x53/0x630 [ 544.892884][T21157] v9fs_mount+0x69/0x630 [ 544.897186][T21157] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 544.903434][T21157] legacy_get_tree+0x74/0xd0 [ 544.908111][T21157] vfs_get_tree+0x51/0x1b0 [ 544.912586][T21157] do_new_mount+0x203/0x660 [ 544.917107][T21157] path_mount+0x496/0xb30 [ 544.921593][T21157] __se_sys_mount+0x27f/0x2d0 [ 544.926313][T21157] __x64_sys_mount+0x67/0x80 [ 544.930987][T21157] do_syscall_64+0x41/0xc0 [ 544.935447][T21157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 544.941368][T21157] RIP: 0033:0x7fd83d377ae9 [ 544.945782][T21157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 544.965468][T21157] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.973886][T21157] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 544.981932][T21157] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 544.989937][T21157] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 544.997923][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.005924][T21157] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 545.014038][T21157] [ 545.023493][T21157] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 545.031529][T21157] CPU: 1 PID: 21157 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 545.041713][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 545.051790][T21157] Call Trace: [ 545.055081][T21157] [ 545.058011][T21157] dump_stack_lvl+0xda/0x130 [ 545.062608][T21157] dump_stack+0x15/0x20 [ 545.066779][T21157] kmem_cache_create_usercopy+0x237/0x2b0 [ 545.072586][T21157] p9_client_create+0x80c/0xa70 [ 545.077554][T21157] v9fs_session_init+0xf9/0xd90 [ 545.082498][T21157] ? slab_post_alloc_hook+0x8c/0x340 [ 545.087829][T21157] ? v9fs_mount+0x53/0x630 [ 545.092388][T21157] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 545.098084][T21157] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 545.104295][T21157] ? v9fs_mount+0x53/0x630 [ 545.108726][T21157] v9fs_mount+0x69/0x630 [ 545.113040][T21157] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 545.119279][T21157] legacy_get_tree+0x74/0xd0 [ 545.123896][T21157] vfs_get_tree+0x51/0x1b0 [ 545.128346][T21157] do_new_mount+0x203/0x660 [ 545.132911][T21157] path_mount+0x496/0xb30 [ 545.137322][T21157] __se_sys_mount+0x27f/0x2d0 [ 545.142023][T21157] __x64_sys_mount+0x67/0x80 [ 545.146646][T21157] do_syscall_64+0x41/0xc0 [ 545.151115][T21157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 545.157169][T21157] RIP: 0033:0x7fd83d377ae9 [ 545.161658][T21157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 545.181293][T21157] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 545.189749][T21157] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 545.197758][T21157] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:59 executing program 0: r0 = inotify_init() close(r0) 22:19:59 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 49) 22:19:59 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 22:19:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x155) 22:19:59 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x3b) 22:19:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 545.205738][T21157] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 545.213770][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.221759][T21157] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 545.229766][T21157] [ 545.233790][T21157] 9p: Unknown access argument user": -22 22:19:59 executing program 5: syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:59 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x103) 22:19:59 executing program 2: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 22:19:59 executing program 0: r0 = inotify_init() close(r0) 22:19:59 executing program 0: r0 = inotify_init() close(r0) [ 545.308369][T21188] FAULT_INJECTION: forcing a failure. [ 545.308369][T21188] name failslab, interval 1, probability 0, space 0, times 0 [ 545.321193][T21188] CPU: 1 PID: 21188 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 545.331456][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 545.341674][T21188] Call Trace: [ 545.344976][T21188] [ 545.347931][T21188] dump_stack_lvl+0xda/0x130 [ 545.352545][T21188] dump_stack+0x15/0x20 [ 545.356887][T21188] should_fail_ex+0x21f/0x230 [ 545.361599][T21188] __should_failslab+0x92/0xa0 [ 545.366411][T21188] should_failslab+0x9/0x20 [ 545.370951][T21188] slab_pre_alloc_hook+0x38/0x180 [ 545.376082][T21188] kmem_cache_alloc+0x52/0x220 [ 545.380875][T21188] ? __kernfs_new_node+0x6a/0x380 [ 545.386019][T21188] __kernfs_new_node+0x6a/0x380 [ 545.390979][T21188] ? rb_insert_color+0x263/0x290 [ 545.395956][T21188] ? up_write+0x30/0xe0 [ 545.400190][T21188] ? kernfs_activate+0x252/0x270 [ 545.405265][T21188] kernfs_new_node+0x5f/0xd0 [ 545.409895][T21188] __kernfs_create_file+0x49/0x180 [ 545.415297][T21188] ? slab_attr_show+0x20/0x20 [ 545.420015][T21188] sysfs_add_file_mode_ns+0x136/0x1b0 [ 545.425584][T21188] internal_create_group+0x2e4/0x800 [ 545.430945][T21188] sysfs_create_group+0x1f/0x30 [ 545.435823][T21188] sysfs_slab_add+0x163/0x2a0 [ 545.440535][T21188] __kmem_cache_create+0x533/0x6c0 [ 545.445767][T21188] ? kmem_cache_alloc+0x10f/0x220 [ 545.450940][T21188] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 545.456899][T21188] kmem_cache_create_usercopy+0x156/0x2b0 [ 545.462671][T21188] p9_client_create+0x80c/0xa70 [ 545.467553][T21188] v9fs_session_init+0xf9/0xd90 [ 545.472549][T21188] ? slab_post_alloc_hook+0x8c/0x340 [ 545.478034][T21188] ? v9fs_mount+0x53/0x630 [ 545.482545][T21188] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 545.488327][T21188] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 545.494541][T21188] ? v9fs_mount+0x53/0x630 [ 545.498974][T21188] v9fs_mount+0x69/0x630 [ 545.503278][T21188] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 545.509467][T21188] legacy_get_tree+0x74/0xd0 [ 545.514076][T21188] vfs_get_tree+0x51/0x1b0 [ 545.518586][T21188] do_new_mount+0x203/0x660 [ 545.523119][T21188] path_mount+0x496/0xb30 [ 545.527488][T21188] __se_sys_mount+0x27f/0x2d0 [ 545.532263][T21188] __x64_sys_mount+0x67/0x80 [ 545.536901][T21188] do_syscall_64+0x41/0xc0 [ 545.541330][T21188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 545.547343][T21188] RIP: 0033:0x7fd83d377ae9 [ 545.551810][T21188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 545.571441][T21188] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 545.579860][T21188] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 545.587844][T21188] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 545.595828][T21188] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 545.603812][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.611798][T21188] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 545.619859][T21188] [ 545.623605][T21188] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 545.631670][T21188] CPU: 0 PID: 21188 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 545.641761][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 545.651930][T21188] Call Trace: [ 545.655230][T21188] [ 545.658161][T21188] dump_stack_lvl+0xda/0x130 [ 545.662764][T21188] dump_stack+0x15/0x20 [ 545.666920][T21188] kmem_cache_create_usercopy+0x237/0x2b0 [ 545.672767][T21188] p9_client_create+0x80c/0xa70 [ 545.677797][T21188] v9fs_session_init+0xf9/0xd90 [ 545.682655][T21188] ? slab_post_alloc_hook+0x8c/0x340 [ 545.687961][T21188] ? v9fs_mount+0x53/0x630 [ 545.692408][T21188] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 545.698142][T21188] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 545.704406][T21188] ? v9fs_mount+0x53/0x630 [ 545.708843][T21188] v9fs_mount+0x69/0x630 [ 545.713182][T21188] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 545.719482][T21188] legacy_get_tree+0x74/0xd0 [ 545.724147][T21188] vfs_get_tree+0x51/0x1b0 [ 545.728577][T21188] do_new_mount+0x203/0x660 [ 545.733105][T21188] path_mount+0x496/0xb30 [ 545.737467][T21188] __se_sys_mount+0x27f/0x2d0 [ 545.742174][T21188] __x64_sys_mount+0x67/0x80 [ 545.746832][T21188] do_syscall_64+0x41/0xc0 [ 545.751254][T21188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 545.757207][T21188] RIP: 0033:0x7fd83d377ae9 [ 545.761622][T21188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 545.781236][T21188] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 545.789659][T21188] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 545.797668][T21188] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:19:59 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 50) 22:19:59 executing program 5: syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:19:59 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x103) mount$9p_xen(0x0, &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x840010, 0x0) 22:19:59 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) 22:19:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 22:19:59 executing program 0: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) 22:19:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00), 0x0, 0x0) 22:19:59 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) 22:19:59 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0x5, 0x40, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x10, 0x7800, 0x5, 0x3f}}) write$tcp_mem(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1d) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000086800000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x216}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x44090) r4 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x1, 0x1, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x40, 0x38000000, 0x67c}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x5, 0x1, 0x38, @mcast1, @remote, 0x7, 0x40, 0xffffffff, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x34, 0x5, 0x5, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0xefa9c57967770a4f, 0x1, 0xa7}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf2506000000300001800800030003000000140002006e69637666300000000000000000000008000300010000000800030001000000680001801400020070696d3672656700000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300020000000800030003000000140002006e657464657673696d300000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r6, @ANYBLOB="3000018008000100", @ANYRES32=r7, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="6c0001801400020069705f767469300000000000000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f31000000006400018008000300020000001400020076657468310000000000000000000000140002006970766c616e3000000000000000000008000300010000001400020076657468315f746f5f687372000000001400020070696d3672656730000000000000000068000180140002007465616d5f736c6176655f31000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000000000000000000000028000180140002006261746164765f736c6176655f31000008000300030000000800030002000000"], 0x23c}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x908800, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00), r14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xda6fd55d7f943637}, 0xc, &(0x7f0000000940)={&(0x7f0000000f80)={0x184, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8004}, 0x20008040) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x6b, r10}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028ee4c00dedd0000b4400000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x14}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x9c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d80)={r16, r5, 0x25, 0x11}, 0xffffffa4) 22:19:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) [ 545.805723][T21188] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 545.813708][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.821680][T21188] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 545.829660][T21188] [ 545.833552][T21188] 9p: Unknown access argument user": -22 22:19:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00), 0x0, 0x0) [ 545.909606][T21216] FAULT_INJECTION: forcing a failure. [ 545.909606][T21216] name failslab, interval 1, probability 0, space 0, times 0 [ 545.922422][T21216] CPU: 0 PID: 21216 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 545.932520][T21216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 545.942608][T21216] Call Trace: [ 545.945909][T21216] [ 545.948862][T21216] dump_stack_lvl+0xda/0x130 [ 545.953495][T21216] dump_stack+0x15/0x20 22:19:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 545.957697][T21216] should_fail_ex+0x21f/0x230 [ 545.962470][T21216] __should_failslab+0x92/0xa0 [ 545.967316][T21216] should_failslab+0x9/0x20 [ 545.971890][T21216] slab_pre_alloc_hook+0x38/0x180 [ 545.977232][T21216] kmem_cache_alloc+0x52/0x220 [ 545.982029][T21216] ? __kernfs_new_node+0x6a/0x380 [ 545.987238][T21216] __kernfs_new_node+0x6a/0x380 [ 545.992127][T21216] ? rb_insert_color+0x263/0x290 [ 545.997120][T21216] ? up_write+0x30/0xe0 [ 546.001321][T21216] ? kernfs_activate+0x252/0x270 [ 546.006360][T21216] kernfs_new_node+0x5f/0xd0 [ 546.011016][T21216] __kernfs_create_file+0x49/0x180 [ 546.016263][T21216] ? slab_attr_show+0x20/0x20 [ 546.020982][T21216] sysfs_add_file_mode_ns+0x136/0x1b0 [ 546.026488][T21216] internal_create_group+0x2e4/0x800 [ 546.031857][T21216] sysfs_create_group+0x1f/0x30 [ 546.036751][T21216] sysfs_slab_add+0x163/0x2a0 [ 546.041511][T21216] __kmem_cache_create+0x533/0x6c0 [ 546.046667][T21216] ? kmem_cache_alloc+0x10f/0x220 [ 546.051816][T21216] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 546.057774][T21216] kmem_cache_create_usercopy+0x156/0x2b0 [ 546.063598][T21216] p9_client_create+0x80c/0xa70 [ 546.068478][T21216] v9fs_session_init+0xf9/0xd90 [ 546.073350][T21216] ? slab_post_alloc_hook+0x8c/0x340 [ 546.078659][T21216] ? v9fs_mount+0x53/0x630 [ 546.083169][T21216] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 546.088910][T21216] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.095117][T21216] ? v9fs_mount+0x53/0x630 [ 546.099555][T21216] v9fs_mount+0x69/0x630 [ 546.103815][T21216] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.109988][T21216] legacy_get_tree+0x74/0xd0 [ 546.114606][T21216] vfs_get_tree+0x51/0x1b0 [ 546.119060][T21216] do_new_mount+0x203/0x660 [ 546.123588][T21216] path_mount+0x496/0xb30 [ 546.127989][T21216] __se_sys_mount+0x27f/0x2d0 [ 546.132723][T21216] __x64_sys_mount+0x67/0x80 [ 546.137411][T21216] do_syscall_64+0x41/0xc0 [ 546.141833][T21216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 546.147792][T21216] RIP: 0033:0x7fd83d377ae9 [ 546.152257][T21216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 546.172067][T21216] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 546.180509][T21216] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 546.188507][T21216] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 546.196672][T21216] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 546.204646][T21216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.212692][T21216] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 546.220687][T21216] [ 546.226453][T21216] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 546.234526][T21216] CPU: 0 PID: 21216 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 546.244627][T21216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 546.254717][T21216] Call Trace: [ 546.258005][T21216] [ 546.260949][T21216] dump_stack_lvl+0xda/0x130 [ 546.265554][T21216] dump_stack+0x15/0x20 [ 546.269867][T21216] kmem_cache_create_usercopy+0x237/0x2b0 [ 546.275687][T21216] p9_client_create+0x80c/0xa70 [ 546.280557][T21216] v9fs_session_init+0xf9/0xd90 [ 546.285496][T21216] ? slab_post_alloc_hook+0x8c/0x340 [ 546.290869][T21216] ? v9fs_mount+0x53/0x630 [ 546.295355][T21216] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 546.301024][T21216] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.307232][T21216] ? v9fs_mount+0x53/0x630 [ 546.311757][T21216] v9fs_mount+0x69/0x630 [ 546.316029][T21216] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.322283][T21216] legacy_get_tree+0x74/0xd0 [ 546.326989][T21216] vfs_get_tree+0x51/0x1b0 [ 546.331436][T21216] do_new_mount+0x203/0x660 [ 546.336031][T21216] path_mount+0x496/0xb30 [ 546.340483][T21216] __se_sys_mount+0x27f/0x2d0 [ 546.345200][T21216] __x64_sys_mount+0x67/0x80 [ 546.349865][T21216] do_syscall_64+0x41/0xc0 [ 546.354301][T21216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 546.360234][T21216] RIP: 0033:0x7fd83d377ae9 [ 546.364651][T21216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 546.384300][T21216] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 546.392736][T21216] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 546.400717][T21216] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 22:20:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 22:20:00 executing program 3: pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, &(0x7f0000000280)={@private2}) 22:20:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00), 0x0, 0x0) 22:20:00 executing program 5: syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x100, 0x0, &(0x7f0000000600)=0x1) 22:20:00 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 51) 22:20:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:20:00 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 22:20:00 executing program 3: rt_sigaction(0x2e, 0x0, 0x0, 0x8, &(0x7f00000004c0)) [ 546.408697][T21216] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 546.416805][T21216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.424780][T21216] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 546.432783][T21216] [ 546.436923][T21216] 9p: Unknown access argument user": -22 22:20:00 executing program 2: syz_clone(0x41102000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) 22:20:00 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x0, 0x0, &(0x7f0000000600)=0x1) [ 546.525444][T21246] FAULT_INJECTION: forcing a failure. [ 546.525444][T21246] name failslab, interval 1, probability 0, space 0, times 0 [ 546.538257][T21246] CPU: 1 PID: 21246 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 546.548476][T21246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 546.558590][T21246] Call Trace: [ 546.561892][T21246] [ 546.564850][T21246] dump_stack_lvl+0xda/0x130 [ 546.569606][T21246] dump_stack+0x15/0x20 [ 546.573862][T21246] should_fail_ex+0x21f/0x230 [ 546.578667][T21246] __should_failslab+0x92/0xa0 [ 546.583625][T21246] should_failslab+0x9/0x20 [ 546.588165][T21246] slab_pre_alloc_hook+0x38/0x180 [ 546.593224][T21246] kmem_cache_alloc+0x52/0x220 [ 546.598036][T21246] ? __kernfs_new_node+0x6a/0x380 [ 546.603109][T21246] __kernfs_new_node+0x6a/0x380 [ 546.608037][T21246] ? rb_insert_color+0x263/0x290 [ 546.613050][T21246] ? up_write+0x30/0xe0 [ 546.617270][T21246] ? kernfs_activate+0x252/0x270 22:20:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:20:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001300)="550cbb00b776750b5535bfc177255dc70715eb482e7d7f057ae3bcd9e2849b6cc2e596b6adeefd001d8fc4d6f4b058005dbd9bfbaf204e21dc2feab08684ace1b9540cd7b6fb5f840387c4bd1a5031c7ef2e998277d39c6a8c8f52da2147b99516dc842332ac335dc9f9845aad67339fad64d0dcedfac0f5003cb55de26467e962c75261bc1a9a24f1c0cd507ef1eea6c230792ce6b237ab97a7f5f3db2931b8e9650bb8c2bf06300c374999e11985fd328dd6d5143f3b88c49f2e7dd246d7ec95871759956471bc47daf2628b146951758212056a51e326eed9633f458336055f13", 0xe2}, {&(0x7f0000001480)="8fe018b67d5edc6d24d1958d99cea704fd9ef982db2c1bff2b390448e1fcc89fb9c589b591dd6e70e5da6d972adf9f230283ad1038b140382ca65d82e39732740fe3e5c2cb8b8c55960d5869a619bd63624d7b6d14e815b4f94e800e784ab55069d0475eb4901082615cb6162df3a1503cd49b03dffeea54b909edc8c6c22bf07c5531e1c0a0eabbadcbdb044176aa", 0x8f}], 0x2}, 0x0) readv(r0, &(0x7f0000000140), 0x4c) 22:20:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:20:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) [ 546.622328][T21246] kernfs_new_node+0x5f/0xd0 [ 546.627039][T21246] __kernfs_create_file+0x49/0x180 [ 546.632319][T21246] ? slab_attr_show+0x20/0x20 [ 546.637050][T21246] sysfs_add_file_mode_ns+0x136/0x1b0 [ 546.642525][T21246] internal_create_group+0x2e4/0x800 [ 546.647908][T21246] sysfs_create_group+0x1f/0x30 [ 546.650927][T21257] lo speed is unknown, defaulting to 1000 [ 546.652779][T21246] sysfs_slab_add+0x163/0x2a0 [ 546.652816][T21246] __kmem_cache_create+0x533/0x6c0 [ 546.668428][T21246] ? kmem_cache_alloc+0x10f/0x220 [ 546.673531][T21246] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 546.679478][T21246] kmem_cache_create_usercopy+0x156/0x2b0 [ 546.685252][T21246] p9_client_create+0x80c/0xa70 [ 546.690190][T21246] v9fs_session_init+0xf9/0xd90 [ 546.695094][T21246] ? slab_post_alloc_hook+0x8c/0x340 [ 546.700440][T21246] ? v9fs_mount+0x53/0x630 [ 546.704925][T21246] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 546.710617][T21246] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.716864][T21246] ? v9fs_mount+0x53/0x630 [ 546.721334][T21246] v9fs_mount+0x69/0x630 22:20:00 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x0, 0x0, &(0x7f0000000600)=0x1) 22:20:00 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) [ 546.725622][T21246] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.731859][T21246] legacy_get_tree+0x74/0xd0 [ 546.736544][T21246] vfs_get_tree+0x51/0x1b0 [ 546.741015][T21246] do_new_mount+0x203/0x660 [ 546.745577][T21246] path_mount+0x496/0xb30 [ 546.749980][T21246] __se_sys_mount+0x27f/0x2d0 [ 546.754706][T21246] __x64_sys_mount+0x67/0x80 [ 546.759363][T21246] do_syscall_64+0x41/0xc0 [ 546.763813][T21246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 546.769831][T21246] RIP: 0033:0x7fd83d377ae9 [ 546.774269][T21246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 546.793915][T21246] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 546.802363][T21246] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 546.810374][T21246] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 546.818383][T21246] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 546.826426][T21246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.834470][T21246] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 546.842534][T21246] [ 546.860961][T21246] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 546.869313][T21246] CPU: 1 PID: 21246 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 546.879418][T21246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 546.889648][T21246] Call Trace: [ 546.892947][T21246] [ 546.895890][T21246] dump_stack_lvl+0xda/0x130 [ 546.900576][T21246] dump_stack+0x15/0x20 [ 546.904762][T21246] kmem_cache_create_usercopy+0x237/0x2b0 [ 546.910575][T21246] p9_client_create+0x80c/0xa70 [ 546.915579][T21246] v9fs_session_init+0xf9/0xd90 [ 546.920472][T21246] ? slab_post_alloc_hook+0x8c/0x340 [ 546.925790][T21246] ? v9fs_mount+0x53/0x630 [ 546.930376][T21246] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 546.936125][T21246] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.942296][T21246] ? v9fs_mount+0x53/0x630 [ 546.946807][T21246] v9fs_mount+0x69/0x630 [ 546.951154][T21246] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 546.957468][T21246] legacy_get_tree+0x74/0xd0 [ 546.962183][T21246] vfs_get_tree+0x51/0x1b0 [ 546.966660][T21246] do_new_mount+0x203/0x660 [ 546.971190][T21246] path_mount+0x496/0xb30 [ 546.975602][T21246] __se_sys_mount+0x27f/0x2d0 [ 546.980353][T21246] __x64_sys_mount+0x67/0x80 [ 546.985003][T21246] do_syscall_64+0x41/0xc0 [ 546.989487][T21246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 546.995392][T21246] RIP: 0033:0x7fd83d377ae9 [ 546.999833][T21246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 547.019467][T21246] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.027912][T21246] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 547.035904][T21246] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 547.044040][T21246] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 547.052070][T21246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.060132][T21246] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 547.068255][T21246] 22:20:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 22:20:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 22:20:01 executing program 0: socket(0x10, 0x0, 0x8bc7) 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x0, 0x0, &(0x7f0000000600)=0x1) 22:20:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:20:01 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 52) [ 547.075572][T21246] 9p: Unknown access argument user": -22 22:20:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, 0x0) 22:20:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 22:20:01 executing program 0: socket$inet(0x2, 0x0, 0x76c) 22:20:01 executing program 2: syz_clone(0x41102000, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="44475a8daeffcf69a7a592b1f198345bb73ea52c446aec9e7207e2f40dccd6977632b1ee0cf7ceb49752a9eac882f6201a0280421ec2ea31c351a8e8eac1d15f141032db1f0b5462300de2bfeba7e1a8b6c5cb26647b7210c85eb8d2a7e7a53dd0ce5cd98224fd78c5a65135d38986b9c608e6c92a82c96fb08d80ac28681eb1d16eec5923ccd4475eadbc66c8e3228c707c614d8c70a4b34593c05f335e71b3a45a70a58c1266dbeeb1d57626b646638694fdf463049b3fe8f1f3731137a3d77ee18cc53e") 22:20:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 22:20:01 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000001c0)) [ 547.180756][T21300] FAULT_INJECTION: forcing a failure. [ 547.180756][T21300] name failslab, interval 1, probability 0, space 0, times 0 [ 547.193530][T21300] CPU: 1 PID: 21300 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 547.203688][T21300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 547.213767][T21300] Call Trace: [ 547.217079][T21300] [ 547.220118][T21300] dump_stack_lvl+0xda/0x130 [ 547.224777][T21300] dump_stack+0x15/0x20 [ 547.228993][T21300] should_fail_ex+0x21f/0x230 [ 547.229307][T21298] lo speed is unknown, defaulting to 1000 [ 547.233745][T21300] __should_failslab+0x92/0xa0 [ 547.233784][T21300] should_failslab+0x9/0x20 [ 547.233807][T21300] slab_pre_alloc_hook+0x38/0x180 [ 547.253939][T21300] kmem_cache_alloc+0x52/0x220 [ 547.258748][T21300] ? __kernfs_new_node+0x6a/0x380 [ 547.258847][T21300] __kernfs_new_node+0x6a/0x380 [ 547.258883][T21300] ? rb_insert_color+0x6a/0x290 [ 547.258921][T21300] ? up_write+0x30/0xe0 22:20:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, 0x0) [ 547.258963][T21300] ? kernfs_activate+0x252/0x270 [ 547.258995][T21300] kernfs_new_node+0x5f/0xd0 [ 547.259045][T21300] __kernfs_create_file+0x49/0x180 [ 547.259092][T21300] ? slab_attr_show+0x20/0x20 [ 547.259135][T21300] sysfs_add_file_mode_ns+0x136/0x1b0 [ 547.259171][T21300] internal_create_group+0x2e4/0x800 [ 547.259197][T21300] sysfs_create_group+0x1f/0x30 [ 547.259283][T21300] sysfs_slab_add+0x163/0x2a0 [ 547.259312][T21300] __kmem_cache_create+0x533/0x6c0 [ 547.259336][T21300] ? kmem_cache_alloc+0x10f/0x220 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, 0x0) 22:20:01 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045"], 0x0) [ 547.259357][T21300] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 547.259404][T21300] kmem_cache_create_usercopy+0x156/0x2b0 [ 547.259462][T21300] p9_client_create+0x80c/0xa70 [ 547.259492][T21300] v9fs_session_init+0xf9/0xd90 [ 547.259522][T21300] ? slab_post_alloc_hook+0x8c/0x340 [ 547.259548][T21300] ? v9fs_mount+0x53/0x630 [ 547.259597][T21300] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 547.259626][T21300] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 547.259726][T21300] ? v9fs_mount+0x53/0x630 [ 547.259818][T21300] v9fs_mount+0x69/0x630 [ 547.259854][T21300] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 547.259909][T21300] legacy_get_tree+0x74/0xd0 [ 547.259984][T21300] vfs_get_tree+0x51/0x1b0 [ 547.260019][T21300] do_new_mount+0x203/0x660 [ 547.260063][T21300] path_mount+0x496/0xb30 [ 547.260096][T21300] __se_sys_mount+0x27f/0x2d0 [ 547.409497][T21300] __x64_sys_mount+0x67/0x80 [ 547.414310][T21300] do_syscall_64+0x41/0xc0 [ 547.418762][T21300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 547.424707][T21300] RIP: 0033:0x7fd83d377ae9 [ 547.429140][T21300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 547.448958][T21300] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.457480][T21300] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 547.465482][T21300] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 547.473564][T21300] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 547.481715][T21300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.481729][T21300] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 547.481746][T21300] [ 547.483798][T21300] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 547.510228][T21300] CPU: 0 PID: 21300 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 547.510310][T21300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 547.510327][T21300] Call Trace: [ 547.510336][T21300] [ 547.510345][T21300] dump_stack_lvl+0xda/0x130 [ 547.510379][T21300] dump_stack+0x15/0x20 [ 547.510403][T21300] kmem_cache_create_usercopy+0x237/0x2b0 [ 547.510445][T21300] p9_client_create+0x80c/0xa70 [ 547.510486][T21300] v9fs_session_init+0xf9/0xd90 [ 547.510586][T21300] ? slab_post_alloc_hook+0x8c/0x340 [ 547.510635][T21300] ? v9fs_mount+0x53/0x630 [ 547.510669][T21300] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 547.510694][T21300] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 547.510766][T21300] ? v9fs_mount+0x53/0x630 [ 547.510807][T21300] v9fs_mount+0x69/0x630 [ 547.510846][T21300] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 547.510956][T21300] legacy_get_tree+0x74/0xd0 [ 547.511000][T21300] vfs_get_tree+0x51/0x1b0 [ 547.511041][T21300] do_new_mount+0x203/0x660 [ 547.511079][T21300] path_mount+0x496/0xb30 [ 547.511113][T21300] __se_sys_mount+0x27f/0x2d0 [ 547.511144][T21300] __x64_sys_mount+0x67/0x80 [ 547.511198][T21300] do_syscall_64+0x41/0xc0 [ 547.511223][T21300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 547.511254][T21300] RIP: 0033:0x7fd83d377ae9 [ 547.511348][T21300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 547.511372][T21300] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.511397][T21300] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 22:20:01 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 53) 22:20:01 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000001c0)) 22:20:01 executing program 2: syz_clone(0x41102000, &(0x7f0000000200)="9475dc97dc5a7c5ac651c89d9265a23d192549b503e8d77d23eb13f8853d413b23cc2d670f703baa5c04a06c42a574f64e7cf9f9035e32f6202efb15ca721d5e43a67393d5b584822e9c7cd2b8f411bddd6745435dc6f1a641702fcd7e0b6e6ec69e724643d3c2392d640de4381d12c5913c177d39e65a7baa524e19da975a57", 0x80, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="44475a8daeffcf69a7a592b1f198345bb73ea52c446aec9e7207e2f40dccd6977632b1ee0cf7ceb49752a9eac882f6201a0280421ec2ea31c351a8e8eac1d15f141032db1f0b5462300de2bfeba7e1a8b6c5cb26647b7210c85eb8d2a7e7a53dd0ce5cd98224fd78c5a65135d38986b9c608e6c92a82c96fb08d80ac28681eb1d16eec5923ccd4475eadbc66c8e3228c707c614d8c70a4b34593c05f335e71b3a45a70a58c1266dbeeb1d57626") syz_clone(0x0, &(0x7f0000000000)="18f7e207756a4cece0265f510f30c36cc584f0954f4d6638c2fd875501ed4ccb5ea8ed3075bef3d3d31e541d114a9032c9f054bd4423cd27e5f82dd12152812ccd64e19e50", 0x45, 0x0, 0x0, &(0x7f0000000100)="5410e165f2743c54561d1c60568d646bbba99a55b14acb9bc357c850f16f58004307fb7b5bab220f028d2b9007562104d9a0bacd4c62e97c9f272e9b1a40625e21d02af2a7ad03097d8cd239d8d1bb2997fe91701b182c300115a69cd922b9cabd9da3d4d61348823a660376b559e15715bce76ebbf61f0d8017a44542d9b827c0e70cb21c5ee1bdcfc26028945ad2b43aa2724b6b921f1302a9940e308f4f612c16c82d3593bfbcbeb1b423a324") 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)) 22:20:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xffffff6e}, 0x1c, 0x0}}], 0x1, 0x0) 22:20:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) [ 547.511411][T21300] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 547.511424][T21300] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 547.511438][T21300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.511453][T21300] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 547.511474][T21300] [ 547.511620][T21300] 9p: Unknown access argument user": -22 [ 547.750815][T21325] FAULT_INJECTION: forcing a failure. [ 547.750815][T21325] name failslab, interval 1, probability 0, space 0, times 0 [ 547.763704][T21325] CPU: 1 PID: 21325 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 547.773806][T21325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 547.783904][T21325] Call Trace: [ 547.787217][T21325] [ 547.787228][T21325] dump_stack_lvl+0xda/0x130 [ 547.787258][T21325] dump_stack+0x15/0x20 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)) 22:20:01 executing program 5: r0 = syz_clone(0x0, &(0x7f0000002080), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x100, 0x0, &(0x7f0000000600)) [ 547.787278][T21325] should_fail_ex+0x21f/0x230 [ 547.787303][T21325] __should_failslab+0x92/0xa0 [ 547.787338][T21325] should_failslab+0x9/0x20 [ 547.787359][T21325] slab_pre_alloc_hook+0x38/0x180 [ 547.787385][T21325] kmem_cache_alloc+0x52/0x220 [ 547.787407][T21325] ? __kernfs_new_node+0x6a/0x380 [ 547.787466][T21325] __kernfs_new_node+0x6a/0x380 [ 547.787496][T21325] ? rb_insert_color+0x6a/0x290 [ 547.787596][T21325] ? up_write+0x30/0xe0 [ 547.787635][T21325] ? kernfs_activate+0x252/0x270 22:20:01 executing program 3: r0 = socket(0x29, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000000c0)={0x4c}, 0x4c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 22:20:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x2e, 0x0, 0x0) [ 547.787671][T21325] kernfs_new_node+0x5f/0xd0 [ 547.787705][T21325] __kernfs_create_file+0x49/0x180 [ 547.787821][T21325] ? slab_attr_show+0x20/0x20 [ 547.787852][T21325] sysfs_add_file_mode_ns+0x136/0x1b0 [ 547.867163][T21325] internal_create_group+0x2e4/0x800 [ 547.867203][T21325] sysfs_create_group+0x1f/0x30 [ 547.867227][T21325] sysfs_slab_add+0x163/0x2a0 [ 547.867252][T21325] __kmem_cache_create+0x533/0x6c0 22:20:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x84, 0x8, 0x0, &(0x7f00000000c0)=0x4) [ 547.867276][T21325] ? kmem_cache_alloc+0x10f/0x220 [ 547.867302][T21325] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 547.867362][T21325] kmem_cache_create_usercopy+0x156/0x2b0 [ 547.867408][T21325] p9_client_create+0x80c/0xa70 [ 547.867438][T21325] v9fs_session_init+0xf9/0xd90 [ 547.867520][T21325] ? slab_post_alloc_hook+0x8c/0x340 [ 547.867548][T21325] ? v9fs_mount+0x53/0x630 [ 547.867643][T21325] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 547.867668][T21325] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 547.867773][T21325] ? v9fs_mount+0x53/0x630 [ 547.867807][T21325] v9fs_mount+0x69/0x630 [ 547.867845][T21325] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 547.867887][T21325] legacy_get_tree+0x74/0xd0 [ 547.868055][T21325] vfs_get_tree+0x51/0x1b0 [ 547.868089][T21325] do_new_mount+0x203/0x660 [ 547.868127][T21325] path_mount+0x496/0xb30 [ 547.868158][T21325] __se_sys_mount+0x27f/0x2d0 [ 547.868240][T21325] __x64_sys_mount+0x67/0x80 [ 547.868332][T21325] do_syscall_64+0x41/0xc0 [ 547.868373][T21325] entry_SYSCALL_64_after_hwframe+0x63/0xcd 22:20:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x84, 0x72, 0x0, &(0x7f00000000c0)) [ 547.868557][T21325] RIP: 0033:0x7fd83d377ae9 [ 547.868576][T21325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 547.868595][T21325] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.868619][T21325] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 547.868674][T21325] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 547.868689][T21325] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 547.868704][T21325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.868719][T21325] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 547.868740][T21325] [ 547.885551][T21321] lo speed is unknown, defaulting to 1000 [ 547.892071][T21325] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 548.089278][T21325] CPU: 1 PID: 21325 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 548.099436][T21325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 548.109653][T21325] Call Trace: [ 548.112957][T21325] [ 548.115938][T21325] dump_stack_lvl+0xda/0x130 [ 548.120569][T21325] dump_stack+0x15/0x20 [ 548.124806][T21325] kmem_cache_create_usercopy+0x237/0x2b0 [ 548.130612][T21325] p9_client_create+0x80c/0xa70 [ 548.135540][T21325] v9fs_session_init+0xf9/0xd90 [ 548.140426][T21325] ? slab_post_alloc_hook+0x8c/0x340 [ 548.145743][T21325] ? v9fs_mount+0x53/0x630 [ 548.150244][T21325] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 548.156076][T21325] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.162390][T21325] ? v9fs_mount+0x53/0x630 [ 548.166924][T21325] v9fs_mount+0x69/0x630 [ 548.171219][T21325] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.177487][T21325] legacy_get_tree+0x74/0xd0 [ 548.182144][T21325] vfs_get_tree+0x51/0x1b0 [ 548.186633][T21325] do_new_mount+0x203/0x660 [ 548.191179][T21325] path_mount+0x496/0xb30 [ 548.195601][T21325] __se_sys_mount+0x27f/0x2d0 [ 548.200332][T21325] __x64_sys_mount+0x67/0x80 [ 548.205014][T21325] do_syscall_64+0x41/0xc0 [ 548.209461][T21325] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 548.215433][T21325] RIP: 0033:0x7fd83d377ae9 [ 548.219868][T21325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 548.239507][T21325] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.247951][T21325] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 548.255953][T21325] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 548.263958][T21325] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 548.271960][T21325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.279979][T21325] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 548.287996][T21325] [ 548.292160][T21325] 9p: Unknown access argument user": -22 22:20:02 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 54) 22:20:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4, &(0x7f0000000240)={'raw\x00', 0x2, [{}, {}]}, 0x48) 22:20:02 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000001c0)) 22:20:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x3, &(0x7f0000000240)={'raw\x00', 0x2, [{}, {}]}, 0x48) 22:20:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 22:20:02 executing program 5: add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc2}, &(0x7f0000000600)={0x0, "f3662a5778b932bd5f8a1cf678c087acffc53d561c9aef7e5393a2383bccd9593e5e3b3a6a1362d6daea306d74381119a90564bf289bd373f4a8879baba7b66f"}, 0x48, 0xfffffffffffffffb) 22:20:02 executing program 1: socketpair$unix(0x2, 0x5, 0xc00, &(0x7f0000000000)) 22:20:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x842}, 0x48) 22:20:02 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 55) 22:20:02 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000001c0)) 22:20:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:20:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x4020940d, 0x0) 22:20:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) [ 548.362419][T21355] 9p: Unknown access argument user": -22 22:20:02 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_linger(r0, 0x1, 0x48, 0x0, &(0x7f00000000c0)) [ 548.441775][T21366] FAULT_INJECTION: forcing a failure. [ 548.441775][T21366] name failslab, interval 1, probability 0, space 0, times 0 [ 548.454512][T21366] CPU: 0 PID: 21366 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 548.464648][T21366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 548.474742][T21366] Call Trace: [ 548.478064][T21366] [ 548.481060][T21366] dump_stack_lvl+0xda/0x130 [ 548.485692][T21366] dump_stack+0x15/0x20 22:20:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, 0x0, &(0x7f0000000080)) [ 548.489884][T21366] should_fail_ex+0x21f/0x230 [ 548.494621][T21366] __should_failslab+0x92/0xa0 [ 548.499429][T21366] should_failslab+0x9/0x20 [ 548.503969][T21366] slab_pre_alloc_hook+0x38/0x180 [ 548.509190][T21366] kmem_cache_alloc+0x52/0x220 [ 548.513996][T21366] ? __kernfs_new_node+0x6a/0x380 [ 548.514083][T21366] __kernfs_new_node+0x6a/0x380 22:20:02 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_linger(r0, 0x1, 0x31, 0x0, &(0x7f00000000c0)) 22:20:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000080)) 22:20:02 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 56) [ 548.514182][T21366] ? rb_insert_color+0x6a/0x290 22:20:02 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_linger(r0, 0x1, 0x29, 0x0, &(0x7f00000000c0)) 22:20:02 executing program 5: socket(0x0, 0xd, 0x0) 22:20:02 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80) [ 548.514282][T21366] ? up_write+0x30/0xe0 [ 548.514323][T21366] ? kernfs_activate+0x252/0x270 [ 548.514362][T21366] kernfs_new_node+0x5f/0xd0 [ 548.514406][T21366] __kernfs_create_file+0x49/0x180 [ 548.514512][T21366] ? slab_attr_show+0x20/0x20 [ 548.514543][T21366] sysfs_add_file_mode_ns+0x136/0x1b0 [ 548.514590][T21366] internal_create_group+0x2e4/0x800 [ 548.514671][T21366] sysfs_create_group+0x1f/0x30 [ 548.514697][T21366] sysfs_slab_add+0x163/0x2a0 [ 548.514723][T21366] __kmem_cache_create+0x533/0x6c0 [ 548.514789][T21366] ? kmem_cache_alloc+0x10f/0x220 [ 548.514810][T21366] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 548.514852][T21366] kmem_cache_create_usercopy+0x156/0x2b0 [ 548.514958][T21366] p9_client_create+0x80c/0xa70 [ 548.514982][T21366] v9fs_session_init+0xf9/0xd90 [ 548.515007][T21366] ? slab_post_alloc_hook+0x8c/0x340 [ 548.515085][T21366] ? v9fs_mount+0x53/0x630 [ 548.515126][T21366] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 548.515155][T21366] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.515225][T21366] ? v9fs_mount+0x53/0x630 [ 548.515302][T21366] v9fs_mount+0x69/0x630 [ 548.515392][T21366] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.515526][T21366] legacy_get_tree+0x74/0xd0 [ 548.515568][T21366] vfs_get_tree+0x51/0x1b0 [ 548.515677][T21366] do_new_mount+0x203/0x660 [ 548.515713][T21366] path_mount+0x496/0xb30 [ 548.515749][T21366] __se_sys_mount+0x27f/0x2d0 [ 548.515787][T21366] __x64_sys_mount+0x67/0x80 [ 548.515851][T21366] do_syscall_64+0x41/0xc0 [ 548.515874][T21366] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 548.515970][T21366] RIP: 0033:0x7fd83d377ae9 [ 548.515986][T21366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 548.516110][T21366] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.516161][T21366] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 548.516212][T21366] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 548.516228][T21366] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 548.516244][T21366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.516260][T21366] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 548.516302][T21366] [ 548.551827][T21366] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 548.551849][T21366] CPU: 1 PID: 21366 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 548.551879][T21366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 548.551900][T21366] Call Trace: [ 548.551910][T21366] [ 548.551919][T21366] dump_stack_lvl+0xda/0x130 [ 548.552007][T21366] dump_stack+0x15/0x20 [ 548.552049][T21366] kmem_cache_create_usercopy+0x237/0x2b0 [ 548.552094][T21366] p9_client_create+0x80c/0xa70 [ 548.552142][T21366] v9fs_session_init+0xf9/0xd90 [ 548.552172][T21366] ? slab_post_alloc_hook+0x8c/0x340 [ 548.552196][T21366] ? v9fs_mount+0x53/0x630 [ 548.552234][T21366] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 548.552337][T21366] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.552373][T21366] ? v9fs_mount+0x53/0x630 [ 548.552414][T21366] v9fs_mount+0x69/0x630 [ 548.552526][T21366] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.552563][T21366] legacy_get_tree+0x74/0xd0 [ 548.552618][T21366] vfs_get_tree+0x51/0x1b0 [ 548.552694][T21366] do_new_mount+0x203/0x660 [ 548.552731][T21366] path_mount+0x496/0xb30 [ 548.552876][T21366] __se_sys_mount+0x27f/0x2d0 [ 548.552968][T21366] __x64_sys_mount+0x67/0x80 [ 548.553004][T21366] do_syscall_64+0x41/0xc0 [ 548.553029][T21366] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 548.553065][T21366] RIP: 0033:0x7fd83d377ae9 [ 548.553147][T21366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 548.553266][T21366] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.553290][T21366] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 548.553306][T21366] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 548.553322][T21366] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 548.553338][T21366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.553351][T21366] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 548.553417][T21366] [ 548.553458][T21366] 9p: Unknown access argument user": -22 [ 548.605769][T21383] FAULT_INJECTION: forcing a failure. [ 548.605769][T21383] name failslab, interval 1, probability 0, space 0, times 0 [ 548.605842][T21383] CPU: 1 PID: 21383 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 548.605903][T21383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 548.605916][T21383] Call Trace: [ 548.605924][T21383] [ 548.605933][T21383] dump_stack_lvl+0xda/0x130 [ 548.605964][T21383] dump_stack+0x15/0x20 [ 548.605993][T21383] should_fail_ex+0x21f/0x230 [ 548.606015][T21383] __should_failslab+0x92/0xa0 [ 548.606044][T21383] should_failslab+0x9/0x20 [ 548.606065][T21383] slab_pre_alloc_hook+0x38/0x180 [ 548.606100][T21383] kmem_cache_alloc+0x52/0x220 [ 548.606126][T21383] ? __kernfs_new_node+0x6a/0x380 [ 548.606158][T21383] __kernfs_new_node+0x6a/0x380 [ 548.606193][T21383] ? rb_insert_color+0x6a/0x290 [ 548.606246][T21383] ? up_write+0x30/0xe0 [ 548.606278][T21383] ? kernfs_activate+0x252/0x270 [ 548.606362][T21383] kernfs_new_node+0x5f/0xd0 [ 548.606393][T21383] __kernfs_create_file+0x49/0x180 [ 548.606434][T21383] ? slab_attr_show+0x20/0x20 [ 548.606463][T21383] sysfs_add_file_mode_ns+0x136/0x1b0 [ 548.606591][T21383] internal_create_group+0x2e4/0x800 [ 548.606664][T21383] sysfs_create_group+0x1f/0x30 [ 548.606686][T21383] sysfs_slab_add+0x163/0x2a0 [ 548.606714][T21383] __kmem_cache_create+0x533/0x6c0 [ 548.606802][T21383] ? kmem_cache_alloc+0x10f/0x220 [ 548.606827][T21383] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 548.606866][T21383] kmem_cache_create_usercopy+0x156/0x2b0 [ 548.606970][T21383] p9_client_create+0x80c/0xa70 [ 548.607000][T21383] v9fs_session_init+0xf9/0xd90 [ 548.607030][T21383] ? slab_post_alloc_hook+0x8c/0x340 [ 548.607110][T21383] ? v9fs_mount+0x53/0x630 [ 548.607170][T21383] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 548.607198][T21383] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.607241][T21383] ? v9fs_mount+0x53/0x630 [ 548.607315][T21383] v9fs_mount+0x69/0x630 [ 548.607353][T21383] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.607394][T21383] legacy_get_tree+0x74/0xd0 [ 548.607439][T21383] vfs_get_tree+0x51/0x1b0 [ 548.607475][T21383] do_new_mount+0x203/0x660 [ 548.607525][T21383] path_mount+0x496/0xb30 [ 548.607554][T21383] __se_sys_mount+0x27f/0x2d0 [ 548.607607][T21383] __x64_sys_mount+0x67/0x80 [ 548.607642][T21383] do_syscall_64+0x41/0xc0 [ 548.607726][T21383] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 548.607758][T21383] RIP: 0033:0x7fd83d377ae9 [ 548.607777][T21383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 548.607858][T21383] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.607921][T21383] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 548.607938][T21383] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 548.607954][T21383] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 548.607969][T21383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.607985][T21383] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 548.608043][T21383] [ 548.609136][T21383] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 548.609173][T21383] CPU: 1 PID: 21383 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 548.609273][T21383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 548.609285][T21383] Call Trace: [ 548.609292][T21383] [ 548.609311][T21383] dump_stack_lvl+0xda/0x130 [ 548.609338][T21383] dump_stack+0x15/0x20 [ 548.609357][T21383] kmem_cache_create_usercopy+0x237/0x2b0 [ 548.609403][T21383] p9_client_create+0x80c/0xa70 [ 548.609433][T21383] v9fs_session_init+0xf9/0xd90 [ 548.609484][T21383] ? slab_post_alloc_hook+0x8c/0x340 [ 548.609513][T21383] ? v9fs_mount+0x53/0x630 [ 548.609549][T21383] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 548.609612][T21383] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.609650][T21383] ? v9fs_mount+0x53/0x630 [ 548.609682][T21383] v9fs_mount+0x69/0x630 [ 548.609761][T21383] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 548.609803][T21383] legacy_get_tree+0x74/0xd0 [ 548.609842][T21383] vfs_get_tree+0x51/0x1b0 [ 548.609877][T21383] do_new_mount+0x203/0x660 [ 548.609922][T21383] path_mount+0x496/0xb30 [ 548.610003][T21383] __se_sys_mount+0x27f/0x2d0 [ 548.610035][T21383] __x64_sys_mount+0x67/0x80 [ 548.610099][T21383] do_syscall_64+0x41/0xc0 [ 548.610133][T21383] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 548.610166][T21383] RIP: 0033:0x7fd83d377ae9 [ 548.610183][T21383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 548.610205][T21383] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.610239][T21383] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 548.610255][T21383] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 548.610327][T21383] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 548.610343][T21383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 22:20:03 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0xffffffff, 0x4) 22:20:03 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 57) 22:20:03 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000080)=@phonet, 0x80) 22:20:03 executing program 2: quotactl$Q_SETINFO(0x3, 0x0, 0x0, 0x0) 22:20:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x10, 0x4) 22:20:03 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3f7000e000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) [ 548.610359][T21383] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 548.610381][T21383] [ 548.611223][T21383] 9p: Unknown access argument user": -22 22:20:03 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) [ 549.940320][ T26] audit: type=1400 audit(1693606803.953:2843): avc: denied { setopt } for pid=21392 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 549.972709][T21399] FAULT_INJECTION: forcing a failure. [ 549.972709][T21399] name failslab, interval 1, probability 0, space 0, times 0 [ 549.985476][T21399] CPU: 1 PID: 21399 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 549.995627][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 22:20:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}, 0x2}, 0x0) bind$netlink(r0, &(0x7f0000000000), 0xc) 22:20:04 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_linger(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) 22:20:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) [ 550.005771][T21399] Call Trace: [ 550.009074][T21399] [ 550.012027][T21399] dump_stack_lvl+0xda/0x130 [ 550.016715][T21399] dump_stack+0x15/0x20 [ 550.020907][T21399] should_fail_ex+0x21f/0x230 [ 550.025677][T21399] __should_failslab+0x92/0xa0 [ 550.030484][T21399] should_failslab+0x9/0x20 [ 550.035084][T21399] slab_pre_alloc_hook+0x38/0x180 [ 550.040248][T21399] kmem_cache_alloc+0x52/0x220 [ 550.045129][T21399] ? __kernfs_new_node+0x6a/0x380 [ 550.050205][T21399] __kernfs_new_node+0x6a/0x380 22:20:04 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_linger(r0, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) [ 550.055224][T21399] ? rb_insert_color+0x6a/0x290 [ 550.060188][T21399] ? up_write+0x30/0xe0 [ 550.064408][T21399] ? kernfs_activate+0x252/0x270 [ 550.069403][T21399] kernfs_new_node+0x5f/0xd0 [ 550.074044][T21399] __kernfs_create_file+0x49/0x180 [ 550.079286][T21399] ? slab_attr_show+0x20/0x20 [ 550.084049][T21399] sysfs_add_file_mode_ns+0x136/0x1b0 [ 550.089482][T21399] internal_create_group+0x2e4/0x800 [ 550.094981][T21399] sysfs_create_group+0x1f/0x30 [ 550.099871][T21399] sysfs_slab_add+0x163/0x2a0 22:20:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x5452, 0x0) [ 550.104594][T21399] __kmem_cache_create+0x533/0x6c0 [ 550.109862][T21399] ? kmem_cache_alloc+0x10f/0x220 [ 550.114921][T21399] ? kmem_cache_create_usercopy+0x103/0x2b0 [ 550.118531][T21409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21409 comm=syz-executor.3 [ 550.120867][T21399] kmem_cache_create_usercopy+0x156/0x2b0 [ 550.120923][T21399] p9_client_create+0x80c/0xa70 [ 550.120956][T21399] v9fs_session_init+0xf9/0xd90 [ 550.120980][T21399] ? slab_post_alloc_hook+0x8c/0x340 22:20:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0xffffffffffffffff}], 0x1}, 0x0) [ 550.154544][T21399] ? v9fs_mount+0x53/0x630 [ 550.159063][T21399] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 550.164780][T21399] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 550.170992][T21399] ? v9fs_mount+0x53/0x630 [ 550.175447][T21399] v9fs_mount+0x69/0x630 [ 550.179807][T21399] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 550.186026][T21399] legacy_get_tree+0x74/0xd0 [ 550.190670][T21399] vfs_get_tree+0x51/0x1b0 [ 550.195134][T21399] do_new_mount+0x203/0x660 [ 550.199760][T21399] path_mount+0x496/0xb30 [ 550.204172][T21399] __se_sys_mount+0x27f/0x2d0 [ 550.208905][T21399] __x64_sys_mount+0x67/0x80 [ 550.213530][T21399] do_syscall_64+0x41/0xc0 [ 550.217976][T21399] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 550.223921][T21399] RIP: 0033:0x7fd83d377ae9 [ 550.228357][T21399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 550.248159][T21399] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.256742][T21399] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 550.264745][T21399] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 550.272734][T21399] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 550.280723][T21399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.288743][T21399] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 550.296727][T21399] [ 550.302117][T21399] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 550.310137][T21399] CPU: 1 PID: 21399 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 550.320278][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 550.330497][T21399] Call Trace: [ 550.333790][T21399] [ 550.336771][T21399] dump_stack_lvl+0xda/0x130 [ 550.341422][T21399] dump_stack+0x15/0x20 [ 550.345592][T21399] kmem_cache_create_usercopy+0x237/0x2b0 [ 550.351371][T21399] p9_client_create+0x80c/0xa70 [ 550.356243][T21399] v9fs_session_init+0xf9/0xd90 [ 550.361215][T21399] ? slab_post_alloc_hook+0x8c/0x340 [ 550.366540][T21399] ? v9fs_mount+0x53/0x630 [ 550.371009][T21399] ? __kmem_cache_alloc_node+0x121/0x1d0 [ 550.376663][T21399] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 550.382875][T21399] ? v9fs_mount+0x53/0x630 [ 550.387323][T21399] v9fs_mount+0x69/0x630 [ 550.391689][T21399] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 550.397961][T21399] legacy_get_tree+0x74/0xd0 [ 550.402613][T21399] vfs_get_tree+0x51/0x1b0 [ 550.407066][T21399] do_new_mount+0x203/0x660 [ 550.411638][T21399] path_mount+0x496/0xb30 [ 550.416054][T21399] __se_sys_mount+0x27f/0x2d0 [ 550.420826][T21399] __x64_sys_mount+0x67/0x80 [ 550.425471][T21399] do_syscall_64+0x41/0xc0 [ 550.430007][T21399] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 550.435940][T21399] RIP: 0033:0x7fd83d377ae9 [ 550.440382][T21399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 550.460160][T21399] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.468588][T21399] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 550.476573][T21399] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 550.484570][T21399] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 550.492628][T21399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.500630][T21399] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 22:20:04 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 58) 22:20:04 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 22:20:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0xffffffffffffffff}], 0x1}, 0x0) 22:20:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x1}, 0x20) [ 550.508705][T21399] [ 550.512035][T21399] 9p: Unknown access argument user": -22 [ 550.517177][T21408] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:04 executing program 2: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) 22:20:04 executing program 0: r0 = semget(0x3, 0x0, 0x0) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000080)=""/208) 22:20:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0xffffffffffffffff}], 0x1}, 0x0) 22:20:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a007dd90000000000000000fe6f1529ce421ec7adae"], 0x24}}, 0x0) [ 550.539438][ T26] audit: type=1400 audit(1693606804.553:2844): avc: denied { getopt } for pid=21422 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 550.576040][T21414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.624515][T21430] FAULT_INJECTION: forcing a failure. [ 550.624515][T21430] name failslab, interval 1, probability 0, space 0, times 0 [ 550.637375][T21430] CPU: 0 PID: 21430 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 550.638935][T21414] bond6: (slave batadv0): Enslaving as a backup interface with an up link [ 550.647546][T21430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 550.647565][T21430] Call Trace: [ 550.647573][T21430] [ 550.647582][T21430] dump_stack_lvl+0xda/0x130 [ 550.647614][T21430] dump_stack+0x15/0x20 [ 550.647663][T21430] should_fail_ex+0x21f/0x230 [ 550.647683][T21430] ? match_strdup+0x37/0x40 [ 550.690699][T21430] __should_failslab+0x92/0xa0 [ 550.695531][T21430] should_failslab+0x9/0x20 [ 550.700090][T21430] slab_pre_alloc_hook+0x38/0x180 [ 550.705138][T21430] ? match_strdup+0x37/0x40 [ 550.709695][T21430] __kmem_cache_alloc_node+0x48/0x1d0 [ 550.715087][T21430] ? match_strdup+0x37/0x40 [ 550.719621][T21430] __kmalloc_node_track_caller+0x96/0x1a0 [ 550.725435][T21430] ? match_token+0x3f5/0x420 [ 550.730134][T21430] kmemdup_nul+0x30/0x80 [ 550.734392][T21430] match_strdup+0x37/0x40 [ 550.738797][T21430] v9fs_session_init+0x4f5/0xd90 [ 550.743746][T21430] ? slab_post_alloc_hook+0x8c/0x340 [ 550.749085][T21430] ? v9fs_mount+0x53/0x630 [ 550.753542][T21430] v9fs_mount+0x69/0x630 [ 550.757884][T21430] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 550.764167][T21430] legacy_get_tree+0x74/0xd0 [ 550.768774][T21430] vfs_get_tree+0x51/0x1b0 [ 550.773245][T21430] do_new_mount+0x203/0x660 [ 550.777778][T21430] path_mount+0x496/0xb30 [ 550.782192][T21430] __se_sys_mount+0x27f/0x2d0 [ 550.786902][T21430] __x64_sys_mount+0x67/0x80 [ 550.791511][T21430] do_syscall_64+0x41/0xc0 [ 550.795987][T21430] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 550.802003][T21430] RIP: 0033:0x7fd83d377ae9 [ 550.806445][T21430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 550.826063][T21430] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.834478][T21430] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 550.842458][T21430] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 550.850453][T21430] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 550.858425][T21430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.866413][T21430] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 22:20:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0xffffffffffffffff}], 0x1}, 0x0) 22:20:04 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 22:20:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000), 0x4) 22:20:04 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 59) 22:20:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004480)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000240)="e8", 0x1}], 0x2}}], 0x1, 0x0) [ 550.874498][T21430] [ 550.881467][T21420] bond6 (unregistering): (slave batadv0): Releasing backup interface [ 550.902765][T21420] bond6 (unregistering): Released all slaves 22:20:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x84, 0x71, 0x0, &(0x7f0000000340)) 22:20:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 22:20:05 executing program 0: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 22:20:05 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 22:20:05 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, &(0x7f0000002240)={'wlan1\x00'}) [ 550.979544][T21446] 9p: Unknown access argument user": -22 [ 551.000809][T21452] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001180)="a185600078f6", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 551.024737][T21446] FAULT_INJECTION: forcing a failure. [ 551.024737][T21446] name failslab, interval 1, probability 0, space 0, times 0 [ 551.037419][T21446] CPU: 1 PID: 21446 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 551.047531][T21446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 551.057663][T21446] Call Trace: [ 551.061025][T21446] [ 551.063984][T21446] dump_stack_lvl+0xda/0x130 [ 551.068629][T21446] dump_stack+0x15/0x20 [ 551.072856][T21446] should_fail_ex+0x21f/0x230 [ 551.077606][T21446] __should_failslab+0x92/0xa0 [ 551.082557][T21446] should_failslab+0x9/0x20 [ 551.087106][T21446] slab_pre_alloc_hook+0x38/0x180 [ 551.092283][T21446] kmem_cache_alloc_lru+0x4e/0x220 [ 551.097467][T21446] ? __d_alloc+0x3d/0x380 [ 551.101890][T21446] __d_alloc+0x3d/0x380 [ 551.106084][T21446] d_alloc_parallel+0x54/0xc90 [ 551.110966][T21446] ? selinux_inode_permission+0x335/0x410 [ 551.116741][T21446] ? __rcu_read_unlock+0x4d/0x70 [ 551.121713][T21446] ? __d_lookup+0x357/0x380 [ 551.126245][T21446] ? inode_permission+0xbf/0x300 [ 551.131279][T21446] ? down_read+0x16f/0x4a0 [ 551.135742][T21446] __lookup_slow+0x8d/0x230 [ 551.140279][T21446] lookup_one_unlocked+0xcf/0x180 [ 551.145343][T21446] lookup_positive_unlocked+0x2b/0x90 [ 551.150744][T21446] debugfs_lookup_and_remove+0x96/0x100 [ 551.156307][T21446] kmem_cache_destroy+0xb8/0x140 [ 551.161337][T21446] p9_client_destroy+0x1d2/0x200 [ 551.166330][T21446] v9fs_session_init+0xc14/0xd90 [ 551.171300][T21446] ? v9fs_mount+0x53/0x630 [ 551.175730][T21446] v9fs_mount+0x69/0x630 [ 551.180028][T21446] ? autofs_dev_ioctl_ismountpoint+0x4b0/0x4b0 [ 551.186237][T21446] legacy_get_tree+0x74/0xd0 [ 551.190909][T21446] vfs_get_tree+0x51/0x1b0 [ 551.195417][T21446] do_new_mount+0x203/0x660 [ 551.200009][T21446] path_mount+0x496/0xb30 [ 551.204414][T21446] __se_sys_mount+0x27f/0x2d0 [ 551.209122][T21446] __x64_sys_mount+0x67/0x80 [ 551.213726][T21446] do_syscall_64+0x41/0xc0 [ 551.218151][T21446] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 551.224070][T21446] RIP: 0033:0x7fd83d377ae9 [ 551.228500][T21446] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 551.248170][T21446] RSP: 002b:00007fd83c6fa0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.256650][T21446] RAX: ffffffffffffffda RBX: 00007fd83d496f80 RCX: 00007fd83d377ae9 [ 551.264637][T21446] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 551.272613][T21446] RBP: 00007fd83c6fa120 R08: 0000000020000380 R09: 0000000000000000 [ 551.280616][T21446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.288682][T21446] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 551.296756][T21446] [ 551.308876][T21452] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 551.335121][T21452] bond6: (slave batadv2): Enslaving as a backup interface with an up link [ 551.351540][T21463] bond6 (unregistering): (slave batadv2): Releasing backup interface [ 551.364985][T21463] bond6 (unregistering): Released all slaves 22:20:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000c2"], 0x20}}, 0x0) 22:20:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:20:05 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) (fail_nth: 60) 22:20:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 22:20:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x4, 0x0, 0x3}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 551.441305][T21470] 9p: Unknown access argument user": -22 [ 551.460106][T21470] FAULT_INJECTION: forcing a failure. [ 551.460106][T21470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.473313][T21470] CPU: 1 PID: 21470 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 551.483480][T21470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 551.493572][T21470] Call Trace: [ 551.496872][T21470] [ 551.499828][T21470] dump_stack_lvl+0xda/0x130 [ 551.504447][T21470] dump_stack+0x15/0x20 [ 551.508643][T21470] should_fail_ex+0x21f/0x230 [ 551.513461][T21470] should_fail+0xb/0x10 [ 551.517769][T21470] should_fail_usercopy+0x1a/0x20 [ 551.523256][T21470] _copy_from_user+0x1e/0xd0 [ 551.527970][T21470] kstrtouint_from_user+0x76/0xe0 [ 551.533083][T21470] ? 0xffffffff81000000 [ 551.537316][T21470] proc_fail_nth_write+0x4f/0x150 [ 551.542365][T21470] ? proc_fail_nth_read+0x140/0x140 [ 551.547656][T21470] vfs_write+0x27a/0x7d0 [ 551.551930][T21470] ? __fget_files+0x1c4/0x200 [ 551.556653][T21470] ? mutex_lock+0xd/0x30 [ 551.560975][T21470] ksys_write+0xeb/0x1a0 [ 551.565238][T21470] __x64_sys_write+0x42/0x50 [ 551.569875][T21470] do_syscall_64+0x41/0xc0 [ 551.574454][T21470] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 551.580423][T21470] RIP: 0033:0x7fd83d37682f [ 551.584892][T21470] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 551.604510][T21470] RSP: 002b:00007fd83c6fa0c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 551.613117][T21470] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd83d37682f [ 551.621107][T21470] RDX: 0000000000000001 RSI: 00007fd83c6fa130 RDI: 0000000000000007 [ 551.629093][T21470] RBP: 00007fd83c6fa120 R08: 0000000000000000 R09: 0000000000000000 22:20:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 551.637075][T21470] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 551.645064][T21470] R13: 000000000000000b R14: 00007fd83d496f80 R15: 00007fffd15dfed8 [ 551.653153][T21470] 22:20:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x2, 0x25dfdbfe}, 0x10}}, 0x0) 22:20:05 executing program 3: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmsg$unix(r0, 0x0, 0x0) 22:20:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:05 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000000080)=@bloom_filter, 0x92) [ 551.683691][T21479] dccp_invalid_packet: P.Data Offset(4) too small 22:20:05 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:05 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20) [ 551.733892][T21481] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) [ 551.777876][T21481] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 551.781323][T21495] 9p: Unknown access argument user": -22 [ 551.824918][T21481] bond6: (slave batadv3): Enslaving as a backup interface with an up link [ 551.843464][T21500] dccp_invalid_packet: P.Data Offset(4) too small [ 551.851875][T21481] bond6 (unregistering): (slave batadv3): Releasing backup interface [ 551.861540][T21481] bond6 (unregistering): Released all slaves 22:20:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:05 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:05 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x180ca1484379ebba) 22:20:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x298, 0x1c8, 0xf8, 0x1c8, 0x368, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_macvtap\x00', 'batadv_slave_1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @HL={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0xf36f2314278663a5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 22:20:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) [ 551.995581][T21517] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 552.051873][T21517] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 552.060355][T21517] bond6: (slave batadv4): Enslaving as a backup interface with an up link [ 552.075504][T21524] dccp_invalid_packet: P.Data Offset(4) too small [ 552.083616][T21517] bond6 (unregistering): (slave batadv4): Releasing backup interface [ 552.094519][T21517] bond6 (unregistering): Released all slaves 22:20:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1f, 0x0, 0x0, 0x0, 0x1000}, 0x48) 22:20:06 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32], 0x20}}, 0x0) 22:20:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x2, 0x25dfdbfe}, 0x10}}, 0x0) 22:20:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 22:20:06 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x28}}, 0x0) 22:20:06 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) [ 552.553114][T21589] dccp_invalid_packet: P.Data Offset(4) too small [ 552.562650][T21595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:06 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) 22:20:06 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) 22:20:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 22:20:06 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32], 0x20}}, 0x0) 22:20:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(r0) [ 552.706494][T21607] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 552.727799][T21607] bond6: (slave batadv5): Enslaving as a backup interface with an up link [ 552.786866][T21630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 552.815070][T21630] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 552.823142][T21630] bond7: (slave batadv6): Enslaving as a backup interface with an up link 22:20:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x2, 0x25dfdbfe}, 0x10}}, 0x0) 22:20:07 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) 22:20:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:07 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:07 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/85) 22:20:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32], 0x20}}, 0x0) 22:20:07 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000), 0x8) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000640)) 22:20:07 executing program 1: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0xfffffffffffffffd) 22:20:07 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x8, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 553.223548][T21695] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 553.254061][T21695] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 553.262829][T21695] bond8: (slave batadv7): Enslaving as a backup interface with an up link 22:20:07 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) unlink(&(0x7f0000000200)='./file0\x00') 22:20:07 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$LINK_DETACH(0x22, 0x0, 0x0) [ 553.312124][T21710] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 553.372316][T21710] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 553.380762][T21710] bond9: (slave batadv8): Enslaving as a backup interface with an up link 22:20:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x2, 0x25dfdbfe}, 0x10}}, 0x0) 22:20:07 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x9, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {0x0}], 0x2}, 0x0) 22:20:07 executing program 3: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) socket$kcm(0x29, 0x2, 0x0) 22:20:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:07 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) 22:20:07 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xa, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:07 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 22:20:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) [ 553.885964][T21799] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:07 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 553.944878][T21799] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 553.953433][T21799] bond10: (slave batadv9): Enslaving as a backup interface with an up link [ 554.019533][T21819] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 554.044341][T21819] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 554.057676][T21819] bond11: (slave batadv10): Enslaving as a backup interface with an up link [ 554.151429][ T26] audit: type=1326 audit(1693606808.163:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21808 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd0ba9cae9 code=0x0 22:20:08 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xc, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 554.532251][T21891] bond12 (unregistering): Released all slaves 22:20:08 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x200002) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) sendfile(r1, r0, 0x0, 0x80001d00c0d0) 22:20:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x20) 22:20:08 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xd, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0xb, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) 22:20:08 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) 22:20:08 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xe, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) write$P9_RAUTH(r1, 0x0, 0x0) 22:20:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 554.751909][T21899] bond12 (unregistering): Released all slaves 22:20:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x2, 0x0, 0x10000120}, 0x18, &(0x7f0000000100)={0x0}}, 0x0) 22:20:08 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x10, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) 22:20:08 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x11, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:08 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)={0x58, 0x13, 0x101, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4, 0x1, "935232a2"}]}, 0x58}}, 0x0) 22:20:08 executing program 2: pselect6(0x18, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0, 0x0) 22:20:08 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 22:20:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:08 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x12, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 554.883808][T21908] bond12 (unregistering): Released all slaves 22:20:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 22:20:09 executing program 2: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, &(0x7f0000000040)) 22:20:09 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x22, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:09 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x25, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:09 executing program 1: r0 = socket(0x18, 0x0, 0x1) connect$netlink(r0, &(0x7f0000000000), 0xc) [ 555.673728][T21940] validate_nla: 3 callbacks suppressed [ 555.673817][T21940] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:09 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x41, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:09 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "03c5ad813b854964833d8502619a448e3fbfb209c6efb6f74c94671cf36260cf7cbc6615554f85195c2ae03852f82a5cf61e8b8468b8c978b67d22c0201ff539"}, 0x48, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 22:20:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x451f, &(0x7f0000000b40)=ANY=[], 0x33, 0x4b3, &(0x7f0000001b00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzG2wZ721JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrlLHlWKHyBLInw/c3HPuucr3ezA6uufegxTAgXUmIq5HxFBEXIiI0W1taUTcqBe2muc9eXx/tr4lUavd+iSJJDvWOj/J9seaL4krEfGnGxF/Tb4bt7KxuTRTKhXXsnqhurxaqGxsXlxcnlkoLhRXpqYmr0xfnb48PdGVfo5FxLXfffDvf7zy+2tv/PLuu7c/Ov+3elojWfv2fnRfLg5vqw1HxNr+BeupoWyf63MeAADsTf0a/wcR8bPG9f9oDDWuTgEAAIBBUvvNSHyZRNQAAACAgZU21sAmaT5bCzASaZrPN9fw/iiOpqVypfqL+fL6ylxzrexY5NL5xVJxIlsrPBa5pF6fzNbYtuqXdtSnIuJERPxr9Eijnp8tl+b6ffMDAAAADohjO+b/n4825/8AAADAgBnrdwIAAADAvjP/BwAAgMFn/g8AAAAD7Q83b9a3Wuv3r+fubKwvle9cnCtWlvLL67P52fLaan6hXF5ofGff8m7/X6lcXv1VrKzfK1SLlWqhsrF5e7m8vlK9vfjMT2ADAAAAPXTipw/fSSJi69dHGlvdoX4nBfRE7kVOfn//8gB6b6jfCQB9M9zvBIC+eaHrf2AgJbu0d1y882b3cwEAAPbH+I87P/93bwAGW9rvBACAnvP8Hw6unBWAcOB9f5f2l3/+X6u9UEIAAEDXjTS2JM1nzwJHIk3z+YjjjZ8FyCXzi6XiRDY/eHs09716fbLxymTXNcMAAAAAAAAAAAAAAAAAAAAAAAAAQFOtlkQNAAAAGGgR6YdJ49v8I8ZHz43svD9wKPlitLGPiLv/u/WfezPV6tpk/finT49X/5sdv9SPOxgAAADATq15emseDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd9OTx/dnW1su4H/82IsbaxR+Ow4394chFxNHPkhje9rokIoa6EH/rQUScbBc/qacVY1kW7eIf6WP8NCKOdSE+HGQP6+PP9XbvvzTONPbt33/D2fayOo9/6dPxb6jD+HN8jzFOPXqt0DH+g4hTw+3Hn1b8pEP8s3uM/5c/b252aqv9P2K87edP8kysQnV5tVDZ2Ly4uDyzUFworkxNTV6Zvjp9eXqiML9YKmb/to3xz5+8/vXz+n+0Q/yxXfp/bo/9/+rRvcc/bBZz7eKfP9v+8/dkh/hp9tn386xcbx9vlbea5e1Ov/rW6ef1f65D/3f7+5/fY/8v/PHv7+3xVACgByobm0szpVJxTUFBQeFpod8jEwAA0G3fXvT3OxMAAAAAAAAAAAAAAAAAAAA4uHrxdWI7Y271p6sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/1TQAAAP//93/VHA==") 22:20:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x29, 0x1, 0x0, 0x0) 22:20:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 22:20:09 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x44, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 555.717155][T21940] bond12 (unregistering): Released all slaves 22:20:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:09 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/250, 0xfa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 22:20:09 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x48, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:09 executing program 1: syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') [ 555.808430][T21966] syz-executor.3[21966]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 555.836678][T21966] loop3: detected capacity change from 0 to 512 [ 555.849632][T21973] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:09 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x49, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x451f, &(0x7f0000000b40)=ANY=[], 0x33, 0x4b3, &(0x7f0000001b00)="$eJzs3d9rW9cdAPDvvbay/HAmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyBbInw+c3HPulfT9nhgd3XPvQQpg3zoVEVcjYigizkVEPtufZuVao7HZetyjh3dnGiWJev3GZ0kk2b72ayXZ9kjrKXEwIv52LeKfyQ/jVtc3FqfL5dJq1i7WllaK1fWN8wtL0/Ol+dLy5OTEpanLUxenxnvSz9GIuPKnj/7/n9f+fOWt395+/+YnZ//VSGskO/5kP3qp1fVc8/+ibTgiVncjWB8MZdtcn/MAAGBnGuf4P4mIXzXP//Mx1Dw7BQAAAAZJ/Q8j8XUSUQcAAAAGVtpcA5ukhWwtwEikaaHQWsP7sziclivV2m/mKmvLs621sqORS+cWyqXxbK3waOSSRnsiW2Pbbl/Y0p6MiGMR8b/8oWa7MFMpz/b74gcAAADsE0e2zP+/zLfm/wAAAMCAGe13AgAAAMCuM/8HAACAwWf+DwAAAAPtL9evN0q9/fvXs7fW1xYrt87PlqqLhaW1mcJMZXWlMF+pzDe/s29pu9crVyorv4vltTvFWqlaK1bXN24uVdaWazcXnvoJbAAAAGAPHfvl/feSiNj8/aFmaTjQ76SAPZF7ngd/uHt5AHtvqN8JAH0z3O8EgL55rvN/YCAl2xzvunjn7d7nAgAA7I6xn3e//+/aAAy2tN8JAAB7zv1/2L9yVgDCvvfjbY6/+P3/ev25EgIAAHpupFmStJDdCxyJNC0UIo42fxYgl8wtlEvj2fzg3XzuR432RPOZybZrhgEAAAAAAAAAAAAAAAAAAAAAAACAlno9iToAAAAw0CLSj5Pmt/lHjOXPjGy9PnAg+Srf3EbE7VduvHRnulZbnWjs//zx/trL2f4L/biCAQAAAGzVnqe35/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EuPHt6daZe9jPvpHyNitFP84TjY3ObruYg4/EUSw088L4mIoR7E37wXEcc7xU8aacVolkWn+If6GD+NiCM9iA/72f3G+HO10/svjVPNbef333BWXlT38S/NIh9sjnOdxp+jO4xx4sEbxa7x70WcGO48/rTjJ13in95h/H/8fWOj27H6qxFjHT9/kqdiFWtLK8Xq+sb5haXp+dJ8aXlycuLS1OWpi1PjxbmFcin7t2OM//7izW+f1f/DXeKPbtP/Mzvs/zcP7jz8aaua6xT/7OnOn7/Hu8RPs8++X2f1xvGxdn2zVX/SydffOfms/s926f92f/+zO+z/ub/++4MdPhQA2APV9Y3F6XK5tKqioqLyuNLvkQkAAOi170/6+50JAAAAAAAAAAAAAAAAAAAA7F978XViW2Nu9qerAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP9F0AAAD//15s1fc=") 22:20:09 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000dc0)) 22:20:09 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8001]}, 0x8}) 22:20:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) [ 555.879201][T21966] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) [ 555.908062][T21983] syz-executor.1[21983]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 22:20:09 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f00000000c0)=@framed={{}, [@func]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:10 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 555.960260][T21973] bond12 (unregistering): Released all slaves 22:20:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:10 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) [ 556.035140][T22000] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 556.075235][T22000] bond12 (unregistering): Released all slaves 22:20:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 22:20:10 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x51, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) 22:20:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) 22:20:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:10 executing program 3: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) 22:20:10 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x52, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:10 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=@in={0x10, 0x2}, 0x10) 22:20:10 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 22:20:10 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) bind$unix(r2, &(0x7f0000000140)=@abs={0x8}, 0x8) [ 556.723679][T22012] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:10 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 22:20:10 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x53, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:10 executing program 1: pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) getpeername$unix(r0, 0x0, 0x0) 22:20:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0xc) [ 556.802195][T22012] bond12 (unregistering): Released all slaves 22:20:10 executing program 3: r0 = socket(0x1d, 0x2, 0x2) connect$unix(r0, 0x0, 0x0) 22:20:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:10 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x54, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 22:20:10 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8993, &(0x7f0000000040)={'sit0\x00', 0x0}) 22:20:10 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x56, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000180)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0xea4, 0x8, 0x0, 0x1, [{0x5a4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b32a82c5de66d32d95b3c5cf5da61b0448c4060e8186ce6e6cc6c7b864b6df0e"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x330, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2847c9ff57193ef0575316da1cb49ab46e4d9637a739004a22d568f58c3803c9"}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55f77e8799c99bcf77b9015b24b067d7437b6a514a97b640ee2e03e72f502b21"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x660, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}]}, {0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}]}, 0xec8}}, 0x0) 22:20:11 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={0x0}}, 0x0) 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x60, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 556.945917][T22054] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:11 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89b0, &(0x7f0000000040)={'sit0\x00', 0x0}) 22:20:11 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x62, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 22:20:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:11 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 22:20:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x97f, 0x4) 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x64, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 557.079402][T22054] bond12 (unregistering): Released all slaves 22:20:11 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x67, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000080)="b4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002400)="12", 0x1}], 0x1, 0x0, 0xfc00}}], 0x2, 0x0) 22:20:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000080)="b4be712357ef88390c1b935fc957c0209c2003b2017461d922244e4d214e6e6936aa66b9738858fde2ee06599d72f1f243b75fdd853e763b619211af1696eee9abc0241b6d8f231654e3fea356638108b6f4d3b89df25d73a1754ccc1144e6b5eafbfddc3ab6f3d788bcfe4ea9dcb3e9517a8bb453dd77", 0x77}, {0x0}], 0x2}}, {{&(0x7f0000002380)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000002600)=[{0x0}], 0x1}}], 0x2, 0x0) 22:20:11 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 22:20:11 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}], 0x48}}], 0x1, 0x0) 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x68, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 557.200077][T22088] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x4d, &(0x7f0000000200)=[{&(0x7f0000000080)='Q', 0x7ffff006}, {&(0x7f0000000480)="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", 0x1000}], 0x2}, 0x7bb065728ae9) 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:11 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@isofs={0x14}, &(0x7f0000000080), 0x0) [ 557.271911][T22088] bond12 (unregistering): Released all slaves 22:20:11 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x71, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:11 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f00000015c0)) 22:20:12 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r0, 0x10d, 0x10, 0x0, &(0x7f00000015c0)=0x300) 22:20:12 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x14, 0x1, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 22:20:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:12 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000015c0)) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x73, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x74, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@local}, {@multicast1}]}, @noop]}}}], 0x28}, 0x814) 22:20:12 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 22:20:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2}}}, @ip_tos_int={{0x14}}], 0x50}, 0x2400400c) [ 558.065270][T22128] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@local}, {@multicast1}]}, @noop]}}}], 0x28}, 0x814) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x75, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:12 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000000440)) 22:20:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) [ 558.129901][T22128] bond12 (unregistering): Released all slaves 22:20:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x77, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:12 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) 22:20:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@local}, {@multicast1}]}, @noop]}}}], 0x28}, 0x814) 22:20:12 executing program 2: write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xe}, {0x2, 0x5}}}, 0x24}}, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 22:20:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7a, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 558.255573][T22158] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 558.278917][T22158] bond12 (unregistering): Released all slaves 22:20:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000280)={'gre0\x00', 0x0}) 22:20:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@local}, {@multicast1}]}, @noop]}}}], 0x28}, 0x814) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xec, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:12 executing program 3: pipe(&(0x7f0000005040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) [ 558.372358][T22173] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:12 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:20:12 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x300, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5411, 0x0) [ 558.421827][T22173] bond12 (unregistering): Released all slaves 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x880, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00bb26aa068e44b68dfffaf61c3f393217a1a214608efcfff49423662d470926a850bb031841ca8e1942c4db2edec1f762ea407786bd2a1ca2899841081008fcb76209148b0c792ca43ca769f8016e3235fbd3c9ebc0b004d0d8593595acc28c889f13084fbccc702e8d70bf25b398978b376a3ae3dd339768155b6729d8080cf122cb31f7fc06263420762d7b4b4b50bbec06011f7ccc71695d0c8c138f47d6be53084217a89892d803b2bcdf64af5e75a1b3d672553577aed0bcc343141af489c23ad0b7af0b4a18549c6b85dc082834f06e4255bbf4152a69224de03646eddec0bb2c04006cf6ff15853a522d14d8dae0c3237fba54f73ffbfda04626e0c32993ada19d9b8a1a39b21a9bced1429b5f3d0f6cfa10bb257ddbd5caf7faf82533d47d9a58d6890809a21cc6158568314dbec731c8c46b87767b1663dd79959ff7ca00276e2f7ea9ab30af284e97149ed3f11f6182db7e944e8100000031b325c8671704000000c4df2e6f11abb6f18ed7fb44dd0de9874f5f5effbae6cbce2abb18a806fb9f5ce4cca679229ec00dfb8f0300000000000000f6f4e7b458105f1d913c948700040000000000e44d636175ade7d08d636682f213e478748a52570bb6957c0047514794106a29f7caa49e28376790fe767fc71c99542bf9dd37e6021e2281c4736202efcb21485698b157a24101ffee7e"], 0x1, 0x563, &(0x7f0000001dc0)="$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") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, '\x00', @auto="237a710b26c1b6c5af9dbd275b319379"}) 22:20:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4404, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x9, 0x642, &(0x7f0000000ec0)="$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") 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x500, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 22:20:13 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffffff}, 0x8) 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x600, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) [ 559.178366][T22199] syz-executor.1[22199]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 559.188581][T22200] syz-executor.3[22200]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 559.210365][T22200] loop3: detected capacity change from 0 to 164 [ 559.218583][T22200] rock: corrupted directory entry. extent=28, offset=0, size=-1 22:20:13 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 22:20:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 22:20:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4404, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x9, 0x642, &(0x7f0000000ec0)="$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") 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) 22:20:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x700, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x28) 22:20:13 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcae}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8001) mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) [ 559.305068][T22219] syz-executor.3[22219]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 559.326204][T22219] loop3: detected capacity change from 0 to 164 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x810, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 22:20:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) [ 559.385613][T22219] rock: corrupted directory entry. extent=28, offset=0, size=-1 22:20:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4404, &(0x7f0000000200)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d0000727566742c63727566742c8e61703d6f66662c636865636b3d72656c617865642c73657373696f6e3d3078303030303030303030303030303035322c6d6f64653d3078303030303030303030303030303030392c00b52e8000000000000000a6f97df8f380729336085f1d21a831c0a5eb4baf62e558e14ae4de56d2c3301a1c9606530812f351641e08c4210f88c9985dcb60188ec144d80864f593f95936706989ef3e0051cf5e395d263b9f4d8b004f9ef07b1cdbd9cc5cf0e91c53301b978d2df460d228b46b4705eaf9cb57411dd20db4e99b482a39a132e717d7b8726c722e842792e3795ae4b5384f46ec3bf7f18453b5adcba1dd592f18e78b1fbc85a632"], 0x9, 0x642, &(0x7f0000000ec0)="$eJzs3V1v29Ydx/Ef5cd6WDCsQxAEaXKarICDuYokNw6E7GIcRdnsJFEg6cIGBhRZYxdG5HRLMmDxTetd7AHo3sDuerOL7T0M2PWwN9G7DSi2uwG74UBStCXr0bUTt+n3I7SkDv88589Dh8eURVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWUyuVypYaXmtzy4zm1AK/OWZ5Vtucbmcztye2K1nJf1pc1JWs6Mr3jhdfTv53U9eyd9e0mEwWdfCty9+5//psIV9/TEJfhk5b4dPnB48edDo7T07RROqTU+f2QqkwTdGgdbflhZ//Q1p3jRf6prq2VrqzUQ9N3Wu44XYYuU3jBK4d+YFZdm6bcrW6atzitr/ZWq/ZDTcp/Oe3q9V7b1dKpTXz7kK3e+68WwydDa/R8Frr6YrJ4iTmnvn0p1mIazeN2d3r7KxOSjIJKk8TVJkUVClVKuVypVJeu1u9e69Umh0oKJ2ggYhz/6HF18z5HLiBc1BIxv/PLamhRbW0qS2ZoS9HNQXy1RyxvCsf/9+6445tt3f8z0f5K8eLryod/69n766PGv9H5JK+rE+6dfWXW70lxTHrT/V6quc60CM9UEcd7ejJGev7ur3W5aolT6F8eWrKTktMt8SoqjWtqaT3taG6QhnV5akhV6G2FSqSm/5EOQrkylYkX4GMluXotozKqqqqVRm5KmpbvjbV0rpqsvXfOI53tZf2++qYHJUHlacJqowJGjX+/+zj7CeN8f+bLj9+TRMzd+aDN3BGcff8/5RuvJhsAAAAAADAi2Cln75b6cdRb0iKVfcabumi0wIAAAAAAOco/cv/tWSSfh3lDVmc/wMAAAAA8Kqx0mvsLElL6Zf6reMrofgQAAAAAACAV0T69//r81Kc3nvthizO/wEAAAAAeNX8ruce+7P5PXbjGenXSWFBUthesP767wUFc9Zhe+v71r6dLLH3Z7L1Zk7WGNWvWpe6N+pNJ/OS0neOe83qtta9CaalOI5jSV/sTrrXvxWcSGB+Jv/4YlICa7Pdd/pUb2Yxby5m04cHBaVLslaW6l7DLTp+435Ztn2pELlb0S8f7/1KCo62c3evs1P84KPOwzSXw6TocD/J4+O+dAqTcnmW3m8hveZi6BbP1fMmf99qLllpu6V8+2dk7xd6G5pu+3+jm1nMzaVsunSgbk+kbS4m218uprusb+uDOes4i/LJLR+2I0ZksZhmcSuLubV8K5vk+XWz+MGMVCkO7oO+LCq9WUzuC+s/A30xIYukL1aTLP6WVDQii9XTZTGwRwDgouxOGIUsnRx3Rx3lFjT6KDd5dP9RfyvP/pj+WpD+ejHb/dtEZtS4ouSIvpzFzCs9sM5eHXJEL3XHlUWNOKKXzjC6JW39+fgZSN20B7L4XxzH98tpu384Map+lqzw2ch2w0ZlJunCmWf7P9flp88P3t7bf/Dhzoc7jyuV1bXSO6XS3Yrm0s3oThh7AABDTH7GzsQI652js+qH/3orm+sb8b579JWCoj7QR+rooVbyRwjcGF7rUr5OQVoZPGtNYl+TTsSqrJUJZ3VLPQ96yWPzB3GMjl190bsBAICX6uaEcXia8X8lP+9evjr0vHup5yuFKwNPCB4VW37JPQEAwDeHG3xhLUW/tYLAa79frlbLdrThmsB3fmICr7buGq8VuYGzYbfWXdMO/Mh3/EYy855Xc0MTbrbbfhCZuh+Yth96W+mT30330e+h27RbkeeE7YZrh65x/FZkO5GpeaFj2ps/bnjhhhukK4dt1/HqnmNHnt8yob8ZOG7RmNB1ewK9mtuKvLqXzLZMO/CadrBt3vMbm03X1NzQCbx25GcV5m15rbofNNNqixfd2QAAfEU8fX7w6EGns/OkZ+Yvr2fL8pJDDcaMmJkfVuFFbyMAAOjHKA0AAAAAAAAAAAAAAAAAAAAAwFff5Ev6TjkzN+xiQemo5BeXpqrH0nkndpqZwpdf/e9jYl47Ksm7vzfm8AK2VNnM7PnX/Jo0/WWj5zDzw93sDlIjY5LuHrpo4WhfzJ7fP4eZnpLHfxoRHMdxPL6ehf4+nNeYDeyfmZX0ZP4Mu+DCDkkAXpL/BwAA//+pLkBb") 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x900, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r5], 0x20}}, 0x0) 22:20:13 executing program 2: perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:20:13 executing program 1: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/244) 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xa00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 22:20:13 executing program 1: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) [ 559.538409][T22256] syz-executor.3[22256]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 559.567860][T22256] loop3: detected capacity change from 0 to 164 22:20:13 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TIOCCONS(r0, 0x80047462) 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xb00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4404, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x9, 0x642, &(0x7f0000000ec0)="$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") 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xc00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 559.610023][T22256] rock: corrupted directory entry. extent=28, offset=0, size=-1 22:20:13 executing program 1: open(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 22:20:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:13 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000680), 0x4) 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xd00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 559.684791][T22278] syz-executor.3[22278]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 22:20:13 executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000300)={0x9}, 0x0, &(0x7f0000000380), 0x0, 0x0) 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f00000000c0)) 22:20:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xe00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 559.762285][T22278] loop3: detected capacity change from 0 to 164 22:20:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x6, 0x478, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x7}, 0x48) [ 559.806975][T22278] rock: corrupted directory entry. extent=28, offset=0, size=-1 22:20:13 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1008, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:13 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000000)="4741d3d8", 0x4) 22:20:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:13 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000000)="4741d3d8", 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="4d62d14266cefa43976be2cd79ab3a06", 0x10) 22:20:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="15", 0x1}], 0x1}, 0x0) 22:20:13 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) 22:20:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000002400)={&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="2de0a2b6a03ac0c50bab94dc110f83b173ab8804b582b51bda6de84a", 0x1c}, {&(0x7f0000001180)="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", 0xe95}], 0x3}, 0x0) 22:20:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:14 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1020, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:14 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1100, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x4, 0x0, 0x0) 22:20:14 executing program 1: bpf$PROG_LOAD_XDP(0x11, &(0x7f0000001540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 560.000354][T22328] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001e00)={&(0x7f00000004c0)={0xa, 0x4e20, 0x0, @private1, 0xffff}, 0x1c, 0x0}, 0x0) 22:20:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000080)="b4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002400)="12", 0x1}], 0x1, 0x0, 0xfc}}], 0x2, 0x0) 22:20:14 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 22:20:14 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='.\x00'}, 0x18) 22:20:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x8, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 22:20:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:14 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1200, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 22:20:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) 22:20:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) 22:20:14 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x18}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x80, 0x4, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x7800, 0xfffffffb, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x62, 0x3f, 0xffffffff, 0x11, @dev={0xfe, 0x80, '\x00', 0x36}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8, 0x9, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2d, 0xaa, 0xff, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x1, 0x7, 0x202, 0x38c}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x8, 0x1, {{0x34, 0x4, 0x1, 0x3, 0xd0, 0x67, 0x0, 0x65, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @local, {[@end, @rr={0x7, 0x1b, 0x73, [@empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @loopback]}, @timestamp_addr={0x44, 0x34, 0x83, 0x1, 0xa, [{@remote, 0xe3d3}, {@private=0xa010100, 0x7}, {@remote, 0x4}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xfffffffb}, {@loopback, 0x2}]}, @rr={0x7, 0x23, 0x89, [@empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @broadcast, @remote]}, @lsrr={0x83, 0x1f, 0xad, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @local, @local, @loopback]}, @ssrr={0x89, 0x7, 0x4f, [@private=0xa010101]}, @lsrr={0x83, 0x23, 0xe4, [@loopback, @local, @broadcast, @multicast2, @multicast1, @empty, @loopback, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x8a, 0x21, 0x28, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x40, 0x7, 0xfffffffa, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x6, 0x0, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x1, 0x7, 0x2, 0x80000001, {{0x1c, 0x4, 0x1, 0x26, 0x70, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1b, 0x13, [@local, @broadcast, @rand_addr=0x64010102, @remote, @broadcast, @multicast2]}, @rr={0x7, 0x1f, 0x8d, [@multicast2, @loopback, @broadcast, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x3, [{@loopback, 0x6f3}]}, @rr={0x7, 0xf, 0xad, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x3f, 0x259, 0x1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x40, 0x6, 0xffffffff}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003600), 0x49c2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003900), r13) ioctl$LOOP_CTL_GET_FREE(r13, 0x4c82) sendmsg$TIPC_CMD_GET_NETID(r12, &(0x7f0000005f40)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005f00)={&(0x7f0000005ec0)={0x1c}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0xe00, 0x20, 0x6, 0x52, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x68, 0x0, 0x9b, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0xc0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @local, @local, @multicast1, @private=0xa010102, @remote, @remote]}, @ssrr={0x89, 0x7, 0x9, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xad, 0xc707, 0x81, @empty, @mcast2, 0x1, 0x7, 0x486, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r12) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x81, 0x7a02, 0x0, @mcast1, @empty, 0x700, 0xc0, 0x401, 0x9}}) ioctl$sock_ifreq(r12, 0x8923, &(0x7f0000000780)={'netdevsim0\x00', @ifru_settings={0x5, 0xc3e6, @fr_pvc=&(0x7f0000000740)={0x2}}}) syz_genetlink_get_family_id$fou(&(0x7f0000000800), r13) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'tunl0\x00', r16, 0x740, 0x7, 0x10001, 0x6, {{0xb, 0x4, 0x2, 0x6, 0x2c, 0x66, 0x0, 0x6, 0x3d, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x20, [@private=0xa010102, @private=0xa010101, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r12, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x248, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x40080d0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000000800)={0x9bc, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa45a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfa}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x31}}}]}}, {{0x8, 0x1, r6}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1fd1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r11}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0xff, 0x8, 0x6e1a6a3c}, {0x2, 0x8b, 0x4, 0x7f}, {0xfff9, 0x0, 0xa9, 0x10000}, {0x8001, 0xc1, 0x99, 0x7}]}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x9bc}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) [ 560.816988][T22356] validate_nla: 1 callbacks suppressed [ 560.817002][T22356] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:14 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:14 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2010, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) 22:20:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 560.976909][T22382] netdevsim netdevsim3 : renamed from netdevsim0 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x0) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2200, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0) 22:20:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:15 executing program 3: shmat(0x0, &(0x7f0000ff8000/0x3000)=nil, 0xe000) r0 = shmget(0x2, 0x1000, 0x20, &(0x7f0000ff8000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2500, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x21, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, 0xe8) 22:20:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@local}}, 0xe8) 22:20:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x4}, 0x20) 22:20:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}, 0x800) 22:20:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:20:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046210, 0x0) 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2ca3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x84}, {0x16}]}) 22:20:15 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffd) socket(0x0, 0x0, 0x0) 22:20:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x35}, {0x16}]}) [ 561.255611][ T26] audit: type=1326 audit(1693606815.273:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097e0f6ae9 code=0x0 22:20:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{}, {0x1c}, {0x16}]}) 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xa000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x16, 0x11, "952d0003147e5e2a236e9ba7032308bd07a353dfaf6ca9cf776e5bd9b803b04d13e98399047eef88bf42b95c3c6f047804c23c251fa9e32a598625424f54b555", "af60333855a368a13771dab8f151b5af1222d9238b7c9fb191c1b74ce71f7cd2", [0x2, 0x3]}) 22:20:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{}, {0x45}, {0x16}]}) [ 561.282830][ T26] audit: type=1326 audit(1693606815.303:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1935755ae9 code=0x0 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4100, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 561.366069][ T26] audit: type=1326 audit(1693606815.383:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097e0f6ae9 code=0x0 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4400, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc) 22:20:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x77}, @void, @val={0xc, 0x99, {0x0, 0x63}}}}}, 0x28}}, 0x0) 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001140)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x4}]}}]}, 0x38}, 0x1, 0x8100000000000000}, 0x0) [ 561.406039][ T26] audit: type=1326 audit(1693606815.413:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22433 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1935755ae9 code=0x0 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4800, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) io_uring_setup(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 22:20:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000006300)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000240)="dd", 0x1}], 0x1}}], 0x1, 0x8c0) 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4900, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000000)) eventfd2(0x0, 0x0) r1 = io_uring_setup(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) dup(r3) [ 561.524311][T22450] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:20:15 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 22:20:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4c00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, 0x0, 0xfffffffffffffef1) 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5100, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/dmi', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x80000001, 0xffffffff81c5e676}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') fcntl$lock(r1, 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5451, 0x0) 22:20:15 executing program 3: r0 = socket(0x11, 0x3, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 22:20:15 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5200, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000000)) eventfd2(0x0, 0x0) r1 = io_uring_setup(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) dup(r3) 22:20:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) io_uring_setup(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 22:20:16 executing program 3: r0 = socket(0x11, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x86) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5300, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5400, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) write$P9_RREMOVE(r1, 0x0, 0x2) 22:20:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5600, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6200, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000000)) eventfd2(0x0, 0x0) r1 = io_uring_setup(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) dup(r3) 22:20:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6400, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x210000, 0x0) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6700, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 1: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x7, 0x0, 0x0, 0xffffffffffffff9c) 22:20:16 executing program 3: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 22:20:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12, 0x4b4, &(0x7f0000001b00)="$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") open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 22:20:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6800, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000000)) eventfd2(0x0, 0x0) r1 = io_uring_setup(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) dup(r3) 22:20:16 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6c00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:16 executing program 3: unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) [ 562.932091][T22542] syz-executor.1[22542]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7100, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x8800000}) 22:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7300, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 22:20:17 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="001a42351051", @val, {@ipv4}}, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7400, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000002040)={@local, @random="001a42351051", @val, {@ipv6}}, 0x0) 22:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 22:20:17 executing program 2: syz_emit_ethernet(0x26, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 22:20:17 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="001a42351051", @val, {@ipv4}}, 0x0) 22:20:17 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="b8fa1c4e487f", @val, {@ipv6}}, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7500, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000001140)={@random="e173eea804fd", @broadcast, @val, {@ipv6}}, 0x0) [ 563.468587][T22566] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:17 executing program 2: socket(0x0, 0x1000, 0xfffffffd) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_io_uring_setup(0x4d2e, &(0x7f00000024c0)={0x0, 0x0, 0x100}, &(0x7f0000002540), &(0x7f0000002580)) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7700, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000200)={@remote, @empty, @void, {@generic={0x805}}}, 0x0) 22:20:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000a40)) 22:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7a00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 1: open_tree(0xffffffffffffff9c, 0x0, 0x8900) syz_io_uring_setup(0x1ba1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x10a}, &(0x7f0000000180), &(0x7f00000001c0)) 22:20:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000038e69a75dab08a0900050001000600000005000500020000000900020073797a3200000000050004000000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x807, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)=ANY=[], 0x90) 22:20:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xa32c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) [ 563.686205][T22593] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001080)) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xec00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x48}}, 0x1c, 0x0}, 0x0) [ 563.740363][T22607] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 563.743495][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}, 0x0) 22:20:17 executing program 3: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="c6", 0x1, r0) 22:20:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000038e69a75dab08a0900050001000600000005000500020000000900020073797a3200000000050004000000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x807, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x10, &(0x7f00000002c0), 0x8) 22:20:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x80000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:17 executing program 1: sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0xda7909becccfc6da) 22:20:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:17 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) 22:20:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000038e69a75dab08a0900050001000600000005000500020000000900020073797a3200000000050004000000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x807, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:17 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xfeffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 563.916079][T22632] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newtaction={0xea8, 0x30, 0x0, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_ct={0x40, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "9eaeed16fc03c74600eda6810421598f"}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x414}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x80000001}, {0x80}, {0x0, 0x0, 0x9, 0x0, 0x0, 0xfff}, {}, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3f}, {0x0, 0xfffff801, 0x7fffffff, 0x5, 0x0, 0x7}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x480}, {0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3fe00}, {0x4, 0x0, 0x4}, {0x0, 0x0, 0x80000001}, {}, {0x0, 0x0, 0xcf7, 0x5}, {0x9, 0x0, 0x0, 0x3, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xc27}, {0x0, 0x8001}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x0, 0x0, 0xe353, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x5, 0x5}, {}, {}, {}, {0x0, 0x0, 0x100}, {0x6}, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0xd314}, {0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a38}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3ff, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xca0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x638}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x8, 0x0, 0x81, 0x3, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0xc3b}, {0x0, 0x0, 0x0, 0xdac}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {0x0, 0x0, 0x0, 0xca}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0x3576, 0x0, 0xfff}, {0x4}, {}, {0xce, 0x0, 0x0, 0x0, 0x0, 0xd5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x3}, {0x3}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {0x5}, {}, {0x4}, {}, {0x1}, {0x4}, {}, {}, {0x3}, {}, {0x2}, {}, {}, {0x3}, {0x2}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xea8}}, 0x4044000) 22:20:18 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000018c0)={'sit0\x00', 0x0}) 22:20:18 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f00000018c0)={'syztnl0\x00', 0x0}) [ 563.967188][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x0, 0x0, 0x1000}, 0x48) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{}, {0x25}, {0x16}]}) 22:20:18 executing program 1: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000b40), 0x80) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:18 executing program 3: syz_open_dev$evdev(&(0x7f0000000100), 0x80000000, 0x0) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 564.115889][T22666] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:18 executing program 3: openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) 22:20:18 executing program 2: openat$nci(0xffffff9c, &(0x7f0000004dc0), 0x2, 0x0) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 564.156880][ T26] audit: type=1326 audit(1693606818.173:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097e0f6ae9 code=0x0 22:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 22:20:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) 22:20:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:18 executing program 2: openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x7, &(0x7f00000002c0)) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 22:20:18 executing program 1: r0 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 22:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) [ 564.320998][T22697] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:18 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 22:20:18 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x4ea4, &(0x7f0000000e00), &(0x7f0000000e80), &(0x7f0000000ec0)) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 564.382053][T22708] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:18 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002080), 0x3, 0x0) 22:20:18 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "0fd5d70d955e1910c6c2acfb27d5b76743e9ac8eccc4366b436d623e505678a91ece7c0163e867a97db9add565f64b18c56df783c29bdc1f69683bc6be19b89f"}, 0x48, 0xfffffffffffffffb) 22:20:18 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) 22:20:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:18 executing program 1: clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000940)={0x0, r0+60000000}, &(0x7f00000009c0)={&(0x7f0000000980), 0x8}) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:18 executing program 3: clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000840), &(0x7f0000000880)={0xf107}, 0x0, &(0x7f0000000940)={0x0, r0+60000000}, &(0x7f00000009c0)={&(0x7f0000000980), 0x8}) 22:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x8100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:18 executing program 2: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="aab3ac73ff081c9e70a07ecf0e3ff328755fb53c67a59447a2e60b") 22:20:18 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x10, 0x0, 0x0) 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 564.560403][T22731] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:18 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x18}}], 0x1, 0x0, 0x0) write$P9_RWALK(r1, 0x0, 0x0) 22:20:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) [ 564.606450][T22726] dccp_invalid_packet: P.Data Offset(4) too small 22:20:18 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 564.652549][T22740] lo speed is unknown, defaulting to 1000 22:20:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) [ 564.769522][T22753] dccp_invalid_packet: P.Data Offset(4) too small 22:20:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x20004000, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) 22:20:19 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:19 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 22:20:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x18, 0x21, 0x0, @private0, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4}], @ndisc_ra}}}}, 0x4e) 22:20:19 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xc000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:19 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) write$P9_RREADLINK(r0, 0x0, 0x0) 22:20:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, 0x0, &(0x7f0000000080)) [ 565.250923][T22761] dccp_invalid_packet: P.Data Offset(4) too small 22:20:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:19 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xd000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:19 executing program 2: r0 = perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000880)='syzkaller\x00') 22:20:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000080)="c0", 0x1}, {&(0x7f00000008c0)="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", 0x1000}], 0x3, &(0x7f0000000240)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 22:20:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x10, 0x21, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}, 0x46) 22:20:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'veth0_to_team\x00', 0x100}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000001c0)) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d6ec5e1c6f7d959f552606327b6ee66c64f6574202d6e65745ff489b26c202b6e65745f636c732037ca256fb4daf85e165448a532273ca206935b1a05dcee9e2edd85079cecdcf8fd0ed6ad2a0bd7d242ba200cbc3f863e22a49bd23da992f7ca2c38a4a8d8dc660741758c2696976a3a7e87bc4e13ad8c82b555975452b8a88f7fafc90d41f981ca069e12567c08075273ca2882075b75f363fcac181ee93c1454ad4d34b0c0d9511b9f69beb179845a8a312b27b91af6c09b56f6a63be0565cdb7f74025326b16316472f4697aa90dedb9e48c999e32be9f34ba4efca6a9e2fe334661e19e1d3cae4dc061a09cd658d4843c8"], 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xe000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:19 executing program 1: r0 = perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 22:20:19 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x116}) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 22:20:19 executing program 1: r0 = perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 565.547941][T22778] dccp_invalid_packet: P.Data Offset(0) too small [ 565.583299][T22782] Q±6ã×\b‹¡Y­4: renamed from lo 22:20:19 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:19 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x116}) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 22:20:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:19 executing program 1: r0 = perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 22:20:19 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x11000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 565.662506][ T26] audit: type=1400 audit(1693606819.683:2851): avc: denied { relabelfrom } for pid=22784 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 565.682967][ T26] audit: type=1400 audit(1693606819.683:2852): avc: denied { relabelto } for pid=22784 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 22:20:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x10, 0x21, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}, 0x46) 22:20:19 executing program 1: r0 = perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 565.804817][T22803] dccp_invalid_packet: P.Data Offset(0) too small 22:20:19 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x12000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:19 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x116}) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 22:20:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'veth0_to_team\x00', 0x100}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000001c0)) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d6ec5e1c6f7d959f552606327b6ee66c64f6574202d6e65745ff489b26c202b6e65745f636c732037ca256fb4daf85e165448a532273ca206935b1a05dcee9e2edd85079cecdcf8fd0ed6ad2a0bd7d242ba200cbc3f863e22a49bd23da992f7ca2c38a4a8d8dc660741758c2696976a3a7e87bc4e13ad8c82b555975452b8a88f7fafc90d41f981ca069e12567c08075273ca2882075b75f363fcac181ee93c1454ad4d34b0c0d9511b9f69beb179845a8a312b27b91af6c09b56f6a63be0565cdb7f74025326b16316472f4697aa90dedb9e48c999e32be9f34ba4efca6a9e2fe334661e19e1d3cae4dc061a09cd658d4843c8"], 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:20 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000640)={0x7, 0x1, 0x20, 0xcd}, 0x8) 22:20:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000000080)="7f", 0x1}, {&(0x7f0000002180)="42be8a86b0f31711a12dffee973cbfa0b2c832ae6298dcd5bda8a7ad6b6434", 0x1f}, {&(0x7f00000021c0)="e0813e883eab7abd7d3de9e27504d6a70777b2ac369be28d8da7b37e9a05e39afa4ac0e2447a330565f1780373a86071c1ed0116d24c575b96af5e266a7cc63a73d51eb60f6fded2c307aa6a976ba5098b0855b85786e71689cd53f3c21252823e5fd5bdc75d55af085bb962cf600572d78b95129de93e10a0e0f0fa7411db1086308bf5c50a76b9e50b70e5db7482c4f97943677ed7", 0x96}, {&(0x7f0000002280)="d149f1d48416880c16b7d49ef0ffc7c5a7ad7b2bca6e8a61d5298551af5f5b8cad22b5a040650ce6bae337e5358eda11c5fd55e84410dff4cbde82f1091be5d558c3a7d1866261381003817fa025443a5a7b6b88a80aaaafa79e608269adc1db84c5f4fc2a6356c7102bd7bc03daf1f3498a7f30e4a9c62cddc43378e24ab999c4eeb5bb1dbd8b9804bd23c867c69dfcfa1a57", 0x93}, {&(0x7f0000002340)="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", 0x388}], 0x5}, 0x0) 22:20:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) rt_sigreturn() r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_open_procfs$userns(0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 565.969043][T22823] 9p: Unknown access argument user": -22 [ 566.000101][T22822] dccp_invalid_packet: P.Data Offset(0) too small 22:20:20 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x22000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x1c, "5fd5f98a9fa39b041a508d0014d811c1b2aa238c0bad7c7b2cf6cdcb"}, &(0x7f0000000600)=0x24) 22:20:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'veth0_to_team\x00', 0x100}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000001c0)) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d6ec5e1c6f7d959f552606327b6ee66c64f6574202d6e65745ff489b26c202b6e65745f636c732037ca256fb4daf85e165448a532273ca206935b1a05dcee9e2edd85079cecdcf8fd0ed6ad2a0bd7d242ba200cbc3f863e22a49bd23da992f7ca2c38a4a8d8dc660741758c2696976a3a7e87bc4e13ad8c82b555975452b8a88f7fafc90d41f981ca069e12567c08075273ca2882075b75f363fcac181ee93c1454ad4d34b0c0d9511b9f69beb179845a8a312b27b91af6c09b56f6a63be0565cdb7f74025326b16316472f4697aa90dedb9e48c999e32be9f34ba4efca6a9e2fe334661e19e1d3cae4dc061a09cd658d4843c8"], 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x25000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 566.053891][T22830] 9p: Unknown access argument user": -22 22:20:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:20 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$VT_DISALLOCATE(r0, 0x40049409) 22:20:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:20 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20000050, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 566.152230][ T26] audit: type=1400 audit(1693606820.173:2853): avc: denied { ioctl } for pid=22844 comm="syz-executor.0" path="socket:[78669]" dev="sockfs" ino=78669 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 22:20:20 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:20:20 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e, 0x0, 0xffff}}}, 0x14}}, 0x0) 22:20:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'veth0_to_team\x00', 0x100}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNGETSNDBUF(r3, 0x800454d3, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000001c0)) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d6ec5e1c6f7d959f552606327b6ee66c64f6574202d6e65745ff489b26c202b6e65745f636c732037ca256fb4daf85e165448a532273ca206935b1a05dcee9e2edd85079cecdcf8fd0ed6ad2a0bd7d242ba200cbc3f863e22a49bd23da992f7ca2c38a4a8d8dc660741758c2696976a3a7e87bc4e13ad8c82b555975452b8a88f7fafc90d41f981ca069e12567c08075273ca2882075b75f363fcac181ee93c1454ad4d34b0c0d9511b9f69beb179845a8a312b27b91af6c09b56f6a63be0565cdb7f74025326b16316472f4697aa90dedb9e48c999e32be9f34ba4efca6a9e2fe334661e19e1d3cae4dc061a09cd658d4843c8"], 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18) r3 = dup(r2) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x10}, 0x10}}, 0x0) io_uring_setup(0x4fa7, &(0x7f0000000240)) sendmmsg(r3, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:20:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:20 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x41000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:20 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x44000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:20 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:20 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x48000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 566.933954][T22869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 22:20:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000740), 0x8) 22:20:21 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x49000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e, 0x0, 0xffff}}}, 0x14}}, 0x0) 22:20:21 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000980), 0xffffffffffffffff) 22:20:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x11, 0x0, 0x0) 22:20:21 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4c000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:21 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="23ffffe2", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r8], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83050000c052000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 22:20:21 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:21 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 22:20:21 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x80000001, 0xffffffff81c5e676}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') fcntl$lock(r1, 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5451, 0x0) [ 567.085411][T22887] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 22:20:21 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x51000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:21 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 22:20:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="7f", 0x1}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) [ 567.177524][ T26] audit: type=1400 audit(1693606821.193:2854): avc: denied { ioctl } for pid=22898 comm="syz-executor.0" path="socket:[78756]" dev="sockfs" ino=78756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 22:20:21 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) 22:20:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x70, &(0x7f0000000580), &(0x7f0000000600)=0x8) 22:20:21 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x52000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:21 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x232080, 0x0) 22:20:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @local}, 0x1c) 22:20:21 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x53000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:21 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8041) 22:20:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000540)=0x10) 22:20:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:20:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580), &(0x7f00000005c0)=0x10) 22:20:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000008c0)={0x0, 0x2c, &(0x7f0000000880)=[@in6={0xa, 0x0, 0x0, @remote, 0x6}, @in={0x2, 0x0, @broadcast}]}, &(0x7f0000000900)=0x10) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x54000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @private2}], 0x2c) 22:20:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, 0x0, 0x0) 22:20:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="23ffffe2", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r6], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000c052000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x56000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000240)) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x8}, @in6={0xa, 0x0, 0x0, @dev}], 0x38) 22:20:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D'], 0x144}}, 0x0) 22:20:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x60000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0), 0x8) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x62000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0xe) 22:20:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xb, 0x0, &(0x7f0000000380)) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x64000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x64}}, 0x0) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0), &(0x7f0000000440)=0x8) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x0, 0x3, 0x0) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x67000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, 0x0, &(0x7f0000000380)) 22:20:22 executing program 1: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x68000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 568.583698][T22985] sctp: [Deprecated]: syz-executor.3 (pid 22985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.583698][T22985] Use struct sctp_sack_info instead 22:20:22 executing program 0: sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x82f1737cae4550ea) 22:20:22 executing program 1: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6c000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) [ 568.655411][T22999] netlink: 424 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10070000000501"], 0x710}}, 0x0) 22:20:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}}, 0x0) 22:20:22 executing program 1: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x71000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x18, 0x0, &(0x7f0000000380)) [ 568.750888][T23018] netlink: 1788 bytes leftover after parsing attributes in process `syz-executor.0'. [ 568.765824][T23017] netlink: 424 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x73000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000002c0), 0x0) 22:20:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x74000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 568.903913][T23041] netlink: 424 bytes leftover after parsing attributes in process `syz-executor.2'. [ 568.930217][ T2775] ================================================================== [ 568.938354][ T2775] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 568.945252][ T2775] [ 568.947583][ T2775] read-write to 0xffff888139de6540 of 4 bytes by task 12561 on cpu 0: [ 568.955754][ T2775] __dentry_kill+0x18f/0x4a0 [ 568.960377][ T2775] dentry_kill+0x8d/0x1e0 [ 568.964732][ T2775] dput+0x118/0x1f0 [ 568.968581][ T2775] do_unlinkat+0x293/0x4f0 [ 568.973019][ T2775] __x64_sys_unlink+0x30/0x40 [ 568.977715][ T2775] do_syscall_64+0x41/0xc0 [ 568.982156][ T2775] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 568.988071][ T2775] [ 568.990402][ T2775] read to 0xffff888139de6540 of 4 bytes by task 2775 on cpu 1: [ 568.997957][ T2775] lookup_fast+0xd9/0x290 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x22, 0x0, &(0x7f0000000380)) 22:20:23 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) [ 569.002325][ T2775] walk_component+0x3f/0x230 [ 569.006956][ T2775] path_lookupat+0x10a/0x2a0 [ 569.011578][ T2775] filename_lookup+0x126/0x300 [ 569.016376][ T2775] user_path_at_empty+0x42/0x110 [ 569.021344][ T2775] do_readlinkat+0x92/0x210 [ 569.025870][ T2775] __x64_sys_readlink+0x47/0x50 [ 569.030744][ T2775] do_syscall_64+0x41/0xc0 [ 569.035188][ T2775] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 569.041111][ T2775] [ 569.043439][ T2775] value changed: 0x00600008 -> 0x00008008 [ 569.049157][ T2775] 22:20:23 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) [ 569.051483][ T2775] Reported by Kernel Concurrency Sanitizer on: [ 569.057735][ T2775] CPU: 1 PID: 2775 Comm: udevd Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0 [ 569.066949][ T2775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 569.077021][ T2775] ================================================================== [ 569.107563][T23061] netlink: 424 bytes leftover after parsing attributes in process `syz-executor.2'. 22:20:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:23 executing program 3: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x75000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x77000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 3: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7a000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 3: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:23 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:23 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:23 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xa32c0000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409}, 0x10) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:23 executing program 0: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 22:20:23 executing program 0: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xec000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:23 executing program 0: setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 22:20:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xfeffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 22:20:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r6], 0x20}}, 0x0) 22:20:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) 22:20:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xfffffe00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 22:20:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) 22:20:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000003ce401"], 0x44}}, 0x0) 22:20:23 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xffffff7f, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 22:20:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) [ 569.976914][T23192] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000003ce401"], 0x44}}, 0x0) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 22:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 22:20:24 executing program 1: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), 0xffffffffffffffff) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xfffffffe, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:24 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409, 0x80}, 0x10) 22:20:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 570.162543][T23226] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 570.243267][T23241] netlink: 424 bytes leftover after parsing attributes in process `syz-executor.1'. 22:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x8000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 22:20:24 executing program 1: socket(0x25, 0x1, 0x7ba5) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 22:20:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x9c) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x80000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c4}}, 0x0) 22:20:24 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0) [ 570.340990][T23256] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c4}}, 0x0) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000380)) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c4}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 22:20:24 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xfeffff00000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1], 0x1c4}}, 0x0) [ 570.550546][T23281] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409, 0x80}, 0x10) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 22:20:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x0, @private}], 0x10) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1], 0x1c4}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409, 0x80}, 0x10) 22:20:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1007000000050103000000000000000003000000540201"], 0x710}}, 0x0) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1], 0x1c4}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x300000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 570.717434][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 22:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x409, 0x80}, 0x10) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB], 0x1c4}}, 0x0) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x400000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 22:20:24 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x500000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB], 0x1c4}}, 0x0) 22:20:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:24 executing program 1: socket(0x11, 0x3, 0x200008) 22:20:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x0, 0x80}, 0x10) 22:20:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none}}}, 0xb) 22:20:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:25 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x600000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) 22:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB], 0x1c4}}, 0x0) 22:20:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0), &(0x7f0000000440)=0x8) 22:20:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x0, 0x80}, 0x10) 22:20:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x0, 0x80}, 0x10) 22:20:25 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf"], 0x1c4}}, 0x0) 22:20:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180), 0x20) 22:20:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409}, 0x10) 22:20:25 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf"], 0x1c4}}, 0x0) 22:20:25 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) 22:20:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409}, 0x10) 22:20:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:25 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x810000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 22:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf"], 0x1c4}}, 0x0) 22:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf25030000"], 0x1c4}}, 0x0) 22:20:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x3, 0x5}, 0x14}}, 0x0) 22:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x400, 0x409}, 0x10) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf25030000"], 0x1c4}}, 0x0) 22:20:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7f}, 0x9c) 22:20:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x10) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf25030000"], 0x1c4}}, 0x0) 22:20:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x24, 0x0, &(0x7f0000000380)) 22:20:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0100000201050000000000000000000200000398000180140001"], 0x1ec}}, 0x0) 22:20:26 executing program 3: sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:20:26 executing program 1: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf250300000008"], 0x1c4}}, 0x0) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7d, 0x0, &(0x7f0000000380)) 22:20:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:26 executing program 1: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf250300000008"], 0x1c4}}, 0x0) 22:20:26 executing program 3: socketpair(0x15, 0x80000, 0x0, &(0x7f0000000100)) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xc00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0xf, 0x6, 0x201}, 0x14}}, 0x0) 22:20:26 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xd00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf250300000008"], 0x1c4}}, 0x0) 22:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xd, 0x0, &(0x7f0000000380)) 22:20:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x6f, 0x0, &(0x7f0000000380)) 22:20:26 executing program 1: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) [ 572.343709][T23441] 8021q: adding VLAN 0 to HW filter on device batadv50 [ 572.356432][T23441] bond24: (slave batadv50): Enslaving as an active interface with an up link [ 572.377193][T23441] bond24 (unregistering): (slave batadv50): Releasing backup interface 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xe00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf25030000000800"], 0x1c4}}, 0x0) 22:20:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x401, @remote, 0x8}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x400}], 0x38) [ 572.398364][T23441] bond24 (unregistering): Released all slaves 22:20:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf25030000000800"], 0x1c4}}, 0x0) 22:20:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000380)) 22:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x0, @loopback}], 0x20) 22:20:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) [ 572.516041][T23463] 8021q: adding VLAN 0 to HW filter on device batadv51 [ 572.524577][T23463] bond24: (slave batadv51): Enslaving as an active interface with an up link [ 572.536436][T23463] bond24 (unregistering): (slave batadv51): Releasing backup interface [ 572.547187][T23463] bond24 (unregistering): Released all slaves 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf25030000000800"], 0x1c4}}, 0x0) 22:20:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1100000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x1200000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0000000010301"], 0xb0}}, 0x0) 22:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:26 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x401}, 0x14}}, 0x0) [ 572.696611][T23484] 8021q: adding VLAN 0 to HW filter on device batadv52 [ 572.713667][T23484] bond24: (slave batadv52): Enslaving as an active interface with an up link [ 572.737172][T23500] bond24 (unregistering): (slave batadv52): Releasing backup interface [ 572.755845][T23500] bond24 (unregistering): Released all slaves 22:20:27 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) socket(0x11, 0x3, 0x0) 22:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:27 executing program 3: socketpair(0x11, 0xa, 0xffff, &(0x7f0000000000)) 22:20:27 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:27 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:27 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:20:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000030701"], 0x80}}, 0x0) 22:20:27 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2200000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) 22:20:27 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000000)=0x4) 22:20:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 22:20:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000000)) 22:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) [ 573.569586][T23517] 8021q: adding VLAN 0 to HW filter on device batadv53 [ 573.579279][T23517] bond24: (slave batadv53): Enslaving as an active interface with an up link 22:20:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000000)) [ 573.610930][T23517] bond24 (unregistering): (slave batadv53): Releasing backup interface [ 573.648768][T23517] bond24 (unregistering): Released all slaves 22:20:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200), &(0x7f0000000040)=0xc) 22:20:27 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x2500000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x82, 0x0, &(0x7f0000000380)) 22:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000000)) 22:20:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0xa, 0x301}, 0x14}}, 0x0) 22:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:27 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x3f00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) 22:20:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), 0x0) 22:20:27 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') 22:20:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x4}]}, 0x2c}}, 0x0) 22:20:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x401, @remote, 0x8}], 0x1c) 22:20:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), 0x0) 22:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:27 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4100000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 573.820976][T23557] 8021q: adding VLAN 0 to HW filter on device batadv54 [ 573.841108][T23557] bond24: (slave batadv54): Enslaving as an active interface with an up link [ 573.908817][T23557] bond24 (unregistering): (slave batadv54): Releasing backup interface [ 573.925090][T23557] bond24 (unregistering): Released all slaves 22:20:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:28 executing program 3: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) 22:20:28 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4400000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), 0x0) 22:20:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}}, 0x0) 22:20:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec01000002010500"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 22:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) [ 574.063753][T23588] 8021q: adding VLAN 0 to HW filter on device batadv55 [ 574.082899][T23588] bond24: (slave batadv55): Enslaving as an active interface with an up link [ 574.094416][T23592] __nla_validate_parse: 22 callbacks suppressed [ 574.094436][T23592] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.3'. [ 574.112317][T23588] bond24 (unregistering): (slave batadv55): Releasing backup interface [ 574.126395][T23588] bond24 (unregistering): Released all slaves 22:20:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 22:20:28 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4800000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 22:20:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16], 0x1c4}}, 0x0) 22:20:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:28 executing program 0: socket(0x1, 0x0, 0x3ff) 22:20:28 executing program 3: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 22:20:28 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4900000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x98) 22:20:28 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x96) [ 574.784883][T23605] validate_nla: 1 callbacks suppressed [ 574.784904][T23605] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:28 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x140) 22:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:28 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) 22:20:28 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4c00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 574.882463][T23616] 8021q: adding VLAN 0 to HW filter on device batadv56 22:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c401", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) [ 574.939013][T23616] bond24: (slave batadv56): Enslaving as an active interface with an up link [ 574.970128][T23605] bond24 (unregistering): (slave batadv56): Releasing backup interface [ 574.994447][T23605] bond24 (unregistering): Released all slaves 22:20:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:29 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x2) 22:20:29 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002d80)='./file0\x00', 0x0, 0x0) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5100000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x8, 0x0) 22:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c401", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:29 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x20, 0x0) 22:20:29 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file1\x00', 0x200, 0x0) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5200000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c401", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:29 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/46, 0x2e) [ 575.084198][T23643] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:29 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x1000, 0x0) [ 575.197673][T23654] 8021q: adding VLAN 0 to HW filter on device batadv57 [ 575.222103][T23654] bond24: (slave batadv57): Enslaving as an active interface with an up link [ 575.232996][T23643] bond24 (unregistering): (slave batadv57): Releasing backup interface 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5300000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x2000, 0x0) 22:20:29 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000005640), 0x2, 0x0) 22:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40100", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:29 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0xea60}}) 22:20:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) [ 575.251336][T23643] bond24 (unregistering): Released all slaves 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5400000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40100", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:29 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0xee00, 0x0) 22:20:29 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x400, 0x0) 22:20:29 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x4, 0x0) [ 575.335218][T23670] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x5600000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40100", @ANYRES16=r1, @ANYBLOB="010028bd4d00fddbdf2503000000080001"], 0x1c4}}, 0x0) 22:20:29 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) 22:20:29 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 575.387919][T23670] 8021q: adding VLAN 0 to HW filter on device batadv58 [ 575.419677][T23670] bond24: (slave batadv58): Enslaving as an active interface with an up link 22:20:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6000000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) [ 575.460610][T23681] bond24 (unregistering): (slave batadv58): Releasing backup interface [ 575.479310][T23681] bond24 (unregistering): Released all slaves 22:20:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6200000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') getdents64(r0, &(0x7f00000000c0)=""/222, 0xde) 22:20:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 22:20:29 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'hugetlb'}, {0x0, 'rdma'}]}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007ffeffffffffffffff000071673fa79d93014b8e7781b6"], 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000700)=""/184, 0xb8}, {0x0}], 0x4, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2001) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0xe7, 0xff, 0xdf, 0x7, 0x0, 0x1f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0x6, 0x2}, 0x80, 0x1, 0x5, 0x3, 0x8, 0xffffab9b, 0x0, 0x0, 0x40, 0x0, 0x38}, 0x0, 0xa, r5, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 22:20:29 executing program 3: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0xd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0xc0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) r2 = getpid() perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x5, 0x4, 0x5, 0x7f, 0x0, 0x70, 0xe881c, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000500), 0x8}, 0x2820, 0x2, 0x4, 0x1, 0x7, 0x100, 0x1f, 0x0, 0x40, 0x0, 0xff}, r2, 0xe, r0, 0x4) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x34100) write$cgroup_freezer_state(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x23000) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="2b72e46d61202debce8a0dffddffa4c959626c6126e4aed31081fdf5f52223488abcebaa7f04df7c28673b31930984b80f9f55f362d92ac711e66b934b1f139897b6d74bddd15fc7ec1b3ee46b8c000800000000000031dd4f89b56cb5bd214f06000000000000"], 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xe}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x5) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6400000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x508c1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="852000000002000018000000080500001b00000000010000bf7a9a6b96fb1218cba3bb1101c4f4d753a1ffa7d11c8d31cfd8284139010353359021690d939eed50b55fa3a439684579f492fcc9a7aad359b720cd03bc939a542bfe678cc226978b"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3fffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x0, 0x3, 0x8, 0x62, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1000, 0x1}, 0x4, 0x0, 0x3, 0x2, 0x100000001, 0x1, 0xe8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, r1, 0x8) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) close(r2) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3c, 0x3, 0x9, 0x7f, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x104, 0x14b900, 0xc2, 0x8, 0x0, 0x60e6, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 22:20:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa111d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 575.566155][T23701] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6700000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6800000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'hugetlb'}, {0x0, 'rdma'}]}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007ffeffffffffffffff000071673fa79d93014b8e7781b6"], 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000700)=""/184, 0xb8}, {0x0}], 0x4, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2001) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0xe7, 0xff, 0xdf, 0x7, 0x0, 0x1f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0x6, 0x2}, 0x80, 0x1, 0x5, 0x3, 0x8, 0xffffab9b, 0x0, 0x0, 0x40, 0x0, 0x38}, 0x0, 0xa, r5, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 575.659885][T23709] 8021q: adding VLAN 0 to HW filter on device batadv59 [ 575.697763][T23709] bond24: (slave batadv59): Enslaving as an active interface with an up link [ 575.787380][T23701] bond24 (unregistering): (slave batadv59): Releasing backup interface [ 575.811979][T23701] bond24 (unregistering): Released all slaves 22:20:29 executing program 3: perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x6c00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'hugetlb'}, {0x0, 'rdma'}]}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007ffeffffffffffffff000071673fa79d93014b8e7781b6"], 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000700)=""/184, 0xb8}, {0x0}], 0x4, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2001) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0xe7, 0xff, 0xdf, 0x7, 0x0, 0x1f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0x6, 0x2}, 0x80, 0x1, 0x5, 0x3, 0x8, 0xffffab9b, 0x0, 0x0, 0x40, 0x0, 0x38}, 0x0, 0xa, r5, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 22:20:29 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 22:20:29 executing program 0: r0 = syz_clone(0x4001000, &(0x7f0000000080)="3efc745b2042e4ccf1620c48f3e68c8d7a17e91acb915f9cba59addf0f3d6e19e77fda297f28e86878a3", 0x2a, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="468915da54fac6e4654e88a8b4c8d70024501f5b60f85f47c5780938946547f5adf2e014b2c05243e646541bd82222dfe0e5ebcd6d8e27070769b93e39de47bff6968ef0de35d14fe4abb5b8ac0a929ec97e33b9e81ee97d051f2bfa89e5a4402edd5c058d4fdcf5017cdcdad4daf75371bdb892a75d889d56f9da373ab6fbfe8da417c2d05c8789148ff02e1453ac793081f1f4edf2129da08de1d63bb108fa8476abe2b1db768d06a53dfb3e2a9333") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0xc2, 0x8, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfab, 0x4, @perf_config_ext={0x2, 0x10001}, 0x82144, 0xfff, 0x100, 0xaf0f3c7253f82ee9, 0x385, 0x7, 0x6, 0x0, 0x1, 0x0, 0x7}, r0, 0x8, 0xffffffffffffffff, 0xa) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.latency\x00', 0x2, 0x0) bpf$MAP_CREATE(0x4, &(0x7f0000001480)=@bloom_filter={0x1e, 0x7, 0x2af, 0xffffffff, 0x2101, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0xd}, 0xfffffffffffffeab) 22:20:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005704000000000800000010000000", @ANYRES32=r7], 0x20}}, 0x0) 22:20:29 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x7100000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user, 0x22}]}}) 22:20:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x0, 0x0, 0x0, 0x3002, 0x1}, 0x48) 22:20:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x4}, 0x20) 22:20:29 executing program 2: syz_clone(0x40002000, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 22:20:30 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'hugetlb'}, {0x0, 'rdma'}]}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007ffeffffffffffffff000071673fa79d93014b8e7781b6"], 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000700)=""/184, 0xb8}, {0x0}], 0x4, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2001) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0xe7, 0xff, 0xdf, 0x7, 0x0, 0x1f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0x6, 0x2}, 0x80, 0x1, 0x5, 0x3, 0x8, 0xffffab9b, 0x0, 0x0, 0x40, 0x0, 0x38}, 0x0, 0xa, r5, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 575.919127][T23734] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:20:30 executing program 0: perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x40002000, &(0x7f0000000240)="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